用Internet密钥交换协议增强PPP的安全性  

Enhancing the Security of PPP with Internet Key Exchange Protocol

作　　者：张世武[1] 刘湘疆[1] 

机构地区：[1]解放军外国语学院基础部,河南洛阳471003

出　　处：《微计算机信息》2009年第6期114-116,共3页Control & Automation

摘　　要：针对点对点协议PPP中协商算法过程因无任何保护而易受到攻击的问题,提出在PPP中引入Internet密钥交换协议,用于实现PPP链路上的密钥协商和鉴别、压缩、加密等算法的协商,通过对控制信息的完整性保护,很好地解决了协商过程的安全问题。对此改进的分析表明,IKE协议的引入不仅增强了PPP的安全性,而且大大提高了协商效率。Since the Point-to-Point protocol （PPP） provides no protection for the negotiations of algorithms, the Internet key exchange （IKE） protocol is introduced into PPP for the negotiations of shared keys and authentication, compression and encryption algorithms. Through the integrity protection of the control messages, this method effectively solves the security problem of negotiations in PPP. The analysis of the method shows that it is much more secure and more effective than the original PPP.

关 键 词：INTERNET密钥交换协议 点对点协议 密钥协商 算法协商 

分 类 号：TN918.91[电子电信—通信与信息系统]