Slow Protocol Packet Validation via Pre-stored Device Info
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing Slow Protocol packet processing methods in communications technologies are vulnerable to security threats, as attackers can construct false protocol packets to trigger incorrect actions, leading to link faults and congestion.
Innovation Solution
A method and apparatus that validate Slow Protocol packets by matching device information and port identifiers stored during negotiation, identifying packets as valid only when they match stored information, and discarding invalid packets to prevent unauthorized communication and congestion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the network device processes all received Slow Protocol packets without validation, then the processing speed is fast and the system is simple, but security vulnerabilities arise allowing attackers to trigger incorrect actions
Solution Approach 1:
The patent applies preliminary action by storing the source address and port identifier of the peer device during the negotiation process before actual packet processing. This pre-stored information serves as validation criteria, allowing the device to quickly verify incoming packets against established credentials without complex real-time analysis, thus enhancing security while maintaining processing efficiency
Solution Approach 2:
The patent implements feedback by comparing the source address and port identifier of each incoming Slow Protocol packet against the pre-stored negotiation information. This feedback mechanism validates packet authenticity and determines whether to process or discard packets, creating a security filter that prevents unauthorized actions while maintaining legitimate communications
2Reliability
If the network device validates every Slow Protocol packet by comparing with stored negotiation information, then security is improved, but the processing time and computational resources increase
Solution Approach 1:
The patent extracts only the critical validation elements (source address and port identifier) from the complete packet data and compares only these extracted fields against stored negotiation information. This selective extraction approach validates packet authenticity without processing the entire packet content, reducing validation time while maintaining security
Solution Approach 2:
The patent uses simple, lightweight comparison operations rather than complex validation algorithms. The validation process uses basic field matching that requires minimal computational resources, making the security check fast and efficient without requiring heavy processing power or time
3Adaptability or versatility
If the network device processes invalid Slow Protocol packets from attackers, then the system remains simple and open, but network congestion and false operations occur
Solution Approach 1:
The patent applies preliminary anti-action by proactively blocking invalid packets before they can cause harm. By validating packets against pre-stored negotiation information and discarding those that don't match, the system prevents potential attacks and congestion before they occur, maintaining security while keeping the system open to legitimate communications
Solution Approach 2:
The patent converts the potential harm of packet flooding into a benefit by using the validation process to filter traffic. The comparison mechanism that identifies invalid packets also automatically recognizes and processes valid packets, turning what could be a security burden into an efficient traffic management system that protects against congestion while maintaining openness
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present invention provide a Slow Protocol packet processing method and a related apparatus. The method includes: receiving, by a network device, a first Slow Protocol packet, where the first Slow Protocol packet carries device information of a transmit end device of the first Slow Protocol packet; determining, by the network device based on port information of a port of the network device receiving the first Slow Protocol packet, that a negotiation process is already completed between the network device and the transmit end device, and querying, based on the device information of the transmit end device carried in the first Slow Protocol packet, whether a device information base stored by the network device in the negotiation process includes the device information of the transmit end device; and identifying, by the network device, the first Slow Protocol packet as a valid packet in response to a result that the device information base includes the device information of the transmit end device. It can be learned that the embodiments of the present invention provide a Slow Protocol packet validation manner, so that security can be improved.