Blockchain Inter-Domain Routing Validation for BGP Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing inter-domain routing protocols, such as BGP, are vulnerable to routing single-point attacks and multi-point collusion attacks, where malicious nodes can violate routing policies undetected, lacking effective methods to resist such attacks.
Innovation Solution
A blockchain-based verifiable inter-domain routing validation method is introduced, utilizing a blockchain-based system with a verifiable inter-domain routing subsystem and a routing behavior validation subsystem to validate routing information, ensuring compliance with routing policies through a network of autonomous domains and routers with added behavior validation agents and a blockchain platform for secure validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-node cooperative routing validation is used to check single-point attacks, then routing policy violation detection capability is improved, but the system cannot detect multi-point collusion attacks because malicious nodes can compromise each other's validation information
Solution Approach 1:
The patent introduces a blockchain-based intermediary system that acts as a trusted mediator between routing nodes. Instead of nodes directly trusting each other's validation information, they trust the immutable blockchain ledger. The blockchain stores cryptographic proofs of routing policy compliance, and nodes can verify these proofs independently without relying on other nodes' honesty. This resolves the contradiction by providing a neutral, tamper-proof verification mechanism that works even when multiple nodes are malicious.
Solution Approach 2:
The patent moves the verification mechanism from the routing protocol layer to a separate blockchain layer. By storing validation evidence on the blockchain rather than within the routing messages themselves, the system creates an additional dimension of verification. This allows nodes to validate routing information against the immutable blockchain ledger, enabling detection of multi-point collusion attacks that would otherwise be undetectable within the traditional routing protocol framework.
2Reliability
If routing validation information is shared among multiple nodes, then single-point attack detection is enabled, but privacy protection is reduced and evidence forging becomes easier
Solution Approach 1:
The patent uses cryptographic copying where each node receives a copy of the routing validation evidence stored on the blockchain, rather than sharing the actual private information. Nodes verify routing compliance by checking cryptographic proofs (hashes, signatures) on the blockchain without accessing the underlying sensitive data. This enables validation capability while protecting privacy and preventing forgery, as the copied verification data cannot be used to reconstruct or alter the original sensitive information.
Solution Approach 2:
The patent applies different quality requirements to different parts of the validation system. Sensitive routing information remains local and private to each node, while only cryptographic verification proofs are shared on the blockchain. This local quality approach ensures that privacy-critical data never leaves the node, while still enabling collaborative validation through shared verification evidence with appropriate security properties.
Data Source
AI summary
The disclosure disclosures a blockchain-based verifiable inter-domain routing validation method, which includes: constructing a blockchain-based verifiable inter-domain routing system consisting of a verifiable inter-domain routing and a routing behavior validation subsystem; constructing, by a sender router R1, a routing behavior validation terminal of an autonomous domain to which the R1 belongs, and the routing validation blockchain system, a routing evidence and a routing evidence validation proposal, validating and endorsing the proposal, determining whether the proposal satisfies an endorsement policy, generating a routing evidence transaction, conducting consensus ordering on the transaction and updating a routing validation blockchain; and constructing, by a receiver router T, a routing behavior validation terminal of an autonomous domain to which the T belongs, and the routing validation blockchain system, a routing request validation message and retrieving whether a routing evidence corresponding to the routing request exists.