基于IPv6扩展报头的安全通信策略  

Strategy of security transmission based on IPv6 extension header

作　　者：耿楠楠[1] 王振兴[1] 程之年[1] 有业斌[1] 

机构地区：[1]解放军信息工程大学,河南郑州450002

出　　处：《计算机工程与设计》2008年第14期3604-3606,共3页Computer Engineering and Design

摘　　要：为了实现网络的安全通信,IPv6协议使用IPSec保护端到端数据传输的安全。但由于IPSec协议体系规模过于庞大、协议认证和加密方式复杂,对网络传输性能造成不可忽视的影响。利用IPv6报头的可扩展、高灵活性的协议机制,提出一种可保证主机间数据传输安全的多重密码加密算法(MEA),算法简单实用、计算量小。IPv6 uses IPSec to ensure the communication secure in end-to-end communication. However, IPSec has an over scaled architecture, the complicated authentication and encryption methods, andtheapplicationofIPSecpolicyhasnegativeinfluenceonefficiency of network communication. Hence, with the use of flexible and extensible characteristic of IPv6 header, a multi-eneryption algorithm （MEA） to guarantee the security of the end-to-end message transmission in IPv6 is brought forward, and the algorithm is simple and practical, and the calculation quantity is small.

关 键 词：IPV6 IPSEC 扩展报头 选项 密码算法 网络安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]