Packet Routing Path Identification Using Footprint Digests
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for estimating routing paths in communication networks are ineffective due to the absence of packet processing prior to analysis, leading to difficulties in tracing the source of packets, especially in industrial control networks where security breaches need to be identified, and duplication of packets across multiple routers complicates path identification.
Innovation Solution
A system comprising processors, a data collection module, a digest information generator, and an analysis module that acquires packets from multiple sensors, generates footprints using hash values and timestamps, and compares these footprints to determine the routing path of packets, thereby identifying the path and preventing security breaches.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If packet routing path estimation is performed without processing packets prior to analysis, then the system complexity is reduced, but the measurement precision of routing path identification deteriorates
Solution Approach 1:
The patent applies preliminary action by processing packets before analysis through creating footprints that contain essential routing information. The system generates digests of packet data at intermediate network devices, preparing the information in advance so that when packets reach the analysis stage, the routing path can be accurately determined without complex real-time processing. This pre-processing step stores routing information in a manageable format that enables precise path reconstruction later.
2Ease of operation
If source IP address is used to identify packet source, then the identification process is simplified, but the reliability of source identification deteriorates due to IP address spoofing and replacement
Solution Approach 1:
The patent introduces an intermediary approach by using footprints and digests as intermediate representations of packet identity. Instead of relying directly on the source IP address which can be spoofed or replaced, the system creates a fingerprint of the packet's essential characteristics at intermediate network devices. This intermediary representation maintains a consistent identity throughout the packet's journey, allowing reliable source identification even when the IP address changes due to network address translation or spoofing attempts.
3Quantity of substance
If duplicate packet information is received at multiple routers, then complete routing path data is collected, but the difficulty of detecting and measuring the actual path increases
Solution Approach 1:
The patent applies the copying principle by creating footprint copies of packet information at each intermediate network device along the routing path. Each router or network device generates a digest or fingerprint of the passing packet and stores this copy. When analyzing the routing path, these pre-created copies can be retrieved and compared without needing to re-process the original packets. This copying approach transforms the problem from analyzing duplicate packet flows into matching pre-generated footprint records, significantly reducing the difficulty of path detection while maintaining complete routing information.
Data Source
AI summary
The disclosure relates to a method for determining routing path of a packet in a communication network. The method includes steps, but is not limited to, (i) receiving, by a data collection module, a packet from each of at least two sensors (ii) generating, by a digest information generator, a footprint for each packet received from each of the at least two sensors (iii) comparing, by an analysis module, whether each of the at least one footprint generated matches a last generated footprint.