本项目研究面向多域网络的安全按需服务关键技术，研究内容如下：借鉴软件定义网络SDN架构解决多域网络扩展性差、可控可管性差问题；借鉴服务功能链实现网络服务的灵活高效配置与组合；借鉴网络虚拟化技术提高异构网络的利用效率和配置灵活性。主要考虑在数据中心网络、无线接入网络等多域环境中，基于SDN技术，提出一种多域安全隔离网络的管控模型，重点建立逻辑上集中化、具有全局优化能力的控制架构；基于SDN对数据流的接入控制技术并结合公钥基础设施技术实现域间安全隔离、域内和跨域数据流的认证和授权；基于服务功能链技术提出按需的网络资源分配方法和跨域服务业务调度模型及算法；研究SDN控制器与虚拟化数据中心网络设施的集成和应用的适配技术；提交SDN控制器和交换机原理样机。通过上述问题的研究，提高多域异构网络安全管控以及按需服务能力，促进异构网络互联互通。

This project performs research on key technologies of secure on-demand services for multi-domain network. The proposed research includes the following aspects: To improve scalability, controllability and manageability in multi-domain network using the architecture of software defined network; To configure and combine network services in a flexible and efficient way using the thought of service function chain; To improve effectiveness and flexibility of utilizing and configuring infrastructure in heterogeneous network using the technology of network virtualization. The research is mainly applied in multi-domain environment such as data center network and radio access network. Firstly, we propose a management and control model for multi-domain security isolation network, with the emphasis laid on creating a control architecture which is logically centralized and global optimized. Secondly, we aim to develop the mechanism for cross-domain security isolation, and authentication and authorization for intra-domain/ cross-domain data flow, based on the capability of access control of SDN and the technology of public key infrastructure. Thirdly, we aim to develop the mechanism for on-demand network resources allocation and the algorithm for cross-domain service scheduling based on service function chain. Fourthly, we research the adaptation techniques between SDN controller and the integration technology and application in virtual data center. Lastly, we aim to create a prototype of SDN controller and switch. The research results of the project can improve the capabilities of security control and on-demand service in multi-domain heterogeneous network and promote the interoperability of heterogeneous networks.