Research And Implementation Of Security Technology In Embedded System Based On IPv6 Technology

Research and construction of the next generation Internet is becoming one of the focus in the field of information technology. And the network security is an important field in the research of the next generation Internet. Owing to the security service provided by IPSec, IPv6 network can effectively prevent network attacks that have harassed people for a long time. As a result, IPSec is considered the best network security solution which can be provided at present.IPSec stack based on IPv6 technology is realized in DUT5000 which is the embeded control device in Industrial Ethernet by studying the key points of IPv6 technology, IPSec technology and features of the embedded device.And expounded the design process of security mechanism based on IPSec protocol: Authentication Header (AH), Encapsulating Security Payload (ESP), Security Associations (SA) and Key Management in the thesis. AH is used to provide connectionless integrity and data origin authentication for IP datagrams by using MAC, and to provide protection against replays.ESP can accomplish data confidentiality and limited traffic flow confidentiality by applying cryptogram algorithm to encrypt all the data and padding. Besides, it can also provide the functions above mentioned that the AH owned. SA includes authentication or encrypted key and algorithm and its connection is in one direction.Two SAs need to be established for protecting two host computers or the bidirectional communications between the two gateways. Key Management is composed of key confirmation and key distribution, and needs four keys at most: they are used to send and receive key respectively. It involves two ways: Manual and Auatomated.The combination of the four mechanisms can provide varieties of different security services. Applications and tests based on IPSec indicate that the IPSec can provide safe, stable and reliable data traffic for industrial control network.The application of IPSec to embedded instruments which is based on IPv6 protocol does contribution to improve the security capability of the embedded control network, promotes the application of internet in the embedded system, besides, it can also expand the application area of computer network technology and embedded technology.