Software-defined network timing security protection method, device and system

Abstract

The embodiment of the invention provides a software-defined network time service safety protection method, device and system. The method comprises: a security control unit receiving a first data packet; counting a second time deviation value corresponding to each synchronization moment in the preset time period; calculating a second threshold value; and under the condition that the third time deviation value is greater than the second threshold value, redirecting the time service flow from the original path to a predetermined path. The network time service safety protection system comprises anetwork control module, a time service control module, a safety control module, a time client, a time server and a network element. The network control module acquires a global network view, a communication link of the time server and the time client is reselected, a calibration link of the time client is separated from a safety monitoring link, and the safety control module is responsible for safety monitoring. According to the embodiment of the invention, the method achieves the safety monitoring of the clock synchronization between the time server and the time client, and can reduce the impact on the time synchronization from a malicious attack.

Description

technical field [0001] The present invention relates to the technical field of network time synchronization, in particular to a software-defined network time service security protection method, device and system. Background technique [0002] Network time service usually uses the communication network as the medium, and multiple time servers are designated in the network to provide users with time service. The purpose is to transmit unified and standard time on the Internet. Usually, NTP (Network Time Protocol, Network Time Protocol) or PTP (Precision Time Protocol, high-precision time protocol) is used for network time service. In the process of network timing, an external attacker can delay the path through which data packets pass through, for example, adding delay on the uplink or downlink path, making the uplink and downlink delays asymmetrical, thereby affecting the timing accuracy. [0003] In the prior art, for a delay attack launched by an attacker, it is judged whe...

AI Technical Summary

Problems solved by technology

[0004] Because in the prior art, when it is detected that the second average path delay at a certain synchronization moment is higher than the preset fixed threshold, the data packets transmitted between the time server and the time client are discarded, thus causing the synchronization moment Clock synchronization is not possible, i.e. clock synchronization is discontinuous, resulting in an increasing time offset between the time server and the time client

Images