IPv6 option explicit source address encryption security verification gateway and verification method

Abstract

The invention discloses an IPv6 option explicit source address encryption security verification gateway, and the security verification gateway comprises a data probability collection module which is used for carrying out the probability collection of a data packet of transmission data, and transmitting the data packet to an encryption function module; the encryption function module is used for encrypting and signing a source IPv6 address in the data packet, loading a ciphertext obtained through signature into a hop-by-hop option header in the data packet and sending the data packet carrying source address verification information to a destination end; and the verification function module is used for verifying the source address information of the received data and the initialized creation and dynamic update of the dynamic verification table. The invention further provides a verification method of the IPv6 option explicit source address encryption security verification gateway, transmitted data can be encrypted, the transmitted data can be verified, and integration of encryption and verification is achieved.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to an IPv6 option explicit source address encryption security verification gateway and a verification method. Background technique [0002] In recent years, due to the continuous deepening of research in the field of source address verification, it has gradually begun to carry out targeted and detailed research on different network environments, diverse network applications and diverse network threats, to make up for the shortcomings of traditional source address verification technology, so as to promote The network defense capability is more prominent, and it is better able to resist various network threats in the complex and changeable network environment. Based on this, Vijayalakshmi et al. proposed a novel enhanced packet marking algorithm for the storage overhead of traditional verification techniques. The network or use out-of-band messages to identify th...

AI Technical Summary

Problems solved by technology

Due to the lack of verification on path transmission in the terminal verification mode, its network defense capability has the characteristics of low false positives and high false negatives; while the mode of full-path transmission verification will increase computing overhead, increase communication overhead, and occupy bandwidth and network resources. Issues such as increased consumption and reduced deployment compatibility

Images