基于数字签名认证的IKE协议安全性分析及改进  

Security analysis and improvement of IKE protocol with signature authentication

作　　者：何韦伟[1] 季新生[1] 刘彩霞[1] 

机构地区：[1]信息工程大学国家数字交换系统工程技术研究中心,郑州450002

出　　处：《计算机应用》2008年第7期1807-1809,1815,共4页journal of Computer Applications

基　　金：国家863计划项目(2007AA01Z434)

摘　　要：IKE协议的复杂性使得其存在一些安全漏洞。简要介绍基于数字签名认证方式的IKE协议工作机制之后,分析了IKE协议容易遭受的两种中间人攻击,针对中间人攻击导致用户身份泄漏的安全缺陷,提出两种改进方案并给出改进前后定量的性能分析。The complexity of Internet Key Exchange （IKE） protocol causes some potential security flaws. After the mechanism of IKE with signature was introduced, the two kinds of man-in-middle,attack were analyzed, In order to protect the users＇ identities from being exposed to the outside, two solutions with some improvements were proposed. Finally the paper made a quantitative capability analysis on the whole.

关 键 词：IKE 数字签名 中间人攻击 公钥 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]