基于改进DNS协议的移动网络支付安全通信协议模型

doi:10.16180/j.cnki.issn1007-7820.2021.09.010

摘要/Abstract

摘要：

针对移动网络支付过程中的安全问题,文中构建了一个基于改进DNS协议的移动网络支付安全通信协议模型。该模型采用改进的DNS协议,通过引入区块链技术,使每个顶级域名都成为了一个自主根,再由自主根组成根联盟,从而共同参与每个数据节点的发布和管理。利用这种去中心化的思想,有效提高了移动网络支付的安全性。特别是对PBFT共识算法进行的改进,通过主动获取节点网络中所有节点的视图以及最新的区块高度等信息,恢复了网络运行过程中导致的部分节点执行落后问题,进一步保证了数据的一致性和安全性。

关键词: DNS协议, 移动网络, 区块链, 共识机制, 通信模型, 去中心化, 信息安全, 医院支付

Abstract:

In view of the security problems in the process of mobile network payment, this study constructs a mobile network payment security communication protocol model based on the improved DNS protocol. The improved DNS protocol is adopted in the model. By introducing blockchain technology, each top-level domain name becomes an autonomous root, and then the autonomous root forms a root alliance, so as to participate in the publishing and management of each data node. Using this idea of decentralization, the security of mobile network payment is effectively improved. In particular, the PBFT consensus algorithm is improved by actively obtaining the views of all nodes in the node network and the latest block height and other information, so as to restore the backward execution of some nodes caused by the operation of the network, and further ensures the consistency and security of data.

Key words: DNS protocol, mobile network, blockchain, consensus mechanism, communication model, decentration, information safety, hospital payment

中图分类号:

TP183

魏星. 基于改进DNS协议的移动网络支付安全通信协议模型[J]. 电子科技, 2021, 34(9): 54-57.

WEI Xing. Mobile Network Payment Secure Communication Protocol Model Based on Improved DNS Protocol[J]. Electronic Science and Technology, 2021, 34(9): 54-57.

图/表 4

参考文献 18

[1]	段静缘. 移动通信技术与互联网技术的结合发展[J]. 数字通信世界, 2020(9):19-20,66.
	Duan Jingyuan. Development of combination of mobile communication technology and internet technology[J]. Digital Communication World, 2020(9):19-20,66.
[2]	周忆陶, 陈亚男. 移动网络信息安全的调查与分析[J]. 黑龙江省政法管理干部学院学报, 2017(1):159-160.
	Zhou Yitao, Chen Ya’nan. Investigation and analysis of mobile network information security[J]. Journal of Heilongjiang Administrative Cadre Institute of Politics and Law, 2017(1):159-160.
[3]	刘姝君. 浅析移动网络支付的安全通信协议[J]. 网络安全技术与应用, 2016(11):37-41.
	Liu Shujun. Analysis of secure communication protocol of mobile network payment[J]. Network Security Technology and Application, 2016(11):37-41.
[4]	毛宇. 移动网络支付中的国密算法研究[D]. 哈尔滨:哈尔滨理工大学, 2018.
	Mao Yu. Research on state secret algorithm in mobile network payment[D]. Harbin:Harbin University of Science and Technology, 2018.
[5]	郑旭. 去中心化区块链DNS研究与实现[D]. 广州:华南理工大学, 2019.
	Zheng Xu. Research and implementation of decentralized blockchain DNS[D]. Guangzhou: South China University of Technology, 2019.
[6]	朱国库, 蒋文保. 一种去中心化的网络域名服务系统模型[J]. 信息安全与技术, 2017, 8(1):14-18.
	Zhu Guoku, Jiang Wenbao. A decentalized network domain name service system model[J]. Information Security and Technology, 2017, 8(1):14-18.
[7]	Wang X, Li K, Li H, et al. Consortium DNS: a distributed domain name service based on consortium chain[C]. Hangzhou:IEEE International Conference on High Performance Computing and Communications, 2017.
[8]	张亮, 刘百祥, 张如意, 等. 区块链技术综述[J]. 计算机工程, 2019, 33(7):69-75.
	Zhang Liang, Liu Baixiang, Zhang Ruyi, et al. Overview of blockchain technology[J]. Computer Engineering, 2019, 33(7):69-75.
[9]	李军. 基于区块链的网络数据篡改跟踪防护技术[J]. 北京信息科技大学学报(自然科学版), 2020, 35(2):13-17,29.
	Li Jun. Network data tamper tracking protection technology based on blockchain[J]. Journal of Beijing Information Science and Technology University(Natural Science Edition), 2020, 35(2):13-17,29.
[10]	豆小彬. 基于Spark的域名安全分析及攻击检测[D]. 济南:山东大学, 2019.
	Dou Xiaobin. Domain name security analysis and attack detection based on Spark[D].Ji'nan: Shandong University, 2019.
[11]	陈波. 域名系统DNS的安全防护技术分析[J]. 电子技术, 2020, 49(6):88-89.
	Chen Bo. Analysis of domain name system DNS security technology[J]. Electronic Technology, 2020, 49(6):88-89.
[12]	闫夏莉, 王骞, 吕万波, 等. 基于基址重定位的快速域名压缩算法[J]. 计算机系统应用, 2020, 29(1):155-161.
	Yan Xiali, Wang Qian, Lü Wanbo, et al. Fast domain name compression algorithm based on base address relocation[J]. Computer Systems and Applications, 2020, 29(1):155-161.
[13]	沙晓爽, 张志勇. 基于区块链技术的DNS系统研究[J]. 计算机产品与流通, 2019(9):170-170.
	Sha Xiaoshuang, Zhang Zhiyong. Research on DNS system based on blockchain technology[J]. Computer Products & Circuits, 2019(9):170-170.
[14]	Karaarslan E, Adiguzel E. Blockchain based DNS and PKI solutions[J]. IEEE Communications Standards Magazine, 2018, 2(3):52-57. doi: 10.1109/MCOMSTD.2018.1800023
[15]	庄天舒, 刘文峰, 李东. 基于区块链的DNS根域名解析体系[J]. 电信科学, 2018(7):133-139.
	Zhuang Tianshu, Liu Wenfeng, Li Dong. DNS root domain name resolution system based on block chain[J]. Communications Science, 2018(7):133-139.
[16]	Al-Mashhadi S, Manickam S. A brief review of blockchain-based DNS systems[J]. International Journal of Internet Technology and Secured Transactions, 2020, 10(4):420-432. doi: 10.1504/IJITST.2020.108134
[17]	李东云, 白杰, 吴先锋. 基于CNWW3区块链网络的域名体系[J]. 微型机与应用, 2019, 38(10):6-13.
	Li Dongyun, Bai Jie, Wu Xianfeng. Domain name system based on CNWW3 blockchain network[J]. Microcomputers and Applications, 2019, 38(10):6-13.
[18]	张永, 李晓辉. 一种改进的区块链共识机制的研究与实现[J]. 电子设计工程, 2018, 26(1):38-42.
	Zhang Yong, Li Xiaohui. The research and implementation of an improved blockchain’s consensus mechanism[J]. Electronic Design Engineering, 2018, 26(1):38-42.

基于DNS 攻击挑战	传统DNS 解决方案	基于区块链的 DNS系统解决方案
针对DNS服务器的DDoS攻击	增加服务器数量,难度较高	免疫服务,可用性
由勒索软件/破坏软件衍生的网络攻击造成的服务器损坏	用户须手动更改DNS地址克服	免疫服务,可用性
修改服务器上特定的DNS记录	服务器和DNS安全措施和监控过程,取决于系统管理员的能力	免疫服务,完整性
攻击客户端,在会话期间改变DNS地址	DNSSEC协议部署端到端签名地址信息	免疫服务,完整性、身份验证