IPv6 Aliased Prefix Detection via ICMPv6 Fragmented Fingerprints

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current IPv6 aliased prefix detection methods face limitations in accurately identifying aliased prefixes, especially in smaller prefix spaces, leading to misjudgment and inefficient network resource detection, as they fail to distinguish between active and aliased prefixes and do not effectively map host devices to addresses.

Innovation Solution

A method and device for detecting IPv6 aliased prefixes using fragmented fingerprints, which generates pseudo-random addresses, sends ICMPv6 echo request packets, and modifies the path maximum transmission unit (MTU) to identify whether addresses are configured on the same host, thereby distinguishing aliased prefixes and reducing network detection costs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Area of stationary object

If probability-based aliased prefix detection is used, then detection coverage is improved, but measurement precision deteriorates due to inability to prove addresses are on the same host

Engineering Contradiction:
Improvedetection coverageVSAvoidalias verification accuracy
Core Design Contradiction:
Area of stationary objectVSMeasurement precision

Solution Approach 1:

The patent uses ICMPv6 echo request-response packets to establish bidirectional communication between the prober and target addresses. By receiving confirmed responses, the system obtains feedback that validates address activity and enables precise verification of whether multiple addresses belong to the same host, resolving the precision issue while maintaining broad detection coverage

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent introduces ICMPv6 echo packets as an intermediary mechanism to indirectly verify host configuration. Instead of directly determining if addresses are aliased, the system uses echo request-response interactions as a mediator to gather evidence about address ownership, enabling accurate alias detection without sacrificing measurement precision

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multi-level aliased prefix detection is used, then prefix length range is extended, but device complexity increases due to fuzzy fingerprint technique

Engineering Contradiction:
Improveprefix length rangeVSAvoiddetection algorithm complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent changes the detection parameter from fuzzy fingerprint analysis to concrete ICMPv6 packet size and fragmentation characteristics. By monitoring whether packets are fragmented and comparing packet sizes, the system achieves adaptability across different prefix lengths (64-124 bits) while maintaining algorithmic simplicity and avoiding the complexity of fingerprint-based approaches

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent replaces the complex 'fingerprint technique' mechanical system with a simpler packet-based detection mechanism. Instead of analyzing fuzzy fingerprint characteristics, the system uses clear-cut ICMPv6 packet fragmentation behavior as a substitute mechanism, achieving the same adaptability with reduced complexity

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If ICMPv6 echo packets are sent to all pseudo-random addresses, then detection completeness is improved, but loss of energy increases due to unnecessary packet transmission

Engineering Contradiction:
Improvedetection completenessVSAvoidnetwork detection cost
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent performs preliminary action by first sending ICMPv6 echo request packets to all pseudo-random addresses to identify active ones before conducting the actual alias detection process. This preliminary filtering step ensures detection completeness for all potentially active addresses while avoiding unnecessary energy expenditure on obviously inactive addresses in subsequent detection phases

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent applies partial action by sending echo packets to a selected subset of pseudo-random addresses rather than all possible addresses in the prefix space. By strategically choosing addresses that provide maximum detection value, the system achieves sufficient detection completeness while minimizing energy loss from excessive packet transmission

Inventive Principle:
Principle #16Partial or excessive action

4Speed

If randomly generated addresses are used, then detection speed is improved, but measurement precision deteriorates due to subnet distribution causing misjudgment

Engineering Contradiction:
Improvedetection speedVSAvoidalias detection accuracy
Core Design Contradiction:
SpeedVSMeasurement precision

Solution Approach 1:

The patent adds another dimension to address generation by incorporating subnet distribution control into the random address generation process. Instead of purely random generation that may cluster in subnets, the system generates addresses with consideration for subnet boundaries, maintaining detection speed while improving precision by avoiding misjudgment from subnet-based address clustering

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS11757829B2Method and device for detecting IPv6 aliased prefix based on fragmented fingerprint
Publication Date: 2023.09.12 TSINGHUA UNIVERSITY
  • US11757829B2 patent drawing

AI summary

A method for detecting an IPv6 aliased prefix based on fragmented fingerprint includes: generating a plurality of pseudo random addresses in a target prefix space; determining the target prefix as an active prefix; and determining that the plurality of the pseudo random addresses and the active prefix are configured on the same host, so as to identify the active prefix as the aliased prefix. This method may effectively discover a network host, reduce the cost of network detection, and provide more effective data support for network measurement, network surveying and mapping and security research.