Back to results
US 10,097,530 B2Granted
Security authentication method and bidirectional forwarding detection BFD device
AssigneeHuawei Technologies Co., Ltd.
InventorsPeilin Yang, Tao Han
Life of this patent
Estimating the term…
Loading patent…
Loading patent…
AssigneeHuawei Technologies Co., Ltd.
InventorsPeilin Yang, Tao Han
Estimating the term…
A security authentication method includes: receiving, by a control plane of a BFD device, a first BFD packet that is sent by a control plane of a peer BFD device; generating, by the control plane, a first token value according to the random nonce; sending the first token value to a data plane; receiving, by the data plane, a second BFD packet that is sent by a data plane of the peer BFD device, where the second BFD packet carries authentication information, and the authentication information includes a random nonce; and generating, by the data plane, a second token value according to the random nonce included in the authentication information and by using a calculation method the same as that of the control plane, and successfully authenticating, by the data plane, the second BFD packet if the first token value and the second token value are the same.
A security authentication method, comprising:
A security authentication method, comprising:
A bidirectional forwarding detection (BFD) device, comprising:
A bidirectional forwarding detection (BFD) device, comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
No references of this kind are recorded.
Network architectures or network communication protocols for network security: for authentication of entities
Network architectures or network communication protocols for network security: applying verification of the received information
By monitoring network traffic: event detection, e.g. attack signature detection
Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass: for…
About 8 years 8 months of term left · ends 22 Jun 2035 (estimated)
This application relates to the field of communications technologies, and in particular, to a security authentication method and a bidirectional forwarding detection BFD device.
The Bidirectional Forwarding Detection (BFD) protocol can rapidly detect a communication fault between neighboring network devices, and a network device can switch traffic over to a backup link according to the rapidly detected fault, to speed up network convergence, thereby ensuring continuation of a service, reducing impact of a device fault or link fault on the service, and improving network availability. A BFD device includes a control plane formed by a general central processing unit (CPU) processor and a data plane formed by a network processor (NP). To prevent cyberattacks, in the control plane, the BFD protocol supports three security authentication manners: (1) an authentication manner based on a simple password; (2) authentication based on message digest algorithm 5 (MD5); and (3) authentication based on Security Hash Algorithm 1 (SHA1); however, in the data plane, there is no manner of security authenticating a BFD packet by the NP yet in any prior art.
In order that an NP in a data plane of a BFD device can also perform security authentication, embodiments of this application provide a security authentication method and a bidirectional forwarding detection BFD device.
FIG. 1 is a flowchart of a security authentication method according to an embodiment of this application;
FIG. 2 is a flowchart of another security authentication method according to an embodiment of this application;
FIG. 3 is a schematic diagram of a BFD packet sent by an original data plane according to an embodiment of this application;
To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the following clearly describes the technical solutions in the embodiments of this application with reference to the accompanying drawings in the embodiments of this application.
The following further describes the embodiments of this application in detail with reference to accompanying drawings in this specification.
An embodiment of this application provides a security authentication method. Referring to FIG. 1, the method includes the following operations: