计算机应用研究Issue(9)：2812-2815,2819,5.DOI:10.3969/j.issn.1001-3695.2015.09.059
一种CPN中基于DHCP扩展的 IPSec安全关联参数管理机制
IPSec SA parameters management mechanism for CPN based on DHCP extension
摘要
Abstract
Secure connection between IPSec participants is achieved via IPSec SAs.However,there are no simple and elegant approaches to the management of SA parameters currently.As a result,the cost of user devices and target servers to negotiate a SA is expensive in aspects of time,CPU load and network usage.By analyzing the topology and deployment features of CPN, this paper found that there existed outbound trust relationship between the DHCP server and other service providers.Based on such a trust relationship,it developed a lightweight SA management mechanism aiming at CPN environment.Simulation ex-periments show that compared with the traditional ones,this new mechanism costs significantly less time,CPU load and smal-ler IP packet size.关键词
动态主机配置协议/互联网协议安全性/安全关联参数管理Key words
DHCP/IPSec/SA parameter management分类
信息技术与安全科学引用本文复制引用
钱炜烁,马迪,毛伟,王伟..一种CPN中基于DHCP扩展的 IPSec安全关联参数管理机制[J].计算机应用研究,2015,(9):2812-2815,2819,5.基金项目
思科公司高校研究基金资助项目 （）
