一种基于IPv6的物联网分布式源地址验证方案

An IPv6-Based Distributed Source Address Validation Scheme in Internet of Things

作者在融合物联网的新一代互联网网络环境下,提出了基于IPv6的源地址验证整体架构.基于该架构,考虑物联网节点资源受限特点,并结合物联网末梢网络的拓扑形态及其路由方式上的特征,设计了基于IPv6的物联网末梢网络分布式源地址验证方案.分别讨论了静态指定、SLAAC(Stateless Address AutoConfiguration)、DHCPv6(Dynamic Host Configuration Protocol Version 6)以及DHCPv6与SLAAC混合情况下的物联网节点IP地址分配及其验证机制.模拟实验表明,该方案仅以微小的代价实现了物联网节点IP地址的分配,同时还保证了物联网节点之间、物联网节点与互联网端系统之间端到端通信时双方IP地址的真实可靠性,从而整体上增强了物联网的安全性.

Under the background of Next-Generation of Internet based on the Internet of Things（IoT）,an architecture of IP source address validation is proposed in this paper.Considering the resource-restraint of IoT nodes,the distributed IPv6 source address validation scheme is designed according to this architecture as well as the topology and routing manner in end-edge network of IoT.Meanwhile,IPv6 address allocation methods for IoT nodes and their authentication mechanisms are respectively discussed under the scenarios of static assignation,DHCPv6,SLAAC and DHCPv6-SLAAC mixed.The simulation has proved that our scheme can not only implement IP address allocation,but also keep the IP address authenticity with slight cost among IoT nodes,as well as between IoT nodes and Internet end-host.As a result,the whole security in IoT is enhanced.