为了实现对变化的Age域值的签名和验证,利用可净化签名技术提出一种新的开放式最短路径优先(OSPF)路由协议安全保护机制.改进了可净化签名方案,结合其弱透明性的安全属性,并将其用于保护OSPF协议路由信息的安全.分析结果表明,所提的OSPF协议安全机制能有效抵制最大年龄(MaxAge)攻击和早熟MaxAge攻击. In order to realize the signature and verification of the changed Age value, a new Open Shortest Path First (OSPF) routing protocol security protection mechanism is proposed by using the purifiable signature technique.An improved purifiable signature scheme, combined with its weak transparency Security attributes and use it to protect the routing information of OSPF protocol.The analysis results show that the proposed OSPF protocol security mechanism can effectively resist the MaxAge attack and the premature MaxAge attack.