IKE authentication method, IKE initiating terminal, IKE response terminal and IKE authentication system

Abstract

The invention discloses an IKE authentication method, an IKE initiating terminal, an IKE response terminal and an IKE authentication system. The IKE initiating terminal generates a first authentication request containing an authentication type currently used by the IKE initiating terminal, and sends the first authentication request to the IKE response terminal; and the IKE response terminal obtains the authentication type used by the IKE initiating terminal after receiving the first authentication request, then generates a second authentication request according to the authentication type and sends the second authentication request to the IKE initiating terminal. It is obvious that, in the invention, the authentication type adopted by the IKE response terminal when generating the second authentication request is obtained from the first authentication request, that is, the authentication type adopted by the IKE response terminal is consistent with the authentication type adopted by the IKE initiating terminal, and the IKE initiating terminal certainly supports the authentication type. Therefore, by adopting the scheme provided by the invention, the IKE response terminal can adapt to authentication types in an intelligent manner for different IKE initiating terminals, thereby avoiding the problem that the authentication fails because the IKE initiating terminal does not support the authentication type adopted by the IKE response terminal.

Description

technical field [0001] The invention relates to the field of communication network security, in particular to an IKE (Internet Key Exchange, Internet Key Exchange Protocol) authentication method, an IKE initiating terminal, an IKE responding terminal and an IKE authentication system. Background technique [0002] With the rapid development of the Internet, the IP network has gradually become an indispensable tool in people's daily work and life, and the demand for security assurance of data transmission on the IP network is becoming increasingly strong. As we all know, IP network is an open network, and there is no security at all to use IP network for data communication without taking any measures. In order to meet the needs of obtaining secure communication on the IP network, the IPSec (IPSec, IP Security) working group of the Internet Engineering Task Force has developed a set of open network security protocols based on cryptography, collectively called the IPSec architec...

AI Technical Summary

Problems solved by technology

[0004] The main technical problem to be solved by the present invention is to provide an IKE authentication method, an IKE initiating terminal, an IKE responding terminal and an IKE authentication system to solve the problem of the authentication type adopted by the IKE initiating terminal in the existing IKE authentication process because the IKE initiating terminal does not support the IKE responding terminal. Problems that cause authentication to fail

Images