基于IPSec的网络安全系统的分析与设计  

Analysis and Design of Network Security System Based on IPSec

作　　者：金尚柱[1] 彭军[1] 杨治明[1] 游明英[1] 

机构地区：[1]重庆科技学院电子信息工程学院,重庆400042

出　　处：《计算机工程》2009年第9期166-168,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(60573047);重庆市教委科学技术研究基金资助项目(KJ051402;KJ061409)

摘　　要：针对软件加密解密时发送和接收数据包速率较低的问题,利用IPSec协议和密码卡相结合,提出一种高速、高性能和适应于各种安全需求的网络安全系统,包括标准IPSec的本地化改造,ESP协议和IKE协议自由使用密码卡上的专用算法等关键技术。测试和分析结果表明,该系统与软件加密系统相比具有比较明显的优势。Aiming at encryption and decryption used by software sending and receiving data packets at lower rate, an implementary scheme with the properties of high speed, high performance and flexibility to all kinds of secure system is proposed by exploiting IPSec protocol, including ESP and IKE which can freely use special algorithm within the crypto card. The implementary IPSec models and data transmission system are tested and analyzed. Results indicate that the system proposed is distinct advantage than software encryption system.

关 键 词：网络安全 保密数据传输 INTERNET密钥交换协议 虚拟专用网络 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]