| Nowadays,the construction of mobile private networks has become a key area in the information construction of governments worldwide.Given the special nature of mobile private networks,traditional IP networks face difficulties in establishing an independent,secure,and controllable data transmission channel.In recent years,as the problems of traditional IP networks have become increasingly prominent,the research of a new network system has become a focus of attention in academia and industry.Currently,well-known new network systems include the IPv6 network system,the Named Data Networking system(NDN),and the Intent-Based Networking system(IBN).In China,research on new network systems mainly focuses on the Multi-Modal Intelligent Networking system(PINet)and the Intelligent Fusion Identification Networking system(SINET-I).Based on the SINET-I network system,this paper designs and implements an identification forwarding mechanism using identification mapping technology to meet the two major requirements of independent and secure data transmission channels in the construction of mobile private networks.The aim is to establish a fully independent and controllable data transmission channel in both dedicated link and public network environments.The main contributions of this paper are as follows:(1)According to the requirement for independence and autonomy in the construction of mobile private networks,this thesis proposes a new type of network layer identification packet based on the design concepts of multiple network layer packets such as IPv4,IPv6,and SRv6,combined with the concept of "identification".The identification packet can fully replace the IPv4 packet as the carrier of user data at the network layer.Through the separation of routing identification and identity identification design,the ambiguity problem of addresses in IP packets is solved,and the decoupling of routing information and identity information is achieved.At the same time,the thesis proposes two application scenarios for identification packets: dedicated links and public networks,in accordance with the current development of networks.(2)In the presence of dedicated links,mobile private networks can transmit data solely through identification packets.This article proposes a mapping-storageforwarding mechanism at the entry point of the dedicated link,which constructs identification packets based on IP packets and enables data transmission using only identification packets.Ordinary nodes in the dedicated link forward data packets guided by the routing identification.When a data packet arrives at the exit node,the mappingstorage-forwarding mechanism recovers the original IP packet based on the identification packet and sends it to the corresponding destination.Throughout the entire data transmission process,the identification forwarding mechanism is completely transparent to users,greatly reducing the difficulty of use.In addition,to facilitate the smooth upgrade of old private networks and remote transmission scenarios,this article realizes the transmission of identification packets in the public network by encapsulating them in IP packets.A small number of trusted nodes deployed in the public IP network constantly change IP address information,achieving remote transmission and path concealment of sensitive data.(3)The intelligent financial identification network forwarding mechanism designed in this paper has been implemented through P4 tools,and the device independence of P4 tools has improved the device autonomy and controllability of the intelligent financial identification network forwarding mechanism.The identification network forwarding mechanism was tested and analyzed in both virtual and physical environments.The test results show that the intelligent financial identification network forwarding mechanism designed in this paper can provide a completely independent,secure,and controllable data transmission channel for mobile dedicated networks. |
PDF Full Text Request