Abstract:Lack of effective accountability mechanisms brings a series of security problems for Internet today. In Next Generation Internet based on IPv6, the system of identity authentication and IP verification is the key to accounting ability. Source Address Validation Improvement (SAVI) can protect IP source addresses from being faked. But without identity authentication mechanism and certain relationship between IP and accountable identity, the accountability is still unreliable. To solve this problem, most research focus on embedding accountable identity into IP address which need either changing DHCP client or twice DHCP request process due to the separate process of user authentication and address assignment. Different from previous research, this paper first analyzes the problems and requirements of combining Web Portal or 802.1X, two main identity authentication mechanism (AAA), with the accountable address assignment in SAVI frame-work. Then a novel Cooperative mechanism for Accountable IP address assignment (CAIP) is proposed based on 802.1X and SAVI, which takes into account the validation of IP address, the authenticity and accountability of identity at the same time. Finally, we build up prototype system for both Fat AP and Thin AP wireless scenarios and simulate the performance of CAIP through large-scale campus networks' data logs. The experiment result shows that the IP addresses and identities in CAIP are protective and accountable. Compared with other previous research, CAIP is not only transparent to the terminals and networks, but also low impact on network equipment, which makes CAIP easy deployment with high compatibility and low cost.

Establish the Intrinsic Binding in Naming Space for Future Internet Using Combined Public Key.

Research on Intrinsic Security in Future Internet Architecture

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Inter-domain authentication scheme for Pervasive Computing Environments

An Efficient Name Resolving Mechanism for Inter-domain Policy in Content-Centric Networks

TrueID: A Practical Solution to Enhance Internet Accountability by Assigning Packets with Creditable User Identity Code.

Versatile routing and self-certifying features support for secure mobility in expressive internet architecture

Name and Addressing in Future Internet

SafeZone: A Hierarchical Inter-Domain Authenticated Source Address Validation Solution

An Implementation Suite for a Hybrid Public Key Infrastructure

Designing a Global Authentication Infrastructure

Pseudonym Authentication on Network Layer in Information-Centric Networks

SI-STIN: A Smart Identifier Framework for Space and Terrestrial Integrated Network

Secure Name Resolution for Identifier-to-Locator Mappings in the Global Internet

Framework for secure authentication of nodes in peer-to-peer network

Prototype and Testing Report of a Multi-Identifier System for Reconfigurable Network Architecture under Co-Governing

MIN: Co-Governing Multi-Identifier Network Architecture and Its Prototype on Operator's Network

Extending Authentication Mechanism to Cooperate with Accountable Address Assignment

Co-governed Space-Terrestrial Integrated Network Architecture and Prototype Based on MIN

An SSL-PUF Based Access Authentication and Key Distribution Scheme for the Space–Air–Ground Integrated Network

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.