Source Address Validation Entries Using Verified AS Relationships
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current source address validation entries are not accurate enough, leading to a high probability of errors in the source address validation process, which compromises network security.
Innovation Solution
A method to obtain source address validation entries by using valid relationships between autonomous systems (ASs) based on identifiers and databases such as ASPA and IRR, ensuring that prefixes are obtained from ASs with matching regions and validated by multiple databases, thereby improving the accuracy of the source address validation entries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If source address validation entries are obtained using conventional methods, then the validation process can be performed, but the accuracy of the source address validation entry is insufficient leading to high error probability
Solution Approach 1:
The patent performs preliminary validation of AS relationships by checking multiple databases (ASPA, IRR) and verifying region matching before obtaining the source address validation entry. This preliminary action ensures that only valid AS relationships are used to generate validation entries, thereby improving accuracy and reducing error probability in the subsequent validation process.
Solution Approach 2:
The patent implements a feedback mechanism where the obtained source address validation entry is verified against multiple databases and region matching criteria. If the validation fails or shows inconsistencies, the system adjusts the selection of AS relationships and re-obtains the validation entry, ensuring high accuracy through iterative verification.
2Measurement precision
If multiple databases are used to validate AS relationships, then the accuracy of prefix obtaining is improved, but the complexity of the validation process increases
Solution Approach 1:
The patent segments the validation process into distinct stages: first validating AS relationships against multiple databases (ASPA, IRR), then checking region matching, and finally obtaining the source address validation entry. This segmentation allows each validation step to be performed independently and systematically, managing complexity while maintaining high accuracy.
Solution Approach 2:
The patent applies different validation criteria to different aspects of the AS relationship: database existence checks for one aspect, region matching for another aspect, and prefix validity for the final aspect. This localized quality approach ensures that each aspect is validated with appropriate criteria, improving overall accuracy without uniformly increasing complexity.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
This application discloses a method and an apparatus for obtaining a source address validation entry. The method includes: obtaining a first prefix of a second AS based on an identifier of a first AS and a first correspondence, where the first correspondence includes the identifier of the first AS, an identifier of the second AS, and a first valid relationship, and the second AS is located downstream of the first AS; and obtaining the source address validation entry based on an interface communicating with the first AS and the first prefix, where the source address validation entry includes the first prefix and an identifier of the interface. The prefix is obtained by using the valid relationship between the ASs, so that an error caused by an invalid relationship between the ASs to the prefix obtaining process is reduced, thereby improving accuracy of the prefix, and further improving accuracy of the source address validation entry obtained based on the prefix.