密钥交换协议的安全性分析与改进  

Analysis and Improvement of Security of Key Exchange Protocol

作　　者：黄松柏[1] 韩秀玲[1] 

机构地区：[1]东华大学信息科学与技术学院,510370

出　　处：《微计算机信息》2007年第21期35-37,共3页Control & Automation

摘　　要：本文深入的对IKE协议的相关知识、交换原理以及安全性进行了分析与研究,并对基于预共享密钥认证的IKE主模式交换协议的工作原理及结构进行了阐述,针对基于预共享密钥认证的IKE主模式协议存在的不足提出了协议的进一步改进方案。重点分析了在IKE实现过程中,“中间人”攻击的原理并提出了防范“中间人”攻击的连锁协议与身份认证相结合的思想。In this paper, the relative knowledge of IKE, exchange mechanism and its security were deep analyzed and researched. Besides, the theory and structure of the main mode IKE protocol with pre-shared key were showed and further improved. The theory of man in middle attack was importantly analyzed and the thinking of interlock protocol-authentication to prevent man in middle attack was advanced.

关 键 词：IPSEC IKE 主模式 预共享密钥认证 中间人攻击 连锁协议 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]