智慧协同标识网络

创造性地提出了以"三层"、"两域"为典型特征的智慧协同标识网络结构模型。"三层"即智慧服务层、资源适配层和网络组件层;"两域"即实体域和行为域。在此基础上,分别建立了智慧服务层、资源适配层和网络组件层的基本理论,以在有效解决网络可扩展性、移动性、安全性等问题的基础上,大幅度提高网络资源利用率,降低网络能耗,显著提升用户体验。     

一种面向智慧协同网络的自适配路由策略研究

现有互联网网络体系和机制相对"静态"和"僵化",缺乏支持智慧网络的有效机制.要从根本上解决现有互联网存在的严重弊端,必须创建新的网络理论体系.本文在智慧协同网络"三层"、"两域"体系结构下,针对"网络组件层"的路由自适配问题展开研究,提出基于生物启发的转发网络族群自适配路由策略,实现族群内路由组件之间的智慧协调、动态重构和优化决策,有效解决现有路由策略的静态、僵化等问题.通过数学分析证明:如果设定模型参数μ∈(0,1),提出的自适配路由策略可以始终保持稳定性.最后,通过原型系统验证了提出自适配路由策略是切实可行的,能够提高网络的承载业务数量和提升用户体验.     

智慧网络组件协同机制研究

现有互联网网络体系和机制相对"静态"和"僵化",缺乏支持智慧网络的有效机制.要从根本上解决现有互联网存在的严重弊端,必须创建新的网络体系、理论及机制.本文在多年信息网络基础理论研究和前期973项目"一体化可信网络与普适服务体系基础研究"的基础上,在智慧协同网络"三层"、"两域"总体结构模型的指导下,提出了一种智慧网络组件协同体系结构模型,提出了智慧网络组件模型与族群聚类机制,给出了网络复杂行为博弈决策机制及智慧网络组件协同工作机制等,实现了基于网络组件协同配合的网络智慧通信,有效解决了现有互联网资源利用率低、网络能耗高等问题.     

智慧标识网络服务机理研究进展及安全性分析

随着互联网规模的不断扩大以及应用场景的多元化,传统网络无法很好地满足新业务的动态多样化需求,因此国内外对未来网络展开了深入研究.本文首先介绍了未来互联网体系架构的研究现状.其次,介绍了具备"三层、两域"特征的智慧标识网络(Smart Identifier NETwork,SINET)体系架构,然后重点阐述了SINET服务机理在服务的命名与解析、路由机制、服务缓存、移动性、传输控制机制、可扩展性、绿色节能等关键技术方面取得的研究进展,并进一步详细分析了SINET服务机理的安全性.最后总结了SINET面临的挑战,对SINET服务机理在大规模场景部署中可能存在的问题做出讨论.     

智慧标识网络动态防御机制与应用

介绍了智慧标识网络(SINET)的基本原理,重点分析了SINET的资源动态适配机制在安全性方面的解决方案,提出了动态适配安全防御总体架构和具体机制。理论研究和实验表明,智慧标识网络动态防御机制可灵活调度网络资源、智慧服务迁移,从而较好地应对一些网络安全攻击问题。     

P2PSIP移动性研究

P2PSIP基本概念和SIP网络移动性的基础上,将SIP移动性扩展到P2PSIP重叠网络层面。分析了P2PSIP重叠网络在终端移动性,会话移动性,个人移动性和服务移动性方面的新特性和新应用,重点研究了P2PSIP多重叠网络互连问题。讨论了重叠网络域间消息和管理配置参数适配过程,以及用户跨重叠网络域登记、定位的方式。     

未来互联网体系结构标识方案研究

现有互联网的标识体系以IP地址为核心、以身份和位置的绑定为特征,难以满足未来互联网可扩展性、移动性和安全性等方面的需求。对各种国际主流的未来互联网体系结构的标识体系进行了分类,将其沿着"改良式"和"革命式"两种路线进行总结,分析了标识体系设计中所面临的问题和挑战,并结合互联网体系结构的发展趋势,提出了标识体系的演进和发展建议。     

基于标识/位置分离的新型移动性管理机制研究

标识/位置分离是未来网络的重要设计原则之一,LISP基于标识/位置分离提出了一种有效解决互联网路由可扩展性问题的机制,但其在移动性支持方面仍存在诸多问题。为此,本文提出了一种基于LISP架构的新型移动性管理方案,通过引入三种命名机制和两种映射系统,可以在保持映射系统可聚合的前提下,避免现有LISP移动性方案存在的双重映射、双重封装等问题,提供高效、灵活的移动性支持。同时,该方案还提出了一种快速切换机制来进一步优化切换性能。     

基于名的平坦路由

路由是信息网络的基础,分布于网络的各个层面。现有互联网采用了基于IP地址的网络层路由技术和基于域名解析的域名服务器（DNS）应用层路由技术。由于IP地址和域名的结构化特点和身份位置紧耦合特点,使得互联网面临路由可扩展性、安全性、资源服务迁徙移动支持性差等严峻问题。基于名的平坦路由采用了平面化的身份命名方式,实现了身份位置分离,可有效提高网络路由的可扩展性、可配置性、安全性、服务支持的鲁棒性、资源移动的支持性等。     

基于三层模式的数据库连接模型的设计

为了解决客户端对数据库的透明访问以及数据库连接参数的安全性问题,提出了一种基于三层模式的数据库连接模型。该模型利用COM 的组件服务和MSMQ队列组件解决了客户端与数据库之间的透明通信问题,同时也在一定程度上保证了数据库连接参数的安全性。测试表明,基于该模型的三层应用系统具有较好的可扩展性、可维护性和可靠性。     

Virtual network approach to scalable IP service deployment and efficient resource management

As the Internet evolves into a global all-service communication infrastructure, a key consideration is providing quality of service guarantees over IP with efficient resource utilization in a scalable, flexible, and automatic way. In this article we present a virtual network (VN) based architecture for scalable IP service deployment and efficient network resource management. Particularly considering a DiffServ/MPLS III transport network supporting multiple VNs, we propose a dynamic approach for efficient bandwidth sharing among VNs. The bandwidth sharing is service-level-agreement-based; the spare capacity in underloaded VNs is adaptively and efficiently utilized, and SLA compliance for all the VNs involved is always guaranteed.     

Internet multicast routing and transport control protocols

Multicasting is a mechanism to send data to multiple receivers in an efficient way. We give a comprehensive survey on network and transport layer issues of Internet multicast. We begin with an introduction to the current Internet protocol multicast model-the "host group" model and the current Internet multicast architecture, then discuss in depth the following three research areas: (1) scalable multicast routing; (2) reliable multicast; and (3) multicast flow and congestion control. Our goal is to summarize the state of the art in Internet multicast and to stimulate further research in this area     

Layer-encoded video streaming a proxy's perspective

This article describes a proxy's perspective in an architecture that supports efficient distribution of recorded video data in today's Internet. The support of layer-encoded video streaming with the aid of proxies enables a video distribution infrastructure that is efficient in today's Internet, and allows new mechanisms and techniques to be leveraged in a future Internet. An overview of a scalable and adaptive streaming architecture is presented. Open problems in the distribution and caching process are identified. Throughout the article solutions to improve the performance of such a video distribution architecture are discussed, mainly from the perspective of a proxy cache. The investigations that led to these solutions are based on an empirical experiment with layer encoded video. The goal of this experiment was to understand the effect of varying the number of layers on the viewer's perceived quality. The results of this initial investigation can be seen as the foundation for subsequent studies on mechanisms that improve the transport and caching of layer-encoded video in a scalable adaptive streaming architecture.     

MSPnet： MANAGEABLE SIP P2P MEDIA DISTRIBUTION SYSTEM

The letter proposes a three-layer manageable media distribution network system archi- tecture called MSPnet, which is based on Session Initiation Protocol[1] and Peer to Peer (SIP P2P) technology. MSPnet performs application-level structured DHT routing and resource location among domains and unstructured ones in domain. Except for media distribution, it can be used to support a variety of P2P applications, including video broadcasting, video on demand, VoIP, etc. MSPnet is composed of three layers, namely, the signal control layer, the management layer, and the media transportation layer. The MSPnet prototype consists of the SIP server, the management server, the media server, and the node User Agent (UA). Results from a prototype experiment in a large-scale Internet environment show that MSPnet is feasible, scalable and manageable.     

Smart pay access control via incentive alignment

We use game theoretic models to show the lack of incentives in the transport control protocol congestion avoidance algorithm and the consequential system-wide network problems. We then propose a Vickery-Clark-Groves (VCG) mechanism-based access control mechanism for packet traffic. Our mechanism is called "smart pay access control (SPAC)". We prove both the incentive compatibility and individual rationality of SPAC, which achieves Pareto efficient allocation of network resource. The computing problems are NP-hard for the general VCG mechanism, whereas our mechanism computes the winner's determination problem as fast as a sorting algorithm. The speed of SPAC makes it feasible for the real world usage. As a positive side effect, the mechanism provides the base for a pricing scheme, which we present in the context of the differentiated service architecture for the Internet.     

Performance Analysis of Infrastructure Service Provision with GMPLS-Based Traffic Engineering

Dynamic sharing of the common physical network is envisioned as a key enabler for the emerging Internet technologies. This paper addresses challenges related to resource sharing in the physical layer and analyzes the performance of infrastructure service provision with control plane mechanisms based on generalized multi protocol label switching (GMPLS). In our approach, the provisioning of infrastructure services is supported by two novel concepts for GMPLS traffic engineering (TE): resource visibility and inter-domain exchange. Resource visibility is a new network control plane concept, which defines the usage polices for transmission, multiplexing, and switching resources in multiple GMPLS layers. In our architecture, every network resource may exhibit different visibility to different services at different layers. The inter-domain exchange, here referred to as GMPLS exchange point (GXP), is the physical layer equivalent of the Internet exchange point (IXP). Just as how the IXP manages interconnections of autonomous systems (AS) in the Internet, the GXP manages dynamic interconnections of multiple provider domains and enables them to advertise their physical resources to other domains. We model the dynamic provisioning of infrastructure services using graph theory and deploy GMPLS traffic engineering (TE) to optimize the routing and resource yields. The results obtained demonstrate that traffic engineering with resource visibility and GXP brings significant performance benefits in resource utilization and infrastructure extensibility, especially when network providers set up LSPs as a result of collaborative and carrier-neutral traffic engineering where they share information about resource capabilities and utilization     

A multilayer differentiated protection services architecture

Metropolitan area and long-haul networks are migrating toward the deployment of optical mesh technologies. This requires, among other things, a new generation of highly intelligent protection and restoration mechanisms to perform functions of protection and bandwidth management. We introduce an architecture that provides differentiated protection services across multiple layers of network hierarchy. A connection at any client layer can request a protection against resource failures at any lower layer. A key aspect of the architecture is the hierarchical tree organization of shared risk link group (SRLG) resources. They represent routing-related failures across all layers of protocol stack. The architecture is very scalable in terms of communicating link-state and bandwidth information between adjacent layers. SRLG trees are used to aggregate this information and provide a summary to the client layer. We discuss the requirements and challenges for routing and signaling mechanisms in order to support the proposed architecture. The complexity of this architecture is evaluated and compared with the complexity of a nonhierarchical alternative.