摘要
介绍了IPsec的基本组成和一组IKE协议.分析了IKE协议的安全特性,以及IKE的协商过程.其中包括:在主模式中建立ISAKMP SA的过程和在快速模式中利用已建立好的ISAKMP SA完成IPsec SA的协商.通过详细分析主模式中用于完成SA要交换的六个消息的发送步骤、属性、结构来说明安全性的实现.
The basic components of IP security and a suite of IKE protocol were introduced. The security properties of IKE protocols and the negotiation of Internet key exchange were analyzed, including the process of establishing ISAKMP SA in the main mode, and the completion of IPsec SA negotiation by using established ISAKMP SA in the fast mode. The realization of security was explained through detailed analysis of sending procedures, properties and structures of six messages to be exchanged for completing SA in the main mode.
出处
《西安文理学院学报（自然科学版）》
2006年第4期52-56,共5页
Journal of Xi’an University(Natural Science Edition)
关键词
IPscc
IKE
密钥交换
IP security
Internet key exchange protocols （IKE）
key exchange
