基于流认证的IPv6接入子网主机源地址验证  

Host’s source address verification based on stream authentication in the IPv6 access subnet

作　　者：陈越[1] 贾洪勇[1] 谭鹏许[1] 邵婧[1] 

机构地区：[1]解放军信息工程大学网络空间安全学院,河南郑州450004

出　　处：《通信学报》2013年第1期171-177,共7页Journal on Communications

基　　金：国家重点基础研究发展计划("973"计划)基金资助项目(2012CB315901);国家科技支撑计划基金资助项目(2008BAH37B03)~~

摘　　要：提出了一种以密码学方法实现的IPv6接入子网主机高速源地址验证方案。把主机MAC地址作为身份同主机公钥相绑定,利用密码生成地址算法从主机公钥衍生出IPv6接入子网地址,通过数字签名提供主机真实性的验证,以消息认证码和流认证技术实现接入网关对数据分组流IPv6地址的快速安全的验证。原型系统实验表明,该方案能够以低开销实现数据分组源地址验证,是一种安全、可行的方案。Acryptographically-implemented high-speed source address verification scheme for the hosts in the IPv6 ac-cess subnet was proposed. The MAC address was used as the identity of the host machine and bounded with the host＇s public key. Then the IPv6 address was derived from the host machine＇s public key using the cryptographically generated address algorithm. The address authenticity was guaranteed by the digital signature and the fast and secure source address verification for packet stream was achieved through message authentication code algorithm and stream authentication. The experimental system show that the scheme could verify the source addresses of data packets at a loss cost. Thus, it is a secure and feasible scheme.

关 键 词：源地址验证 基于身份的密码 密码生成地址 消息认证码 流认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]