域间路由系统、域名系统和公钥基础设施等是互联网重要的基础设施,它们是互联网的网络连通性、服务可用性和通信可信性的基础。然而,这些基础设施或其背后的可信模型是中心化的,存在着中心节点权限过大、单点失效等脆弱性,降低了互联网的安全性、可靠性和平等性。为了构建一个更加安全、可靠、平等和开放的互联网,尝试提出了去中心化的互联网基础设施(decentralized internet infrastructure,DII),并讨论其体系结构和各层的设计,分析系统的可行性。DII架构包含3个层次:底层利用分布式账本技术构建基础的去中心化能力;中间层构建IP地址和域名等互联网名字空间的去中心化可信管理机制,并支持安全可信的域间路由和域名映射系统;顶层为开放的应用层,支持和促进创新、可信的去中心化互联网应用。
Abstract
Inter-domain routing system
domain name system (DNS) and public key infrastructure (PKI) are the fundamental infrastructures of the internet.These infrastructures help to provide network connectivity
service availability and communication trusts between different internet entities.However
these infrastructures are all designed based on a centralized system architecture or a trusted model
which suffers from many vulnerabilities.An architecture called decentralized internet infrastructure (DII) based on decentralization techniques was proposed.The DII architecture consists of three layers.The underlying layer was the distributed ledger layer
providing decentralized trusted foundation for DII.The intermediate layer
called name space management layer
fulfills the management of internet core resources (such as IP addresses
AS numbers and domain names) and provides trustworthy mapping information between different resources.The top layer was an open application layer that could support trustworthy decentralized internet applications.
关键词
Keywords
references
HEILMAN E , COOPER D , REYZIN L , et al . From the consent of the routed:improving the transparency of the RPKI [C ] // ACM SIGCOMM Computer Communication Review,August 17 - 22,2014,Chicago,Illinois,USA . New York:ACM Press , 2014 , 44 ( 4 ): 51 - 62 .
VANCE A . WikiLeaks struggles to stay online after attacks [EB ] . 2010 .
ZETTER K . DigiNotar files for bankruptcy in wake of devastating hack [EB ] . 2011 .
NAKAMOTO S . Bitcoin:a peer-to-peer electronic cash system [EB ] . 2008 .
CACHIN C , . Architecture of the hyperledger blockchain fabric [C ] // Workshop on Distributed Cryptocurrencies and Consensus Ledgers,July 25,2016.[S.l.:s.n] . 2016 .
IETF . Problem definition and classification of bgp route leaks:7908 [S ] . 2016 .
LIETF . An infrastructure to support secure internet routing:6480 [S ] . 2012 .
AW N . Decentralized Identity – what lies ahead of Us:the open (Interesting) research issues [EB ] . 2018 .
Cloundflare . Cloudflare cirrus [EB ] . 2018 .
IETF . An analysis of the applicability of block chain to secure ip address allocation,delegation and bindings:draft-paillissesidrops-blockchain-01 [S ] . 2017 .
ANGIERI S , GARCÍA-MARTÍNEZ A , LIU B , et al . An experiment in distributed Internet address management using blockchains [J ] . arXiv:1807.10528 , 2018 .
KALODNER H A , CARLSTENA M , ELLENBOGEN P , et al . An empirical study of name coin and lessons for decentralized namespace Design [C ] // WEIS,June 2015,Delft Netherlands.[S.l.:s.n] . 2015 .
ALI M , NELSON J , SHEA R , et al . Blockstack:a global naming and storage system secured by blockchains [C ] // 2016{USENIX} Annual Technical Conference,June 22-24,2016,Denver,USA.[S.l.:s.n] . 2016 : 181 - 194 .