Network device group authentication method in software-defined network

Abstract

The invention discloses a network device group authentication method in a software-defined network, in particular to a group authentication method based on the aggregate signature technology, and belongs to the field of communication. The method mainly involves an initialization module, a signature module, a verification module and seven steps. The network device group authentication method in the SDN is put forward under the SDN structure; by fully utilizing southing interfaces between the network devices and a controller and data links between the network devices, authentication of all network devices on a network device link can be completed by the controller through only one time authentication, and the controller bandwidth consumption of a traditional authentication method is reduced. In addition, the signature module for the SDN network devices involves the network device authentication step, and the identity problem of the previous network device can be found in time. The aggregate signature technology is adopted, and therefore the bandwidth consumption caused when signature data are transmitted between the network devices can be effectively lowered.

Description

technical field [0001] The invention relates to a network device group authentication method in a software-defined network, in particular to a group authentication method based on aggregated signature technology, which belongs to the communication field. Background technique [0002] With the rapid development of Internet technology, Software Defined Network (Software Defined Network, SDN) improves network security, manageability and control capabilities because it separates the network control plane from the data plane through the use of controllers, and is widely used in many industries. All have a good application space, and the primary problem of SDN at present is the security problem. For the controller in SDN, obtaining the parameters of the real data plane is a necessary operation for implementing control and management. Therefore, it is particularly important to implement identity authentication on network devices in SDN to ensure the authenticity of network device ...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to overcome the deficiencies of the prior art in solving network device group authentication in SDN, and propose a method for network device group authentication in software-defined networks, which is a method of combining the signatures of each network device by aggregated signatures, and finally by The unified implementation of authentication by the controller can not only effectively solve the problem of network device group authentication, but also avoid the transmission of excessive redundant signature information, and reduce the consumption of bandwidth resources for network device group authentication

Images