DACS: DHT-Based Distributed Access-Control System for a Secure Locator/Identifier Separation Network

Kai Wang

《網際網路技術學刊》 17卷7期 (2016/12) Pp. 1413-1421

https://doi.org/10.6138/JIT.2016.17.7.20160615

摘要

Locator/Identifier Separation Network (LISN) is an ideal solution to the scalability issues of current routing infrastructure, and how to achieve a secure LISN attracts remarkable concerns. This paper proposes a new distributed hash table (DHT)-based Distributed Access-Control System (DACS) for a secure LISN, including three functional modules: the first is a Tag-aware Access-Control module (TAC), which generates user tag (UTag) and service tag (STag) by cognizing their natural and dynamic attributes respectively; the second is an Adaptive Policy Generation module (APG), which adaptively selects proper policy instances to achieve intelligent access control; the last one is a Cooperative Decision Making module (CDM), providing efficient decision-making with the help of multi-peer parallel cooperation. We validated its advantages by implementing the designed DACS in our LISN platform. To the best of our knowledge, this is the first attempt to design a context-aware DACS for LISN, embedding both statically and dynamically cognitive features.

關鍵字

Access control ； Distributed hash table ； Locator/identifier separation network