IPv6网络中多级多域安全策略系统研究

IPv6网络中多级多域安全策略系统研究

李小平1;吴琼1;董庆宽2;刘彦明2

(1. 西安电子科技大学机电工程学院，陕西西安 710071;
2. 西安电子科技大学通信工程学院，陕西西安 710071)

收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2008-04-20 发布日期:2008-03-28
通讯作者: 李小平

Research on the multi-hierachy and multi-domain security policy system in IPv6 networks

LI Xiao-ping1;WU Qiong1;DONG Qing-kuan2;LIU Yan-ming2

(1. School of Mechano-electronic Engineering, Xidian Univ., Xi′an 710071， China;
2. School of Telecommunication Engineering, Xidian Univ., Xi′an 710071， China)

Received:1900-01-01 Revised:1900-01-01 Online:2008-04-20 Published:2008-03-28
Contact: LI Xiao-ping

摘要/Abstract

摘要： 为了解决IPv6网络中基于策略驱动的网络安全问题，构建一个以整体安全策略为核心的下一代网络安全体系，提出了统一管理、分布式控制的多级多域安全策略系统．该系统中心策略统一配置、各域根据自身安全需求下载安全策略，本地策略协商配置．并从系统框架和实现方案分别给出了详尽的描述，在理论上证明了系统方案的可实现性．该系统比较灵活，具有一定的可扩展性，适合基于安全域的策略管理需求．

关键词: IPSec策略, 安全策略管理, 安全系统, IPv6

Abstract: In order to solve security problems based on the policy and construct a security-policy-based network security architecture in IPv6 networks, a multi-hierarchy and multi-domain security policy system in which the central policies are uniformly stored, distributed domain by domain and local policies are obtained by negotiation is presented. The frame of the system and its realization scheme are designed in detail and the feasibility of the system is theoretically verified. The system which is flexible and expansible fits the requirements of policy management based on the security domain.

Key words: IPSec policy, security policy management, security systems, IPv6

中图分类号:

TP393.02

李小平1;吴琼1;董庆宽2;刘彦明2. IPv6网络中多级多域安全策略系统研究
[J]. J4, 2008, 35(2): 300-304.

LI Xiao-ping1;WU Qiong1;DONG Qing-kuan2;LIU Yan-ming2. Research on the multi-hierachy and multi-domain security policy system in IPv6 networks
[J]. J4, 2008, 35(2): 300-304.

[1]	董守玲;苏孟辉;林香鑫;李佳 . IPv6校园网拓扑自动节点获取与发现算法 [J]. J4, 2015, 42(2): 116-121.
[2]	唐军;裴昌幸;苏博. PMIPv6本地化路由机制研究[J]. J4, 2012, 39(1): 98-104.
[3]	张载龙;孙建;张顺颐;孙雁飞;李君. 一种用于实时业务的无缝切换方案[J]. J4, 2010, 37(2): 359-365.
[4]	潘乔;裴昌幸. 用于高速IPv6网络流量抽样测量的算法 [J]. J4, 2007, 34(3): 377-381.