IKE协议协商效率和安全性分析与改进  

Modification for Negotiation Efficiency and Security of Internet Key Exchange Protocol

作　　者：王丽敏[1] 龙翔[1] 高小鹏[1] 

机构地区：[1]北京航空航天大学计算机学院,北京100083

出　　处：《计算机与数字工程》2006年第10期100-103,共4页Computer & Digital Engineering

摘　　要：基于嵌入式VPN网关的实时性和安全性要求,本文分析了IKEv1和IKEv2协商效率的优缺点和安全性,对IKEv1主模式提出了改进方案;同时,针对VPN网关对动态IP支持的需求,分析并改进了IKEv1预共享密钥验证方式下的主模式。Based on the reguirements of real time properties and security of embedded VPN gateway, this paper analyzes the advantages and disadvantages of negotiation efficiency and security of IKEv1 and IKEv2, and presents a set of modifications of IKEvl main mode, On the other hand, it analyzes and improves the main mode of pre - shared key authentication method, in order to provide nomadic IP for embedded VPN gateway.

关 键 词：IKE IKEv1 IKEV2 协商效率 安全关联 动态IP 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]