基于PKI/OCSP的IKEv2协议设计  

Design of IKEv2 Protocol Based on PKI/OCSP

作　　者：王明[1] 杜春燕[1] 陆建德[2] 

机构地区：[1]宁波大红鹰学院,宁波315175 [2]江苏省计算机信息处理技术重点实验室,苏州215006

出　　处：《武汉理工大学学报》2010年第3期105-109,共5页Journal of Wuhan University of Technology

基　　金：江苏省自然科学基金(BK2004039)

摘　　要：IKE协议是IPSec协议簇的重要组成部分,是IPSec VPN安全传输的先决条件和保证。新版IKE即IKEv2自提出以来就备受业界关注。在研究IKEv2协议的基础上,将公钥基础设施PKI体系引入其中,并针对IKEv2中数据通信的特点,将在线证书状态协议OCSP与IKEv2协议结合起来,设计了一个基于PKI/OCSP的改进型IKEv2协议,从而提高了IPsec VPN系统的运行效率和安全性。Internet Key Exchange（IKE） is one of the important protocols in IPSec protocol suite,which is the prerequisite and guarantee for secure communication with IPSec VPN.The new version of IKE or IKEv2 has been discussed and concerned by the industry since its introduction.This paper has researched on IKEv2 protocol,and proposed to introduce the public key infrastructure and to combine the techniques of OCSP in cognizance of IKEv2 data communication,improving the efficiency and security of IPSec VPN gateway.

关 键 词：IKEV2 PKI OCSP 数字证书 

分 类 号：TP393.01[自动化与计算机技术—计算机应用技术]