Design and Analysis of Secure Mapping Protocol in ID/Locator Split Architecture

摘要

It is commonly recognized that today's Internet is facing serious routing scalability problem.The ID/Locator split scheme is introduced to address this problem.To bring this scheme to work,there must be a mapping system providing ID-to-locator mapping service.The mapping system consists of two components,the mapping servers and the mapping clients.The mapping servers maintain the ID-tolocator mappings,and always supply an appropriate locator for any given ID.And the mapping clients are used by ID owners to update their own ID-to-locator mappings and also to query others' ID-to-locator mappings.In this paper,a secure protocol between the mapping servers and the mapping clients,namely Secure Mapping Protocol (SMP),is proposed to provide a secure mapping service in the ID/Locator split architecture.In SMP,the ID is generated by CGA algorithm,which provides a binding between the ID and the ID owner's public key.SMP also uses signatures and timestamps to provide authentication,data integrity',anti-replay and other security service.Theoretical analysis shows that SMP can resist a variety of attacks aiming to the mapping system in the ID/Locator split architecture.