Design And Implementation Of Graded Separating And Mapping Mechanisms Based On Universal Network Merged With Mobile Network

ABSTRACT:With the rapid development of science and technology, Internet has been integrated into our lives and has become a tremendous force to promote social development. However, with the expansion of network scale, user has an increasing requirement for the security management of network resources. For example, how to control user to access network resources on demand as well as how to provide single-minded network services has become a growing serious problem, Therefore, how to utilize user identity and server identity to control the diversity of network resources makes a big significance.The work in this paper relies on the important science project of Network identifier technology research in private Mobile Network. We design and implement the graded separating and mapping mechanisms based on a new type network architecture of Universal Network merged with Mobile Network. We have a multidimensional description about the information and behavior of the mobile network user which generates user-specific identification, we design the separating and mapping of user-specific identification and user-grade identification, we have a multidimensional description about the service resources of the server which generates server-grade identification, we design the separating and mapping of server-specific identification and server-grade identification. By raising the graded matching strategy mechanism based on user-grade identification and server-grade identification, we can change the matching strategy according to our requirement, so it can strengthen the security management of network resources.This paper mainly addresses the problem that how to design and implement the graded separation and mapping mechanism. Firstly, we give a briefly introduction about Mobile Network and Universal Network. Then we introduce the network architecture of Universal Network merged with Mobile Network and have the demand analysis about the graded separation and mapping mechanism in the merged network. Secondly, we analyze the functional requirement and design module division of the graded separating and mapping mechanism. Thirdly, we implement the graded separating and mapping mechanism in Linux, the traits of the implementation are shown as follows:1) it uses Linux kernel protocol stack to receive user-specific identification;2) it designs a hash table to store the separating and mapping of user identification and user-grade identification;3) it adopts the Netlink socket to complete information interaction between uses kernel-level and user-level;4) it adds the graded matching strategy mechanism between user-grade identification and server-grade identification;5) The mapping server is involved in maintaining the separating and mapping of server identification and server-grade identification;6) The authentication server is involved in maintaining the separating and mapping of user-specific identification and user-grade identification.We test and analyze the program in our prototype. The experiment results demonstrate the basic functions of the graded separating and mapping mechanism, which solves the problem that user access network resources on demand and strengthen the access security management of network resources. At last, the paper concludes the whole work and proposes suggestions for future work.