摘要
The domain name system(DNS)provides essential services for translations between human-readable do-main names and IP addresses,which runs under global DNS roots.DNS roots face security vulnerabilities and trust risks due to the centralized management architecture.Several related schemes have been proposed to mitigate the security vul-nerabilities and trust risks.However,most methods on trust risks focus on verifying their mechanisms.The comparison of the actual operational effectiveness of these methods and the existing DNS is rarely disclosed.In this paper,we present a trustworthy decentralized DNS root management architecture called AR based on blockchain.Instead of all top level do-mains(TLDs)authorized by an institution,the root owner in AR has the authority over its TLDs.Our proposed AR can work with the global roots without influencing the operation of the existing DNS.A cross-national and cross-regional re-search testbed is constructed on the Internet to verify the feasibility and practicality of our proposed AR.
基金
supported by the National Key Research and Development Program of China under Grant No.2024YFB31NL00105,the Major Key Project of Pengcheng Laboratory under Grant No.PCL2023A05,and the Guangdong Major Project of Basic and Applied Basic Research under Grant No.2019B030302002.
