AH认证报头协议是IPSec的一部分。该协议主要是为IP数据包提供信息源的身份认证,以及数据完整性的检测,同时,它还具有抗重播功能。文章通过对AH协议的组成、认证算法以及安全性的分析,指出了其存在的弱点与不足,提出了改进方法。 AH authentication header protocol is part of IPSec. The agreement is mainly for IP packets provide information source authentication, as well as data integrity testing, at the same time, it also has anti-replay function. By analyzing the composition of AH protocol, authentication algorithm and security, the paper points out its weaknesses and shortcomings, and proposes an improved method.