新型互联网地址转换协议及其安全机制的设计与实现

发布时间：2018-01-15 21:22

本文关键词：新型互联网地址转换协议及其安全机制的设计与实现　出处：《北京交通大学》2017年硕士论文　论文类型：学位论文

更多相关文章： 地址转换 安全机制 数据包 选项 CGID

【摘要】：由于传统TCP/IP网络体系存在路由可扩展性差、移动性差、安全性不佳等问题,新型互联网采用身份与位置分离的思想,引入接入标识和路由标识的概念,实现身份与位置双重属性分离。在这种新型互联网体系架构中,如何实现标识与物理链路地址转换是研究的基础问题之一。本论文首先研究了新型互联网的网络体系结构、单播标识通信机制及连通性通信机制,并分析了现有地址转换系统面临的安全问题。在此基础上,设计并提出了一种具有良好可扩展性的地址转换通信机制。本论文设计了地址转换协议的数据包格式、四种选项及地址转换缓存表格式,并且详细叙述了两种不同场景下的通信机制,满足实体间互联通信。并针对存在的安全性问题提出了对数据源进行核实验证的机制,确保数据包来源可信,从而防御地址转换过程可能遇到的攻击。基于设计的地址转换协议及其安全机制,论文提出了模块化的实现方案。分别从基础协议栈实现、地址转换机制实现、安全通信机制实现三个方面对设计的内容进行内核编码实现。基础协议栈为本协议内容所封装在的上层数据包在内核代码当中的实现;地址转换机制的实现从协议的初始化,进入处理流程,符合协议定义内容三个方面进行代码实现;安全通信机制分别从CGID合成模块,RSA数字签名模块,验证模块三个方面进行实现。最后,论文对新型互联网地址转换协议及其安全机制进行互联互通测试和安全性测试,测试结果表明系统的实现满足地址转换协议的设计,并能保证安全通信。
[Abstract]:Due to the problems of poor routing scalability, poor mobility and poor security in the traditional TCP/IP network system, the new Internet adopts the idea of identity and location separation. The concept of access identification and routing identification is introduced to separate identity from location. How to realize the identity and physical link address translation is one of the basic problems. Firstly, this paper studies the new Internet network architecture, unicast identity communication mechanism and connectivity communication mechanism. The security problems faced by the existing address translation system are also analyzed. This paper designs and proposes an address translation communication mechanism with good scalability. This paper designs the packet format of address translation protocol, four options and the table form of address translation cache. And the communication mechanism in two different scenarios is described in detail to satisfy the inter-entity communication. A verification mechanism for the data source is proposed to ensure that the source of the data packet is credible in view of the existing security problems. Based on the design of address translation protocol and its security mechanism, this paper proposes a modular implementation scheme, respectively from the basic protocol stack implementation, address translation mechanism implementation. The implementation of the security communication mechanism includes three aspects: the implementation of kernel coding for the content of the design, and the implementation of the basic protocol stack in the kernel code for the upper data packet encapsulated in the content of this protocol; The realization of the address translation mechanism includes three aspects: initializing the protocol, entering the processing process, and implementing the code in accordance with the protocol definition. The secure communication mechanism is implemented from three aspects: CGID synthesis module, CGID digital signature module and verification module. Finally. This paper tests the interconnection and security of the new Internet address translation protocol and its security mechanism. The test results show that the implementation of the system meets the design of the address translation protocol and can ensure secure communication.
【学位授予单位】：北京交通大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP393.0

【相似文献】