基于关键节点的域间路由安全机制  

Secured inter-domain routing mechanism based on key node

作　　者：孔令晶[1] 曾华燊[1] 窦军[1] 李耀[1] 

机构地区：[1]西南交通大学信息科学与技术学院,成都610031

出　　处：《计算机应用研究》2013年第12期3753-3757,3782,共6页Application Research of Computers

基　　金：国家自然科学基金资助项目(60773102);国家自然科学基金与中国工程院联合基金资助项目(U0970122)

摘　　要：BGP作为Internet域间路由的基本协议,其安全问题一直受到学界的关注,特别是安全性与实现难度之间的折中。针对传统解决方案S-BGP(secure BGP)的不足,在定义关键节点KN(key node)的基础上,利用KN对路由信息安全验证的特殊功能,提出了更加轻量级的解决方案——基于关键节点的域间路由安全机制SR-KN(secure routing based on key node)。通过对比分析表明,SR-KN在保证BGP安全的前提下,减少了全网证书规模及存储量,且具有更好的收敛性能。As the basic inter-domain routing protocol, security issues of BGP （ border gateway protocol） have drawn much at- tention from academic community, especially the trade-off between security and difficulty in implementation. Having pinned down the inadequacy of the traditional solution S-BGP, on the basis of the definition of KN, this paper utilized KN＇s special function of routing security validation and put forward a lightweight scheme-secured inter-domain routing mechanism SR-KN. As a result, under the premise of the security of BGP, the results of analysis and comparison show that for the whole network, the scale of certification and the storage are reduced and the convergence performance is improved.

关 键 词：边界网关协议 域间路由安全 S-BGP SR—KN 关键节点 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]