面向IPSec的关联数据库结构的研究

A Study of Security Association Database Structure Oriented to IP Security

在分析IP安全机制、网络密钥交换和安全关联的基础上 ,确定了基于IP安全机制的关联数据库所应包含的基本数据结构 。

To implement internet key exchange(IKE) cooperating with IP security(IPSec), the date-structures is proposed which should be included in the security association database(SADB) using by IKE oriented to IPSec after analyzing the specific features of the IPSec. IKE & security association (SA), realization of the date-structures in LINUX is given. The functions of all parameters are illustrated. This is the base of the internet key exchange implementation.