一种面向Portal认证的IPv6可信地址分配机制

doi:10.11959/j.issn.1000-0801.2019288

Abstract

Abstract:

As the network scale grows,it is especially important to fine-tune the network.In the next-generation Internet,embedding the user's trusted identity into the IPv6 address suffix to assign trusted addresses can further improve the traceability of network behavior.At present,many studies have attempted to embed the user’s identity information into IPv6 addresses based on portal authentication and DHCPv6,but the modification of DHCPv6 makes it not transparent to the terminal.A mechanism for trusted address assignment in IPv6 networks based on portal authentication was proposed.The collaboration between servers and software-defined networking (SDN) technology was used to realize the indirect assignment of IPv6 trusted addresses.Finally,a prototype system was implemented and its feasibility and performance were evaluated in the network of Nanjing Telecom in Jiangsu.The results show that the mechanism only brings little overhead and it is transparent to the terminal.

Key words: address assignment, trusted address, IPv6, software defined networking

CLC Number:

TP393

Jiang ZHOU,Hewu LI. A general way to assign IPv6 trusted address under portal authentication[J]. Telecommunications Science, 2019, 35(12): 8-14.

Figures/Tables 10

References 12

[1]	Kaspersky DDoS intelligence report for Q3[EB]. 2018.
[2]	WU J , BI J , BAGNUL M ,et al. Source address validation improvement (SAVI) framework[R]. 2013.
[3]	WU J , BI J , LI X ,et al. A source address validation architecture (sava) testbed and deployment experience[R]. 2008.
[4]	颜敏, 尹曾, 杨熙 . 面向中小企业随选网络的自助服务平台portal研发实践[J]. 电信科学, 2017,33(12): 170-177.
	YAN M , YIN Z , YANG X . R＆D practice of self-service platform portal for small and medium-sized enterprises[J]. Telecommunications Science, 2017,33(12): 170-177.
[5]	ANDERSON D , BALAKRISHNAN H , FEAMSTER N ,et al. Accountable internet protocol[Z]. 2008:
[6]	LEE T , PAPPAS C , BARRERA D ,et al. Source accountability with domain-brokered privacy[C]// The 12th International on Conference on emerging Networking Experiments and Technologies,December 12-15,2016,Irvine,California,USA. New York:ACM Press, 2016: 345-358.
[7]	LIU Y , REN G , WU J P ,et al. Building an IPv6 address generation and traceback system with NIDTGA in address driven network[J]. Science China Information Sciences, 2015,58(12): 1-14.
[8]	李智涛, 刘莹, 任罡 . IPv6地址生成系统基于Web portal的无客户端迁移方案[J]. 东南大学学报(自然科学版), 2017(S1): 80-85.
	LI Z T , LIU Y , REN G ,et al. Non-client migration scheme for IPv6 address generation system based on web portal[J]. Journal of Southeast University (Natural Science), 2017(S1): 80-85.
[9]	周端奇, 毕军, 姚广 . 基于 IPv6 源地址验证的一种可信身份系统[J]. 通信学报, 2014,35(Z1): 20-26.
	ZHOU R Q , BI J , YAO G . Trustworthy identity system based on IPv6 source address validation[J]. Journal on Communications, 2014,35(Z1): 20-26.
[10]	DROMS R , BOUND J , VOLZ B ,et al. Dynamic host configuration protocol for IPv6 (DHCPv6)[R]. 2003.
[11]	THOMSON S , NARTEN T , JJINMEI T . IPv6 stateless address autoconfiguration[R]. 2007.
[12]	IETF.IEEE 802.1x remote authentication dial in user service (RADIUS) usage guidelines:RFC 3580[S]. 2003.

Metrics

Recommended 0

No Suggested Reading articles found!

参数	类型（必填/可选）
Link_addr	string（必填）
IPv6_prefix	string（必填）
IPv6_suffix	string（必填）
Identifier	string（必填）
Hash_code	string（可选）

参数	类型（必填/可选）
Status	string（必填）
Message	string（必填）
Identifier	string（必填）
IPv6_trusted	string（必填）

终端操作系统	可信身份告知	SDN转换流表下发	可信地址通信
Windows 10	√	√	√
Ubuntu 16.04	√	√	√
MacOS 10.14.6	√	√	√
Android 9	√	√	√
iOS 12	√	√	√

测试项目	时间开销
Portal认证	1 416 ms
Portal服务器告知可信身份	239 ms
总和	1 655 ms

测试项目	时间开销
可信地址及流表项生成	5.18 ms
流表项下发	32.41 ms
总和	37.59 ms

A general way to assign IPv6 trusted address under portal authentication

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 10

References 12

Related Articles 15

Metrics

Recommended 0

[1]	Jianguo LIU, Hao QU, Hongming HUANG, Zhidan ZHU. Research on IPv6+ intelligent backbone network technology [J]. Telecommunications Science, 2023, 39(5): 155-166.
[2]	Xu ZHOU, Sheng JIANG, Jie ZHANG, Bo LEI, Xiuli ZHENG, Taixin LI. Ubiquitous IP protocol system [J]. Telecommunications Science, 2021, 37(10): 47-54.
[3]	Chengli ZHANG, Xiaorong HE, Weifang SONG. Privatize modification of broadband dual IP stack on cloud platform [J]. Telecommunications Science, 2021, 37(10): 162-170.
[4]	Hui TIAN,Zheng WEI. IPv6+ innovation of the NGI [J]. Telecommunications Science, 2020, 36(8): 3-10.
[5]	Zhenbin LI,Feng ZHAO. Standard system of IPv6+ technologies [J]. Telecommunications Science, 2020, 36(8): 11-21.
[6]	Lin HE,Peng KUANG,Shicheng WANG,Ying LIU,Xing LI,Shuping PENG. Application-aware IPv6 networking [J]. Telecommunications Science, 2020, 36(8): 36-42.
[7]	Tianjiao CHEN,Jiang LIU,Tao HUANG. Application of artificial intelligence in network orchestration system [J]. Telecommunications Science, 2019, 35(5): 9-16.
[8]	Li XIAO,Zhilin YUAN,Chengpeng FU,Weidong MA. Intelligent metro optical networks and key optical components [J]. Telecommunications Science, 2019, 35(4): 33-40.
[9]	Dongshan WANG,Yue MA,Yan LI,Jian GAO,Zhibin YIN. Coordinated and unified control technology of IP and optical transport network for power services [J]. Telecommunications Science, 2019, 35(3): 116-121.
[10]	Guo LI,Lin HE,Guanglei SONG,Zhiliang WANG,Jiahai YANG,Zimu LI. Survey on IPv6 address scanning technology based on seed sources [J]. Telecommunications Science, 2019, 35(12): 24-37.
[11]	Wei WANG. IPv6 based SD-WAN deployment [J]. Telecommunications Science, 2019, 35(12): 38-42.
[12]	Xin ZHANG. Research and application of the IBN for the next generation internet [J]. Telecommunications Science, 2019, 35(12): 43-48.
[13]	Fengchao FU,Peng WANG,Yu MAO,Yongmei HUANG,Xiaobing GAO,Aihua ZHANG,Guoqiang LIN. Realization of vOLT and development trend [J]. Telecommunications Science, 2018, 34(7): 157-161.
[14]	Yuan ZHANG. Architecture and key technologies of network on demand for small and medium enterprises [J]. Telecommunications Science, 2018, 34(7): 7-14.
[15]	Cui ZHONG,Lei WANG,Xing LUO. SDN solutions for cloud data center [J]. Telecommunications Science, 2018, 34(7): 15-22.