Application information verification method, packet processing method, and apparatuses thereof

A method performed by a first communication apparatus, the method comprising:

• generating a packet, wherein the packet comprises application information and first verification information, wherein the packet is an Internet Protocol version 6 (IPv6) packet comprising an IPV6 extension header carrying the application information, wherein the application information includes one or more of the following:
• a service level agreement (SLA) level, an application identifier, a user identifier, or a flow identifier, wherein the first verification information is for verifying an integrity of the application information, wherein the first verification information is based on a calculation on a target field using a first verification method, wherein the first verification method is internet protocol security (IPsec-based) integrity verification, and wherein the first verification information is one of first authentication header (AH) verification information or first encapsulating security payload (ESP) verification information;
• and
• sending the packet to a second communication apparatus.

An apparatus comprising:

• a memory configured to store instructions;
• and
• a processor coupled to the memory and configured to execute the instructions to cause the apparatus to:
• receive a packet, wherein the packet comprises application information and first verification information, wherein the packet is an Internet Protocol version 6 (IPv6) packet comprising an IPV6 extension header carrying the application information, wherein the application information includes one or more of the following:
• a service level agreement (SLA) level, an application identifier, a user identifier, or a flow identifier, and wherein the first verification information is for verifying integrity of the application information;
• and
• verify the integrity of the application information based on the first verification information, wherein verifying the integrity of the application information based on the first verification information comprises verifying the integrity of the application information based on a first verification method and the first verification information, wherein the first verification method uses a digital signature verification based on a digital signature, wherein the digital signature is based on signing a target field through a first private key and first hash calculation, and wherein verifying the integrity of the application information based on the first verification method and the first verification information comprises:
• decrypting the digital signature using a first public key to obtain a first plaintext;
• performing a second hash calculation on the target field to obtain a second plaintext, wherein the first hash calculation and the second hash calculation use a same hash algorithm;
• and
• performing a second matching verification on the first plaintext and the second plaintext.