在下一代互联网的设计和建设过程中，从体系结构、协议和算法设计的角度解决准确确定互联网中转发的每个IP分组的来源的问题，对于支持下一代互联网进行精确细粒度的管理、控制和追溯以及提高其可信任性具有重要意义。源IP地址和网络用户身份标识，是确定IP分组来源信息最重要的两个要素。IPv6协议的接口地址有64位，为网络用户身份标识信息的嵌入提供了空间。. 本课题的研究首先从用户网络身份标识（NID）设计入手，提出一种可扩展的NID结构和生成算法。在此基础上，展开嵌入可扩展用户网络身份标识的IPv6地址生成算法研究，进一步的研究则包括嵌入可扩展用户网络身份标识的IPv6地址管理与追溯技术，包括地址分配协议的扩展，以及地址分配服务器、NID生成服务器和NID验证服务器的设计和实现，并搭建原型系统进行验证。

During the design and construction process of next generation Internet,to solve the problem of accurately determining the source of each IP packet from the design point of view of architecture, protocols and algorithms is important to accurate fine-grained management, control and traceability as well as improve its trustworthiness. The source IP address and network user identity, are the most important of the two elements to determine the source of information. . IPv6 protocol has 64 bit Interface ID. This can provide the space for embeding network user identity. This project starts from the design of a scalable architecture and generation algorithm of network user identity (NID).On this basis, expand IPv6 addresses embedded scalable NID generation algorithm research. Further research include IPv6 address embedded NID management and traceability technologies, including the expansion of IP address assignment mechanism, as well as the design and implementation of address assignment server, NID generate server and NID traceback server, and built a prototype system for verification.