摘要
为了保证邻居发现协议的安全,通过在邻居发现协议中引入IPSec协议,提出了基于IPSec的安全邻居发现协议模型结构;设计了在邻居组播状态下的密钥交换和管理协议MIKE,并给出了密钥管理的星型结构算法;在AH验证数据中将IP地址与链路层地址绑定,有效的防御IP地址的伪造。该方案与现行的安全邻居发现算法的比较结果表明,该安全模型能够有效地保证邻居发现的安全,并能与IPv6协议无缝连接,进一步提高下一代互联网的安全。
In order to ensure the safety of a neighbor discovery protocol, through the introduction oflPSec protocol to the neighbor discovery protocol, a secure neighbor discovery protocol model based on IPSec is proposed. Key exchange and management protocol in multicast state is designed, and a star schema key management algorithm is proposed. IP address and link-layer address binding in the AH is to defend against forged IP addresses. By comparing the scheme with the current secure neighbor discovery algorithm, The results show that the scheme can effectively ensure the security of neighbor discovery, and seamlessly colmect with the IPv6, and improve security of the next generation Interact.
出处
《计算机工程与设计》
CSCD
北大核心
2011年第2期513-516,共4页
Computer Engineering and Design
关键词
邻居发现协议
IPSEC
密钥管理
安全邻居发现
认证头协议AH
neighbor discovery protocol
IPSec
key management
secure neighbor discovery
AH authentication header protocol