基于IEEE 802.1x的嵌入用户身份标识的IPv6地址生成方案

doi:10.11959/j.issn.1000-0801.2019289

Abstract

Abstract:

Embedding extensible user identities into IPv6 addresses not only provides the possibility of tracing the user identity and finely controlling the user behavior,but also helps to improve the security,auditability and credibility of the Internet.Current schemes that embed user identity within IPv6 address are hard to deploy in practice due to the complexity of DHCPv6 client development or the complicated management of temporary address.Considering the sequential logic between identity authentication and address allocation,a IEEE 802.1x-based user identity-embedded IPv6 address generation scheme was proposed.By conducting identity authentication using layer-2 mechanisms and then assigning IPv6 addresses,this scheme decoupled the process of identity authentication and address allocation,and avoided the limitation of developing new extended DHCPv6 clients for each operating system and maintaining temporary address leases on DHCPv6 servers,which was more deployable.

Key words: user identifier, IEEE 802.1x, DHCPv6

CLC Number:

TP393

Peng KUANG,Ying LIU,Lin HE,Gang REN. IEEE 802.1x-based user identity-embedded IPv6 address generation scheme[J]. Telecommunications Science, 2019, 35(12): 15-23.

Figures/Tables 11

References 13

[1]	叶水勇 . 基于网络接入认证对终端设备的管控研究[J]. 电力信息与通信技术, 2018,16(5): 41-46.
	YE S Y . Research on management and control of terminal equipment based on network access authentication[J]. Electric Power Information and Communication Technology, 2018,16(5): 41-46.
[2]	WU J , BI J , LI X ,et al. A source address validation architecture (sava) testbed and deployment experience[R]. 2008.
[3]	WU J , BI J , BAGNULO M ,et al. Source address validation improvement (SAVI) framework[R]. 2013.
[4]	ANDERSEN D G , BALAKRISHNAN H , FEAMSTER N ,et al. Accountable internet protocol (AIP)[C]// ACM SIGCOMM 2008 Conference on Data Communication,August 17-22,2008,Seattle,WA,USA. New York:ACM Press, 2008: 339-350.
[5]	NAYLOR D , MUKERJEE M K , STEENKISTE P . Balancing accountability and privacy in the network[J]. ACM SIGCOMM Computer Communication Review, 2014,44(4): 75-86.
[6]	LEE T , PAPPAS C , BARRERA D ,et al. Source accountability with domain-brokered privacy[C]// The 12th International on Conference on emerging Networking Experiments and Technologies,December 12-15,2016,Irvine,California,USA. New York:ACM Press, 2016: 345-358.
[7]	LIU Y , REN G , WU J P ,et al. Building an IPv6 address generation and traceback system with NIDTGA in address driven network[J]. Science China Information Sciences, 2015,58(12): 1-14.
[8]	LIU Y , REN G , WU J ,et al. Building an IPv6 address generation and traceback system with NIDTGA in address driven network[J]. Science China Information Sciences, 2015,58(12): 1-14.
[9]	李智涛, 刘莹, 任罡 . IPv6地址生成系统基于Web portal的无客户端迁移方案[J]. 东南大学学报(自然科学版), 2017(S1): 80-85.
	LI Z T , LIU Y , REN G . Non-client migration scheme for IPv6 address generation system based on Web portal[J]. Journal of Southeast University(Natural Science Edition), 2017(S1): 80-85.
[10]	李晓伟, 杨邓奇, 陈本辉 ,等. 基于生物特征和口令的双因子认证与密钥协商协议[J]. 通信学报, 2017,38(7): 89-95.
	LI X W , YANG D Q , CHEN B H ,et al. Two-factor authenticated key agreement protocol based on biometric feature and password[J]. Journal on Communications, 2017,38(7): 89-95.
[11]	DROMS R , BOUND J , VOLZ B ,et al. Dynamic host configuration protocol for IPv6 (DHCPv6)[R]. 2003.
[12]	THOMSON S , NARTEN T , JINMEI T . IPv6 stateless address autoconfiguration[R]. 2007.
[13]	HALWASIA G , BHANDARI S , DEC W . Client link-layer address option in DHCPv6[R]. 2013.

Metrics

Recommended 0

No Suggested Reading articles found!

主机	NID	IPv6
Windows10	80000b1cc5	2402:f000:3:481:a203:72d0:336:366d
CentOS	80000d86b0	2402:f000:3:481:41d9:9d81:7d58:6cfa
iOS	8000000001	2402:f000:3:481:a149:332b:60ae:9962

方案	耗时
原始DHCPv6	1 026 ms
地址生成内嵌方案	1 067 ms
地址生成外放方案	2 125 ms

方案	是否需要开发DHCPv6客户端	是否需要维护临时地址租约	网络设备需要支持
扩展DHCPv6	是	否	SAVI
二次地址分配	否	是	SAVI
IEEE 802.1x方案	否	否	SAVI、IEEE 802.1x

操作系统	Windows	Linux	MAC OS X	iOS	Android
支持情况	Windows XP起均支持	主流发行版均支持	MAC OS X 10.3起均支持	iOS 2.0起均支持	Android 1.6起均支持

网络设备支持情况	AP	AC	交换机
华为	支持	支持	支持
华三	支持	支持	支持
锐捷	支持	支持	支持
Cisco	支持	支持	支持

IEEE 802.1x-based user identity-embedded IPv6 address generation scheme

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 11

References 13

Related Articles 15

Metrics

Recommended 0

[1]	Kaihui GAO, Dan LI. Data center networks with performance guarantee: a survey [J]. Telecommunications Science, 2023, 39(6): 1-21.
[2]	Yu LI, Zhaozhao LI, Ping LYU, Qinrang LIU. Design on the full-dimensional reconfiguration polymorphic network switching chip architecture [J]. Telecommunications Science, 2023, 39(6): 22-32.
[3]	Jiong LI, Yuxiang HU, Pengshuai CUI, Le TIAN, Yongji DONG. Research on incremental deployment mechanism of network modality for polymorphic network environment [J]. Telecommunications Science, 2023, 39(6): 33-43.
[4]	Zehua GUO, Haowen ZHU, Tongwen XU. Network modal innovation for distributed machine learning [J]. Telecommunications Science, 2023, 39(6): 44-51.
[5]	Aihua LIU, Hanguang LUO, Jianzhong WEN, Zhiguo ZHAN. Research on isolated-forwarding technology oriented polymorphic network [J]. Telecommunications Science, 2023, 39(6): 52-60.
[6]	Tao ZOU, Huifeng ZHANG, Wanxin GAO, Qi XU, Congqi SHEN, Jun ZHU, Zhongxia PAN, Xingchang GUO. Research on polymorphic network application technology oriented intelligent manufacturing [J]. Telecommunications Science, 2023, 39(6): 61-72.
[7]	Yaoyu HE, Chao ZHANG. Airworthiness analysis of low earth orbit satellite communication technology for UAV application [J]. Telecommunications Science, 2023, 39(6): 96-104.
[8]	Fubin WANG, Shiyuan SUN, Menghui WANG, Fang YANG, Xiaofei WANG, Jian SONG. Key technologies of visible light communications with multiple LEDs [J]. Telecommunications Science, 2023, 39(5): 3-10.
[9]	Tianyang MA, Xiongbin CHEN, Yiwu XU. Zero power light labeling based on visible light communication [J]. Telecommunications Science, 2023, 39(5): 20-27.
[10]	Sicong LIU, Danping SU, Tiankuo WEI, Xianyao WANG. Multi-node cooperation based robust visible light intelligent positioning [J]. Telecommunications Science, 2023, 39(5): 28-41.
[11]	Jiawei HU, Xiaoqian LIU, Xinke TANG, Yuhan DONG. Trajectory planning of UUV-assisted UWOC systems based on DQN [J]. Telecommunications Science, 2023, 39(5): 42-47.
[12]	Xiaoqian LIU, Xinke TANG, Yuhan DONG. Spatial channel modeling for MIMO underwater wireless optical links [J]. Telecommunications Science, 2023, 39(5): 48-56.
[13]	Sihong ZHANG, Jian ZHANG. Impact and countermeasures of generative AI represented by ChatGPT on the telecom industry [J]. Telecommunications Science, 2023, 39(5): 67-75.
[14]	Xiaoliang MA, Ying LIU, Dequan DU, Lingling AN. Key technologies and development trends of intelligent customer service for operators [J]. Telecommunications Science, 2023, 39(5): 76-89.
[15]	Xinxin TANG, Xuewen ZENG, Zhiyuan LING, Lei SONG. Overview of programmable data plane technology [J]. Telecommunications Science, 2023, 39(4): 1-16.