IPv6 Destination Address Generation for Secure IoT Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IPv6 communication security is compromised due to vulnerabilities in existing technologies, making it difficult to prevent hackers from scanning and attacking, especially in high-security applications like Internet of Things and e-commerce.
Innovation Solution
A secure communication method is implemented using a client and non-public server, where the client generates destination addresses based on an IPv6 prefix and a signature string using a private key, and the non-public server verifies these connections using a public key to ensure only authorized communication is established, hiding its existence from external perception.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the server uses a public IPv6 address for communication, then communication accessibility is improved, but security is worsened because hackers can scan and attack the server
Solution Approach 1:
The patent introduces a signature string as an intermediary authentication mechanism between the client and server. The signature string, generated using cryptographic algorithms based on client credentials and communication parameters, acts as a mediator that verifies legitimate communication without exposing the server to unauthorized access. This resolves the contradiction by enabling accessible communication while filtering out malicious attempts through cryptographic verification.
Solution Approach 2:
The patent transforms the server's address visibility parameter from publicly accessible to conditionally accessible based on authentication. By changing the state of address exposure from static (always visible) to dynamic (visible only after successful signature verification), the system maintains communication accessibility for legitimate users while preventing hacker scanning and attacks.
2Object-affected harmful factors
If the server hides its address to prevent hacking, then security is improved, but communication accessibility is worsened
Solution Approach 1:
The patent implements preliminary authentication through signature string verification before establishing communication. The server pre-configures authentication mechanisms and verifies client signatures before accepting connections, ensuring security is established in advance. This preliminary action allows the server to remain address-hidden while still providing accessible communication to authenticated clients.
Solution Approach 2:
The signature string serves as an intermediary that bridges the gap between address hiding and communication accessibility. It enables authenticated clients to establish connections without the server needing to be publicly visible, as the signature verification process mediates the connection establishment before address exposure becomes necessary.
3Device complexity
If traditional IPv6 communication is used without authentication, then communication simplicity is improved, but security is worsened due to lack of verification mechanisms
Solution Approach 1:
The patent incorporates preliminary authentication through signature string generation and verification as a前置 step in the communication process. By performing authentication before data transmission, the system maintains protocol simplicity while ensuring security. The signature verification is integrated into the connection establishment phase, avoiding complex ongoing authentication mechanisms.
Solution Approach 2:
The patent replaces traditional mechanical authentication methods (such as password verification or challenge-response protocols) with cryptographic signature verification. This substitution maintains simplicity by using standardized cryptographic algorithms while significantly improving security through mathematically proven verification mechanisms that are resistant to hacking and spoofing.
Data Source
AI summary
Embodiments of the present disclosure provide a secure communication method, a client and a non-public server. The secure communication method includes: generating a set of destination addresses of a non-public server based on an IPv6 prefix of the non-public server, and a signature string and a user ID of a client, wherein the signature string is obtained by signing an IPv6 address and the user ID of the client based on a private key of the client; initiating a set of connection request to the non-public server based on a set of communication connections containing the set of destination addresses, for the non-public server to determine a public key corresponding to a user ID based on the user ID in the set of destination addresses, verifying the set of communication connections based on the public key, and establishing communication when the verification of the set of communication connections passes.