Research On Safety Strengthen Design Of IPSec Framework In IPv6 Network

IPv6 as the next-generation network preferred protocol provides a wealth of address space, simple network configuration, achieves an IPSec security framework of end-to-end for cryptography especially in the IP layer, with good scalability, good QoS performance, and security and mobility support, greatly improves the network security. But the IPv6 protocol built-in IPSec, although it can solve the part of security problems, but still can not meet the actual needs. It need to be studied how to improve network security at the IP layer. Specific tasks are as follows:This paper firstly analysis IPv6 network security architecture basing on OSI security architecture model, and gives IPv6 network in the various protocol layers provided on the view of the security requirements analysis, and then elaborated on security threats of the various protocol layer. The security of IPSec protocol is analyzed in the paper.As the IP layer security architecture of the IPSec protocol, despite expressing a good safety performance, but according to the above analysis, IPSec can solve the security problem is still very limited, there are also some security flaws. Therefore, this article presents a higher security and better performance of IPSec architecture design in IPv6 network, in order to build high-security IP-layer security architecture, with IPSec protocols as base and with the view of security analysis as requirement.This program puts up the enhanced design of IPSec on the functionality, performance, and security strength of many aspects. It extends the IKE key exchange protocol of entity authentication capabilities on functionality, optimizes the IKE protocol in performance, and presents the application program of three important cryptographic algorithms ECC, AES and SHA-2 in the IPSec protocols on security strength.In addition, Mobile IPv6 is an important component part of the IPv6 protocol, IPSec strengthen designe should be include supporting for mobile networks. Specificity for the mobile environment, this article uses the IKEv2 protocol to achieve an improved of end-to-end between any two nodes in the transmission of safety and of mobile node access authentication security in mobile IPv6 network.