基于IPSec的移动AD-HOC安全体系结构

Securing AD-HOC networks using IPSec

一直以来,认为在移动AD-HOC网络和无线节点之间运用IPSec来保证通信安全是困难的。文章描述了一个基于IPSec的体系结构,并把它用在AD-HOC网络上,无缝地实现了节点移动性和IP地址的转换。这种方法可以保证应用、移动管理与认证协议的安全通信,是一种基于认证的方法,它通过加入动态的密钥产生与分配节点之间的安全关联。

The use of IPSec for securing communication between nodes of wireless and mobile AD-HOC networks has traditionally been considered difficult.We describe an IPSec based architecture and implement for ad-hoc networks that can seamless handle node mobility and IP address change.The approach can be used for securing application traffic and mobility management and protocol traffic.A certificate-based approach that adds in dynamic key generation and distribution is used for creating security associations between nodes.