摘要： 在对IKE进行分析的基础上，讨论了怎样在安全密钥协商过程中对发起者身份进行保护，并给出了具体实施步骤。针对IKE中在标准公钥加密认证中发起方也可能有多个公钥，而响应方并没有具体指出使用哪个公钥的问题，提出修改建议，使发起方通知对方使用自己哪个公钥进行解密。

关键词: IKE, IPSec, 身份保护, 认证, 安全关联

Abstract: How to protect the initiator identifier during the secure key negotiation based on the analysis of IKE is discussed, and the concrete implementation is given. At last, a defect of security in IKE protocol is pointed out, twhich public key is used in IKE phase one authenticated with public key encryption, then a modified suggestion is proposed to solve the problem.

中图分类号: 

• TN918.1