IPv6 Network Discovery via Passive and Active Sensor Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The complexity of IPv6 address spaces, with 128-bit addresses offering 3.4×10^38 possible addresses, makes brute force scanning impractical for discovering devices within a network, as it would take significantly longer than with IPv4 addresses, complicating network mapping and security monitoring.
Innovation Solution
An asset management system employing passive and active discovery sensors to identify IPv6 addresses, with passive sensors monitoring network traffic and event records, and active sensors sending data to devices to determine their presence and attributes, allowing for more targeted network analysis and security management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If brute force scanning is used to discover IPv6 devices, then complete network device discovery is achieved, but the time required becomes impractically long
Solution Approach 1:
The patent segments the network discovery process into multiple phases: initial passive monitoring to identify active devices, followed by targeted active scanning only for identified devices. This segmentation avoids the need to scan the entire IPv6 address space, thereby reducing scanning time while maintaining discovery completeness.
Solution Approach 2:
The patent performs preliminary passive network traffic monitoring before conducting active scanning. By first identifying devices through passive observation of network traffic, the system prepares a targeted list of devices to scan, eliminating the need for time-consuming brute force scanning of all possible IPv6 addresses.
2Ease of operation
If passive discovery sensors are used to monitor network traffic, then device identification is achieved with minimal disruption, but the complexity of the discovery system increases
Solution Approach 1:
The patent implements discovery sensors that can operate in multiple modes (passive monitoring and active scanning) and serve multiple functions (device identification, attribute collection, and network mapping). This multi-functionality reduces the need for separate specialized systems, thereby managing complexity while maintaining ease of operation.
Solution Approach 2:
The patent employs dynamic sensor deployment where passive sensors are deployed first for minimal disruption, and active sensors are selectively activated only when needed based on passive monitoring results. This dynamic approach balances operational ease with system complexity by activating additional functionality only when required.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A first internet protocol version 6 (IPv6) address of a particular computing device within a network is identified using a first passive discovery sensor performing a first discovery task. A second discovery task is caused to be performed using the first IPv6 address and an attribute of the particular computing device is identified from results of the second discovery task. The first IPv6 address and attribute of the particular device is added to a repository maintaining a record of detected IPv6 addresses within the network. In some instances, a first passive discovery sensor can be one of an event-based discovery sensor, a latent-type discovery sensor, and an indirect-type discovery sensor.