摘要： 动态主机配置协议(DHCP协议)很好地解决了网络地址的管理和现有网络地址的紧缺问题。但由于DHCP协议本身缺乏安全控制功能，使得地址分配过程具有安全隐患。该文提出一种基于用户访问控制机制和DH加密算法的DHCP协议改进方案，论述了改进协议在地址请求、密钥协商、地址分配、地址释放4个阶段的具体实施方案，分析了改进协议的安全性能。为安全性要求高的业务应用提供了参考依据。

关键词: DHCP协议, DH加密算法, 用户认证机制

Abstract: Dynamic host configuration protocol (DHCP protocol) has successfully solved the management and insufficiency problem of network address. But the lack of security control in DHCP protocol makes insecurity in address distribution. This paper presents an improved DHCP protocol based on user visiting control mechanism and DH encryption algorithm, discusses its concrete implementation in the four stages of address requiring, secret key negotiating, address distributing and address releasing, and analyses its security performance. The work in this paper offers reference to applications with high security requirement.

Key words: DHCP protocol, DH encryption algorithm, User identification mechanism