Extended Dns Host Identity Protocol

The development of communicating technology and computer networks has exposed many deficiencies of recent Internet. Against the problem of the lack of security, credibility and mobility of networks, the next generation high credible network structure and key technology are researched to satisfy the demand of credibility, extensibility, manageability and mobility of networks.On the environment of network with IPv4 address, among many problems that have not been addressed, an important one is how to identify the computer in the global networks. On the one hand, many computers are anonymous, the identities of which can't be identified. On the other hand, every application has their own access control mechanism, which doesn't cooperate with each other. The IP address of host can change whenever it wants, which can not be as the identity of host. The coming of the firewall, IDS yet does not address this problem.The development of communicating technology and computer networks has exposed many deficiencies of recent Internet. Against the problem of the lack of security, credibility and mobility of networks, the next generation high credible network structure and key technology are researched to satisfy the demand of credibility, extensibility, manageability and mobility of networks.For addressing this problem mentioned above, a united identity identification and naming mechanism are necessary. So a new name space, HI, is researched in this paper, which is an important complement of IP address and DNS name space. At the same time, a new sub-layer is introduced in current network system, which is between the network layer and transport layer named Host Identity Protocol. HIP protocol satisfies the demands of security and identification of communication. As the introduction of HIP protocol, the resolving of the tri-name structure which contains DNS domain name, HI and IP address needs to be tackled. Then the implementation of the base exchange of HIP protocol in Linux OS and extended DNS system are described in this paper, and some functions and data structure are mentioned. At last, experiment and analysis of the result of experiment are described.