Research On Network Slice Technology Based On Software Defined Trust

The future network has the characteristics of diverse application scenes,mass user number,mixed network type.Traditional network can't satisfy the development of future network.In order to solve this problem,network slice technology was introduced by 5G white paper.Network slice is one of the key technologies to realize 5G through the virtualization of physical resources into virtual resources in the framework of SDN/NFV.Each network slice is a set of network function and resources.It provides differentiated services for different needs of specific business scenarios(functions,performance,security,etc.).At present,scholars at home and abroad only consider how to abstract resources,how to meet the QoS requirements,and how to improve the utilization of resources and others factors for the research on network slice,but the research on security and trust is still scare.However,the untrusted phenomenon of network slice may cause the consequence that users can't use the network slice properly,and even may cause the breakdown of whole network.Thus,it is important to ensure the security and trust of the network slice.This paper proposed a conception of software defined trust based on software defined network and trusted computing,and designed a model of network slice construction and trusted recovery based on software defined trust.When a user requests resource,this model would gather the trust state of switches and distribute trusted network slice for the different demand accordingly.When a network slice is untrusted in using,this model would make some rectifications by OVS retroversion and flow table recovery.In order to realize the model of network slice generation and trusted recovery based on software defined trust,this paper used VTN technology in OpenDaylight as the section of generating network slice,researched on trust of network forwarding resources for OpenvSwitch,and measure the trust of forwarding resources by TPM.In order to realize the function of network slice generation,OVS retroversion and flow table recovery,this paper extended function of OpenDaylight and OpenvSwitch in Linux.In order to verify the credibility and efficiency of the network slice construction and trusted recovery based on software defined trust proposed in this paper,we built experiment environment in Linux system.After making contrast of OVS retroversion and flow table recovery with the common approach——slice restructure through experiments,the experiments results show that the method of OVS retroversion and flow table recovery is better than slice restructure in response time and packet loss rate,which proved the network slice based on SDT put forward in this paper can improve the efficiency of resource utilization and slice recovery while ensuring the credibility of network slice.