实现IPsec的一种方案  

An Implementation Design of IPsec

作　　者：徐佳[1] 荆继武[1] 

机构地区：[1]信息安全国家重点实验室,北京100039

出　　处：《计算机工程》2002年第1期177-179,共3页Computer Engineering

摘　　要：介绍了层安全协议,包括其主要的加密技术和、工作方式和、密钥管理技术。探讨了IPIPsecAHESPTransport modeTunnel modeIKE几种可能的实现思路,介绍了笔者的一种设计方案,包括目标、需求分析、硬件和软件的总体结构,简要分析了这种设计方案的性能和需要完善的方面。This article briefly introduces IPsec, the security protocol for IP stack. The content covers here includes such two transformations of IPsec as AH and ESP, two modes as transport mode and tunnel mode and the key management protocol IKE. Several possible implementation methods are discussed and one approach originated by the author is presented. About this approach, the design objective, requirements determination, hardware and software architecture are described. In addition, the design performance issue is discussed and compared to some extent.

关 键 词：虚拟私用网络 IPSEC协议 通信协议 互联网 网关 

分 类 号：TN915.04[电子电信—通信与信息系统] TP393.4[电子电信—信息与通信工程]