Design of IKEv2 protocol based on the PKI/OCSP

IKE protocol is an important part of the IPSec protocol suite meanwhile it is a prerequisite and guarantee for the IPSec VPN secure transmission. Since IKEv2 is a proposed technology, it is widely used in professional fields. With study of the IKEv2 protocol, the Public Key Infrastructure (PKI) system is introduced in this paper. And based on the data communication features, Online Certificate Status Protocol (OCSP) is combined with the IKEv2 protocol and the improved IKEv2 is designed with PKI/OCSP so that the efficiency and security of the IPSec VPN system is increased.