This paper analyses the main mode exchange of IKE with digital signature,pointing out the existing security problem about identity protectionof the initiator,which also can be found in IKEv2 with digital signature.

通过对基于数字签名的IKE主模式认证机制的分析 ,指出了协议中存在的对协议发起方身份保护的安全问题 ,这一问题同样存在于IKEv2的数字签名认证中 。

New modifications ar e proposed to alleviate the identity protectiondefects in Internet Key Exchange( IKE)protocol with digital signature authentication method and pre-shared key a uthentication method in main mode,compared with previous works which protect on ly one party,new modifications protect both identities of the two parties,rem aining the framework of ISAKMP and the symmetry of IKE.

该文从身份保护的角度出发,对互联网密钥交换(IKE)协议主模式下数字签名认证方式和主模式下预共享密钥认证方式中存在的身份保护缺陷进行了分析,提出了新的修改建议。

Then it discusses the function of identity protection, and how to implement the identity protectionin key exchange protocol, which protects the participants identity.

讨论了身份保护的作用,以及在密钥交换协议中应如何实现身份保护,来保护参与者的身份。

Lack of the Right to judicial remedy of Suspects physical protectionis not suitable for China which makes great efforts to construct monocracy country.

犯罪嫌疑人人身保护的司法救济权利的缺失对正为构建法治国家而努力的中国而言是不相适宜的。

In order to perfect mechanism of witness testifying before the court, firstly, we should establish the personal protectionsystem for witness;secondly, we should also stipulate the legal sanction clause to witness who refuses to testify before the court.

完善证人出庭作证制度 ,首先要确立对证人的人身保护制度 ,其次要规定证人拒绝出庭作证的法律制裁条款。