【摘要】 IKE协议作为IPsec协议簇中的重要组成部分,引起了广泛的关注和研究。本文在研究已有IKE协议的基础上,将公钥基础设施PKI体系引入其中,并在PKI现有RSA算法外应用高强度的椭圆曲线密码ECC算法,提出将ECC、PKI同IKE协议相结合,设计了一个基于PKI身份认证的高安全强度IKE协议,从而提高了VPN网关的安全性和可扩展性,有效保护了VPN网络资源的安全。最后提出了实现方案。更多还原

【Abstract】 Internet key exchange(IKE)protocol is a key component of the IP security suite,which draws great attentions and inves-tigations.The current IKE protocol is researched,and the public key infrastructure is introduced,which is applied with high-tensile elliptic curve cryptography besides existed RSA cryptography,and the techniques of ECC and PKI are combined with IKE,an high in-tensity IKE protocol based on PKI authentication is designed,to improve the security and extensibility of IPsec VPN gateway and to protect VPN network resources effectively.Finally,an implementation approach is given.更多还原