Ipv6 Environment Ikev2 Formal Analysis And Application Of Research

IPSec(IP Security) provides interactive,highly-functional communication security based on cryptography for IPv4 and IPv6.Internet Key Exchange (IKE)protocol,an important component of IPSec protocol,whose main function is to realize exchange and management of the IPSec security parameter, now develops into the second edition(IKEv2).IKEv2 protocol concerns very complicated contents. At present, some international realizat-ion of IKEv2 protocol still keeps at its initial stage, without any ripe IKEv2 products entering the market, nor any public realization report of IKEv2 protocol for reference. All mentioned above will bring considerable difficulties to the work of research and realization in this paper.Firstly, IPSec architecture is analysed in this paper, introducing the IPSec security protocol AH and ESP in the second chapter. this paper makes a deep research about the exchange course of IKEv2 protocol,network communication and key derivation, and analyzes the security of the protocol in the third chapter. Analyzing current IKEvl protocol; summarizing its major disadvantages. Tracing the development of IKE-related protocols; studing the newest IKEv2, including its protocol specifications and interaction in negotiation; and also analyzing its advantages compared with IKEvl in respect of elegance, security, reliability and functionalities, etc. in chapter IV, the Colored Petri theory and automation tools CPN tools are mainly involveds, No text on the use of create modeling of the tools CPN and ML Grammar are writed, but on the simulation tools and the state-space analysis tool are discussed. Chapter 5 of the articles of Colored Petri IKEv2 application for a formal tool for expression and the use of modelsimulation and state-space analysis of the IKEv2 protocol communication model for the analysis, Finally, the existence of IKEv2 security issue for the analysis and discussion.Finally, the experimental IPv6 network environment resident structures, Based on IPv6 network and application services to the building were briefly introduced. The initial architecture of IPSec analysis IKEv2 security and the use of the CPN analysis tools, based on the IPv6 network environment, on the right in linux platform IPSEC-Tools tool based on the various functions of IPSec experimental environment.