Resource public key infrastructure bidirectional authorization method based on block chain

Abstract

The invention discloses a resource public key infrastructure bidirectional authorization method based on a block chain, and aims to solve the security threat problems that a legal BGP route is illegal, a legal IP address is blocked and the like caused by malicious operation. The method comprises the following steps: constructing a resource public key infrastructure system RPKIB based on a block chain, wherein the resource public key infrastructure system RPKIB is composed of a resource issuer, a resource transaction application client, a resource receiver and a block chain network; changing any operation of issuing, cancelling, updating and modifying of a resource certificate by the resource issuer into a bidirectional authorization mode, and implementing the operation of the resource certificate only when the issuer and the receiver agree; and carrying out the operations of the resource certificate RC and the route origin authorization ROA as transactions by the issuer through a blockchain network, and distinguishing whether the operations are malicious behaviors or normal operations through bidirectional authorization. The method is adopted to overcome malicious operation facedby the current RPKI, and security threats such as illegal legal BGP routing and legal IP address blocking are effectively avoided.

Description

technical field [0001] The invention belongs to the field of network information security, and in particular relates to a block chain-based resource public key infrastructure two-way authorization method for improving the security of RPKI (Resource Public Key Infrastructure, ie resource public key infrastructure). Background technique [0002] BGP (Border Gateway Protocol, Border Gateway Protocol) is an inter-domain routing protocol in the Internet. However, the traditional BGP protocol is vulnerable to many security threats, and one of the most common BGP attacks is prefix hijacking. By forging the origin AS (Autonomous system, autonomous system) in the BGP route advertisement information (origin AS, that is, the AS that initiated the route advertisement information), the traffic corresponding to these IP address prefixes is intercepted or discarded by the hijacker's AS. Resource public key infrastructure (RPKI) is an infrastructure used to support the verification of the ...

AI Technical Summary

Problems solved by technology

[0011] The technical problem to be solved by the present invention is to provide a method for two-way authorization of resource public key infrastructure based on block chains, to solve the current problem that RPKI faces due to the malicious operations of malicious resource issuers that cause legal BGP routes to be illegal and legal IP addresses to be blocked. Security threats such as interruption or malicious blocking of corresponding traffic

Images