基于PKI/HIP协议的下一代互联网实名访问研究

Study on real-name access mechanism in next generation Internet based on PKI/HIS protocol

为了有效解决Internet因设计上的缺陷而面临的安全和应用上的瓶颈,在下一代互联网的建设中,通过引入主机标识协议、PKI体系和扩展DNS系统,建立起了一个包含主机认证、主机标识符管理和扩展域名查询为一体的主机实名访问的网络安全层体系,实现了网络中数据传送时源地址的真实性、主机名认证和寻址、网络中资源细粒度的访问控制。该模型大大提高了互联网的安全性,为下一代可信互联网的建设提供了一种探索方案。

In order to effectively solve the Internet deficiencies of design,security is the first problem to consider during construction at the next-generation Internet.Through the introduction of host identity protocol and PKI system and the expansion of DNS system,a se-curity layer of real-name access including a host authentication and host identifier management and expansion of the domain name is es-tablished.Real source address access and host name authentication and addressing is implementation.The model greatly enhance the security of the Internet,a method is provided to construct the next generation credible Internet.