【摘要】 对ESP(EncapsulatingSecurityPayload)协议进行改进 ,提出了重新定义ESP协议里的可选字段来解决上述问题的方法 ,该方法利用IPsec协议族中的ESP协议 ,在遵守ESP协议的同时借鉴了传输模式和隧道模式的特点 ,在没有嵌套的情况下设计其安全策略 ,实现端到端的数据保护 .对ESP协议所作的改进可以简化安全规则的复杂性 ,便于在主机和安全网关上实施 .更多还原

【Abstract】 The problems of ESP Protocol were pointed out and solutions were found by redefining the optional field of the ESP Protocol. A security strategy for a type of network configuration was designed to implement the data protection from one end to another end in the network according to the ESP in Ipsec Protocols and the feature of the transform model and tunnel model without the nesting. In this way the complexity of the security strategy can be predigested and the implementation on the host and security gateway can become easy.更多还原