中文摘要：

BGP（border gateway protocol）协议的安全是Internet路由系统安全的关键，目前已提出多种BGP安全机制，但都未能得到部署．对BGP安全机制的部署问题进行深入分析，利用AS（autonomous system）结构的Rich-Club特性，提出AS联盟的概念放计了一种BGP安全机制：SE-BGP（security enhancedBGP）．SE-BGP采用基于AS联盟的安全体系结构，使用一种具有分布式认证中心的新的信任模型---TTM（translator trust model），设计了基于TTM模型的认证算法，给出了基于现有BGP协议的扩充实现方法，与已有的安全机制相比，SE．BGP在保证安全能力的同时，所需的证书规模大约为原有机制的1％，具有良好的可扩展性，

英文摘要：

BGP （border gateway protocol） security is very important to the inter-domain routing security. Many solutions have been proposed, but none has been deployed until now. This paper analyzes the main problems of these approaches. It studies the AS （autonomous system） topology of the Internet, especially the rich-club property, and gives the notion of the AS alliance. It proposes SE-BGP （security enhanced BGP） as a new way for BGP security. An alliance-based security architecture, and a new trust model-TTM （translator trust model） for SE-BGP are constituted. An authentication scheme based on TTM is also designed. Furthermore, the way of how to extend the BGP protocol is considered. The SE-BGP has strong ability of security and good scalability, and the number of the used certificates is about 1% of the traditional solutions.