Trustworthy communication mechanism based on IPv6 real-name address resource PKI

摘要

Identity management and secure end to end communication are the core topics of trustworthy network research. This paper proposes a hierarchical IPv6 real-name address space as network identity. We also built an IPv6 real-name address resource PKI according to current IP address allocation structure for real-name address allocation, management and authentication work. We designed and implemented a trustworthy communication system supported by third party's IPv6 real-name address resource PKI. This method can overcome the inherent defects of IPsec that may be circumvented in the identifier conversion process and mobile environment. It also provides end to end authentication service on the Internet. We believe this is an effective solution for Internet real-name access and privacy protection problem.