An Algorithm for Generating Addresses Based on IPv6 Encryption

Abstract

The invention discloses an address generation algorithm based on IPv6 encryption. The invention relates to the field of communication technology. The address algorithm comprises a judgment module, an algorithm selection module, an address encryption module and a temporary storage module. The judgment module is used to obtain IPv6 address data and obtain the first time data of the communication between the IPv6 address data and the judgment module. The algorithm selection module splits 128 bits of data in the IPv6 address data into 16 groups. The invention has the advantages that: the combined data is encrypted according to different algorithms by using the address encryption module. After the encryption is completed, the address encryption module restores different data, and then the 128 bits of data in the IPv6 address are quickly encrypted by using different algorithms, thereby improving the security of the overall IPv6 address data.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to an algorithm for generating addresses based on IPv6 encryption. Background Art

[0002] With the rapid development of the Internet, IPv6 (Internet Protocol Version 6) has gradually replaced IPv4 as the mainstream protocol for network communication. IPv6 has a huge address space and can provide a unique network identifier for a large number of devices, but it also brings new security challenges. In the traditional network environment, the allocation and management of IPv4 addresses are relatively simple. However, the limitations of its address space have prompted the widespread application of IPv6. The length of IPv6 addresses is 128 bits, and the number of addresses is extremely rich, but this also makes the management and security of addresses more complicated. On the one hand, a large number of IPv6 addresses require more efficient and intelligent allocation and management mechanisms to ensure the normal operation of the network and the rational use of resources; on the other hand, network security threats are becoming increasingly severe, and the security of IPv6 addresses has become a focus of attention. Unencrypted IPv6 addresses are vulnerable to attacks during transmission and storage, such as address spoofing and sniffing, which may lead to serious consequences such as user privacy leakage and network service interruption; currently, most of the existing address encryption technologies are designed for IPv4 addresses, and there are many deficiencies in the encryption of IPv6 addresses; However, the existing IPv6 encryption address generation algorithm has a relatively simple random selection algorithm, which makes the IPv6 address easily exposed after the algorithm is leaked. Therefore, we propose an IPv6 encryption address generation algorithm. Summary of the invention

[0003] The purpose of the present invention is to provide an algorithm for generating addresses based on IPv6 encryption.

[0004] To achieve the above object, the present invention provides the following technical solutions: an address generation algorithm based on IPv6 encryption, including an address algorithm, wherein the address algorithm includes a judgment module, an algorithm selection module, an address encryption module and a temporary storage module; The judging module is used to obtain the IPv6 address data and the first time data of the communication between the IPv6 address data and the judging module; The algorithm selection module divides the 128-bit data in the IPv6 address data into 16 groups, and exchanges the 7-bit data in each group with the 7-bit data in other groups and records them; The address encryption module encrypts the corresponding group of data according to the encryption algorithm selected in the algorithm selection module, and after the encryption algorithm encrypts each group of data, the 128-bit data is reset through the recorded transmission data; The temporary storage module is used to store data records between the judgment module, the algorithm selection module and the address encryption module.

[0005] As a further solution of the present invention: the judgment module includes an identification unit and a management policy unit. The identification unit is used to identify the device connected to the judgment module and obtain the device data in the current device, and the device data includes device performance and device model, to judge the adaptability of the device data in the current IPv6 network, and then obtain the IPv6 address data in the current device data. The management policy unit matches the device data with an algorithm type that is compatible with it, and transmits the algorithm that matches the device data to the algorithm selection module.

[0006] As a further solution of the present invention: when the judging module recognizes the device data through the recognition unit, the current time is set as the first time data. After analyzing the different algorithms adapted to the current device data, the management strategy unit will set the current time to the second time data. .

[0007] As a further solution of the present invention: the algorithm transmitted to the algorithm selection module is imported into the random selection unit set in the algorithm selection module, and the random selection unit selects the algorithm according to the time of the current device data, and the selection time is set to ,and , randomly select units through 16 algorithms for obtaining IPv6 address data in the current device data based on time data.

[0008] As a further solution of the present invention: when the random selection unit analyzes that the number of algorithms adapted to the current device data is less than 16 algorithms, the random selection unit randomly selects 8 algorithms from the algorithms. At the same time, the algorithm selection module re-splits and combines the 16 groups of IPv6 address data into 8 groups, and then transmits the combined data to the address encryption module, which encrypts the IPv6 address data.

[0009] As a further solution of the present invention: the algorithm selection module obtains different algorithms through formulas, and the specific formulas are as follows: ; in, Indicates the different algorithms selected by the algorithm selection module. represents a random algorithm, Represents the period range data of the random number generation algorithm, Indicates from The number of algorithm values ​​that are rounded down, and Indicates the value range data of 16 algorithm data.

[0010] As a further solution of the present invention: a dynamic adjustment unit is set in the algorithm selection module, and the algorithm selection module randomly generates a number between 1 and 8 and sets it as The dynamic adjustment unit adjusts the first The dynamic adjustment unit randomly exchanges the undefined data in each group with the undefined data in other groups, and then the dynamic adjustment unit transmits the randomly exchanged data to the temporary storage module.

[0011] As a further solution of the present invention: the address encryption module includes an address processing unit. After receiving the algorithm data selected by the random selection unit, the address processing unit encrypts the data in different groups according to the sixteen algorithm data respectively. The address encryption unit calls the randomly exchanged data in the temporary storage module and resets the 128-bit data.

[0012] As a further solution of the present invention: a plurality of single-chip microcomputers are arranged in the temporary storage module, and the single-chip microcomputers are used to store the 128-bit data exchange in the single device data and the encryption algorithm of each group of data collection.

[0013] As a further solution of the present invention: after the judgment module is disconnected from the device that obtains the IPv6 address data, the judgment module generates a reset instruction and transmits the reset instruction data to the single-chip microcomputer, and the single-chip microcomputer clears the temporary storage data stored with the corresponding device after receiving the corresponding reset instruction data.

[0014] By adopting the above technical solution, compared with the prior art, the beneficial effects of the present invention are: 1. The present invention cooperates with each other through the judgment module, the algorithm selection module and the address encryption module, and then the judgment module obtains the device data IPv6 address data and the selection time required for the device data, and then uses the algorithm selection module to split the 128-bit data in the IPv6 address data, and combines the 8-bit data into a group to form 16 groups, encrypts the algorithm data of different groups in each group, and then uses the address encryption module to encrypt the combined data according to different algorithms. After the encryption is completed, the address encryption module restores the different data, and then quickly encrypts the 128-bit data in the IPv6 address using different algorithms, thereby improving the security of the overall IPv6 address data; 2. The present invention cooperates with the random selection unit and the judgment module, and then uses the identification unit to obtain device data, so as to facilitate the management strategy unit to analyze the number of algorithms adapted to the device, and then uses the random selection unit to obtain 16 different algorithms through the formula, and matches the 16 algorithms with the grouped data respectively, and resets the data after encryption, so that each bit of the 128-bit data is encrypted using a different algorithm; 3. The present invention selects the module by algorithm to The dynamic adjustment unit will limit the The bit data is moved to quickly locate the appropriate algorithm in each group, thus achieving the effect of facilitating the rapid identification of each subsequent group of algorithms; 4. The present invention uses a single-chip microcomputer to store different encryption algorithm data to prevent the encryption algorithm data from being tampered with. When the judgment module is disconnected from the device, the encryption algorithm data stored in the disconnected device is cleared, thereby facilitating the storage and protection of IPv6 algorithm data.

[0015] Other advantages, objectives and features of the present invention will be set forth in part in the following description and, in part, will be apparent to those skilled in the art based on an examination of the following or may be taught from the practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 This is a flowchart of an algorithm for generating encrypted addresses in an embodiment of the present invention; Figure 2 This is a specific flow chart of the algorithm selection module in an embodiment of the present invention. DETAILED DESCRIPTION

[0017] The specific embodiments of the present invention will be further described below in conjunction with the accompanying drawings. It should be noted that the description of these embodiments is used to help understand the present invention, but does not constitute a limitation of the present invention.

[0018] In addition, the technical features involved in the various embodiments of the present invention described below can be combined with each other as long as they do not conflict with each other.

[0019] Embodiment 1:

[0020] Please see attached Figure 1 -Attached Figure 2 The present invention discloses an address generation algorithm based on IPv6 encryption, including an address algorithm, the address algorithm including a judgment module, an algorithm selection module, an address encryption module and a temporary storage module; The judging module is used to obtain the IPv6 address data and the first time data of the communication between the obtained IPv6 address data and the judging module; The algorithm selection module splits the 128-bit data in the IPv6 address data into 16 groups, exchanges the 7-bit data in each group with the 7-bit data in other groups and records them; The address encryption module encrypts the corresponding group of data according to the encryption algorithm selected in the algorithm selection module. After the encryption algorithm encrypts each group of data, the 128-bit data is reset through the recorded transmission data; The temporary storage module is used to store data records between the judgment module, the algorithm selection module and the address encryption module.

[0021] Specific workflow: After the judgment module is connected to the device, it obtains the IPv6 address data and generates time data related to the device data according to the device performance, and then uses the algorithm selection module to split the 128-bit data in the IPv6 address data, and recombine each 8-bit data from the front to the back into a new data group, and then each group of combined data is encrypted according to the corresponding algorithm, and different algorithms include but are not limited to DES, 3DES, AES, RSA, DSA, ECC, MD5, SHA, RC4, ECB, CBC, CTR, NTRU, BLISS, etc. The mobile data about the 128-bit data stored in the temporary storage module is called up through the address encryption module, and then the 7-bit data of different combinations in each group are restored, so that the adjacent data in each group of 128-bit data will not be processed by the same algorithm, and then the 128-bit data in the IPv6 address data is encrypted by different algorithms.

[0022] Furthermore, through the cooperation between the judgment module, the algorithm selection module and the address encryption module, the judgment module obtains the device data IPv6 address data and the selection time required for the device data, and then uses the algorithm selection module to split the 128-bit data in the IPv6 address data, and combines the 8-bit data into a group to form 16 groups, encrypts each group with different groups of algorithm data, and then uses the address encryption module to encrypt the combined data according to different algorithms. After the encryption is completed, the address encryption module restores the different data, and then quickly encrypts the 128-bit data in the IPv6 address using different algorithms, thereby improving the security of the overall IPv6 address data.

[0023] Embodiment 2:

[0024] Based on the first embodiment, please refer to the attached Figure 1 -Attached Figure 2As shown, the judgment module includes an identification unit and a management strategy unit. The identification unit is used to identify the device connected to the judgment module and obtain the device data in the current device, and the device data includes device performance and device model, to determine the adaptability of the device data in the current IPv6 network, and then obtain the IPv6 address data in the current device data. The management strategy unit matches the algorithm type that is compatible with the device data and transmits the algorithm that matches the device data to the algorithm selection module. When the judgment module identifies the device data through the identification unit, it sets the current time to the first time data. After analyzing the different algorithms adapted to the current device data, the management strategy unit will set the current time to the second time data. , the algorithm transmitted to the algorithm selection module is imported into the random selection unit set in the algorithm selection module. The random selection unit selects the algorithm according to the time of the current device data, and the selection time is set to ,and , randomly select units through The 16 algorithms of the IPv6 address data in the current device data are obtained from the time data. When the random selection unit analyzes that the number of algorithms adapted to the current device data is less than 16 algorithms, the random selection unit randomly selects 8 algorithms from the algorithms. At the same time, the algorithm selection module re-splits and combines the 16 groups of IPv6 address data into 8 groups, and then transmits the combined data to the address encryption module. The address encryption module encrypts the IPv6 address data. The algorithm selection module obtains different algorithms through formulas. The specific formulas are as follows: ; in, Indicates the different algorithms selected by the algorithm selection module. represents a random algorithm, Represents the period range data of the random number generation algorithm, Indicates from The number of algorithm values ​​that are rounded down, and Indicates the value range data of 16 algorithm data.

[0025] Specific workflow: The identification unit in the judgment module is used to obtain device data and judge the adaptability of the current device in the current IPv6 network based on the device performance in the device data. Through this process, the IPv6 address data in the current device data is obtained. When the identification unit recognizes the device data, the current time is set as the first time data. The management strategy unit in the judgment module allocates different algorithms adapted to the device data according to the device data. After the management strategy unit analyzes the different algorithms adapted to the current device data, the current time is set as the second time data. , and then the device performance and the time required to query the device algorithm are used as the selection time, so that different device performance and algorithm selection occupy different resources, resulting in randomness in the second time data, and then the total selection time data is obtained from the second time and the first time, and the total selection time data is used as the selection algorithm time, and then 16 algorithms are selected from the algorithms compatible with the device through the selection algorithm time, and then the IPv6 data is processed using different algorithms. When the number of algorithms is less than 16, the 16 combinations are adjusted to 8 combinations to facilitate the encryption of IPv6 address data for different devices.

[0026] Furthermore, by cooperating with the random selection unit and the judgment module, the identification unit is used to obtain device data, which facilitates the management policy unit to analyze the number of algorithms adapted to the device, and then the random selection unit is used to obtain 16 different algorithms through the formula, and the 16 algorithms are matched with the grouped data respectively. After the encryption is completed, the data is reset, so that each bit of the 128-bit data is encrypted using a different algorithm.

[0027] Embodiment three:

[0028] Based on the second embodiment, please refer to the attached Figure 1 -Attached Figure 2 As shown, a dynamic adjustment unit is set in the algorithm selection module, and the algorithm selection module randomly generates a number between 1 and 8 and sets it as The dynamic adjustment unit adjusts the number of The dynamic adjustment unit randomly exchanges the unrestricted data in each group with the unrestricted data in other groups respectively, and then the dynamic adjustment unit transmits the randomly exchanged data to the temporary storage module. The address encryption module includes an address processing unit. After receiving the algorithm data selected by the random selection unit, the address processing unit encrypts the data in different groups according to the sixteen algorithm data respectively. The address encryption unit calls the randomly exchanged data in the temporary storage module to reset the 128-bit data.

[0029] Specific workflow: The algorithm selection module splits the 128-bit data of the IPv6 address into 16 groups. The algorithm selection module randomly generates a number between 1-8 and sets it to . The dynamic adjustment unit limits the bit data in each group according to the generated number. The dynamic adjustment unit randomly exchanges the unrestricted data in each group with different groups, records the randomly exchanged data, and transmits the randomly exchanged data to the temporary storage module. After receiving the algorithm data selected by the random selection unit, the address processing unit in the address encryption module encrypts the data in different groups according to the sixteen algorithm data. The address encryption unit calls the random exchange data in the temporary storage module and resets the 128-bit data to ensure that the encrypted data structure can be restored.

[0030] Furthermore, the algorithm selects the module for each group. The dynamic adjustment unit will limit the The bit data is moved to quickly locate the corresponding algorithm in each group, thereby achieving the effect of facilitating the rapid identification of each subsequent group of algorithms.

[0031] Embodiment 4:

[0032] Based on the third embodiment, please refer to the attached Figure 1 -Attached Figure 2 As shown, several single-chip microcomputers are arranged in the temporary storage module, and the single-chip microcomputer is used to store the 128-bit data exchange in the single device data and the encryption algorithm of each group of data collection. After the judgment module is disconnected from the device that obtains the IPv6 address data, the judgment module generates a reset instruction and transmits the reset instruction data to the single-chip microcomputer. After receiving the corresponding reset instruction data, the single-chip microcomputer clears the temporary storage data stored with the corresponding device.

[0033] Furthermore, the single-chip microcomputer is used to store different encryption algorithm data to prevent the encryption algorithm data from being tampered with. When the judgment module is disconnected from the device, the encryption algorithm data stored in the disconnected device is cleared, thereby facilitating the storage and protection of IPv6 algorithm data.

[0034] The above shows and describes the basic principles, main features and advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments. The above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. An address generation algorithm based on IPv6 encryption, including an address algorithm, characterized in that: The address algorithm includes a judgment module, an algorithm selection module, an address encryption module and a temporary storage module; The judging module is used to obtain the IPv6 address data and the first time data of the communication between the IPv6 address data and the judging module; The algorithm selection module divides the 128-bit data in the IPv6 address data into 16 groups, and exchanges the 7-bit data in each group with the 7-bit data in other groups and records them; The address encryption module encrypts the corresponding group of data according to the encryption algorithm selected in the algorithm selection module, and after the encryption algorithm encrypts each group of data, the 128-bit data is reset through the recorded transmission data; The temporary storage module is used to store data records between the judgment module, the algorithm selection module and the address encryption module.

2. The IPv6 encryption-based address generation algorithm according to claim 1, characterized in that: The judgment module includes an identification unit and a management policy unit. The identification unit is used to identify the device connected to the judgment module and obtain the device data in the current device, and the device data includes device performance and device model, to judge the adaptability of the device data in the current IPv6 network, and then obtain the IPv6 address data in the current device data. The management policy unit matches the device data with the algorithm type that is compatible with it, and transmits the algorithm that matches the device data to the algorithm selection module.

3. The IPv6 encryption-based address generation algorithm according to claim 2, characterized in that: When the judging module recognizes the device data through the recognition unit, the current time is set as the first time data. After analyzing the different algorithms adapted to the current device data, the management strategy unit sets the current time to the second time data. .

4. The IPv6 encryption-based address generation algorithm according to claim 3, characterized in that: The algorithm transmitted to the algorithm selection module is imported into the random selection unit set in the algorithm selection module. The random selection unit selects the algorithm according to the time of the current device data, and the selection time is set to ,and , randomly select units through 16 algorithms for obtaining IPv6 address data in the current device data based on time data.

5. The IPv6 encryption-based address generation algorithm according to claim 4, characterized in that: When the random selection unit analyzes that the number of algorithms adapted to the current device data is less than 16 algorithms, the random selection unit randomly selects 8 algorithms from the algorithms. At the same time, the algorithm selection module re-splits and combines the 16 groups of IPv6 address data into 8 groups, and then transmits the combined data to the address encryption module, which encrypts the IPv6 address data.

6. The IPv6 encryption-based address generation algorithm according to claim 4, characterized in that: The algorithm selection module obtains different algorithms through formulas, and the specific formulas are as follows: ； in, Indicates the different algorithms selected by the algorithm selection module. represents a random algorithm, Represents the period range data of the random number generation algorithm, Indicates from The number of algorithm values ​​that are rounded down, and Indicates the value range data of 16 algorithm data.

7. The IPv6 encryption-based address generation algorithm according to claim 6, characterized in that: The algorithm selection module is provided with a dynamic adjustment unit, and the algorithm selection module randomly generates a number between 1 and 8 and sets it as The dynamic adjustment unit adjusts the first The dynamic adjustment unit randomly exchanges the undefined data in each group with the undefined data in other groups, and then the dynamic adjustment unit transmits the randomly exchanged data to the temporary storage module.

8. The IPv6 encryption-based address generation algorithm according to claim 7, characterized in that: The address encryption module includes an address processing unit. After receiving the algorithm data selected by the random selection unit, the address processing unit encrypts the data in different groups according to the sixteen algorithm data respectively. The address encryption unit calls the randomly exchanged data in the temporary storage module and resets the 128-bit data.

9. The IPv6 encryption-based address generation algorithm according to claim 8, characterized in that: The temporary storage module is provided with a plurality of single-chip microcomputers, which are used to store the 128-bit data exchange in the single device data and the encryption algorithm of each group of data collection.

10. The IPv6 encryption-based address generation algorithm according to claim 9, characterized in that: After the judgment module is disconnected from the device that obtains the IPv6 address data, the judgment module generates a reset instruction and transmits the reset instruction data to the single-chip microcomputer. After receiving the corresponding reset instruction data, the single-chip microcomputer clears the temporary storage data stored with the corresponding device.

Images