Source Address Validation Entries Using Verified AS Relationships
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current source address validation entries are not accurate enough, leading to a high probability of errors in the source address validation process, which compromises network security.
Innovation Solution
A method to obtain source address validation entries by using valid relationships between autonomous systems (ASs) based on identifiers and databases such as ASPA and IRR, ensuring accurate prefix and interface matching to improve validation accuracy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If source address validation entry is obtained using conventional methods, then the validation process can be implemented, but the accuracy of the source address validation entry is not high enough, leading to high error probability
Solution Approach 1:
The patent performs preliminary validation of AS relationships by checking multiple databases (ASPA, IRR, ROA) before obtaining the source address validation entry. This preliminary action ensures that only valid AS relationships are used to generate validation entries, significantly improving accuracy and reducing error probability in the validation process.
Solution Approach 2:
The patent implements a feedback mechanism where the system continuously validates AS relationships against multiple databases and updates the source address validation entries accordingly. This feedback loop ensures that the validation entries remain accurate and up-to-date, reducing errors in the validation process.
2Measurement precision
If multiple databases are queried to validate AS relationships, then the accuracy of prefix classification is improved, but the complexity of the validation process increases
Solution Approach 1:
The patent performs preliminary validation of AS relationships by checking multiple databases (ASPA, IRR, ROA) before obtaining the source address validation entry. This preliminary action ensures that only valid AS relationships are used to generate validation entries, significantly improving accuracy and reducing error probability in the validation process.
Solution Approach 2:
The patent changes the validation parameters by introducing multiple database queries with different validation criteria (ASPA for authorized providers, IRR for routing policies, ROA for route origin authorization). This multi-parameter approach improves prefix classification accuracy while managing complexity through systematic validation.
Data Source
AI summary
This disclosure discloses a method and an apparatus for obtaining a source address validation entry. The method includes: obtaining a first prefix of a second AS based on an identifier of a first AS and a first correspondence, where the first correspondence includes the identifier of the first AS, an identifier of the second AS, and a first valid relationship, and the second AS is located downstream of the first AS; and obtaining the source address validation entry based on an interface communicating with the first AS and the first prefix, where the source address validation entry includes the first prefix and an identifier of the interface. The prefix is obtained by using the valid relationship between the ASs, so that an error caused by an invalid relationship between the ASs to the prefix obtaining process is reduced.