使用DK机制的动态地址分配安全认证方法

发布时间：2018-03-18 01:15

本文选题：动态主机配置协议(DHCP)　切入点：安全认证　出处：《计算机科学与探索》2017年03期 　论文类型：期刊论文

【摘要】：动态主机配置协议(dynamic host configuration protocol,DHCP)动态管理分配IP地址,提升地址的使用率,得到了广泛的使用,但是由于该协议安全机制薄弱,致使其潜在的安全漏洞如非法DHCP服务器、Mac地址伪装、重放攻击、Do S攻击等日益凸显。提出了基于DK机制的安全认证方法(security authentication model based on dynamic key,DK_SAM),该方法结合系统当前时间计算一次性密钥,并用该密钥Hash计算消息认证码,最终DHCP实体通过验证自定义Option180中的认证码达到安全认证的目的。实验表明,DK_SAM方法在保证安全特性的同时具有较高的性能。
[Abstract]:Dynamic host configuration protocol (DHCP) dynamically manages and allocates IP addresses, improves the usage rate of addresses and is widely used. However, due to the weak security mechanism of the protocol, the potential security vulnerabilities such as the male-like address camouflage of the illegal DHCP server are caused. This paper presents a security authentication model based on dynamic key DKS algorithm based on DK mechanism. The method calculates the one-off key and calculates the message authentication code with the Hash key combined with the current time of the system. Finally, the DHCP entity achieves the purpose of security authentication by verifying the authentication code in the custom Option180.
【作者单位】：国防科学技术大学计算机学院;
【基金】：国家自然科学基金No.61379148~~
【分类号】：TP393.08

【相似文献】