A general way to assign IPv6 trusted address under portal authentication

Jiang ZHOU; Hewu LI

doi:10.11959/j.issn.1000-0801.2019288

您当前的位置：

首页 >

文章列表页 >

A general way to assign IPv6 trusted address under portal authentication

Topic:IPv6 technology and applications | 更新时间：2024-06-05

- A general way to assign IPv6 trusted address under portal authentication
- Telecommunications Science Vol. 35, Issue 12, Pages: 8-14(2019)
- 作者机构：
  
  1. 清华大学深圳研究生院，广东深圳 518055
  2. 北京信息科学与技术国家研究中心，北京 100084
  3. 清华大学网络科学与网络空间研究院，北京 100084
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2019288
  CLC： TP393
- Published Online：2019-12，
  
  Published：20 December 2019
- 稿件说明：
移动端阅览
Jiang ZHOU, Hewu LI. A general way to assign IPv6 trusted address under portal authentication[J]. Telecommunications science, 2019, 35(12): 8-14.
DOI：

Jiang ZHOU, Hewu LI. A general way to assign IPv6 trusted address under portal authentication[J]. Telecommunications science, 2019, 35(12): 8-14. DOI： 10.11959/j.issn.1000-0801.2019288.

摘要

随着网络规模的增长，对网络进行精细化管控变得尤为重要。在下一代互联网中将用户可信身份嵌入 IPv6 地址后缀形成可信地址，能够进一步提高网络行为的可追溯性。目前已有研究基于 Portal 认证配合DHCPv6将用户的身份信息嵌入用户终端的IPv6地址中，但是为了分配可信地址而改动的DHCPv6过程造成了机制对用户终端不透明，无法大规模部署。提出了一种面向Portal认证的IPv6可信地址分配机制，通过服务器信令交互配合软件定义网络（SDN）技术实现IPv6可信地址的间接分配，而且与地址分配方式无关。最后，实现了一个原型系统并在江苏南京电信现网机房评估了其可行性和性能，结果表明此机制在对终端透明的情况下仅带来很少的额外开销。

Abstract

As the network scale grows

it is especially important to fine-tune the network.In the next-generation Internet

embedding the user's trusted identity into the IPv6 address suffix to assign trusted addresses can further improve the traceability of network behavior.At present

many studies have attempted to embed the user’s identity information into IPv6 addresses based on portal authentication and DHCPv6

but the modification of DHCPv6 makes it not transparent to the terminal.A mechanism for trusted address assignment in IPv6 networks based on portal authentication was proposed.The collaboration between servers and software-defined networking (SDN) technology was used to realize the indirect assignment of IPv6 trusted addresses.Finally

a prototype system was implemented and its feasibility and performance were evaluated in the network of Nanjing Telecom in Jiangsu.The results show that the mechanism only brings little overhead and it is transparent to the terminal.

关键词

Keywords

references

Kaspersky DDoS intelligence report for Q3 [EB ] . 2018 .

WU J , BI J , BAGNUL M , et al . Source address validation improvement (SAVI) framework [R ] . 2013 .

WU J , BI J , LI X , et al . A source address validation architecture (sava) testbed and deployment experience [R ] . 2008 .

颜敏 , 尹曾 , 杨熙 . 面向中小企业随选网络的自助服务平台portal研发实践 [J ] . 电信科学 , 2017 , 33 ( 12 ): 170 - 177 .

YAN M , YIN Z , YANG X . R＆D practice of self-service platform portal for small and medium-sized enterprises [J ] . Telecommunications Science , 2017 , 33 ( 12 ): 170 - 177 .

ANDERSON D , BALAKRISHNAN H , FEAMSTER N , et al . Accountable internet protocol [Z ] . 2008 :

LEE T , PAPPAS C , BARRERA D , et al . Source accountability with domain-brokered privacy [C ] // The 12th International on Conference on emerging Networking Experiments and Technologies,December 12-15,2016,Irvine,California,USA . New York:ACM Press , 2016 : 345 - 358 .

LIU Y , REN G , WU J P , et al . Building an IPv6 address generation and traceback system with NIDTGA in address driven network [J ] . Science China Information Sciences , 2015 , 58 ( 12 ): 1 - 14 .

李智涛 , 刘莹 , 任罡 . IPv6地址生成系统基于Web portal的无客户端迁移方案 [J ] . 东南大学学报(自然科学版) , 2017 ( S1 ): 80 - 85 .

LI Z T , LIU Y , REN G , et al . Non-client migration scheme for IPv6 address generation system based on web portal [J ] . Journal of Southeast University (Natural Science) , 2017 ( S1 ): 80 - 85 .

周端奇 , 毕军 , 姚广 . 基于 IPv6 源地址验证的一种可信身份系统 [J ] . 通信学报 , 2014 , 35 ( Z1 ): 20 - 26 .

ZHOU R Q , BI J , YAO G . Trustworthy identity system based on IPv6 source address validation [J ] . Journal on Communications , 2014 , 35 ( Z1 ): 20 - 26 .

DROMS R , BOUND J , VOLZ B , et al . Dynamic host configuration protocol for IPv6 (DHCPv6) [R ] . 2003 .

THOMSON S , NARTEN T , JJINMEI T . IPv6 stateless address autoconfiguration [R ] . 2007 .

IETF.IEEE 802.1x remote authentication dial in user service (RADIUS) usage guidelines:RFC 3580 [S ] . 2003 .

Views

414

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Design and Realization of SDN-Based IPv6 Transition Technology

Multi-scale outlier mining algorithm for stateless communication data under IPv6 remote monitoring network

Privatize modification of broadband dual IP stack on cloud platform

Ubiquitous IP protocol system

Application-aware IPv6 networking

Related Author

Qiong Sun

Chongfeng Xie

Huiling Zhao

Xushan Lu

Shucheng Liu

Kun LIU

Xiaohan ZHANG

Rukun CAO

Related Institution

Huawei Technology Co., Ltd.

Beijing Research Institute of China Telecom Co., Ltd.

Research Institute of China Telecom Co., Ltd.

China Academy of Information and Communications Technology

Huawei Technologies Co., Ltd.

⁰