Research on improved scheme of resource public key infrastructure data synchronization

Feng LENG; Qi ZHAO; Zhiwei YAN; Yu ZENG

doi:10.11959/j.issn.2096-109x.2021064

您当前的位置：

首页 >

文章列表页 >

Research on improved scheme of resource public key infrastructure data synchronization

Papers | 更新时间：2024-06-03

- Research on improved scheme of resource public key infrastructure data synchronization
- Chinese Journal of Network and Information Security Vol. 7, Issue 3, Pages: 123-133(2021)
- 作者机构：
  
  1. 中国科学院计算机网络信息中心，北京 100190
  2. 中国互联网络信息中心，北京 100190
  3. 中国科学院大学，北京 100049
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2021064
  CLC： TN915.08
- Online First：2021-06，
  
  Published：15 June 2021
- 稿件说明：
移动端阅览
Feng LENG, Qi ZHAO, Zhiwei YAN, et al. Research on improved scheme of resource public key infrastructure data synchronization[J]. Chinese Journal of Network and Information Security, 2021, 7(3): 123-133.
DOI：

Feng LENG, Qi ZHAO, Zhiwei YAN, et al. Research on improved scheme of resource public key infrastructure data synchronization[J]. Chinese Journal of Network and Information Security, 2021, 7(3): 123-133. DOI： 10.11959/j.issn.2096-109x.2021064.

摘要

资源公钥基础设施（RPKI）依赖方需定期从资料库系统同步数据进行信息验证。为了完成数据同步，当前主流的方式是采用Rsync和RRDP两种技术，但各自存在着相关问题。针对上述问题，通过分析研究依赖方从资料库同步数据的方式，建立了数学模型，并根据两种技术各自面临的相关问题，提出了一种改进的 RPKI 数据同步方法，分析了传统数据同步手段与改进方法各自的优缺点以及适应的场景，为优化RPKI的部署应用提供了参考。

Abstract

RPKI Relying party needs to synchronizing data from repository periodically to verify information.In general

Rsync and RRDP are the two common means to complete data synchronization

however

each of them has related problems.In order to solve these problems

through analyzingthe way for synchronizing data from repository by the relying party

a mathematical model was established.Furthermore

based on the current problems faced by the two synchronization means

an improved RPKI data synchronization scheme was proposed.The advantages and disadvantages of the improved scheme were analyzed in detail

as well as the applicable scenarios.The improved scheme could provide a reference for optimizing the deployment and application of RPKI.

关键词

Keywords

references

庞超 , 李晓红 . BGP4+协议研究与应用 [J ] . 无线电工程 , 2011 , 41 ( 2 ): 4 - 6 .

PANG C , LI X H . Study and application of BGP4+ protocol [J ] . Radio Engineering , 2011 , 41 ( 2 ): 4 - 6 .

黎松 , 诸葛建伟 , 李星 . BGP安全研究 [J ] . 软件学报 , 2013 , 24 ( 1 ): 121 - 138 .

LI S , ZHUGE J W , LI X . BGP security research [J ] . Journal of Software , 2013 , 24 ( 1 ): 121 - 138 .

SARA B , HAFSSA , MOUAD B M . Security problems in BGP:An overview [C ] // 2013 National Security Days (JNS3) . 2013 : 1 - 5 .

IETF . Secure BGP (S-BGP) [S ] .

IETF . Extensions to BGP to support secure origin BGP (soBGP) [S ] .

RIPE NCC . Number of certificates [S ] .

贾佳 , 延志伟 , 耿光刚 , 等 . 一种改进的 BGP 路由源认证机 [J ] . 计算机系统应用 , 2017 ( 1 ): 240 - 245 .

JIA J , YAN Z W , GENG G G . An improved BGP routing source authentication mechanism [J ] . Computer Systems Application , 2017 ( 1 ): 240 - 245 .

苏莹莹 , 李丹 , 叶洪琳 . 资源公钥基础设施RPKI：现状与问题 [J ] . 电信科学 , 2021 , 37 ( 3 ): 75 - 89 .

SU Y Y , LI D , YE H L . Resource public key infrastructure RPKI:status and problems [J ] . Telecommunications Science , 2021 , 37 ( 3 ): 75 - 89 .

KRISTOFF J , RANDY B , CHRIS K , et al . On measuring RPKI relying parties [C ] // Proceedings of the ACM Internet Measurement Conference(IMC '20) . 2020 : 484 - 491 .

IETF . An infrastructure to support secure internet routing [S ] .

WEBERB , BRUIJNZEELST MURAVSKIYO . An infrastructure to support secure internet routing [R ] .

IETF . The RPKI repository delta protocol (RRDP) [S ] .

OSTERWEIL E , MANDERSON T . Sizing estimates for a fully deployed RPKI [R ] .

司昊林 , 马迪 , 毛伟 , 等 . RPKI增量同步Delta协议的形式化检测与实现 [J ] . 计算机系统应用 , 2018 , 27 ( 11 ): 1 - 8 .

SI H L , MA D , MAO W . Formal verification and implementation of RPKI incremental synchronous delta protocol [J ] . Computer Systems Application , 2018 , 27 ( 11 ): 1 - 8 .

LOUIS P , MARTIN J L . Cloudflare and RPKI at scale [EB ] .

王宾 , 刘钊远 . 基于 Rsync 的远程文件同步优化模型 [J ] . 计算机与现代化 , 2015 ( 4 ): 10 - 13 .

WANG B , LIU Z Y . Optimization model of remote file synchronization based on Rsync algorithm [J ] . Computer and Modernization , 2015 ( 4 ): 10 - 13 .

PHOKEERA . Interdomain routing security:motivation and challenges of RPKI [D ] . Royal Holloway,University of London , 2014 .

Views

358

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Internet naming and addressing system security technology and application analysis

Related Author

Cui-cui WANG

Zhi-wei YAN

Guang-gang GENG

Related Institution

National Engineering Laboratory for Internet Domain Name Management

⁰