The invention discloses an IPv6 (
Internet Protocol Version 6) network node identity security protecting method, which comprises the following steps: injecting a group of keys K1 into an initial network entry
router of a node A and the node A, and storing, by the node A, a
unicast IP address of the initial network entry
router; acquiring, by the node A, a temporary sub-net
IP address; sending, by the node A, an
Internet access request message to a sub-net I
router by using the temporary sub-net
IP address; acquiring, by the sub-net I router, the key K1 of the initial network entry router; encrypting, by the sub-net I router, a unique PIN code of the sub-net I router and a random number by adopting the key K1, and feeding back to the node A; and decrypting, by the node A, the encrypted cyphertext X by adopting the key K1, and calculating the decrypted correct PIN code, the random number and an MAC (Multi-
Access Control) address of the node A to acquire an interface identifier of a globalunicast IP address. According to the IPv6 network node identity security protecting method, the latter 64-bit address of the IPv6
unicast address of the node is obtained by security application and combined calculation, and the identity of an IPv6 network node is effectively hidden.