DDoS attack is a widespread use of attack which difficult to defend
based on autonomous system router traffic authentication technologies can effectively resist such attacks. We proposed to improve the autonomous system of two certification systems according to some of these technology shortcomings
to meet the data transmission efficiency and security requirements. Through the introduction of state of the current data transfer rate and life cycle of the relationship to expand the scope of its defensive attack