Design And Implementation Of IKE Protocol And Research Of Key Management For Multicast

Internet has been one of the most important infrastructures of the modern society. As pushing the world into the information era, Internet itself is making rapid and significant progress to accommodate the need of various applications. But the lack of security service in Internet Protocol has limited the wider deployment of many serious applications such as E-Commerce and E-Bussiness.The author's team has undertaken the State 863 Key Project - High Performance IPv6 Router. The author designed and implemented the IKE part of IPSec. The work will be covered in first part of this paper.IPSec protocol suite is a general-purpose secure protocol for Internet. Tightly integrated with IP protocol, it can provide various secure services for traffic at the IP layer. Internet Key Exchange ( IKE ) is an important part of IPSec. It provides services of authentication, policy negotiation and key exchange. IPSec protocol suite is an indispensable part of IPv6 protocol, which will greatly improve the security of the next generation of Internet.IKE protocol is complex. To simplify the implementation while maintain the extensibility, we bring forward an architecture with well-designed modules and facilities used for later function extending. The overall architecture, the modules and the facilities will be discussed thoroughly in this paper.Key management for multicast is different from the one for unicast. Many proposals with different characteristics have been brought forward. In the second part of this paper, we will study some of them, compare the functionalities and abilities and then give an general conclusion.