利用PKI扩展主机标识协议

主机标识协议HIP使得主机身份有了独立的标识HI,它作为唯一代表主机身份的标识验证主机的身份。HIP中虽然给出了拥有HI的主机的身份验证和建立安全关联的方法,但并没有涉及主机和HI的映射关系。文中通过PKI注册生成主机和HI的对应关系的证书来保证主机身份和HI映射的权威性,同时扩展HIP的基本交换,将它用于验证证书的真实性,从而和HIP共同形成一套完整的网络安全体系。

An Expansion of Host Identity Protocol by Using PKI

HIP (Host Identifier Protocol) makes HI (Host Identifier) the unique identifier to verify the identity of the host entity. Although HIP provides the identity verification method for the host with HI and thus the establishment of the Security Association in between,the mapping relationship between the host and the HI is not yet defined. This paper describes an approach to authorize the mapping via the registering of PKI to produce the verification certificate of the host and the HI,and to authenticate the certificate by the expanded HIP Base Exchange. The PKI and HIP then jointly build a complete secure network architecture.