Trusted Packet Parsing via Dynamic Device Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current packet parsing methods in networks with multiple namespaces are vulnerable to hacker attacks, as they rely on untrusted devices for parsing, which can lead to compromised source reliability and integrity of parsed results.
Innovation Solution
A method and device for packet parsing that dynamically selects a trusted parsing device using a control device, employing attribute-based encryption (ABE) to verify the reliability of packets by encrypting source and destination names with device identifiers, ensuring that only trusted devices perform parsing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a fixed parsing device is used for packet parsing, then the parsing process is simple, but the system is vulnerable to hacker attacks and source reliability cannot be ensured
Solution Approach 1:
The patent implements dynamic selection of parsing devices based on trust relationships. Instead of using a fixed parsing device, the system dynamically determines which device should perform parsing by evaluating trust relationships between source device, destination device, and candidate parsing devices. This dynamic approach ensures that only trusted devices perform parsing, thereby maintaining source reliability while adapting to different network conditions and threat scenarios.
Solution Approach 2:
The patent introduces a trust relationship mechanism as an intermediary layer between packet transmission and parsing. This trust evaluation system acts as a mediator that verifies the credibility of potential parsing devices before assigning parsing tasks. By inserting this trust verification layer, the system ensures that only authenticated and trusted devices can perform parsing operations, thus preventing hacker attacks while maintaining system functionality.
2Reliability
If a trusted parsing device is dynamically selected, then security is improved, but the device selection and verification process becomes more complex
Solution Approach 1:
The patent establishes trust relationships in advance between devices before actual packet parsing occurs. During system initialization or prior to communication, devices evaluate and establish trust relationships with potential parsing devices. This preliminary trust establishment eliminates the need for complex real-time verification during packet parsing, as the trust status is pre-determined and can be quickly referenced when selecting a parsing device.
Solution Approach 2:
The system enables devices to autonomously evaluate and determine their own trustworthiness and suitability for parsing without requiring complex centralized verification. Each device can self-assess its security status, cryptographic capabilities, and trust relationships, and make decisions about whether to accept or perform parsing operations. This self-service approach reduces the complexity of centralized device selection while maintaining high security standards.
Data Source
AI summary
A packet parsing method includes a source device receives a first ciphertext from a control device, where the first ciphertext is used to verify reliability of a packet from a parsing device, and the parsing device is a trusted device selected on a path between the source device and a destination device. The source device obtains a second packet including the first ciphertext according to the first ciphertext and a first packet, and sends the second packet to the destination device. The parsing device obtains, according to the second packet and a device identifier of the parsing device, a third packet including verification information and the first ciphertext. The destination device receives the third packet from the parsing device, and verify reliability of the third packet using the verification information and the first ciphertext included in the third packet.