IKEv2协议安全性分析与改进  

Security analysis and improvements of IKEv2 protocol

作　　者：高翔[1] 李亚敏[1] 郭玉东[1] 马红途[1] 

机构地区：[1]信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机应用》2005年第3期563-564,572,共3页journal of Computer Applications

摘　　要：简单介绍了新一版密钥交换协议草案IKEv2,对IKEv2密钥协商机制的安全性进行分析。通过分析,发现其EAP交换过程繁琐且身份信息不易隐藏;证书验证中可能受到假冒证书攻击;为避免安全隧道非授权访问而需要重新认证等几处安全问题。针对这几处安全问题提出了改进建议和解决方法。IETF put forward a new version of IKE, IKEv2.Different from the old IKE,IKEv2 combines and redefines key exchange process. This paper introduced IKEv2, and analysed the security of key negotiation mechanism of IKEv2.Aiming at some security problems in EAP exchange, such as authentication with digital certificate and reauthentication to avoid accessing VPN tunnel with unauthorized identity, some improvement advice and solutions were given.

关 键 词：IKEV2 EAP 认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]