可信路由随着可信网络的发展而兴起,目前的研究主要集中在轻量化网络的路由策略方面,存在的问题主要有路由算法开销大、应用范围小,且主要以IPv4为基础。提出了一种基于IPv6流标签定制的可信路由方案,在终端的可信评估基础上,通过流识别和流标记实现可信路由策略。利用前驱ARP代理机制设计了一种基于代理的虚拟链路协议,并设计了原型系统。实验证明,该协议实现了IPv6的流标记路由,提高了信息传输的安全性和效率。
With the development of trusted networks, trusted routing emerges. Currently, the research focuses on the routing strategies of lightweight network. The routing algorithm has the large overhead and small applications, which is mainly based on IPv4. A trusted routing scheme was presented based on the flow label of IPv6, which was achieved by adding a flow identification module to TNC(trusted network connection)module. Drawing on previous proxy ARP, a proxy-based virtual link protocol and prototype system was designed. Experiments show that this protocol can achieve IPv6 routing based on flow label and improve the security and efficiency of information transmission.