IP (Internet Protocol) address management method and system as well as DHCP (Dynamic Host Configuration Protocol) server

A dynamic host configuration and IP address technology, applied in the computer field, can solve the problems of difficulty in tracing the role, unable to verify which attacker is, achieve real-time effective identity authentication and access control, enhance customer authentication capabilities, and improve network security. effect of action

Active Publication Date: 2010-12-22
CHINA INTERNET NETWORK INFORMATION CENTER
View PDF3 Cites 25 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] However, in the dynamic IP address allocation mechanism, the allocation of IP addresses is random, and its users are constantly changing. Therefore, it may cause some serious security problems: network attackers can use dynamic IP addresses to carry out network attacks, Trojan horses, etc. The IP address used during the attack will be recycled after the attack and may be allocated to other machines for reuse.
Therefore, the same IP address may have been used by multiple users, and it is impossible to verify which one the attacker is, making it difficult for the IP address, which is an important clue for attack tracking, to play a reliable traceability role due to the current dynamic allocation mechanism

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • IP (Internet Protocol) address management method and system as well as DHCP (Dynamic Host Configuration Protocol) server
  • IP (Internet Protocol) address management method and system as well as DHCP (Dynamic Host Configuration Protocol) server
  • IP (Internet Protocol) address management method and system as well as DHCP (Dynamic Host Configuration Protocol) server

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0029] figure 1 It is a schematic diagram of signaling in Embodiment 1 of the IP address management method of the present invention, as shown in figure 1 As shown, the IP address in the present embodiment can refer to the IPv6 address, and the IP real-name address can refer to the IPv6 real-name address, which can include the following steps:

[0030] Step 101, the client user applies for a real-name certificate, and the real-name certificate includes an IP real-name address representing the identity of the user;

[0031] In this embodiment, when an Internet user applies for a dynamic IP address resource, he must first obtain a real-name certificate issued by the address registration authority. The real-name certificate is a digital certificate, which includes an IP real-name address that can represent the identity of an Internet user. The real-name address may be a segment of non-routable IPv6 address separately separated from the IPv6 address space.

[0032] The basic str...

Embodiment 2

[0047] Figure 4 It is a schematic diagram of signaling in Embodiment 2 of the IP address management method of the present invention, as shown in Figure 4 As shown, the main difference between the method of this embodiment and Embodiment 1 is that, in order to further facilitate the real-time control of Internet application access, the function extension for the DNS server is added; wherein, in the method of this embodiment, steps 201-205 are the same as Steps 101 to 105 in Embodiment 1 are the same, and details can be found in Embodiment 1, which will not be repeated here. This embodiment also adds the steps of Internet application access, as follows:

[0048] Step 201, the client user applies for a real-name certificate, and the real-name certificate includes an IP real-name address representing the identity of the user;

[0049] Step 202, the client sends an IP address application message to the DHCP server, and carries the IP real-name address identifying the identity of...

Embodiment 3

[0069] Figure 5 It is a schematic structural diagram of a DHCP server embodiment of the present invention, such as Figure 5 As shown, the DHCP server in this embodiment may include a receiving module 31 , a recording module 32 and a sending module 33 .

[0070] Wherein, the receiving module 31 is used to receive the IP address application message sent by the client, and the IP address application message carries the IP real-name address identifying the user identity of the client; the recording module 32 is used to allocate an IP address for the client. IP address, and record the corresponding relationship between the IP address and the IP real-name address in the database; the sending module 33 is used to return an IP address response message to the client, and the IP address response message carries the assigned The IP address.

[0071] In addition, further, the IP address management system may also include a verification module 34, which is used to use the real-name add...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides IP (Internet Protocol) address management method and system as well as DHCP (Dynamic Host Configuration Protocol) server, wherein the method comprises the following steps of: receiving an IP address application message sent by a client, wherein the IP address application message carries a real name IP address for identifying the user identity of the client; allocating an IPaddress for the client and recording the corresponding relation of the IP address and the real name IP address into a database; and returning an IP address response message to the client, wherein theIP address response message carries the allocated IP address. The invention enhances the client authentication capacity of a DHCP protocol through introducing an IPv6 real name address and a resourcePKI (Public Key Infrastructure) thereof by combining an expanded DNS (Domain Name Server) protocol.

Description

technical field [0001] The invention relates to computer technology, in particular to an IP address management method and system, and a dynamic host configuration protocol server. Background technique [0002] In order to dynamically allocate IP addresses, in 1993, the Internet Engineering Task Force (IETF for short) proposed the Dynamic Host Configuration Protocol (DHCP for short). The predecessor of DHCP is BOOTP. BOOTP was originally used on a network connected to a host without a disk. The network host can use BOOT ROM instead of a disk to start and connect to the network. BOOTP can automatically set the TCP / IP environment for the host. [0003] DHCP can be said to be an enhanced version of BOOTP, which is divided into two parts: one is the server side, and the other is the client side. Internet users are clients, and they need to apply for IP addresses from the DHCP server when surfing the Internet. All IP network setting data are centrally managed by the DHCP server,...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/12H04L29/06
Inventor 毛伟李晓东陈涛沈烁卢文哲
Owner CHINA INTERNET NETWORK INFORMATION CENTER
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products