基于CPN的可信路由器发现协议建模与仿真分析  

Modeling and Simulation of Trusted Router Discovery Protocol Using Colored Petri Nets

作　　者：张珺[1,2,3] 刘靖[1,3] 叶新铭[2] 许智君[1,2,3] 

机构地区：[1]中国科学院计算技术研究所,北京100190 [2]内蒙古大学计算机学院,呼和浩特010021 [3]中国科学院研究生院,北京100039

出　　处：《系统仿真学报》2012年第3期701-709,共9页Journal of System Simulation

基　　金：973计划(2007CB310702);国家自然科学基金(60873242);内蒙古自然科学基金(2011MS0902;20080404ZD20);中国科学院重大科研装备研制项目(YZ200824);863计划(2009AA01A344)

摘　　要：为了保证终端设备能够可信高效地通过接入路由器访问互联网,提出一种可信路由器发现协议,实现安全、高效的接入路由器身份认证过程,并基于着色Petri网(Colored Petri Nets,CPNs)为该协议建立关联的功能验证模型和性能分析模型,有效集成协议的安全性验证与性能分析过程,以确认该协议在保证安全能力的基础上可以有效提升接入路由器身份认证过程的性能。基于着色Petri网的安全性验证与性能评价集成分析方法为安全类协议的性能改进分析提供了一种更加便捷、有效的协议仿真分析方法。In order to guarantee the host safely visiting Internet via a valid access router,some secure and effective mechanisms were required to protect the access router discovery process.A trusted router discovery protocol was proposed to validate the access router.Based on the Colored Petri Nets（CPN）,a function verification model and a performance analysis model were constructed integratedly for the protocol analysis in the two aspects of security and performance.By this integrated analysis method using CPN,the simulation results show that the protocol conducts effectively in both security guaranteeing and performance improving.Also,this CPN based modeling and simulation method,which integrates security verification and performance analysis,contributes a significant methodology helping to improve the performance of a secure protocol.

关 键 词：接入路由器身份认证 着色PETRI网 仿真分析 协议验证 性能分析 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]