IBAPV: An Identity-Based Aggregate Path Verification Protocol for Securing BGP

摘要

The paper proposes an Identity-Based Aggregate Path Verification protocol (IBAPV) to provide authenticity for route announcements in the Border Gateway Protocol (BGP) with a more efficient and easily deployed identity-based aggregate signature scheme instead of certificate-based scheme, which leads to performance and deployment matters of current proposals. Because in the identity-based cryptographic scheme, private key generator has the knowledge about the system master key and private keys of all users in the system, which is greatly risky in the real world, a Distributed and Hierarchical Key Issuing protocol (DHKI) is proposed to hold the privacy of these secrets in IBAPV. Compared with S-BGP, IBAPV simplifies key management process, consumes lesser memory and has shorter update message. Our simulation result indicates that convergence time of IBAPV with hardware implementation approximates BGP.