Ipsec-based End-to-end Secure Communications Technology And Realization

With the develepment of Internet, people pay more attention to network security,the essentiality of IPSec stands out,now IPSec's policy management mechanism and the security policy system model advanced by IETF can't satisfy the actual requirements of network security.Aiming at the security requirements of ANICNET.we discuss the security from end to end first,then research the technoligy of IKE and management of security policy applied in the practical design of system.First researches the system of IPSec security protocol deeply,then discusses the problems of security in end-to-end communication,advances the idea of resolving problems in end-to-end security communication using IPSec.Aiming at the instance of most client user apply Windows,this thesis advances IPSec realization project based on Windows,designs and realizes IPSec driver module,driver and application's interface module,IKE module.Then discusses the problems ocurring in existenting IPSec's policy management mechanism and Security Policy System(SPS),advances the group security policy system model based on virtual group,and realizes the system in ANICNET.At last the thesis points this system's next work way.