基于终端可信度的路由策略设计与实现  

Design and implementation of routing strategy based on terminal trust

作　　者：殷安生[1] 张顺颐[1] 

机构地区：[1]南京邮电大学,江苏南京210003

出　　处：《电信科学》2016年第4期1-8,共8页Telecommunications Science

基　　金：国家自然科学基金资助项目(No.61003237);江苏省科技成果转化专项资金资助项目(No.BA2012047);南京邮电大学校科研基金资助项目(No.NYS213026;No.JG00915JX95)~~

摘　　要：可信路由随着可信网络的发展而兴起,目前的研究主要集中在轻量化网络的路由策略方面,存在的问题主要有路由算法开销大、应用范围小,且主要以IPv4为基础。提出了一种基于IPv6流标签定制的可信路由方案,在终端的可信评估基础上,通过流识别和流标记实现可信路由策略。利用前驱ARP代理机制设计了一种基于代理的虚拟链路协议,并设计了原型系统。实验证明,该协议实现了IPv6的流标记路由,提高了信息传输的安全性和效率。With the development of trusted networks, trusted routing emerges. Currently, the research focuses on the routing strategies of lightweight network. The routing algorithm has the large overhead and small applications, which is mainly based on IPv4. A trusted routing scheme was presented based on the flow label of IPv6, which was achieved by adding a flow identification module to TNC（trusted network connection）module. Drawing on previous proxy ARP, a proxy-based virtual link protocol and prototype system was designed. Experiments show that this protocol can achieve IPv6 routing based on flow label and improve the security and efficiency of information transmission.

关 键 词：可信路由 IPV6 流标签 前驱ARP代理 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]