关键词: 区域网络化制造 身份认证 密钥协商 IPSec 消息重放攻击

Abstract:

As for the present requirements of the fully distributed function schema for regional networked manufacturing systems, we propose a scheme of identity  authentication and key agreement based on discrete logarithm. The scheme is independent from the online certification management center, so it can adap t to the present fully distributed service schema harmoniously. The scheme incorporates the Virtual Private Network（VPN） by reconstructing the interna  al module of the IPSec framework. The security analysis shows the solution can resist message replay attacks and man-in-the-middle attack effectively. T  he scheme have high efficiency in communications by performance tests. So they can maintain the information security of regional networked manufacturing systems effectively.

Key words: （regional networked manufacturing system, identity authentication;key agreement, IPSec;message repl , ay attack）