IPSec-VPN中应用PKI的研究与实现方案

基于IPSec的虚拟专用网(VPN)尽管极大地改进了传统IP协议缺乏安全机制的问题,但在复杂情况下仍会因身份认证不完善而影响网络的安全性。PKI是一套可公开信任的提供认证服务的安全平台,可提供身份认证和角色控制服务。本文分析了IPSec和PKI在安全上的技术特点,提出了一种将PKI认证技术应用到IPSec-VPN中加强身份认证和角色访问控制,进而完善VPN安全的方案。

An Approach of Applying PKI to Secure IPSec VPN

Though IPSec based VTN has significantly enhanced the security on conventional network which is caused by lack of security mechanism oi the IP protoeol in some extremities s:curty will still be harmed by its weak identity authentication. As a publicly trusted plat form, PKI is designed to provide identity authentication and role access control service. Based on analysis of IPScc and PKI, this paper gives a scheme of applying PKI into IPSec - VPN to strengthen identity authentication and role access control,and thus makes VPN more secure.