The Research And Implementation Of IP-VPN Security Policy System

With the fast development of Internet, since the technology of VPN can be used to build exclusive network through Internet, people use it more and more widely than before. But one point we must take notice is that it can only ensure the data security when its policies are correctly configured. So in this way, researchers begin to attach greater importance than ever on the security policy system of VPN.This paper analyses the current problems of the security policy system of VPN at first, discuss the security policy system's trend of development. We mainly discusses the object of it and analyses its implementing process in detail. And we get hold of the crucial tache of the security-the distribution of the security policy, and put forward the design of the security policy system.Secondly, we analyze the policy distribution protocol-COPS protocol and the model of the policy distribution, and put the address at the analysis of the security of the design.At last, we describe the design and the whole idea of the VPN security policy system, discuss the divide of each module, the function of the module and the relation between the call. And we give out the key technology of the each component in our implement.The main contribution of this paper can be stated as follows: 1) Puts forward a framework which is suitable for the traditional security policy system of IP-VPN. 2) Analyses the COPS protocol. 3) Suggests a simple way as how to create a security SA automatically.