Research On IP Security Mechanism And Related Issues

IPSec is the security standard for the Internet, his primarily composed of three protocols ESP, AH and IKE. It is also an indispensable part of IPv6, the next generation of Internet protocol suite. IPSec provides a general-purpose and standard security infrastructure on network layer for applications on higher layers. Study of the mechanism of IPSec is helpful when we design a secure communication system and applications based on it.In this paper, we primarily introduce the basic architecture of IPSec, especially the priciple of ESP, Al-I, IKE and some analysis of them and their recent progress. We study the coexistence of IPSec and network address translation. We also study IPSec and IP multicast security key management, at last we put forward a multicast key management scheme. In the scheme, we proposed the multicast security functional building block of implementation on host0 In the scheme we build several multicast groups at the same time, and with multiple groups we can reduce the network traffic and the work of group member.