Label-based Security Management Mechanism for Universal Identifier Network

Abstract

The current Internet is an open global interconnected system and lacks of the systematic security
design. Most security issues of current Internet are due to the drawbacks of the original design of
traditional Internet. Besides, some optional security mechanisms are independent without enough cooperative
mechanism. Therefore, it facilitates the network attacks and brings various security threats
to network services. In this paper we design a security management mechanism and several relevant
evaluation methods under Universal Identifier Network (UIN) architecture, aiming to provide a finer
granularity, adaptive network security management system, which consists of the following features:
(1) supporting multi-dimensional properties description by introducing the detailed user and service
classification; (2) supporting the label-based policy-driven management mechanism in perspective of
user and service to provide the fine granularity access control; (3) providing the multi-dimensional
evaluation metrics. The proposed label-based security management and evaluation methods will provide
great benefits for the future network security.