基于SRv6协议的对称密钥生成与身份认证机制研究  

Study on symmetric key generation and identity authentication mechanism based on SRv6 protocol

作　　者：王伟闯 Wang Weichuang(Jiangsu Golden Shield Detection Technology Co.,Ltd.,Nanjing 210042,China)

机构地区：[1]江苏金盾检测技术股份有限公司,江苏南京210042

出　　处：《无线互联科技》2023年第5期146-150,共5页Wireless Internet Technology

摘　　要：对称加解密是保障传输数据安全的重要机制。对称加密技术具有高速、计算复杂度低的优点,但是安全性低于非对称加密机制。因此,在现代的数据安全传输过程中,一般使用非对称加解密与对称加解密相结合的来实现效率与安全性的均衡。但是,同时使用两种加密机制会带来密钥生成、分发与管理方面的问题。对此,文章提出一种基于SRv6协议实现的对称密钥生成和分发机制,该机制利用SRv6的路由机制来实现消息路由节点共同协商生成密钥,由此可以实现一次性对称加密密钥协商生成、分发与身份认证功能。相对于现有的机制,文章所提方案在安全性、便捷性方面具有突出优点。Symmetric encryption and decryption is an important mechanism to ensure the security of transmitted data.Symmetric encryption has the advantages of high speed and low computational complexity,but its security is lower than that of asymmetric encryption.Therefore,in the process of modern data security transmission,asymmetric encryption and decryption is generally used to achieve the balance between efficiency and security.However,using the two encryption mechanisms at the same time brings problems in key generation,distribution,and management.In this paper,a symmetric key generation and distribution mechanism based on SRv6 protocol is proposed.The mechanism uses the SRv6 routing mechanism to realize the message routing nodes to negotiate the key generation,distribution and identity authentication of one-time symmetric encryption key negotiation.Compared with the existing mechanism,the scheme proposed in this paper has outstanding advantages in security and convenience.

关 键 词：SRv6 对称密钥 数据加解密 身份认证 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]