Signaling Attack Prevention Method and Apparatus
AssigneeHuawei Technologies Co., Ltd.
InventorChengdong He
Life of this patent
Estimating the term…
Abstract
A signaling attack prevention method and apparatus, where the method includes receiving a general packet radio service (GPRS) Tunneling Protocol (GTP-C) message from a public data network gateway (PGW), determining whether the GTP-C message is received from an S8 interface, determining whether a characteristic parameter of the GTP-C message is valid when the GTP-C message is received from the S8 interface, and discarding the GTP-C message or returning, to the PGW, a GTP-C response message carrying an error code cause value when the characteristic parameter of the GTP-C message is invalid. By determining validity of each parameter in the GTP-C message, a hacker is effectively prevented from attacking a serving gateway (SGW) using each attack path, and communication security is improved.
Claims20
A signaling attack prevention method, comprising:
- receiving a general packet radio service (GPRS) Tunneling Protocol (GTP-C) message from a public data network gateway (PGW), wherein the GTP-C message comprises a characteristic parameter;
- determining whether the GTP-C message is received from an eighth data interface (S8);
- determining whether the characteristic parameter of the GTP-C message is valid when the GTP-C message is received from the S8;
- and
- discarding the GTP-C message or returning, to the PGW, a GTP-C response message carrying an error code cause value when the characteristic parameter of the GTP-C message is invalid.
A signaling attack prevention apparatus, comprising:
- a receiver configured to receive a general packet radio service (GPRS) Tunneling Protocol (GTP-C) message from a public data network gateway (PGW), wherein the GTP-C message comprises a characteristic parameter;
- and
- a processor coupled to the receiver and configured to:
- determine whether the GTP-C message is received from an eighth data interface (S8);
- determine whether the characteristic parameter of the GTP-C message is valid when the GTP-C message is received from the S8;
- and
- discard the GTP-C message or return, to the PGW, a GTP-C response message carrying an error code cause value when the characteristic parameter of the GTP-C message is invalid.
Dependencies are inferred from the claim text.