IPsec的Internet密钥交换  

Internet Key Exchange Protocols on IPsec

作　　者：袁剑[1] 刘刚[1] 王文海[2] 

机构地区：[1]西安电子科技大学高等教育研究所,陕西西安710071 [2]西安工程大学理学院,陕西西安710038

出　　处：《西安文理学院学报（自然科学版）》2006年第4期52-56,共5页Journal of Xi’an University(Natural Science Edition)

摘　　要：介绍了IPsec的基本组成和一组IKE协议.分析了IKE协议的安全特性,以及IKE的协商过程.其中包括:在主模式中建立ISAKMP SA的过程和在快速模式中利用已建立好的ISAKMP SA完成IPsec SA的协商.通过详细分析主模式中用于完成SA要交换的六个消息的发送步骤、属性、结构来说明安全性的实现.The basic components of IP security and a suite of IKE protocol were introduced. The security properties of IKE protocols and the negotiation of Internet key exchange were analyzed, including the process of establishing ISAKMP SA in the main mode, and the completion of IPsec SA negotiation by using established ISAKMP SA in the fast mode. The realization of security was explained through detailed analysis of sending procedures, properties and structures of six messages to be exchanged for completing SA in the main mode.

关 键 词：IPscc IKE 密钥交换 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]