基于IPv6源地址验证的一种可信身份系统

doi:10.3969/j.issn.1000-436x.2014.z1.005

Journal on Communications ›› 2014, Vol. 35 ›› Issue (Z1): 20-26.doi: 10.3969/j.issn.1000-436x.2014.z1.005

• Cyberspce Security • Previous Articles Next Articles

Trustworthy identity system based on IPv6 source address validation

Duan-qi ZHOU^1,^2,³,Jun BI^1,^2,³,Guang YAO^1,^2,³

¹ Institute for Network Sciences and Cyberspace,Tsinghua University,Beijing 100084,China
² Department of Computer Science,Tsinghua University,Beijing 100084,China
³ Tsinghua National Laboratory for Information Science and Technology (TNList) ,Beijing 100084,China

Online:2014-10-25 Published:2017-06-19
Supported by:
The National High Technology Research and Development Program of China (863 Program);The National Natural Science Foundation of China;National Science & Technology Pillar Program of China

Abstract

Abstract:

In the Internet,there are no mechanisms to verify the identity of a message sender,resulting in a large number of forged identity attacks,such as phishing websites.By mapping the user identity into the rightmost 64 bit of the IPv6 address,this paper tries to make every message embedded with an identity,which lay a credible foundation for communications on the Internet.We design and realize a true identity communication system based on source address validation improvement,which can protect the privacy of the users,and ensure the verifiability and authenticity of the user identities.

Key words: IPv6, SAVI, network security, true identity

Duan-qi ZHOU,Jun BI,Guang YAO. Trustworthy identity system based on IPv6 source address validation[J]. Journal on Communications, 2014, 35(Z1): 20-26.

统计指标	实验组	对照组
均值	1.831 s	1.784 s
方差	0.099 s²	0.122 s²
标准差	0.315 s	0.349 s
中位数	1.903 s	1.870 s
最大值	2.214 s	2.207 s
最小值	0.699 s	0.663 s

密钥长度n/bit	MIPS年
512	3×10⁴
768	2×10⁸
1 024	3×10¹¹
2 048	3×10²⁰

[1]	RALPH D ，et al. Dynamic Host Configuration Protocol for IPv6 (DHCPv6)[S]. RFC 3315， 2003.
[2]	THOMAS N , THOMSON S ，et al. IPv6 Stateless Address Autoconfiguration[S]. 2007.
[3]	BI J ，et al. A Source Address Validation Architecture(SAVA)Testbed and Deployment Experience[S]. 2008.
[4]	WARREN K , MCPHERSON D . IPv6 Stateless Address Autoconfiguration[S]. RFC 5635 2009.
[5]	LI J , et al . SAVE:source address validity enforcement protocol[A]. Twenty-First Annual Joint Conference of the IEEE Computer and Communications Societies[C]. 2002.
[6]	BI J ，et al. Source Address Validation Improvement (SAVI) Framework[S]. 2013.
[7]	RALPH D , ARBAUGH W . Authentication for DHCP Messages[S]. RFC 3118 2001.
[8]	KEN H ，et al. DHCP authentication for DHCP Messages[S]. 2000.

[1]	Shiqi ZHAO, Xiaohong HUANG, Zhigang ZHONG. Research and implementation of reputation-based inter-domain routing selection mechanism [J]. Journal on Communications, 2023, 44(6): 47-56.
[2]	Haiyan KANG, Molan LONG. Research on network attack analysis method based on attack graph of absorbing Markov chain [J]. Journal on Communications, 2023, 44(2): 122-135.
[3]	Hongbin ZHANG, Yan YIN, Dongmei ZHAO, Bin LIU. Network security situational awareness model based on threat intelligence [J]. Journal on Communications, 2021, 42(6): 182-194.
[4]	Tengfei ZHANG, Shunzheng YU. Research prospects of user information detection from encrypted traffic of mobile devices [J]. Journal on Communications, 2021, 42(2): 154-167.
[5]	Xu CHENG, Yingying WANG, Nianjie ZHANG, Zhangjie FU, Beijing CHEN, Guoying ZHAO. Multi-level loss object tracking adversarial attack method based on spatial perception [J]. Journal on Communications, 2021, 42(11): 242-254.
[6]	Tao HUANG, Jiang LIU, Shuo WANG, Chen ZHANG, Yunjie LIU. Survey of the future network technology and trend [J]. Journal on Communications, 2021, 42(1): 130-150.
[7]	Zhiyong LUO,Xu YANG,Jiahui LIU,Rui XU. Network intrusion intention analysis model based on Bayesian attack graph [J]. Journal on Communications, 2020, 41(9): 160-169.
[8]	Hanxun ZHOU,Chen CHEN,Runze FENG,Junkun XIONG,Hong PAN,Wei GUO. Mobile malware traffic detection approach based on value-derivative GRU [J]. Journal on Communications, 2020, 41(1): 102-113.
[9]	JIANG Lyu,ZHANG Hengwei,WANG Jindong. Optimal strategy selection method for moving target defense based on signaling game [J]. Journal on Communications, 2019, 40(6): 128-137.
[10]	Zhiyong LUO, Xu YANG, Guanglu SUN, Zhiqiang XIE, Jiahui LIU. Finite automaton intrusion tolerance system model based on Markov [J]. Journal on Communications, 2019, 40(10): 79-89.
[11]	Yu XIONG, Jinyou HE, Baohua WANG, Bin ZHOU. Energy-saving algorithm considering idle light-path prediction in SDM-EON [J]. Journal on Communications, 2019, 40(10): 137-148.
[12]	Cunqian YU,Mingzhu TANG,Rongxi HE. Energy-efficient dynamic wavelength and bandwidth allocation algorithm with delay constraint for time and wavelength division multiplexed passive optical networks [J]. Journal on Communications, 2018, 39(9): 110-121.
[13]	Shirui HUANG,Hengwei ZHANG,Jindong WANG,Ruiyu DOU. Network security threat warning method based on qualitative differential game [J]. Journal on Communications, 2018, 39(8): 29-36.
[14]	Xiaodong ZANG,Jian GONG,Xiaoyan HU. Detecting malicious domain names based on AGD [J]. Journal on Communications, 2018, 39(7): 15-25.
[15]	Junbin LIANG,Xiang ZHOU,Taoshen LI. Energy saving proactive neighbor discovery algorithm in mobile low-duty-cycle wireless sensor network [J]. Journal on Communications, 2018, 39(4): 45-55.

Trustworthy identity system based on IPv6 source address validation

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 8

References 8

Related Articles 15

Metrics

Recommended 0