Research On Access Control In Service Selection Gateway

With the rapid development of Internet, people are more and more focusing on how to provide individualized and value-added services. Service selection gateway (SSG) emerges in such circumstances. Unfortunately Most Service Selection Gateways on the market nowadays are ISP oriented coarse-grained devices, whereas no Service Selection Gateway is suitable for content providers. What is going to talk about in this paper is the device for content providers which is access controlled by URL.First, the TCP/IP protocol suite, HTTP and FTP are overviewed in this paper, and a method to parse URL from HTTP and FTP segments is also introduced. Then, two algorithms, URL access control algorithm based on double-array finite state machine and URL dispatch algorithm based on STCEP (service type and content evenly partitioning), are proposed. Furthermore, TCP splicing method is improved in this paper so as to satisfy the requirements of the SSG connection management mechanism, and a new connection management model based on Netfilter framework in Linux kernel is presented. Access control in SSG can be completed by the two algorithms and the connection management model. Finally, the improved structure, work-flow and the implementation strategy and details of access control module are described.Simulation results show that the two proposed algorithms can efficiently control user access, and the access control mechanism in this paper is innovative and of practical value in terms of implementation methods and integrative utility.