一种基于改进IKE的移动VPN密钥协商方案  

Key Exchange Solution of Mobile VPN Based on Improved IKE

作　　者：陈楠[1] 俞定国[2] 谭成翔[2] 

机构地区：[1]杭州师范大学钱江学院,杭州310012 [2]同济大学计算机科学与技术系,上海201804

出　　处：《计算机科学》2011年第7期93-95,99,共4页Computer Science

基　　金：国家"863"计划基金项目(2006AA01Z438)资助

摘　　要：对传统IKE协议进行了改进,改进后的协议在不降低安全性的前提下实现了移动用户远程安全接入,以便其获得内网信息;扩展了IKE的认证方式,使其具有更高的协商效率和更强的可控性;实现了相应的移动VPN接入系统,该系统既支持动态内网IP分配,又支持扩展用户身份认证,从而在接入服务器端可以方便地进行基于内网IP的访问控制管理。One new solution of the key exchange introduced in this paper does improve the IKE protocol.This solution not only allows the remote mobile users security access to the intranet and get the intranet information on the premise of no reduction in security,but also extent the ways of IKE authentication,making it more efficient in negotiation and more controllable.Besides,the solution develops a corresponding mobile VPN access system which supports both dynamic distribution of intranet IP address and the extension of user identity authentication.Thus the access server can easily control and manage the intranet IP-based access.

关 键 词：移动VPN IPSEC IKE 身份认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]