论文部分内容阅读
IP前缀劫持对互联网安全构成重大威胁.为防范IP前缀劫持,公认的有效手段之一是基于数字签名进行源自治系统认证.由于带宽容量问题,传统的源自治系统认证机制不能支持认证信息的在线发布和验证.为支持认证信息的在线发布和验证,应尽可能降低地址证明创建和验证过程中需要在线传送的数据量.本文充分利用Nyberg-Rueppel签名的特点,将地址证明创建过程中产生的大部分数据进行聚合以降低需要在线传输的数据量,以期克服源自治系统在线验证的带宽障碍,给出了算法完成系统初始化、地址证明的创建、以及地址证明的验证.这种机制所涉及的认证信息字节长度短,约为426 Bytes.由于大幅度降低认证信息的字节长度,本机制能够支持源自治系统认证信息的在线发布和验证.
IP Prefix Hijacking poses a significant threat to Internet security.One of the accepted and effective means of preventing IP Prefix hijacking is Autonomous System Authentication based on digital signatures.Because bandwidth capacity is a problem, traditional source-based system authentication mechanisms can not support authentication information online Publishing and verification.In order to support the online publishing and verification of the authentication information, the amount of data that needs to be transmitted online during the process of certificate creation and verification should be reduced as much as possible.This thesis takes full advantage of the characteristics of Nyberg-Rueppel signature, Most of the data is aggregated to reduce the amount of data that needs to be transmitted online in order to overcome the bandwidth barriers originating from the online verification of the governance system and to give an algorithm to complete system initialization, creation of address proofs, and proof of address proves that this mechanism involves The length of the authentication information byte is short, approximately 426 Bytes. This mechanism supports the release and validation of information originating from the system’s authentication information due to the significantly reduced byte length of the authentication information.