通信学报Issue(1)：171-177,7.DOI:10.3969/j.issn.1000-436x.2013.01.019
基于流认证的 IPv6接入子网主机源地址验证
Host’s source address verification based on stream authentication in the IPv6 access subnet
摘要
Abstract
A cryptographically-implemented high-speed source address verification scheme for the hosts in the IPv6 ac-cess subnet was proposed. The MAC address was used as the identity of the host machine and bounded with the host’s public key. Then the IPv6 address was derived from the host machine’s public key using the cryptographically generated address algorithm. The address authenticity was guaranteed by the digital signature and the fast and secure source address verification for packet stream was achieved through message authentication code algorithm and stream authentication. The experimental system show that the scheme could verify the source addresses of data packets at a loss cost. Thus, it is a secure and feasible scheme.关键词
源地址验证/基于身份的密码/密码生成地址/消息认证码/流认证Key words
source addresses verification/identity based cryptography/cryptographically generated address/message authentication codes/stream authentication分类
信息技术与安全科学引用本文复制引用
陈越,贾洪勇,谭鹏许,邵婧..基于流认证的 IPv6接入子网主机源地址验证[J].通信学报,2013,(1):171-177,7.基金项目
国家重点基础研究发展计划(“973”计划)基金资助项目(2012CB315901) （“973”计划）
国家科技支撑计划基金资助项目(2008BAH37B03) Foundation Items：The National Basic Research Program of China (973 Program)(2012CB315901) （2008BAH37B03）
The National Key Technology R&D Program of China (2008BAH37B03) （2008BAH37B03）
