How to prevent identity fraud in locator/identifier — Split architectures

The locator/identifier separation paradigm is a very promising Next Generation Internet addressing scheme. By this scheme, however, a node´s identity - represented by the identifier - becomes more important and persistent. It is, therefore, more than ever necessary to protect a node´s identity against fraud. In this paper, possible attack scenarios against a node´s identity are outlined. Afterwards, a framework based on a distributed public key infrastructure and smart cards is introduced to counter the identity fraud thread on the network layer in locator/identifier-split architectures.