STUDY ON PAD ENHANCED DESIGN IN IPSEC VPN AND ITS REALIZATION
IT Key · Computer Applications and Software · 2008
The complexity of IKE configuration,the flawed mechanism of certificates access or key management and the lack of association between SPD and LKE are the limitations of the logical structure for current IPSEC VPN.The paper introduces the concept of PAD(Peet Authorization Database) which provided the link between the security policy database SPD and internet key exchange IKE.A PAD-enhanced design was made against original IPSEC VPN architecture from management and security viewpoint and an appropriate implementation framework was given as well.