IPv6环境下匿名通信系统的设计与实现  

Anonymous communication system for IPv6 networks

作　　者：张甲[1] 段海新[1] 吴建平[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084

出　　处：《清华大学学报（自然科学版）》2011年第1期63-67,共5页Journal of Tsinghua University(Science and Technology)

基　　金：国家"九七三"基础研究项目(2009CB320505);国家"八六三"高技术项目(60203044);国家自然科学基金资助项目(60803134)

摘　　要：匿名通信技术作为保护隐私的一种重要手段已经被广泛接受。但是在现有的网络环境下,由于IP(Internet protocol)地址相对固定,攻击者可以通过追查IP来破坏系统的匿名性。为了提高IPv6网络中通信的匿名性,该文提出了一种在IPv6下的P2P(peer-to-peer)匿名通信方案。该方案改进了IPv6下的地址生成算法,以及现有的基于葱头路由的匿名通信机制。通过利用IPv6地址空间大的优势,周期变换节点IP地址,避免了因IP地址标识而导致的隐私泄漏;通过葱头路由机制来保证IP地址的跨网段隐藏以及数据的加密。实验表明:2种方法的结合可以明显提高匿名通信系统的匿名性,并且该系统的通信效率和兼容性都没有减弱。Anonymous communications are widely accepted as an important mechanism to protect privacy.However,the Internet protocol（IP） addresses are essentially fixed in the current network environment,so an adversary can destroy anonymity in the system by tracing IP addresses.This paper presents a peer-to-peer（P2P） based anonymous communication mechanism to enhance the anonymity of communications in IPv6 networks.This method improves the IPv6 IP generation algorithm and the onion routing based anonymous communication mechanisms.The system uses IPv6 to provide a wide address space and to periodically change the IP address to avoid privacy loss caused by IP address.The onion routing based mechanism can hide the IP addresses among network segments and encrypt the data.Tests show that integration of these two methods enhances the anonymity of anonymous communication systems,while maintaining communication efficiency and system compatibility.

关 键 词：计算机网络 网络安全 匿名通信 IP地址生成 葱头路由 IPV6 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]