基于元胞自动机的安全高速边缘路由器设计

高速边缘路由器是一种在边缘接入网使用的基于IPSec协议的高速路由器.作为接入网中重要的安全设备,高速边缘路由器必须提供高速的安全报文转发和大容量的安全信息(包括安全策略、证书、签名等)存储能力,满足边缘接入网在速度匹配和安全管理上的特殊需求.为了支持高速边缘路由器这些特性,有必要针对接入网中安全报文转发速度快、安全信息存储量大的应用特点,研究与之相适应的IPSec体系结构和相关实现的关键技术.本文在综合通用IPSec路由器体系结构模型特点的基础上,提出一种基于元胞自动机的体系结构模型,分析和研究了高性能安全高速边缘路由器的软、硬件体系结构,构造基于元胞自动机的高强度动力密码体系,设计基于分布式密钥管理的路由器安全构架.

The Design of Security High Speed Boundary Router based on Cell Automata

The popularity of Internet security services has motivated the research on robust network security devices to meet the increasing challenges on systems and applications.The tendency of employing routers which can process security protocols as boundary equipments to link the fast backbone and the Intranet/Internet makes it important to implement the IPSec protocol in these routers for security considerations.Consequently,enhancing packets-forwarding ability of these routers(defined as High Speed Boundary Router,or HSBR) comes to be the focus of research,especially when the boundary service turns to be a more and more decisive factor to the quality of the interconnection provided by the devices between the components of networks.This paper presents a new architecture of HSBR based on Cell Automata.Composed of three major modules logically decoupling from each other,the Router architecture can provide simple and effective management of security database and high speed forwarding of IPSec packets,which makes it applicable for a flexible,high efficient High Speed Boundary Router.