虚拟专用网络安全通信机制的研究与实现  

Research & implementation of security communication mechanism for virtual private network

作　　者：吴越[1] 疏朝明[1] 卜勇华[1] 胡爱群[1] 毕光国[1] 

机构地区：[1]东南大学无线电系

出　　处：《通信学报》2003年第8期168-176,共9页Journal on Communications

基　　金：国家"九五"科技攻关重点项目(2000-A32-12)

摘　　要：研究了基于IPSec的虚拟专用网络安全通信机制,详细地讨论了虚拟专用网络中的数据源认证和完整性保护算法、反重放算法的原理,并给出其相应的编程实现。同时对密钥交换技术作了深入的研究,阐述了如何通过一系列参数的协商在非安全的公共IP网络中建立安全通信的密钥交换机制的详细过程,给出了一种基于Linux操作系统的客户机/服务器IKE密钥交换编程实现,对IPSec安全特性作出了分析,并对今后研究发展的方向作了进一步的展望。This paper has an overall research on security communication mechanism for IPSec based Virtual Private Network,discusses fundamental principles of various security service such as data origin authentication,integrity protection,anti-replay protection and their software implementation,illustrates the details of the security key exchange mechanism on non-secure public IP based network through a set of parameters negotiation,then presents a software implementation of Client/Server model WN key exchange upon LINUX operation system ,at last it gives IPSec security analysis and prospective view of the future research.

关 键 词：虚拟专用网 安全 IP安全协议 因特网密钥交换 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]