ID-based data plane security for identity-oriented networks

An origination endpoint comprising:

• a memory storage comprising instructions;
• and
• one or more hardware processors in communication with the memory storage, wherein the one or more hardware processors execute the instructions to perform:
• accessing first data to be transmitted to a destination having a corresponding destination identifier;
• generating an identifier security header, the generating of the identifier security header comprising generating an initialization vector;
• generating second data from the first data and the identifier security header;
• encrypting the second data;
• generating authentication data based on the encrypted second data;
• generating third data from the encrypted second data and the authentication data;
• generating fourth data from the destination identifier and the third data;
• and
• sending the fourth data to the destination.

A non-transitory computer-readable medium storing computer instructions for transmitting encrypted data, that when executed by one or more hardware processors, cause the one or more hardware processors to perform steps of:

• accessing first data to be transmitted to a destination having a corresponding destination identifier;
• generating an identifier security header, the generating of the identifier security header comprising generating an initialization vector;
• generating second data from the first data and the identifier security header;
• encrypting the second data;
• generating authentication data based on the encrypted second data;
• generating third data from the encrypted second data and the authentication data;
• generating fourth data from the destination identifier and the third data;
• and
• sending the fourth data to the destination.