计算机工程
計算機工程
계산궤공정
COMPUTER ENGINEERING
2014年
1期
20-24,30
,共6页
卢文哲%杨风雷%高宁%毛伟
盧文哲%楊風雷%高寧%毛偉
로문철%양풍뢰%고저%모위
可信网络%可信标识%域名服务器%资源记录%数字证书%签名
可信網絡%可信標識%域名服務器%資源記錄%數字證書%籤名
가신망락%가신표식%역명복무기%자원기록%수자증서%첨명
trusted network%trusted identification%Domain Name Server(DNS)%resource record%digital certificate%signature
高可信性是下一代互联网的重要特征,主要包括服务提供者可信、信息传输可信和终端用户可信,其中服务提供者的身份可信是构建可信网络的前提。为此,提出一种网站身份可信标识的体系结构,描述基于域名资源记录的网站可信标识查验协议。通过该协议,用户可在各种互联网应用中方便地查询服务提供者的身份信息。实验结果表明,该体系结构与相关查询协议在效率、易用性、可扩展性等方面均可满足实际应用需要,单机查询性能达到15万次/s。
高可信性是下一代互聯網的重要特徵,主要包括服務提供者可信、信息傳輸可信和終耑用戶可信,其中服務提供者的身份可信是構建可信網絡的前提。為此,提齣一種網站身份可信標識的體繫結構,描述基于域名資源記錄的網站可信標識查驗協議。通過該協議,用戶可在各種互聯網應用中方便地查詢服務提供者的身份信息。實驗結果錶明,該體繫結構與相關查詢協議在效率、易用性、可擴展性等方麵均可滿足實際應用需要,單機查詢性能達到15萬次/s。
고가신성시하일대호련망적중요특정,주요포괄복무제공자가신、신식전수가신화종단용호가신,기중복무제공자적신빈가신시구건가신망락적전제。위차,제출일충망참신빈가신표식적체계결구,묘술기우역명자원기록적망참가신표식사험협의。통과해협의,용호가재각충호련망응용중방편지사순복무제공자적신빈신식。실험결과표명,해체계결구여상관사순협의재효솔、역용성、가확전성등방면균가만족실제응용수요,단궤사순성능체도15만차/s。
High reliability is an important characteristic of Next Generation Internet(NGI). The Internet is on the way to trusted network. The trusted network includes the trust of service providers, the trust of the network information transmission and the trust of end-users. The identity trust of service providers is the important base of the trusted network. Aiming at this problem, this paper describes a technical architecture of a website trusted service and explains the Domain Name Server(DNS)-based check protocol in details. By the check service, users can get the Internet service provider’s information conveniently from Internet applications. Experimental results show that this architecture and the related check protocol can meet the needs of the practical application in terms of efficiency, usability, scalability, etc. The check performance of one machine can reach 150 000 times per second.