Self-representation secure routing authorization method based on identity, namely, public key

Abstract

The invention discloses a self-representation secure routing authorization method based on an identity, namely, a public key. The method comprises the following steps: S1, publishing a public security parameter, and starting a trusted root; S2, constructing a self-trusted address system; S3, constructing a self-trusted routing identity system; S4, signing and issuing an address authorization certificate to an NASA (Network Autonomous System Authority) by an address owner, and assigning a deployed routing announcer to announce address reachable information by the NASA; S5, signing and issuing a path authentication certificate by the routing announcer, and announcing routing update carrying the path authentication certificate and the address authorization certificate to a peer route; and S6, receiving the routing update by a peer routing announcer, verifying the address authorization certificate and the path authentication certificate issued and signed by each announcer on a routing path, and determining the validity of the routing update. The self-representation secure routing authorization method is simple in principle and easy for deployment; source authentication and path authentication of inter-domain routing can be realized; and the problem of inevitable prefix hijacking in a conventional inter-domain routing mechanism can be solved effectively.

Description

technical field [0001] The present invention relates to the field of trusted and secure network infrastructure, in particular to a self-expressive security routing mechanism constructed using a self-trusted network address that is a public key as an address and a self-trusted routing resource identifier that is a public key as an identifier. In the case of routing mechanism, a secure routing strategy is constructed to solve the source authentication and path authentication problems of inter-domain routing. Background technique [0002] With the in-depth development and wide application of information technology, the Internet (Internet) has penetrated into every corner of people's lives. According to the statistics of China Internet Network Information Center as of June 30, 2014, the number of Internet users in my country has reached 632 million, the number of accessible websites has reached 2.73 million, and the international export bandwidth is nearly 4 million megabits per...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention lies in: Aiming at the technical problems existing in the prior art, the present invention provides an easy-to-deploy inter-domain routing security mechanism, realizes source authentication and path authentication of inter-domain routing, and solves the problem of traditional inter-domain routing mechanism Unavoidable prefix hijacking problem

Images