基于Rabin签名的一种低带宽域间路径验证方法

发布时间：2018-02-03 20:22

本文关键词： 带宽 RSA 聚合签名路径证明 Rabin签名　出处：《小型微型计算机系统》2013年10期 　论文类型：期刊论文

【摘要】：带宽消耗大是域间路径验证机制实际部署实施的主要障碍之一.现有方案基本上都使用基于RSA的聚合签名来降低路径证明的容量,以减少多个签名所造成的带宽消耗.为了保证聚合签名的安全性,相关参数的设置将导致验证过程中计算量大幅度提高.为降低带宽消耗的同时降低验证计算量,本文将Rabin签名引入验证机制的设计,使用Rabin聚合签名创建路径证明并给出了相应的创建和验证算法,同时克服了不同用户使用不同模数值带来的签名唯一性问题.使用本方法,路由通告传播过程中带来带宽增量平均值为通常机制约1/5,路径证明验证式中幂运算仅需进行一次乘法,在降低带宽消耗的同时大幅度降低验证计算量,提高了验证机制的效率.
[Abstract]:Large bandwidth consumption is one of the main obstacles to the actual deployment of inter-domain path verification mechanisms. Existing schemes basically use aggregate signatures based on RSA to reduce the capacity of path proof. In order to reduce the bandwidth consumption caused by more than one signature, in order to ensure the security of the aggregate signature, the setting of the relevant parameters will result in a significant increase in the computation amount in the verification process. This paper introduces Rabin signature into the design of verification mechanism, uses Rabin aggregate signature to create path proof and gives the corresponding creation and verification algorithm. At the same time, it overcomes the problem of signature uniqueness caused by different users using different modulus values. The average value of bandwidth increment in the process of routing notification propagation is usually 1 / 5 restricted by machine. The power operation in the path proof verification only needs to be multiplied once, which reduces the bandwidth consumption and greatly reduces the amount of verification computation, and improves the efficiency of the verification mechanism.
【作者单位】：江西财经大学信息管理学院;江西省电子商务工程技术研制中心;
【基金】：国家自然科学基金项目(10961013/A010206,61262010)资助江西省教育厅科技项目(GJJ12735)资助江西省自然科学基金项目(20132BAB201036)资助
【分类号】：TP393.08
【正文快照】： 1引言BGP协议是现有域间路由事实上的标准协议[1-2].BGP协议缺乏对源自治系统和域间路径AS_PATH的认证机制[3].对源自治系统认证的缺乏使IP前缀劫持成为可能[3-6],对AS_PATH认证的缺乏使攻击者可以对域间路径进行篡改而不被发现[3,7].为防范域间路径篡改,目前公认AS_PATH验证

【参考文献】