VPN安全网关IKEv2-EAP／SIM扩展研究与设计  

Research and Design of IKEv2-EAP/SIM Extension in VPN Security Gateway

作　　者：胡平[1] 唐佳佳[1,2] 陆建德[1] 

机构地区：[1]苏州大学计算机科学与技术学院,苏州215006 [2]苏州科技学院计算中心,苏州215009

出　　处：《计算机工程》2008年第19期147-150,共4页Computer Engineering

基　　金：江苏省自然科学基金资助项目(BK2004039)

摘　　要：以往安全网关的实现偏重于单一功能,且认证方式不够灵活。该文对最新IKEv2动态密钥协商机制进行研究和分析,结合EAP可扩展认证机制的优点,提出将EAP/SIM认证框架引入IKE认证体系的思路,给出实现方案,设计了基于EAP/SIM的增强型可扩展IKEv2系统。IKEv2-EAP系统以RADIUS为认证服务器实现AAA功能,使用新的IKEv2-EAP/SIM交互建立了安全的IPSec隧道,使VPN网关功能更趋灵活、强大及多样化。Anciently, the implementation of security gateway only emphasizes on one side function and the authentication way is not flexible. This paper researches and analyzes deeply on latest IKEv2 protocol of dynamic key negotiation mechanism and combines the advantages of EAP, then gives a solution that introduces the EAP/SIM authentication framework into IKE authentication system and designs an enhanced extensible IKEv2 system based on EAP/SIM. IKEv2-EAP system takes RADIUS as the authentication server implementing AAA functions and employs up-to-date IKEv2-EAP/SIM interaction setting up the secure IPSec channels. This makes the function of VPN gateway more flexible, stronger and diversity.

关 键 词：EAP协议 SIM认证 IKEv2系统 RADIUS服务器 VPN网关 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]