基于IPSec協(xié)議的VPN系統(tǒng)安全性研究及IKE協(xié)議的實現(xiàn).pdf

1、#々——學幢代碼uU—＆工丁辛葉，斜孜大浮005064‰——碩士學位論文基于IPSec協(xié)議的VPN系統(tǒng)安全性研究及IKE協(xié)議的實現(xiàn)學位申請人學科專業(yè)指導教師答辯日期周宇亮電子與通信工程江國星副教授20050928華中科技大學碩士學位論文AbstractIPSec，oneoftheimplementationtechnologiesofVirtualPrivateNetwork(VPN)，hasmanyadvantagesthatothe

2、rVPNtechnologieslackAsthekeycomponentofIPSecarchitecture，IKEschemecandynamicallynegotiateandmanageIPSecSA(SecurityAssociation)，thuscangreatlyboostupthesecurityofIPSecVPNcommunicationchannelsCurrently，theothersimilarVPNga

3、tewaysdevelopedinChinahavenotfullyimplementIKEprotocol，whichwitlmakeabigimpactonthesecurtryofVPNsystemsAtthesametime，thoseforeignmatureVPNproductscannotbelargelyappliedinthekeydepartmentsofourcountrysotheresearchofIPSecp

4、rotocolbasedVPNsystemsstillhasitspracticalvalueThisthesisfirstintroducesthebasicprinciplesofIPSecprotocolandVPNsystems，explainstherelationshipbetweenIKEschemeandIPSecVPN，andanalyzesthesimilarresearchconductedinbothChinaa

5、ndforeigncountriesSecondly，thispaperanalyzesIKEprotocolandotherrelatedtechnologies，proposesanimplementationofanewIPSecVPNandIKEsystemandgivesawholenewdivisionofthemodulesarchitectureThispaperdesignstheIKEdynamicnegotiati

6、onmodule，IKEkemelcommunicationmodule，IKEencryptionandauthenticationmoduleandIKEsystemadministrationmodulebasedontheaboveanalyzes，andimplementsallthesesystemfunctionsonLinuxplatformFurthermoresincecurrentlythereisnounifie

7、dstandardforIKEsystemadministration，thispaperalsoproposesasimplestandardforitAttheend，thispaperconcludesalltheworkithasdone，anddiscussesthetrendofVPNandIKEKeywords：VirtualPrivateNetwork(VPN)IPSecurity(IPSec)ProtocolIntem