IPv6 Packet Extension Header for Secure Access and Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing DSL network based on IPv4 faces challenges with secure access, authentication, and authorization, and cannot differentiate between user equipment, leading to incorrect allocation of IPv6 prefixes, affecting network routing.
Innovation Solution
A method and system for processing IPv6 packets by adding access line information or vendor information as extension headers, allowing access nodes and IP edge nodes to perform secure access, authentication, and authorization, and allocate unique IPv6 address prefixes to terminals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If IPv6 is deployed to replace IPv4, then network bandwidth and capacity are improved, but secure access and authentication cannot be ensured
Solution Approach 1:
The patent introduces an extension header as an intermediary component between the IPv6 packet and the authentication system. This extension header carries access line information that enables authentication and authorization without modifying the core IPv6 protocol, thus maintaining network bandwidth performance while adding security capabilities.
Solution Approach 2:
The patent segments the authentication information into a separate extension header structure within the IPv6 packet. This allows the authentication data to be transmitted alongside the IPv6 packet without interfering with the main protocol functionality, enabling both high bandwidth and secure access simultaneously.
2Ease of manufacture
If a same IPv6 prefix is allocated to different users, then network configuration is simplified, but normal routing is affected
Solution Approach 1:
The extension header acts as a mediator that carries user-specific identification information alongside the shared IPv6 prefix. This allows the network to use a simplified prefix allocation scheme while still maintaining proper routing by including additional identification data in the extension header that enables differentiation between users.
Data Source
AI summary
The present disclosure discloses a method, device, and system for processing an IPv6 packet, and relates to the field of Internet technologies. According to the present disclosure, a secure access, authentication, and authorization can be ensured in an IPv6 network, and different IPv6 address prefixes are allocated to different terminals. Therefore, normal routing in the network is ensured. A method for processing an IPv6 packet provided in an embodiment of the present disclosure includes: an access node adds access line information to an IPv6 packet; and forwards the IPv6 packet that is added with the access line information to an IP edge node. The present disclosure is applicable to a scenario of processing a packet in an IPv6 network.