IPSec-VPN中应用PKI的研究与实现方案  

An Approach of Applying PKI to Secure IPSec VPN

作　　者：陈向荣[1] 余胜生[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,武汉430074

出　　处：《计算机与数字工程》2002年第6期20-25,共6页Computer & Digital Engineering

摘　　要：基于IPSec的虚拟专用网(VPN)尽管极大地改进了传统IP协议缺乏安全机制的问题,但在复杂情况下仍会因身份认证不完善而影响网络的安全性。PKI是一套可公开信任的提供认证服务的安全平台,可提供身份认证和角色控制服务。本文分析了IPSec和PKI在安全上的技术特点,提出了一种将PKI认证技术应用到IPSec-VPN中加强身份认证和角色访问控制,进而完善VPN安全的方案。Though IPSec based VTN has significantly enhanced the security on conventional network which is caused by lack of security mechanism oi the IP protoeol in some extremities s:curty will still be harmed by its weak identity authentication. As a publicly trusted plat form, PKI is designed to provide identity authentication and role access control service. Based on analysis of IPScc and PKI, this paper gives a scheme of applying PKI into IPSec - VPN to strengthen identity authentication and role access control,and thus makes VPN more secure.

关 键 词：VPN PKI 虚拟专用网 IPSEC协议 企业网络 公钥基础设施 属性证书 

分 类 号：TP393.18[自动化与计算机技术—计算机应用技术]