ML-IKE: A Multilayer IKE Protocol for TCP Performance Enhancement in Wireless Networks
To solve the conflict between TCP accelerating technology based on PEP middle node and IPSec protocol used in the Satellite Network, NASA and the Hughes Research Laboratory (HRL) each independently proposed a solution named Multilayer IPsec protocol which can integrate IPSec with TCP PEPs. The probleM is: Traditional IKE protocol cant work with Multilayer IPSec protocol. In this study, the traditional IKE main mode and quick mode are enhanced for layered IPSec protocol, and an improved layered key distribution protocol: ML-IKE is proposed. This key distribution protocol is used for key exchange between peers and middle node, so that different nodes have different security associations (SA), and different security associations correspond to different IP packet fields, so different SA nodes have different authorization to different IP packet fields. ML-IKE protocol is suitable for layered IPSec, thus layered IPSec can be used for automatic key distribution and update.
ZHANG Ya-Hang CHENG Bo-Wen QING Si-Han ZOU Guang-Nan WEN Wei-Ping
Space Star Technology Co.,Ltd, Beijing 100081, China Department of Information Security, SSM, Peking Space Star Technology Co.,Ltd,Beijing 100081, China Department of Information Security, SSM, Peking Department of Information Security, SSM,Peking University, Beijing 100084,China Space Star Technology Co.,Ltd, Beijing 100081, China Department of Information Security, SSM, Peking University, Beijing 100084, China
国际会议
International Conference on Space Information Technology 2009(2009年第三届空间信息技术国际会议)
北京
英文
1-9
2009-11-26（万方平台首次上网日期，不代表论文的发表时间）