Network Layer Header Extension Processing for Protocol Adaptability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial control systems face challenges in securely extending the functions of their network layer protocols, as modifying the header structure of communication frames to add new security measures is cumbersome and burdensome.
Innovation Solution
A communication processing device and method that include a processing unit capable of processing the network layer of communication frames. This processing unit identifies and processes both standard and extension header parts within the frame, using extension header presence/absence information to determine the presence of additional extension headers, allowing for flexible extension of protocol functions without altering the header structure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If new header information is added to extend the function of the header part for security measures, then the function and security of the network layer protocol is improved, but the device complexity and burden of changing header structure increases
Solution Approach 1:
The header part is segmented into a standard header part (with fixed structure) and multiple extension header parts (for additional functions). This segmentation allows the standard header to remain unchanged while enabling function extension through optional extension headers, thus resolving the contradiction between adaptability and device complexity.
Solution Approach 2:
The header structure is made dynamic by introducing extension header presence/absence information that indicates whether extension headers are present. This allows the header structure to adapt flexibly to different communication needs without requiring changes to the standard header part, achieving both adaptability and maintaining manageable complexity.
2Reliability
If the header part structure is changed to add new security header information, then the security function is improved, but the ease of manufacture and maintenance burden worsens
Solution Approach 1:
By segmenting the header into standard and extension parts, security-related header information can be added to extension headers without modifying the standard header structure. This maintains ease of manufacture and implementation while achieving enhanced security functions.
Solution Approach 2:
Extension headers act as intermediaries that carry additional security information without directly modifying the standard header structure. This intermediary mechanism allows security enhancements to be implemented independently of the core header design, reducing the burden of structure modification.
3Adaptability or versatility
If multiple extension header parts are added to provide diverse header information, then the adaptability and function extension capability is improved, but the device complexity increases
Solution Approach 1:
The dynamic presence/absence indication mechanism allows the system to process only the necessary extension headers for each communication instance. This dynamic approach enables diverse header information support while managing processing complexity by avoiding unnecessary processing of absent extension headers.
Solution Approach 2:
The extension header mechanism provides a universal framework that can accommodate multiple types of header information (security, routing, QoS, etc.) through a standardized extension header structure. This multi-functionality approach achieves diverse header information support without proportionally increasing processing complexity.
Data Source
AI summary
A communication processing device includes a processing unit configured to process a network layer of a communication frame received from a transmission line. A header part of the network layer contains extension header presence/absence information that indicates whether the header part has an extension header part for defining header information different from header information defined by a standard header part standardly included in the header part. The processing unit includes: a first processing unit for processing the standard header part; a second processing unit for, if the header part has one or more extension header parts, individually processing the one or more extension header parts of the header part; and a determination unit for determining the presence or absence of an i+1th extension header part, based on the extension header presence/absence information contained in an i-th extension header part, where i is an integer of 1 or more.