Ike In The Cdma2000 Packet Data Services Applications

The packet data service node(PDSN) is the gateway device of the packet field in a cdma2000 system. It supports two ways for a mobile node to connect to the public IP network: simple IP and mobile IP. During the register of mobile IP and the transmission of the data, the PDSN need to communicate to the other function modules which is in the core network packet field throughout the public IP network. The standards of the 3GPP2 command that that processes must be protected by the IPSec protocol.The IKE protocol is the core of the IPSec protocol group and its function is to negotiate about the protection parameter of the two sides which are implementing the IPSec process.In this paper, the basic concept and work principle of IPSec and IKE is described. And on this base, the security of IKE protocol is researched and the likely security threaten and self-defend method is analyzed.There are special commands on using IKE and IPSec protocol to offer a safe service for mobile IP operation on the PDSN node. In this paper, the mobile IP work process and its demands of security are analyzed. Considering the characteristic of PDSN system software, A corresponding IKE function module is designed, which can offer a full negotiation ability to the IPSec system. At last the next generation IKE protocol—IKEv2 is described.