Anti-replay processing method and device utilizing the same
AssigneeNanning Fugui Precision Industrial Co., Ltd.
InventorSHIH-NENG LIN
Life of this patent
Estimating the term…
Abstract
An anti-replay processing method. The method is utilized in a service function path (SFP) to monitor packet count in the SFP to identify replay attack event, and recognizes a segment of the SFP where the replay attack event occurs as an insecure path. The method further initiates a secure path bypassing the insecure path, labels normal SFC packets with an asserted secure flag, and blocks replayed packets without the asserted secure flag at the exit stage of the secure path.
Claims13
An anti-replay processing method executable by an electronic device, comprising:
- detecting a packet replay event occurred between a first service function forwarder and a second service function forwarder in a service function path;
- initializing a secure service function forwarder between the first service function forwarder and the second service function forwarder in response to the packet replay event;
- and
- providing an indication of an alternative route from the first service function forwarder to the second service function forwarder by replacing an original forwarding rule in the first service function forwarder with a new forwarding rule, wherein the original forwarding rule directs traffic of packets of the service function path from the first service function forwarder to the second service function forwarder through an original route, and the new forwarding rule directs traffic of packets of the service function path from the first service function forwarder to the second service function forwarder through the alternative route comprising the secure service function forwarder.
An anti-replay processing method executable by an electronic device, comprising:
- detecting a packet replay event occurred between a first service function forwarder and a second service function forwarder in a service function path;
- receiving an indication stating a secure service function forwarder initialized between the first service function forwarder and the second service function forwarder in response to the packet replay event;
- and
- providing an indication of an alternative route toward the second service function forwarder by replacing an original forwarding rule in the first service function forwarder with a new forwarding rule, wherein the original forwarding rule directs traffic of packets of the service function path from the first service function forwarder to the second service function forwarder, and the new forwarding rule directs traffic of packets of the service function path from the first service function forwarder to the secure service function forwarder rather than the second service function forwarder.
Dependencies are inferred from the claim text.