IKEv2中混合认证的研究与扩展设计  

Analysis and Design of Hybrid Authentication in IKEv2 Protocol

作　　者：唐佳佳[1] 李学哲[1] 陈国新[1] 

机构地区：[1]苏州科技学院电子与信息工程学院,江苏苏州215011

出　　处：《南通职业大学学报》2009年第2期82-85,共4页Journal of Nantong Vocational University

摘　　要：对最新IKEv2中的基本身份认证方式进行了研究,并针对基本认证方式的缺陷,提出通过IKEv2中EAP认证方式的扩展,在IKEv2中引入混合认证的具体方案,增强了IKEv2的灵活性,且弥补了单独使用PKI或预共享密钥的不足,拓展了IKEv2的应用领域。This article has analyzed the basic authentication in the latestIKEv2 protocol in details, and gives a concrete method of applying EAP method in IKEv2, and develops application area of IKEv2. Against the flaw of basic authentication, it has introduced a specific design of hybrid authentication into IKEv2 by extending EAP method in IKEv2. This design has improved the flexibility of IKEv2, and fetched up the shortage of using PKI or PSK alone.

关 键 词：互联网密钥交换协议 扩展认证协议 混合认证 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]