基于IPsec的IPv6安全邻居发现协议

IPv6 secure neighbor discovery protocol based on IPSec

为了保证邻居发现协议的安全,通过在邻居发现协议中引入IPSec协议,提出了基于IPSec的安全邻居发现协议模型结构;设计了在邻居组播状态下的密钥交换和管理协议MIKE,并给出了密钥管理的星型结构算法;在AH验证数据中将IP地址与链路层地址绑定,有效的防御IP地址的伪造。该方案与现行的安全邻居发现算法的比较结果表明,该安全模型能够有效地保证邻居发现的安全,并能与IPv6协议无缝连接,进一步提高下一代互联网的安全。

In order to ensure the safety of a neighbor discovery protocol, through the introduction oflPSec protocol to the neighbor discovery protocol, a secure neighbor discovery protocol model based on IPSec is proposed. Key exchange and management protocol in multicast state is designed, and a star schema key management algorithm is proposed. IP address and link-layer address binding in the AH is to defend against forged IP addresses. By comparing the scheme with the current secure neighbor discovery algorithm, The results show that the scheme can effectively ensure the security of neighbor discovery, and seamlessly colmect with the IPv6, and improve security of the next generation Interact.