密钥管理中IKE协议的安全基理分析  

Security Mechanism Analysis of IKE Protocol in Key Management

作　　者：顾炜江[1] 

机构地区：[1]南京林业大学信息网络中心,南京210037

出　　处：《软件》2012年第11期170-171,共2页Software

摘　　要：无可否人,Internet在当今世界的发展潮流中是不可取代的,但做为一个公共的、开放的服务系统,如何防护它的安全一直是重要的研究课题。而在未知安全性的信道上(大多数通信通道都包含在其范围内)进行安全通信又是重中之重。通常在IP层面上的这种安全诉求是通过IPSec协议进行信道间的互通操作;进行必要的验证、核实、加密等数据处理来实现的。而其中的密钥管理协议(也称为密钥交换协议,即Internet Key Exchange Protocol,缩写为IKE)能否理想的实现更是直观的影响到IPSec完成完整度。因此文章就IKE的实现基理为中心命题进行细致分析。It is undeniable that the role Internet plays in today＇s world is irreplaceable, and how to protect the safety of this public, open service system has always been an important research topic. To carry out secure communication on security-nnknown channels （most communications channels are included within its scope） is the priority concern. Usually this kind of IP level security demands is met by such data processing procedures as necessary validation, verification and encryption through channel interoperation based on IPSec protocol. Whether the key management protocol （also known as key exchange protocol, namely, Internet Key Exchange Protocol, abbreviated as IKE）, among other data processing means, can be ideally and perfectly realized will directly affect the integrate application of IPSec. Therefore this article makes a detailed analysis focusing on IKE realizing mechanism.

关 键 词：网络安全 密钥管理 IPSEC协议 IKE协议 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]