Research of IPsec Based on Implicit Security Label

(Abstract )Focusing on the problem of communication with traditional IPsec in Multi-level Security(MLS) network, this paper presents a solution about IPsec based on implicit security label. This solution solves the problem by adding implicit security label in IPsec, improving the processing of IKE, ESP protocol, binding the IPsec SA and implicit security label, selecting different algorithms and keys based on different information. It sets up different levels of labeled tunnels dynamically, and realizes the isolation of different levels of data stream and security communication in MLS networks.