Blockchain Hash Route Origin Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Route Origin Authorization (ROA) systems in the RPKI are susceptible to BGP attacks, allowing malicious attackers to misroute Internet traffic by manipulating BGP routing data, compromising the security and integrity of IP networks.
Innovation Solution
Incorporating a blockchain hash into the ROA system to enhance security, where routing devices use the blockchain hash to validate BGP update messages, ensuring only valid routes are updated in the routing table, thereby preventing malicious diversion of packet traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional ROA methods are used for route validation, then the routing system operates with simpler validation processes, but the system is vulnerable to BGP attacks and traffic manipulation
Solution Approach 1:
The patent introduces blockchain as an intermediary layer between BGP route announcements and routing decisions. The blockchain hash in ROA records serves as a mediator that validates route authenticity without requiring complex peer-to-peer verification between routing devices. This intermediary mechanism enhances security while maintaining manageable system complexity.
Solution Approach 2:
The patent implements preliminary validation by embedding blockchain hashes in ROA records before routes are announced via BGP. Routing devices perform validation using these pre-computed hashes, avoiding the need for complex real-time verification processes. This preliminary action secures routes before they enter the routing system.
2Reliability
If blockchain hash validation is implemented in ROA, then the integrity and security of routing information is enhanced, but the processing overhead and validation time increase
Solution Approach 1:
The patent uses cryptographic hashing to create a compact copy of the route authorization data stored in blockchain. Instead of validating entire route histories or performing complex cryptographic verifications, routing devices validate only the hash value. This copying approach maintains integrity while minimizing validation time and processing overhead.
3Object-affected harmful factors
If blockchain enhanced ROA is deployed across the network, then resistance to BGP attacks is improved, but the system requires more sophisticated validation infrastructure
Solution Approach 1:
The blockchain hash in ROA records acts as an intermediary that simplifies attack resistance. Instead of requiring complex peer-to-peer verification infrastructure, the pre-computed hash serves as a trusted mediator that routing devices can validate using standard cryptographic operations. This reduces infrastructure complexity while maintaining strong attack resistance.
Data Source
AI summary
A routing device including a memory and a processor. The memory stores instructions. The processor is configured to execute the instructions to receive a signed route origin authorization (ROA), which includes a blockchain hash, and a border gateway protocol (BGP) update message, which includes one or more routes. The processor is further configured to implement a Route Origin Validation (ROV) process using the blockchain hash in the signed ROA to determine whether the one or more routes in the BGP update message are valid; update a routing table to include the one or more routes from the BGP update message when the one or more routes are determined to be valid by the ROV process; and refrain from updating the routing table with the one or more routes from the BGP update message when the one or more routes are determined to be invalid by the ROV process.