Formal Node Identification Address for Secure IP Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In IP communication, special-purpose packets expose communication nodes' IP addresses, compromising security and confidentiality, as these addresses are not appropriately set and can be used for reverse DNS lookup, leading to potential malicious attacks and incorrect identification by relaying devices.
Innovation Solution
A communication device and system that determine the purpose of packets and select a formal node identification address as the source address, which is not used as a destination address, ensuring security by preventing unnecessary IP address disclosure and allowing for reverse DNS lookup with appropriate node description data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the IP address is set as the source address in special-purpose packets, then the packet can be transmitted and received, but the IP address is exposed and can be used for reverse DNS lookup, compromising security and confidentiality
Solution Approach 1:
The patent introduces a formal node identification address as an intermediary element between the actual IP address and the packet source address field. This formal node identification address serves as a mediator that prevents direct exposure of the IP address while still enabling packet transmission and reverse DNS lookup functionality. The formal node identification address acts as a placeholder that maps to the actual IP address only through controlled mechanisms, thereby securing the IP address from unauthorized exposure.
2Measurement precision
If the IP address is set as the source address, then the destination node can identify the source, but detailed location information and role information cannot be provided
Solution Approach 1:
The patent segments the identification function into two separate components: the formal node identification address for packet transmission and source identification, and the domain name for providing detailed location and role information. By segmenting these functions, the system can maintain precise source identification through the formal node identification address while simultaneously providing enriching detailed information through the domain name without exposing the actual IP address. This segmentation allows both precise identification and information enrichment to coexist.
3Object-affected harmful factors
If the formal node identification address is used as the source address, then IP address disclosure is prevented, but the address must not be used as a destination address to avoid communication errors
Solution Approach 1:
The patent applies local quality by赋予 the formal node identification address specific properties that differ from regular IP addresses. The formal node identification address has the quality characteristic of being unusable as a destination address, which prevents communication errors. This localized quality assignment ensures that the formal node identification address can only function as a source address, thereby preventing IP address disclosure while maintaining clear communication protocols. The distinct quality properties of the formal node identification address simplify its management by defining clear usage constraints.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A communication device having an IP address set therein includes a purpose determining unit that determines a communication purpose of a packet to be transmitted; a source address selection unit that, in the case where the communication purpose determined by the purpose determining unit is a predetermined purpose, selects, as a source address, a formal node identification address provided separately from the set IP address in order to identify the communication device, this formal node identification address having a property such that there exist no communication device that receives, through the formal node identification address, a packet having the formal node identification address set therein as a destination address; and a transmitting unit that transmits a packet having the formal node identification address selected by the source address selection unit set therein as the source address.