Packet generation and authentication in a process chain
AssigneeFujitsu Limited
InventorsLiguang Xie, Lei Liu, Akira Ito
Life of this patent
Estimating the term…
Abstract
A method of verifying a data packet by a data consumer may be provided. The method may include authenticating a first signature in a signature stack of a data packet, where the first signature corresponds to a hashed first content in a content stack, and the first signature is generated at a first network location. The method may additionally include authenticating a second signature in the signature stack of the data packet, where the second signature corresponds to second content in the content stack, and the second signature is generated at a second network location. The second content may include a processed version of the first content and may be generated at the second network location.
Claims20
A first network device including a processor and non-transitory memory, the memory including instructions that when executed by the processor cause the processor to implement one or more operations, the operations including:
- receiving a data packet including a signature stack and a content stack with unhashed first content;
- providing the unhashed first content to a processing device to perform processing of the unhashed first content;
- hashing the unhashed first content to generate hashed first content;
- replacing the unhashed first content with the hashed first content in the content stack;
- receiving second content from the processing device, the second content generated by performing processing on the unhashed first content, wherein the second content is different from the unhashed first content and the hashed first content;
- adding the second content to the content stack;
- generating a signature of the hashed first content;
- adding the signature to the signature stack;
- and
- transmitting the data packet to a second network device.
A method of updating a data packet, the method comprising:
- receiving a data packet from a first network location, the data packet including a content stack with unhashed first content and a signature stack with a first signature corresponding to the unhashed first content, the first signature generated at the first network location;
- performing a processing on the unhashed first content to generate second content, wherein the second content is different from the unhashed first content and the hashed first content;
- hashing the unhashed first content to generate hashed first content;
- replacing the unhashed first content with the hashed first content in the content stack;
- adding the second content to the content stack;
- generating a second signature corresponding to the second content;
- adding the second signature to the signature stack;
- and
- transmitting the data packet to a second network location.
A non-transitory computer-readable storage device with computer-executable instructions stored thereon that, when executed by one or more computer processors, cause the one or more computer processors to perform operations comprising:
- receiving a data packet including a signature stack and a content stack with unhashed first content;
- providing the unhashed first content to a processing device to perform processing of the unhashed first content;
- hashing the unhashed first content to generate hashed first content;
- replacing the unhashed first content with the hashed first content in the content stack;
- receiving second content from the processing device, the second content generated by performing processing on the unhashed first content, wherein the second content is different from the unhashed first content and the hashed first content;
- adding the second content to the content stack;
- generating a signature of the hashed first content;
- adding the signature to the signature stack;
- and
- transmitting the data packet to a second network device.
Dependencies are inferred from the claim text.