Back to results
US 11,388,083 B2Granted
Secure route identification method and apparatus
AssigneeHuawei Technologies Co., Ltd.
InventorsDonghui Wang, Hongpei Li, Bingyang Liu
Life of this patent
Estimating the term…
Abstract
This application provides a secure route identification method and an apparatus. A first AS node receives a first message. The first message is used to indicate a target path for reaching a first route prefix, and the target path is used to indicate a first neighboring relationship between AS nodes on the target path. Then, the first AS node determines, based on the first neighboring relationship and neighbor information of an AS node on the target path that is stored in a blockchain, whether a security threat exists on the target path. The neighbor information of the AS node on the target path includes a second neighboring relationship between the AS node on the target path and another AS node.
Claims20
A secure route identification method, comprising:
- receiving, by a first autonomous system (AS) node, a first message, wherein the first message indicates a target path for reaching a first route prefix, and the target path indicates a first neighboring relationship between AS nodes on the target path;
- and
- determining, by the first AS node based on the first neighboring relationship and the neighbor information of an AS node on the target path that is stored in a blockchain, whether a security threat exists on the target path,
- wherein the neighbor information comprises a second neighboring relationship, and the second neighboring relationship indicates all neighboring nodes of the AS node on the target path,
- wherein the determining includes checking, by the first AS node, whether the second neighboring relationship matches the first neighboring relationship,
- wherein with the second neighboring relationship matching the first neighboring relationship, the determining determines that no security threat exists on the target path,
- wherein with the second neighboring relationship not matching the first neighboring relationship, the determining determines that the security threat exists on the target path,
- wherein the first neighboring relationship indicates that a second AS node is a neighboring node of a third AS node,
- wherein the second AS node has the first route prefix, the second neighboring relationship indicates all neighboring nodes of the second AS node,
- wherein the determining further includes checking whether the third AS node is one of all neighboring nodes of the second AS node,
- wherein with the third AS node being one of all the neighboring nodes of the second AS node, the determining determines, by the first AS node, that the second neighboring relationship matches the first neighboring relationship, and
- wherein with the third AS node not being one of all the neighboring nodes of the second AS node, the determining determines, by the first AS node, that the second neighboring relationship does not match the first neighboring relationship.
9 more elements
A secure route identification method, comprising:
- receiving, by a first autonomous system (AS) node, a first message, wherein the first message indicates a target path for reaching a first route prefix, and the target path indicates a first neighboring relationship between AS nodes on the target path;
- and
- determining, by the first AS node based on the first neighboring relationship and the neighbor information of an AS node on the target path that is stored in a blockchain, whether a security threat exists on the target path,
- wherein the neighbor information comprises a second neighboring relationship, and the second neighboring relationship indicates all neighboring nodes of the AS node on the target path,
- wherein the determining includes checking, by the first AS node, whether the second neighboring relationship matches the first neighboring relationship,
- wherein with the second neighboring relationship matching the first neighboring relationship, the determining determines that no security threat exists on the target path,
- wherein with the second neighboring relationship not matching the first neighboring relationship, the determining determines that the security threat exists on the target path,
- wherein the first neighboring relationship indicates a neighboring node, on the target path, of each AS node on the target path, and the second neighboring relationship indicates all neighboring nodes of each AS node,
- wherein the determining further includes checking whether the neighboring node of each AS node on the target path matches all the neighboring nodes of each AS node that are indicated by the second neighboring relationship,
- wherein with the neighboring node of each AS node on the target path matching all the neighboring nodes of each AS node that are indicated by the second neighboring relationship, the determining determines, by the first AS node, that the second neighboring relationship matches the first neighboring relationship, and
- wherein with the neighboring node of each AS node on the target path not matching all the neighboring nodes of each AS node that are indicated by the second neighboring relationship, the determining determines, by the first AS node, that the second neighboring relationship does not match the first neighboring relationship.
8 more elements
A network node, comprising a transceiver and a processor,
- wherein the transceiver is configured to receive a first message,
- wherein the first message indicates a target path for reaching a first route prefix, and the target path indicates a first neighboring relationship between autonomous system (AS) nodes on the target path,
- wherein the processor is configured to determine, based on the first neighboring relationship and the neighbor information of an AS node on the target path that is stored in the blockchain, whether a security threat exists on the target path,
- wherein the neighbor information comprises a second neighboring relationship, and the second neighboring relationship is used to indicate all neighboring nodes of the AS node on the target path,
- wherein the determining by the processor includes checking whether the second neighboring relationship matches the first neighboring relationship,
- wherein with the second neighboring relationship matching the first neighboring relationship, the determining by the processor determines that no security threat exists on the target path,
- wherein with the second neighboring relationship not matching the first neighboring relationship, the determining by the processor determines that the security threat exists on the target path,
- wherein the first neighboring relationship indicates that a second AS node is a neighboring node of a third AS node,
- wherein the second AS node has the first route prefix, and the second neighboring relationship indicates all neighboring nodes of the second AS node,
- wherein the determining by the processor further includes checking whether the third AS node is one of all neighboring nodes of the second AS node,
- wherein with the third AS node being one of all the neighboring nodes of the second AS node, the determining by the processor determines that the second neighboring relationship matches the first neighboring relationship, and
- wherein with the third AS node not being one of all the neighboring nodes of the second AS node, the determining by the processor determines that the second neighboring relationship does not match the first neighboring relationship.
9 more elements
A network node, comprising a transceiver and a processor,
- wherein the transceiver is configured to receive a first message,
- wherein the first message indicates a target path for reaching a first route prefix, and the target path indicates a first neighboring relationship between autonomous system (AS) nodes on the target path,
- wherein the processor is configured to determine, based on the first neighboring relationship and the neighbor information of an AS node on the target path that is stored in the blockchain, whether a security threat exists on the target path,
- wherein the neighbor information comprises a second neighboring relationship, and the second neighboring relationship is used to indicate all neighboring nodes of the AS node on the target path,
- wherein the determining by the processor includes checking whether the second neighboring relationship matches the first neighboring relationship,
- wherein with the second neighboring relationship matching the first neighboring relationship, the determining by the processor determines that no security threat exists on the target path,
- wherein with the second neighboring relationship not matching the first neighboring relationship, the determining by the processor determines that the security threat exists on the target path,
- wherein the first neighboring relationship indicates a neighboring node, on the target path, of each AS node on the target path, and the second neighboring relationship indicates all neighboring nodes of each AS node,
- wherein the determining by the processor further includes checking whether the neighboring node of each AS node on the target path matches all the neighboring nodes of each AS node that are indicated by the second neighboring relationship,
- wherein with the neighboring node of each AS node on the target path matching all the neighboring nodes of each AS node that are indicated by the second neighboring relationship, the determining by the processor determines that the second neighboring relationship matches the first neighboring relationship, and
- wherein with the neighboring node of each AS node on the target path not matching all the neighboring nodes of each AS node that are indicated by the second neighboring relationship, the determining by the processor determines that the second neighboring relationship does not match the first neighboring relationship.
8 more elements
Dependencies are inferred from the claim text.