Safety authentication method and system based on SDN flow

Abstract

The invention provides a safety authentication method and system based on an SDN flow. The method comprises the following steps of receiving an authentication request reported by a client through a source SDN switch, wherein, the authentication request includes a flow feature code, a user name and a password; extracting the flow feature code and calculating an SDN flow forwarding path; matching an SDN flow safety authentication strategy according to the flow feature code, the user name and the password contained in the authentication request; according to the matching authentication result, sending a flow table down, wherein, the flow table includes the SDN flow forwarding path; if the flow table indicates that the authentication is passed, then making the source SDN switch forward the message of the client; otherwise, making the source SDN switch drop the message of the client. An SDN architecture is adopted. An SDN controller can sense the message forwarding path and network changes. Dynamic safety authentication on the SDN flow is achieved by sending the flow table down. Safety authentication on whole-network SDN flows is thus achieved.

Description

technical field [0001] The invention belongs to the technical field of communications, and relates to an authentication method, in particular to an SDN stream-based security authentication method and system. Background technique [0002] Software Defined Network (Software Defined Network, SDN) is a new network innovation architecture of Emulex network, and it is a way to realize network virtualization. Its core technology OpenFlow realizes network The flexible control of traffic makes the network more intelligent as a pipeline. [0003] In the SDN network, if the SDN user does not provide access authentication, as long as the user can access the SDN switch, he can access the equipment or resources in the SDN network. There is no doubt that there are serious security risks in this way. [0004] The traditional 802.1x authentication system is a typical Client / Server architecture, including three entities, such as figure 1 As shown, they are: Supplicantsystem (client), Authe...

AI Technical Summary

Problems solved by technology

[0006] In view of the shortcomings of the prior art described above, the purpose of the present invention is to provide a security authentication method and system based on SDN flow, which is used to solve the problem that there is no user access authentication and security risks in the existing SDN network

Images