Method and system for establishing multi-domain optical network security light tree based on hierarchical PCE

Abstract

The invention discloses a method and a system for establishing a multi-domain optical network security light tree based on a hierarchical PCE, aims at the security threat existing in a multicast routing protocol of a multi-domain optical network, designs a corresponding security mechanism by utilizing a nested hash chain and a trust model theory, and realizes establishment of the multi-domain optical network security light tree through optimization of an original light tree calculation and light tree establishment process; according to the method, the own security is guaranteed while the multi-domain optical network security light tree can be calculated and established, and the blocking rate is lower and the light tree establishment delay is smaller.

Description

technical field [0001] The invention relates to a layered PCE-based multi-domain optical network security optical tree establishment method and system. Background technique [0002] With the rapid development of optical communication technology and real-time streaming multicast applications, the use of optical network multicast to transmit information has become more and more widespread. How to establish and maintain a multicast tree that meets security requirements has become a very important issue in multi-domain optical networks. question. [0003] In 2010, IETF (The Internet Engineering Task Force, Internet Engineering Task Force) described the multicast process in GMPLS (Generalized Multi-Protocol Label Switching, multi-label switching protocol) in RFC (Request For Comments, request for comments) 5920 Various security threats faced in the network, put forward defense technology and detection and reporting mechanism, but did not mention the scheme of establishing multic...

AI Technical Summary

Problems solved by technology

[0003] In 2010, IETF (The Internet Engineering Task Force, Internet Engineering Task Force) described the multicast process in GMPLS (Generalized Multi-Protocol Label Switching, multi-label switching protocol) in RFC (Request For Comments, request for comments) 5920 Various security threats faced in the network, put forward defense technology and detection and reporting mechanism, but did not mention the scheme of establishing a multicast tree safely; In the prior art, a method of restoring an optical tree that satisfies the delay constraint was proposed, but there was no Relevant mechanisms deal with the security issues existing in optical network multicast; in addition, related literature discusses the RSVP-TE (Resource Reservation Protocol-Traffic Engineering, resource reservation protocol based on traffic engineering) protocol reliability mechanism through specific analysis, and discusses RSVP-TE The possible security problems faced by the TE protocol, and corresponding countermeasures were proposed, but neither of the above two forms a related multicast protocol; in addition, a method of creating optical paths in parallel is proposed, which can effectively save resource allocation time, but the protocol It is a unicast protocol and cannot achieve the purpose of secure multicast

Images