Securing address registration in location/ID split protocol using ID-based cryptography

摘要

The Locator/ID Separation Protocol (LISP) is a routing architecture that provides new semantics for IP addressing. In order to simplify routing operations and improve scalability in future Internet, the LISP separates the device identity from its location using two different numbering spaces. The LISP also, introduces a mapping system to match the two spaces. In the initial stage, each LISP-capable router needs to register with a Map Server, this is known as the Registration stage. However, this stage is vulnerable to masquerading and content poisoning attacks. Therefore, a new security method for protecting the LISP\udRegistration stage is presented in this paper. The proposed method uses\udthe ID-Based Cryptography (IBC) which allows the mapping system to\udauthenticate the source of the data. The proposal has been verified using formal methods approach based on the well-developed Casper/FDR\udtool.