本文選題：命名數(shù)據(jù)網(wǎng)絡(luò) + 短簽名��； 參考：《西安電子科技大學(xué)》2014年碩士論文

【摘要】：命名數(shù)據(jù)網(wǎng)絡(luò)(named data network，NDN)以數(shù)據(jù)為中心，旨在替換當(dāng)前以主機(jī)為中心的IP架構(gòu)，克服地址枯竭以及提高網(wǎng)絡(luò)的通信性能，近年來(lái)越來(lái)越受到關(guān)注。在NDN網(wǎng)絡(luò)中，用戶可以從附近緩存信息的路由節(jié)點(diǎn)獲得信息副本。盡管這種方式可以避免從數(shù)據(jù)源處獲得所需信息，但是這種非端到端的通信模式會(huì)面臨消息可靠性問(wèn)題。本文針對(duì)這一安全問(wèn)題，提出兩種安全的輕量消息批認(rèn)證機(jī)制：基于證書的批認(rèn)證機(jī)制和基于無(wú)證書的批認(rèn)證機(jī)制。 本文設(shè)計(jì)的快速批認(rèn)證機(jī)制對(duì)緩存中的數(shù)據(jù)進(jìn)行認(rèn)證，確保數(shù)據(jù)的認(rèn)證性和完整性，防止消息篡改、偽造�；谧C書的快速批認(rèn)證機(jī)制，，采用基于證書的方法驗(yàn)證用戶身份的有效性，結(jié)合短簽名和批認(rèn)證技術(shù)，允許路由器同時(shí)認(rèn)證多個(gè)數(shù)據(jù)包從而減少認(rèn)證時(shí)間。同時(shí)對(duì)該機(jī)制的安全性和效率進(jìn)行分析�；跓o(wú)證書的快速批認(rèn)證機(jī)制，采用無(wú)證書公鑰密碼機(jī)制，結(jié)合短簽名和批認(rèn)證技術(shù)，同樣可以解決命名數(shù)據(jù)網(wǎng)絡(luò)中的快速認(rèn)證問(wèn)題，安全分析和性能分析表明第二種機(jī)制也是安全高效的。
[Abstract]:Named data network (NDN), which is data centric, aims to replace the current host centric IP architecture, overcome address exhaustion and improve network communication performance in recent years. In NDN networks, users can obtain copies of information from the routing nodes that cache information nearby. To avoid obtaining the required information from the data source, the non end to end communication mode will face the problem of message reliability. In this paper, two safe and light weight message batch authentication mechanisms are proposed for this security problem: certificate based batch authentication mechanism and certificate based batch authentication mechanism.
In this paper, the fast batch authentication mechanism is designed to authenticate the data in the cache, to ensure the authentication and integrity of the data, to prevent the tampering and forgery of the messages. The certificate based method is used to verify the validity of the user's identity based on the certificate, and to allow the router to authenticate multiple numbers at the same time by combining the short signature and batch authentication technology. The security and efficiency of the mechanism are analyzed. Based on a certificate free fast batch authentication mechanism, a certificate free public key cryptosystem, a short signature and batch authentication technology, can also be used to solve the fast authentication questions in the named data network, and the security analysis and performance analysis show that second kinds of machines are used. The system is also safe and efficient.
【學(xué)位授予單位】：西安電子科技大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.02


本文編號(hào)：1958709