Establishing secure virtual trust routing and provisioning domains for future internet

Secure virtualization is the enabling technique to protect both network providers and user services. Particularly, secure routing in the virtualized service domains is one of the key research areas that have not been explored in literature. In this paper, we present a new secure routing framework to address both network-centric and user-centric networking service models for the future Internet. We aim to provide a flexible network routing framework that has the capability to route traffic with different service requirements and constraints. In other words, it could be highly desirable that two types of network traffic should be isolated either physically or logically and trustworthy services should be avoided to share the bandwidth with normal traffic that may be prone to security attacks. To achieve this capability, we present how to establish a virtual trust routing framework to handle both network-centric routing and user-centric routing simultaneously by using attribute-based cryptography that can provide information-level protection for virtual routing domain isolation. Our performance evaluation on prioritized services through virtual routing domains and cryptography performance analysis demonstrates the viability of the proposed solution.