Research on the Model of IPSec over WLAN and Improving of Key Exchange

Contrast with the current WLAN (wireless local area network) security mechanism worked in data link layer. IPSec over WLAN worked in IP layer has his superiorities. But as a security mode originally used in wired network, IPSec uses IKE (Internet key exchange protocol) as default that need a large number of computation is not fit for mobile devices of WLAN. Besides, IPSec protocol does not fit mobile IP perfectly. Aiming at the limitation that IPSec applies in WLAN, the paper renames the architecture of IPSec over WLAN, and processes IKEv2 over WLAN adopting EAP (expansion authentication protocol) to reduce the computation cost of data link layer. At last it puts forward key exchange protocol on the cross-security domain of mobile IP.