• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2015, Vol. 37 ›› Issue (08): 1479-1485.

• 论文 • 上一篇    下一篇

增强RSVP-TE协议下的可信连接建立方法

梁洪泉,吴巍   

  1. (1. 中国电子科技集团公司第五十四研究所,河北 石家庄 050081;
    2. 通信网信息传输与分发技术重点实验室,河北 石家庄 050081)
  • 收稿日期:2014-09-11 修回日期:2014-12-16 出版日期:2015-08-25 发布日期:2015-08-25
  • 基金资助:

    国防基础科研计划基金资助项目(B1120131046);国家863计划资助项目(2015A015701)

A trusted connection establishment method
based on enhanced RSVP-TE   

LIANG Hongquan,WU Wei   

  1. (1. The 54th Research Institute of China Electronics Technology Group Corporation,Shijiazhuang 050081;2. Science and Technology on Information Transmission and Dissemination
    in Communication Networks Laboratory,Shijiazhuang 050081,China)
  • Received:2014-09-11 Revised:2014-12-16 Online:2015-08-25 Published:2015-08-25

摘要:

针对可信网络中亟需解决的可信连接建立方法展开研究,以增强型RSVP-TE可信连接控制协议为基础,结合可信度量、基于CPK的协议安全认证及可信路由等技术,提出了一种具备节点可信度、带宽和优先级保障的可信连接建立方法,最终为数据在网络中的传送提供高安全可信的信息传输服务。仿真实验结果表明,该方法能够灵敏准确地反映节点状态变化和恶意攻击,能够有效地保证网络连接的安全可信性,具有良好的动态响应和抗攻击能力。

关键词: 组合公钥, 基于流量工程扩展的资源预留协议, 可信连接, 可信度量

Abstract:

Trusted connection establishment methods are critical for trusted networks. Based on enhanced RSVP-TE trusted connection control protocol, combined with trusted evaluation, CPK-based protocol security authentication and trusted routing, we propose a trusted connection establishment method which guarantees trusted evaluation, bandwidth and priority, and in turn  information transmission services with high security are provided during data transmission in the network. Simulation results show that the proposed method can reflect the changes in node status, find out the malicious attacks effectively and sensitively, and guarantee the security and credibility of network connection with dynamic response capability and anti-attack capability.

Key words: CPK;RSVP-TE;trusted connection;trusted evaluation