基于改进IKE实现IPSec协议安全关联增强

IPSEC SECURITY ASSOCIATION ENHANCEMENT BASED ON IMPROVED IKE

在移动通信安全性日益凸显其重要性的今天,IPSec协议以面向IPv4和IPv6提供具有强互操作能力和高质量、基于密码的网络通信安全规范这一特性,成为增强移动网络安全的首选协议。着眼于现有IPSec协议安全关联机制的薄弱环节,重点改进IPSec安全关联中的IKE SA协商环节,形成移动网络全网安全关联性能增强方案,确保移动通信的保密性和安全性。

As mobile communication security is increasingly important, IPSec protocol for IPv4 and IPv6, which provides strong interoperability capabilities and high-quality, password-based network communication security norms, has become preferred agreement for mobile network security enhancement. Aiming at weak element of existing IPSec security association mechanism, in this paper it primarily improved IKE SA negotiation of IPSec security association, and released security association enhancement mechanisms for the confidentiality and security of whole mobile network.