IKEv2中混合认证的研究与扩展设计

Analysis and Design of Hybrid Authentication in IKEv2 Protocol

对最新IKEv2中的基本身份认证方式进行了研究,并针对基本认证方式的缺陷,提出通过IKEv2中EAP认证方式的扩展,在IKEv2中引入混合认证的具体方案,增强了IKEv2的灵活性,且弥补了单独使用PKI或预共享密钥的不足,拓展了IKEv2的应用领域。

This article has analyzed the basic authentication in the latestIKEv2 protocol in details, and gives a concrete method of applying EAP method in IKEv2, and develops application area of IKEv2. Against the flaw of basic authentication, it has introduced a specific design of hybrid authentication into IKEv2 by extending EAP method in IKEv2. This design has improved the flexibility of IKEv2, and fetched up the shortage of using PKI or PSK alone.