论文部分内容阅读
自治系统间的IP前缀劫持是互联网安全的重大威胁.目前基于非对称密码学的前缀劫持防范机制都无可避免地面临复杂的公钥证书存储管理问题或者密钥托管问题,并且在前缀源自治系统在线验证时计算量太大,难以在实际中布署实施.本文提出的这种防范机制,采用公钥自证明签名方案进行前缀源自治系统的验证,无需公钥证书和密钥托管,可从多方面提高防范机制的性能,有望促进IP前缀劫持防范机制的实际布署实施.
IP prefix hijacking between autonomous systems is a major threat to Internet security.Nowadays, the mechanism of prefix hijacking based on asymmetric cryptography inevitably faces complex public key certificate storage management or key escrow problem, The system is too computationally expensive to deploy in practice.This mechanism proposed in this paper uses the public key self-certified signature scheme to verify the prefix source autonomous system without public key certificate and key escrow, To improve the performance of the prevention mechanism in many aspects is expected to promote the implementation of the IP prefix hijack prevention mechanism.