Abstract: A NDIS-IMD IPSec model based on the intermediate driver(IMD) of network driver interface specification(NDIS) is proposed. It is used to resolve such problems as source code lacking and flexibility restriction of IPSec in Windows 2000 OS. The NDIS-IMD IPSec consists of IPSec IMD module and application layer module, which communicate each other based on Windows driver model (WDM) mechanism. This IPSec can provide flexible and personalized IP security services for Windows 2000 users’ end-to-end communication.

Key words: IP security protocol(IPSec), network driver interface specification(NDIS), intermediate driver, Windows driver model

摘要： 提出了一种基于网络驱动程序接口规范中间层驱动程序的NDIS-IMD IPSec模型，用于解决Windows 2000操作系统自带的IPSec缺乏源代码支持和灵活性有限的问题。NDIS-IMD IPSec由IPSec中间层驱动模块和应用层模块构成，它们之间通过Windows驱动程序模型机制完成信息交互，为Windows2000操作系统用户的端到端通信提供灵活、个性化的IP安全服务。

关键词: IP安全协议, 网络驱动程序接口规范, 中间层驱动程序, Windows驱动程序模型

CLC Number: 

• TP393.08