Design And Implementation Of The Identifier And Physical Address Resolution Protocol And Its Security Mechanism For The New Internet

Due to the problems of poor scalability,poor mobility and poor security,based on the separation of the identity and location,the access identifier and route identifier used respectively in the new Internet can separate the dual attributes of identity and location.In this new Internet architecture,how to achieve the Identifier and physical link address resolution is one of the basic research problems.In this paper,the architecture of the new Internet,unicast identifier communication mechanism and connectivity communication mechanism are studied first,then the security problems of the address resolution system are analyzed.Based on this,a kind of address resolution communication mechanism with good expansibility is designed.In this thesis,the data packet format,four options and address resolution cache table format are designed,and two kinds of address resolution process under different scenarios are described in detail,to meet the inter-entity communication.And this paper proposes a mechanism to verify the data source against the existing security problems to ensure that the source of the data packet is credible,thus preventing the attacks that the address resolution process may encounter.Based on the design of address resolution protocol and its security mechanism,this paper presents a modular implementation scheme.The kernel coding is implemented from three aspects:the basic protocol stack implementation,the address resolution mechanism implementation and the secure communication mechanism realization.The basic protocol stack is the implementation of the upper layer data packet encapsulated in the protocol in the kernel code.The implementation of the address resolution mechanism is implemented in three aspects:initializing the protocol,entering the processing flow and conforming to the definition of the protocol.The secure communication mechanism is based on the designed mechanism,from the CGID synthesis module,RSA digital signature module,verify module three aspects to achieve.Finally,the paper tests the function and security of the new Internet address resolution protocol and its security mechanism.The test results show that the system can meet the requirements and ensure the secure communication.