How to prevent identity fraud in locator/identifier — Split architectures

摘要

The locator/identifier separation paradigm is a very promising Next Generation Internet addressing scheme. By this scheme, however, a node's identity — represented by the identifier — becomes more important and persistent. It is, therefore, more than ever necessary to protect a node's identity against fraud. In this paper, possible attack scenarios against a node's identity are outlined. Afterwards, a framework based on a distributed public key infrastructure and smart cards is introduced to counter the identity fraud thread on the network layer in locator/identifier-split architectures.