位置与身份分离协议下一种基于信任度模型的新型映射机制  

New mapping approach based on reputation model under locator/ID separation protocol

作　　者：万明[1] 刘颖[1] 张宏科[1] 

机构地区：[1]北京交通大学下一代互联网互联设备国家工程实验室,北京100044

出　　处：《通信学报》2011年第7期133-145,共13页Journal on Communications

基　　金：国家重点基础研究发展计划("973"计划)基金资助项目(2007CB307100;2007CB307106);高等学校学科创新引智计划基金资助项目("111"项目)(B08002);北京市自然科学基金资助项目(4091003);中央高校基本科研业务费专项基金资助项目(2011JBM016)~~

摘　　要：通过分析位置与身份分离协议中可能存在的映射欺骗所带来的安全隐患,提出了一种缓解映射欺骗威胁的新型映射机制。该机制在映射理论中引入了基于反馈评判的信任度模型,通过对信任度的动态评判,增加了映射信息的可信性。同时,采用自证明标识代表隧道路由器的身份信息,有效地保障了映射信息源的真实性。性能分析和仿真实验表明,该机制为位置与身份分离协议的映射理论提供了良好的安全保障,通过设定不同的信任度门限,能够有效缓解隧道路由器对虚假映射信息的使用,从而进一步降低了映射欺骗的危害。Through analyzing mapping spoofing which may exist or happen in the incoming mapping theory under loca-tor/ID separation protocol,a new mapping approach to relieve the thread of mapping spoofing was proposed.This ap-proach introduced the reputation model based on feedback evaluation into the mapping theory and increased the trust-worthiness of the mapping information by means of the dynamic trust evaluation.Meanwhile,the self-certifying identifi-ers represented the identity information of tunnel routers,and guaranteed the authenticity of the mapping sources.Per-formance analysis and simulation results have shown that the approach provides a satisfying safeguard for the mapping theory.By setting the threshold of different trust value,this approach can effectively inhibit the tunnel routers from em-ploying the mendacious mapping information,and further reduces the hazards of mapping spoofing.

关 键 词：位置与身份分离 基于反馈评判的信任度模型 映射信息 自证明标识 信任度 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]