摘要
研究了基于IPSec的虚拟专用网络安全通信机制,详细地讨论了虚拟专用网络中的数据源认证和完整性保护算法、反重放算法的原理,并给出其相应的编程实现。同时对密钥交换技术作了深入的研究,阐述了如何通过一系列参数的协商在非安全的公共IP网络中建立安全通信的密钥交换机制的详细过程,给出了一种基于Linux操作系统的客户机/服务器IKE密钥交换编程实现,对IPSec安全特性作出了分析,并对今后研究发展的方向作了进一步的展望。
This paper has an overall research on security communication mechanism for IPSec based Virtual Private Network,discusses fundamental principles of various security service such as data origin authentication,integrity protection,anti-replay protection and their software implementation,illustrates the details of the security key exchange mechanism on non-secure public IP based network through a set of parameters negotiation,then presents a software implementation of Client/Server model WN key exchange upon LINUX operation system ,at last it gives IPSec security analysis and prospective view of the future research.
出处
《通信学报》
EI
CSCD
北大核心
2003年第8期168-176,共9页
Journal on Communications
基金
国家"九五"科技攻关重点项目(2000-A32-12)
