IP Packet Identification Using Pseudo-Random Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data transfer methods over computer networks are vulnerable to attacks due to predictable identification values, making receivers susceptible to man-in-the-middle attacks.
Innovation Solution
Implementing a pseudo-random number generator to create less predictable identification values for data packets, which are then inserted into IP packets, and maintaining a collision table to ensure uniqueness and prevent collisions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If an incremented identification value is used for each data packet, then the identification process is simple and efficient, but the identification value becomes predictable and vulnerable to attacks
Solution Approach 1:
The patent changes the parameter of identification value generation from a simple incremental counter to a pseudo-random number generator. This transformation maintains the uniqueness requirement while fundamentally altering the predictability characteristic, making the identification values unpredictable yet still systematic and manageable through the use of cryptographic algorithms.
Solution Approach 2:
The patent introduces a collision table as an intermediary data structure to mediate between the pseudo-random number generator and the packet identification process. This collision table stores used identification values and checks for duplicates, ensuring uniqueness while allowing the use of pseudo-random generation methods that might otherwise produce collisions.
2Reliability
If a pseudo-random number generator is used for identification values, then security against attacks is improved, but the complexity of the identification process increases
Solution Approach 1:
The patent employs parameter changes by selecting specific pseudo-random number generation algorithms with desirable properties (uniform distribution, good statistical characteristics) and configuring them with appropriate seed values and iteration counts. This approach achieves high security while keeping the implementation complexity manageable through careful parameter selection rather than complex system architecture.
Solution Approach 2:
The patent performs preliminary actions by pre-generating and storing identification values in a collision table before actual packet transmission. This pre-computation approach allows the system to quickly check for and resolve potential collisions without adding significant overhead during the critical packet processing phase, thereby reducing real-time complexity.
3Reliability
If identification values are generated more frequently, then the likelihood of collisions is reduced, but the computational overhead increases
Solution Approach 1:
The patent optimizes the balance between collision avoidance and computational overhead by adjusting parameters of the pseudo-random number generator, such as the iteration count and the size of the identification value space. By carefully selecting these parameters, the system achieves sufficient collision avoidance without generating excessively large or frequent identification values that would increase computational overhead.
Solution Approach 2:
The patent applies partial action by using a fixed number of iterations in the pseudo-random generation process rather than generating excessively long or frequent identification sequences. This partial approach provides sufficient security and collision avoidance while avoiding the diminishing returns and increased overhead that would result from excessive generation activity.
Data Source
AI summary
A pseudo-random generator may be used to generate identification values for formatted data packets. A method for transmitting data less susceptible to man-in-the-middle attacks may include receiving data for transmission over a network according to a protocol; formatting the data into one or more internet protocol (IP) packets by fragmenting the received data; and transmitting the one or more internet protocol (IP) packets. The step of formatting the data into one or more internet protocol (IP) packets may include generating a unique pseudo-random number while avoiding collisions with previously-used numbers; and inserting the pseudo-random number as an identifier in the one or more internet protocol (IP) packets corresponding to the received data.