Mapping updating authentication method among credible regions in separation mechanism networks

Abstract

The invention discloses a mapping updating authentication method among credible regions in separation mechanism networks, and belongs to the technical field of computer safety. By means of credible computing technology, the mapping updating authentication method not only can verify the identity of a mapping server, but also guarantees integrity of a mapping server platform and credibility of the identity of the platform, and effectively guarantees safety during mapping updating processes. The mapping updating authentication method comprehensively utilizes dependable computing, encryption, signature and other information security technology, guarantees the integrity of the mapping server platform, the credibility of the identity of the mapping server platform, and confidentiality of a mapping relation, and can effectively prevent replay attack, forgery attack and impersonation attack.

Description

technical field [0001] The invention relates to the technical field of computer security, in particular to a trusted inter-domain mapping update authentication method in a separation mechanism network. Background technique [0002] In the separation mechanism network, when a terminal accesses the network, it must first go through the access authentication process. Only the authenticated terminal can be assigned a routing identifier, and then the mapping relationship between the access identifier and the routing identifier can be established. When the terminal switches between domains, the new access switching router will assign a new mapping relationship <AID to the MN (Mobile Node) MN , nRID MN >, in order to avoid triangular routing, it is necessary to send a mapping update message, that is, to notify the access switch router connected to the corresponding CN (Corresponding Node) of the new mapping relationship. The mapping update message needs to be sent by the ma...

AI Technical Summary

Problems solved by technology

The disadvantage of this scheme is that the attacker can launch a brute force attack and find a matching signing key by trial and error

(3) The return routing test mechanism does not actually provide identity authentication, but only so-called reachability, and the service it provides to prevent message forgery is relatively fragile

Although the above solutions provide a certain degree of security, they cannot solve threats from within the network, such as platform tampering, virus infection, etc., and there are certain flaws in security.

Images