IPv6源地址和网络业务验证体系结构
邵婧;陈越;谭鹏许
【期刊名称】《计算机工程与设计》 【年(卷),期】2011(032)007
【摘要】Aimed at the source address forgery in the network and network congestion problem caused by junk traffic, an IPv6 source address and network service validation architecture is proposed. The architecture sets a management server to manage keys and deal with users' request. The legitimate user generates a message authentication code by the user key obtained from management server, and adds the message authentication code in the IPv6 packet's extended header. The key router authenticates the source address and service by validating the message authentication code. The architecture is an extension of SAVA (source address validation architecture). It realizes the validation of network service and source address of host at the same time, and effectively reduces the junk traffic in the network.%针对网络中存在的伪造源地址攻击和一些垃圾流量所造成的网络拥塞问题,提出了一种IPv6源地址和网络业务验证体系结构.该体系结构设置了一个管理服务器来安全管理密钥和处理用户请求,合法用户通过从管理服务器处获得的主机密钥来生成一个消息认证码,并将其嵌入数据包扩展首部中,关键路由器通过验证该消息认证码,来验证源地址和业务的合法性.该体系结构对真实IPv6源地址验证体系结构进行了扩展,实现了对主机源地址及网络业务合法性的同时验证,有效地减少了网络中的垃圾
IPv6源地址和网络业务验证体系结构
