真实源地址框架下的特定源组播接收者认证*

为了解决特定源组播接收者认证问题，在研究真实IPv6源地址验证体系结构的基础上，提出了一种该体系结构下的特定源组播接收者认证方案。该方案在与主机直连的路由器上加载了认证功能，能够对组播接收者的组播认证码进行认证，以此实现组播接收者的合法性验证，防止网络中组播服务盗用；设计了一种存储于三层交换机的组播端口列表，解决了同一局域网内组播接收者访问控制问题。通过仿真实验证明，该方案能够实现对组播接收者的认证功能，而且对组播效率影响不大。

Source-specific multicast receiver authentication in source address validation architecture

In order to solve the problem of the source-specific multicast receiver authentication, based on the source address validation architecture, proposed a source-specific multicast receiver authentication scheme used in the architecture. In the scheme, added an authentication module on the first hop router. By using the authentication module, could validate the multicast authentication code and solve the receiver validation problem. Then, could prevent the multicast service embezzler. The scheme also designed a multicast port list stored in the 3-layer switch, by which solved the access control problem for the multicast receivers within the same LAN. Simulation experiment shows that the scheme can solve the multicast receiver authentication problem with a low cost.