The method of identification verification by "immune encapsulation" of ip data packet

Abstract

The present invention relates to a method for identification verification of IP data packet "immune encapsulation". The purpose of identifying the identity type of the data packet is realized by filling the corresponding flag. The invention belongs to the field of network communication, and avoids the disadvantages of low communication efficiency, inability to accurately detect each data packet, inability to cross network segments, and high cost of implementation and deployment in traditional network data identity verification methods. Network devices, network interfaces, network drivers, network systems and components, etc. can mark every data packet in the network by supporting "immune encapsulation", with small load on the original network, high execution efficiency, and "immune encapsulation" at the same time The data can be normally transmitted in the original network, regardless of whether its equipment supports "immune encapsulation".

Description

technical field [0001] The invention belongs to the field of network communication, and specifically relates to a method of repackaging IP messages by using "immune encapsulation", so as to identify and distinguish corresponding data sources and protocol identities of transmission data packets. Background technique [0002] IP is the abbreviation of Internet Protocol (Internet Protocol) in English, which is a protocol designed for computer networks to communicate with each other. In the Internet, it is a set of rules that enable all computer networks connected to the Internet to communicate with each other, and stipulates the rules that computers should abide by when communicating on the Internet. Computer systems produced by any manufacturer can be interconnected with the Internet as long as they comply with the IP protocol. [0003] The IP protocol belongs to the TCP / IP protocol family and is the core protocol in the TCP / IP protocol family. All TCP, UDP, ICMP, and IGMP da...

AI Technical Summary

Problems solved by technology

[0032] From the above process, it can be seen that the disadvantage of this identification method is that it requires a special switch device to perform the authentication. It is the password of the corresponding requester, not the identity of the requester, and not every data packet to be sent and received. The problem is that the authentication can be obtained by forging the IP and MAC identities of the requester that match the corresponding password. Even the real requester itself cannot realize the identification and verification of each data packet.

The problem is that due to the addition of data part instructions to each data packet, the amount of transmitted data increases significantly

In addition, due to the modification of the data part of the data packet, other applications and software tools cannot independently identify the data packet encapsulated in data, resulting in compatibility risks

Images