Internet密钥交换改进协议研究

Research of Improvement and Implementation for Internet Key Exchange Protocol

本文通过将身份识别协议与基于身份的密钥交换协议进行有机的组合,分别提出了一个基于RSA算法安全性的Internet密钥交换改进协议以及一个基于椭圆曲线算法安全性的Internet密钥交换改进协议,改进的协议可以有效实现发起方和响应方的身份认证,在一定程度上提升发起方和响应方抗计算资源DoS攻击的能力。

By organically combing of the identification protocol and identity-based key exchange protocol, this paper proposes two improved Internet Key Exchange protocols respectively based on the security of the RSA algorithm and the elliptic curve algorithm. The improved protocols can not only effectively achieve the initiator and responder＇s identities but also have enhanced ability to resist the attacks from computing resource DOS for both initiator and responder.