Flexible Encryption for Reliable Transmission Based on the P4 Programmable Platform

摘要

Accurate and effective security encryption mechanism is of great significance to improve network service quality and strengthen network security. There are two main types of encryption mechanisms used in existing networks. The first is to adopt the same encryption method for all data packets. It is impossible to selectively and dynamically encrypt data packets according to the importance of the data packets. The second is the selective encryption of data. This method mainly targets specific format files and is not universal. To improve the centralized management of network security and the automatic deployment of encryption algorithms, this paper proposes a flexible encryption for reliable transmission based on the P4 programmable platform, which implements on-demand encryption of data packet based on the degree of privacy. Specifically, according to the actual application scenario, use the open network operating system (ONOS) to send different security encryption policies to various data packets dynamically. Based on the P4 programmable platform, data packets are encrypted and decrypted separately in the data plane. The experimental results show that under the premise of ensuring the encryption overhead, improving the security of data transmission in the network.