一种融合PKI与IPSec技术的VPN改进方案  

A Fusion of PKI and VPN IPSec Technology Improvement Scheme

作　　者：彭伟[1] 

机构地区：[1]重庆大学,重庆400030

出　　处：《计算机安全》2014年第3期57-59,共3页Network & Computer Security

摘　　要：由于IPSec的IKE的身份认证的不完善和密钥产生过于复杂和灵活,大大降低了在复杂环境下的网络安全。为规避IKE所带来的风险,通过分析PKI技术特点,提出把PKI技术和IPSec技术相结合,利用PKI完全取代IPSec中的IKE功能,大大加强了IPSec在身份认证、密钥交换、访问控制等多方面的安全性,进一步完善了VPN安全性的解决方案。The identity authentication of IPSEC IKE is not perfect and the key generation is too complicated and flexible, greatly reduces the network security. To circumvent the risks associated with IKE, by analyzing the characteristics of PKI technology, the PKI technology and IPSEC technology are combined, using PKI replace IPSEC in the IKE function, greatly enhanced IPSEC in identity authentication, key exchange, access control and other aspects of security, and further improve the VPN security solution.

关 键 词：IPSEC VPN IKE PKI 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]