Trusted authentication and safe access control method of MPLS network

Abstract

The invention discloses a trusted authentication and safe access control method of an MPLS network, which realizes the trusted authentication and safe access control of the MPLS network and improves the credibility of Internet backbone. The method comprises four parts as follows: microcode implementation of digital short signature, microcode implementation of IP head signature option format, microcode implementation of signature verification based on IP address pair and TCAM design of signature information table. The method comprises the following steps that: the terminal node signs for source target IP address pair and packages signature associated information in the option field of the IP head; and verification of the signature is implemented through microcode design on a network processor, wherein the signature information table stores and searches based on TCAM technology. The invention is adapted to access control to MPLS backbone networks by various wire park networks, government affairs networks, campus networks and network terminal nodes such as wireless Mesh and WLAN. As an effective and practical technical scheme, the method has good application prospect.

Description

technical field [0001] The present invention generally relates to the field of network communication technologies, and more specifically relates to trusted access control of MPLS backbone networks by terminal nodes in various wired campus networks, government affairs networks, campus networks, enterprise networks, wireless WLANs, and wireless Mesh networks. Ways to improve the trustworthiness of the Internet. Background technique [0002] With the development of Internet technology, people's demand and dependence on the application of information networks are constantly increasing, and the accompanying information security threats are also increasing. The threats to a single host in the past have developed into attacks on network infrastructure, and most network security incidents are caused by vulnerable user terminals and "out of control" network usage behaviors. The reason why virus intrusion, Trojan implantation, denial of service attack, address theft, DHCP spoofing an...

AI Technical Summary

Problems solved by technology

[0006] 3) After the authentication is passed, the PPPoE service flow still needs to be unpacked, identified, encapsulated and forwarded by the BRAS device, which may easily cause network bottlenecks

Therefore, PPPoE is not suitable for high-speed enterprise networks

Images