IPSecVPN中关键技术的研究与实现

《IPSecVPN中关键技术的研究与实现》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、北京邮电大学博士学位论文IPSecVPN中关键技术的研究与实现姓名：傅坚申请学位级别：博士专业：信号与信息处理指导教师：胡正名20030501Abstract⋯—__—————-__--—_●—_____-_●__-____--——————'●_●—_●——’—__●—-^-_-___-●-●一TheIntemetbringsthemankindmoreandmoreconveniencesaswellasavarietyofsecuritythreats．Asabranchofnetworktechnology,VirtualPrivateNetwork(VPN)iSaimedtop

2、rotectthesecurityofdatatransmittedonpublicnetwork，suchas，Internet．Throughformingasecureandeffectivetunnel，VPNmakesitpossibletObuildupprivatenetworkuponpublicnetwork．ThedissertationfocusesonthestudyofVPNtechnologybasedOnIPSecurityprotocol(IPSec)．Theremainingofthethesisisorganizedasfellows：First，i

3、tintroducesthecontentofIPSecprotocolfamily,whichismainlymadeupofESP,AH，IKE．ComparedtootherVPNtechnologies，IPSecprovidesanIPlayersecuritymechanism，whoseadvantagesincludetransparencytotheenduser,agilesecuritymechanismandpowerfulfunctions．Secondthedissertationdiscussesfourquestionsrelatedtotheusage

4、ofIPSecamongactualenvironmentsandpresentsthecorrespondingsolutions．ThefirstiSontheanalysisandimprovementofⅡ@protoc01．thesecondiSthecoexistencebetweenNetworkAddressTranslationfNATlandIPSec；the1asttwosolutionsconcemhowtOmake口SecprovidethesupportforremoteaccessandmulticastThecomplicatedwirelessenvi

5、mnmentposesspecialdemandsonsecuritysolutionsusedinwiredenvironment．Despiteofitsgoodcharacteristics．itiSinfeasibleforIPSeetoporttowirelessnetworkwithoutanymodification，Thethirdpartofthisthesisfirstanalyzesandcomparesthelink—layersecuritymechanismofthreewirelessaccessstandards—IEEE802．1lb．IEEE802．

6、16andBluetooth，discoveringsomeweaknessinallthethreestandards．Then研oSOlutionstokeyissuesofMobileVPNarepresented．whichinturniSatunnelsolutionbasedonForeignAgentandakeydistributionprotocolbasedonKDC．ThethirdpartalsoconcernsthestudyonAdHOCSecurity．Absencefromanyinfrastructure，AnAdhocisakindofself-or

7、ganizingnetwork．OwingtothedynamictopologyofAdHocnetwork，thekeyupdateOCCURSfrequently．Thusahierarclficalgroupkeyprotocolisputforwardtoaccommodatethisspecialrequirement．TheLastpartdescribesallimplementedIPSec—VPNsystern．TheVPN