2003電子商務與數位生活研討會論文格式說明

Size: px

Start display at page:

Download "2003電子商務與數位生活研討會論文格式說明"

窕吉
6 years ago
Views:

1 IC PKI IPv6 龍練 IPv4 IPv6 了料了 IP Security IPSecIPSec 料 IKEInternet Key ExchangeIKE Key 行 AHAuthentication Header ESP Encapsulated Security PayloadIC 數料 PKI 力利 IC Private Key IC 行 IPv6 IPSec IC 讀更 IPv6 連 IPv6IPSecIKEAHPKIESPX IC 量料更 IC 不識識料料利 IC IPSec Private Key IC 更 IPv6 連 IPv6 IPSec 來 unix-like Microsoft Windows linux 來 linux IC 讀不行讀 IETF RFC Linux 都

2 IC PKI IPv6 IPSec IPv6 IPSec 來 Private Key IC RFC 2409Internet Key Exchange 行立來 IPv6 IPsec VPN 2. IPv4 Internet 路 IP IP IPv4IP version 年年來路路行數量來路諸路路路不路都 IPv4 IP 數量不 NATNetwork Address Translation CIDR Classless InterDomain Routing 了不來 IP 不了 NAT 降路 NAT 留 IP 3. IPv IPv6 歷 [14] 爲了 IPv4 了 1990 年 IETF Internet Engineering Task Force IPv4 IP 不更 1974 年 IPng Area IPv6 RFC 1752 The Recommendation for the IP Next Generation Protocol IETF ALEAddress Lifetime ExpectationWorking Group 料 IPv 年 2011 年更 IPv6 路 IPv 年來路 IPv6 列 Esnet DREN 都 IPv6 列 IPv6 來 - 2 -

3 力領 3.2. IPv6 Ipv4 IPv6 列 [6] [15] 量 IPv6 128 路 IPv6 樂數冷爐爐車車都 IPv6 路 IPv6 IP 理路精路率 [8] IPv6 40 bytes 度 IPv6 欄 8 IPv4 12 路理欄 IPv4 6 降 4 IPv6 IPv4 更率 IPv4 欄 Extension headers IPv6 6 IPv4 欄 2 欄 3 欄 [10] IPSec 料料都度了路 Flow labeling QoS 爲路 IPv6 了流 flow label 料流理 label MPLSMultiple Protocol Label SwitchIPv6 欄了 flow label Traffic Class 欄都 IPv6 路 IP 不 IPv4 Dynamic Host Configuration Protocol DHCP 了 IP IPv6 了 IPv4 爲狀 stateful autoconfiguration 了狀 IPv6 了爲狀 stateless autoconfiguration - 3 -

4 MAC 産 link-local IPv6 4. IPv6 -- IPSec IPSec 了來爲 IP UDP TCPIPSec 爲了 IP 料了了什 traffic IPSec 了不易不 IPSec 路 network security gateway 路料 [1] IPSec IPSec 列 AH Authentication Header ESP Encapsulation Security PayloadIKE Internet Key ExchangeTransform Method 來 [11] Architecture ESP Protocol AH Protocol Encryption Authentication DOI Key Exchange Policy 1 IPSec[9] IPSec AH[13] Authentication HeaderESP [12]Encapsulation Security Payload 兩來 ESP 爲 IP 料來料 AH 爲 IP 料料 ESP - 4 -

5 AH [7]IKE Internet Key Exchange 來爲 IPSec 參數爲 IPSec DOIDomain of Interpretation[5] 爲略 Policy 略爲兩 Transform Method 略不 IPSec [12] [13] IPSec AH Transport Mode AH Tunnel ModeESP Transport Mode ESP Tunnel Mode IPSec Tunnel Mode 都 ESPAH ESP Transport Mode Tunnel Mode 都不兩料不 I P IP Payload AH 理 ESP 理 IPv6 IPv6 AH (transport mode) 來 IPv6 來 IPv6 Hop-by-hop, destination,routing, AH 料 TCP Data Destination TCP Data options IPv6 (Tunnel Mode) IPv6 AH 來 IPv6 TCP Data 料 IPSec AHIPv6 理 - 5 -

6 IPv6 ESP (Transport Mode) 來 IPv6 Hop-by-hop, destination, ES Destination ESP TC Data ESP i th i ti Encrypte IPv6 ESP (Tunnel Mode) IPv6 Authenticate d New ext ESP 來 IPv6 Original ext TCP Data ESP ESP trailer authorization Encrypted Authenticated IPSec AHIPv6 理 4.3. 聯 [3] [4] Security Association 聯 SA IPSec Internet Key ExchangeIKE 立 SA IPSec IKE SA SADB 料 SA 兩立來 SA 了來料 IPSec 度 IPSec 都 SA 料 Security Association Database,SADB SADB 來 IPSec 來料 [3] SA 兩 A B ESP 行 A SA SAA ( out ) 來理料不 SA SAA (in ) 來理料 A SAA ( out ) B SAB ( in ) 參數說 A SAA ( in ) B SAB (out) 參數 SA 理 SA 都料都 SA A B AH ESP 行都來立 SA AH 理 SA ESP 理 SA 立 SA - 6 -

7 若略爲兩立 SA 便行 SA 便爲 SA bundles IKE 兩 phase 1 立了 ISAKMP SAphase 2 來爲 IPSec SA IPSec SA 不不 Main mode 數立 IKE SA Initiator ISAKMP Header & SA Proposal and Transform sets ISAKMP Header, KE, Nonce & optional ISAKMP Header, ID_i, Signature,& optional Certificate Message #2 Message #1 Message #3 Certificate Request Message #4 Message #5 Encrypted Message #6 Responder ISAKMP Header & Main Mode with Digital Signature Accepted SA Proposal and Transform set(only one) ISAKMP Header, KE Nonce, & optional Certificate Request ISAKMP Header, ID_r, Silgnature,& optional Cerificate IPSec 爲略料 Security Policy DatabaseSPD IPSec 理 SPD SADB 兩料略 IPSec 了兩了什什了理 IP - 7 -

8 SPD 都 pointer SA SA bundles 兩 5. IC PKI IPv IPv6 IPv6 IPSec BSD variants OpenBSDFreeBSDNetBSD KAME linux IPv6 IPSec ipsec-tools isakampd linux IABG frees/wan usagi Microsoft Windows IPv6 IPSec 不 Windows.net 2003 來說不不 ESP 不 IKE 來 SA linux 2.6 ipsec-tools 5.2. PKI 1976 年 Diffie Hellman 了 D-H 了不兩金 RSA 率 Key 易金立都聯來 Certification AuthorityCA 說 CA 了 CA CA 理金 Public Key Infrastructure PKI 金料 CA PKI 都來 CA Windows IIS OpenSSLOpenCA OpenSSL linux OpenSSL 說易 - 8 -

9 5.3. linux compile 2.6 IPv6IPSec ipsec.conf racoon.conf 見說 IPSec IC 讀 IPSec 讀 SPDSecurity Policy Database 行 IPSec INTERNET IPv Key IC IPSec VPN SSH Communications Security Corp Key IC 來 auto config VPN IC 料 linux 讀 Windows 異 Linux 讀六讀 IC 利 OpenSSL 來 IC Private Key 讀 ezstatus = EzConnectCard( ezhandle,0, - 9 -

10 EZSMC_PROTOCOL_T0 EZSMC_PROTOCOL_T1 &ulcurrentprotocol, &statr ); // printf("%send",recvbuffer); fp=fopen("ipsecrets","wb"); fwrite(recvbuffer,sizeof(char),1000,fp); 六讀 ICPrivate Key IPSec 立了 SA SPD SA SPD IPSec 立 SASPD Etheareal IPSec 理 AH ESP IP

11 IPSecEthereal IC IPv6 IC IPSec IPv6 連更 Key IC Key 讀 IC 不說便 VPN 更易理 RFC 2409IKE 益 IC 理更 IPv6 IPSec 料更 6. 論 IC 讀 Private Key 路 X.509 路不 linux 2.6 IPv6 IPSec 了 IPv6 IPSec 來臨例 IC 度 IPv6+IPSec+IC 來路來更領

12 參 1. Alcatel Networks Corp. Understanding the IPSec Protocol Suite 2. Casey Wilson Peter Doak Creating and Implementing Virtual Private Networks: The All-encompassing Resource for Implementing VPNs st editionusa The Coriolis Group372 pages 3. D. Harkins D. CarrelRFC 2409 The Internet Key Exchange (IKE)IETF D. Maughan M. Schertler M. Schneider and J. Turner RFC 2408 Internet Security Association and Key Management Protocol RFC 2408IETF D. PiperRFC 2407 The Internet IP Security Domain of Interpretation for ISAKMPIETF Joseph DaviesUnderstanding IPv st editionusamicrosoft Press 544 pages 7. Naganand Doraswamy Dan Harkins Ipsec: The New Security Standard for the Internet Intranets and Virtual Private Networks20032nd editionusa Prentice Hall PTR 8. R. HindenS. DeeringRFC 2373 IP Version 6 Addressing Architecture IETF R. Thayer N. Doraswamy and R. Glenn RFC 2411 IP Security Document RoadmapIETF S. DeeringR. HindenRFC 2460 Internet Protocol Version 6 (IPv6) Specification S. Kent R. AtkinsonRFC 2401 Security Architecture for the Internet ProtocolIETF S. Kent and R. Atkinson RFC 2406 IP Encapsulating Security Payload IETF S. Kent and R. AtkinsonRFC 2402 IP Authentication Header IETF Silvia HagenIPv6 essentials20021st editionusa360 pages 15. IP pp