论文部分内容阅读
该文针对TCP/IP协议的特点,提出了一种基于IP的端到端加密传输机制。通过修改操作系统的IP协议软件,应用对称密码技术对IP数据报进行加密/解密处理,使得网络中传输的IP数据报只有通信双方能够识别,可以为互联网络上两台主机之间提供加密的安全通信。安全管理工作由独立的安全服务器完成,采用公钥密码技术向安全客户端传输安全通信所使用的对称密钥。与现有的安全通信技术相比,这种机制具有思想简单、易于实现,对IP以上层协议软件和应用程序完全透明等优点。
According to the characteristics of TCP / IP protocol, this paper proposes an IP-based end-to-end encrypted transmission mechanism. By modifying the operating system’s IP protocol software, the application of symmetric cryptography IP datagram encryption / decryption process, so that the network transmission of IP datagrams can only be identified by both communication can be encrypted between the two hosts on the Internet Secure communication. Security management is performed by an independent security server that uses public-key cryptography to transmit symmetric keys used by secure communications to secure clients. Compared with the existing secure communication technologies, this mechanism has the advantages of simple thinking and easy implementation, and is completely transparent to IP protocol software and applications.