中间人攻击下增强身份保护的IKEv2改进  

Improvements of the IKEv2 Protocol in Identification Protection Based on Man in Middle Attack

作　　者：赵华峰[1] 

机构地区：[1]渭南师范学院物理与电子工程系,渭南714000

出　　处：《科学技术与工程》2008年第10期2714-2718,共5页Science Technology and Engineering

基　　金：渭南师范学院引进人才专项科研基金(07YKZ026)资助

摘　　要：首先探讨了IKEv2协议可能遭受中间人攻击和密钥生成方案面临蜕化消息攻击的缺陷,针对退化消息攻击的威胁提出了基于共享密钥的密钥生成方案。针对存在的身份保护缺陷进行了分析,并相应地对IKEv2协议进行改进,提出的方案能够有效地进行身份保护。改动后的实现代价并不大,也不破坏ISAKMP框架及交换的对称性。At first, the defects of IKEv2 protocol is discussed. Analyses of IKEv2 have shown that IKEv2 is susceptible to man in middle attacks and degenerate message attacks. An improved way to generate keying materials to protect against degenerate message attacks is based on shared secrets. According to the analyses of the defects of identification protection, the improved methods to enhance identification protection, which have low cost of implement and have the same frame of ISAKMP and exchange symmetry, are given in IKEv2 protocol.

关 键 词：中间人攻击 IKEV2 身份保护 预共享密钥认证 蜕化消息攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]