Method for raising safety of IP network through router signature

Abstract

The method of subscribing router to raise IP network safety includes: 1) to increase one optional item, 'subscription', into packet header in IPv4 specification, and to require IP package routers to record the IP address and enciphered additional checking information in the IP packet header; 2) for the network equipment with router to calculate and create subscription in transmitting IP package and to insert the subscription options into IP packet header or expanding part; and 3) for the IP package receiver to record the packet header, subscription options and several bytes after the packet header for doubtful IP package as well as the IP package arrival time. The present invention has the advantage that in checking, check code is re-calculated and compared with the given check code to judge the truth of the subscription, and this reduces greatly the attacker searching range.

Description

technical field [0001] The invention relates to the field of network and communication, and mainly relates to a method for improving IP network security through router signature. This method of making the router add a signature to the forwarded IP packet in the Internet is aimed at tracing the source of the IP packet when a problem occurs, thereby improving the security of the IP network. Background technique [0002] The security problem of IP network is a very complicated problem, and there are many reasons for its insecurity. One of the important reasons is: even for known hacker attacks and IP packets sent by hackers, it is almost impossible to find out its real source, so the relevant IP packets can only be discarded or blocked. In this way, there are neither countermeasures nor deterrent effects on attackers. [0003] Of course, there is the IP address of the sender in the IP packet, that is, the "source address", but this can be faked. The IP packet sent by the hac...

AI Technical Summary

Problems solved by technology

The first reason is that the IP packet does not contain information related to its transmission trace and is difficult to forge

The second reason is that the routers along the route do not record (even temporarily record) the direction of traffic belonging to the same "flow", that is, the flow between the same pair of nodes.

Second, and actually more importantly, the attacker can forge a string of IP addresses that the attacked party cannot check

[0009] 2. The information inserted should be difficult to forge

[0013] Of course, the security problem of IP network is a very complicated problem. There are many reasons for its insecurity, so we cannot expect to find a single method to solve this problem once and for all. Web security approaches are worth considering

Images