摘要
IPSec是IETF提供的在Internet上进行安全通信的一系列规范。由于历史的原因,从开始设计IPSec的那一天起,IPSec的体系结构就逐渐走向了复杂,变得越来越庞大而不合理。为了简化IPSec的体系结构,提高IPSec的运行效率,在介绍了IPSec中的AH和ESP协议以及它们的工作模式的基础上,通过对AH和ESP异同点的分析和比较,提出了一条简化IPSec体系结构的思路,那就是不妨考虑通过取消AH协议来实现。这对IPSec的理论研究和实际应用都具有一定的参考价值。
IPSec is a series of norms proposed by International Engineer Task Force（IETF）, which can be used to communication security on Internet. IPSee has an over scaled architecture, and becomes more and more complicated due to history. In order to simplify IPSec architecture and improve the efficiency,introduces the AH, ESP and their working mode in IPSec in detail, compares the differences and similarities between the AH and ESP, suggests an idea of simplifying IPSec architecture by abolishing the AH. The research work should be valuable in the project application and the theory research of IPSec.
出处
《计算机技术与发展》
2009年第11期15-17,22,共4页
Computer Technology and Development
基金
四川省教育基础应用研究基金(2008A140)
