IKE协议中预共享密钥认证的分析及改进  

Analysis and Improvement on Authentication with Pre-shared Key in IKE Protocol

作　　者：叶承宗[1] 余梅生[1] 王颖[1] 

机构地区：[1]燕山大学信息科学与工程学院,河北秦皇岛066004

出　　处：《微电子学与计算机》2006年第z1期130-131,134,共3页Microelectronics & Computer

摘　　要：IKE协议是IPSec协议族中的自动密钥交换协议,用于动态的建立安全关联(SA)。文章对IKE协议主模式下预共享密钥认证方式中存在的身份保护缺陷进行了分析,提出了新的修改意见,使得协议更加完整并提高了效率。IKE protocol is the current key exchange standard for IPSec protocol and is used to establish security association(SA) dynamically. This paper analyzes the identity protection defects in IKE protocol with pre-shared key authentication method in main mode. New modifications on it are proposed as well. This makes the protocol even more complete and improves its efficiency.

关 键 词：IPSEC IKE 预共享密钥认证 主模式 身份验证 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]