Security Payload Based On Micro-communication Architecture And Certification Services, Design And Realization

With the general inter-connection service , communications by Internet has acted as an important role in life of our society. But without regarding of security and QoS at the beginning of design in TCP/IP, at the same time with the dependence on network utilization increasing and the requirements on performance of network improved, the limits and defects of TCP/IP become more obvious. So we need new network technology to provide some better service and efficiency . So we introduce a new network architecture SUNA in this dissertation. Firstly I introduce the definition and characters of SUNA as the following: it is a non-layered architecture , all the functions it provides are completed by various service unit; and a service cell just provide service not accept service. All the service units are divided into 5 categories to complement different functions. Secondly I describe a model of SUNA---MCES architecture in details which includes the general model ,network address and the data format. And SUNA can solve all the problems in security and Qos of traditional layered networks. In the following part the paper introduces the some technologies of security in SUA: virtual circuit and security service unit. We solve the address spoofing and flood attacking problems by virtual circuit. And then we introduce the implement of security service unit—Authenticaton service unit and security payload service unit and they can provide secrety, data source identify, integrity and anti-resend service. In the last part of this paper we give the test result and come to a conclusion that the SUA can improve the efficiency of network and the system can be extended easily. In the end we tell some further work to be done. The implement of ASU and SPSU and the test result of them will help to analyze the performance of network architecture and to add some new units with new functions into the network architecture.