去中心化的SDN接入身份认证研究

Study on Decentralized SDN Access Authentication

本文研究去中心化的网络接入身份认证问题.依据非交互式零知识证明原理,借鉴区块链技术中的共识思想,对传统的拜占庭共识算法进行改进,提出了利用已经接入网络的主机对申请接入网络者的公钥所属权进行认证,并对认证结果达成共识的方案,在此基础上在SDN网络中设计并实现了接入身份认证方案Bchain NAC.

In this study, the decentralized network access authentication was focused on. Based on non-interactive zeroknowledge proof and technologies of blockchain, we improved practical Byzantine fault tolerance and designed a scheme that the hosts which have been connected to the network verify the host applying for access, by certificating the ownership of the public key. According to the scheme, Bchain NAC is designed and implemented in the SDN network.