基于连接标识的映射通信  

A Mapping Communication Mode Based on Connection Identify

作　　者：刘畅[1] 宋飞[1] 孙亮[1] 张思东[1] 

机构地区：[1]北京交通大学电子信息工程学院下一代互联网互联设备国家工程实验室,北京100044

出　　处：《电子学报》2012年第10期1920-1926,共7页Acta Electronica Sinica

基　　金：国家973重点基础研究发展计划(No.2007CB307100);北京市自然科学基金重点资助(No.4091003);中央高校基本科研业务费专项资金(No.2011JBM018);国家自然科学基金(No.60903150)

摘　　要：本文提出了一种基于连接标识(CID)通信的方法,并添加连接标识映射服务器(CMS)来完成对连接的管理功能.CMS将网络的核心部分与接入部分进行了分离,通过在CMS中建立连接标识与IP之间的映射,完成了映射通信的传输方式.本文将传统网络数据发送模式由基于对端地址变为基于连接标识,从而提升网络针对连接的可控可管性.本文详细讲述了这种基于连接的映射通信带来的优势,如:提高抗DDos攻击、防止主机身份暴露、减少核心网路由条目等.并且分析了这种映射通信对现有应用的向下兼容性,及其可能带来的新攻击方式及应对措施.最终的实现测试给出了基于连接标识映射通信的具体性能.Ttis paper proposes to use connection identify （CID） to mark the process of obtaining a service, and add connec tion identify mapping server （CMS） to achieve the management of connections. CMSs make the core network and access network be separated.And through the mapping between CID and IP in the CMSs,the communication is separated to three steps. This map ping communication mode makes the sending of packets be based on CID instead of IP address. Thus, the controllabih＇ty and man ageability of connections have gained a remarkable increasing. Moreover, this paper has particularly represented the advantages of the mapping communication,and the compatibility of current applications.In addition, we give some countermeasures aimed at the new network attacks which the mapping communication mode may bring about. At last, the experimentation results reveal the specific performances of mapping communication mode.

关 键 词：连接标识 网络架构 映射通信 标识映射 

分 类 号：TN915[电子电信—通信与信息系统]