Verifiable inter-domain routing verification method based on block chain

Abstract

The invention discloses a verifiable inter-domain routing verification method based on a block chain. According to the technical scheme, the method comprises the following steps: constructing a verifiable inter-domain routing system based on a block chain, wherein the verifiable inter-domain routing system is composed of verifiable inter-domain routing and a routing behavior verification subsystem; the routing behavior verification subsystem is composed of a routing behavior verification terminal and a routing verification block chain system. A sender router R1, a routing behavior verificationterminal of an autonomous domain to which the R1 belongs and a routing verification block chain system construct routing evidences, verify proposal of the routing evidences, verify and endorse the proposal, judge whether an endorsement strategy is met or not, generate routing evidence transactions, perform consensus sorting on the transactions and update a routing verification block chain; and the receiver router T, the routing behavior verification terminal of the autonomous domain to which the router T belongs and the routing verification blockchain system construct a verification routing request message, and retrieve whether routing evidence corresponding to the routing request exists or not. According to the method, the problem that routing strategies are violated due to routing single-point attacks and routing multi-point collusion attacks can be verified.

Description

technical field [0001] The invention relates to network security technology, in particular to a method for discovering and solving the problem of violating routing policy caused by routing single-point attack or routing multi-point collusion attack existing in the existing inter-domain routing protocol BGP. Background technique [0002] The security issues of Internet inter-domain routing have been studied for many years. Most security-related work focuses on routing forgery, such as S-BGP (Secure BGP, Secure Inter-domain Routing Protocol), SoBGP (Secure Origin BGP, Secure Source Inter-domain Routing Protocol), IRV (Inter-domain Routing Validation , inter-domain routing verification), etc. S-BGP ensures information security by verifying routing path attributes based on certificates in PKI (Public Key Infrastructure, public key infrastructure). SoBGP can only provide origin authentication, not path authentication. IRV is a centralized solution that operates independently o...

AI Technical Summary

Problems solved by technology

[0004] The technical problem to be solved by the present invention is to provide a verifiable inter-domain routing based on blockchain for the problem that the existing inter-domain routing protocol BGP has violations of routing policies caused by routing single-point attacks or routing multi-point collusion attacks. The verification method realizes the verification of the published routing information, and verifies whether the routing information conforms to the routing policy. The present invention can verify the problem of violating the routing policy caused by the routing single-point attack, and can verify the violation of the routing policy caused by the routing multi-point collusion attack. strategic question

Images