Method and apparatus for securing clock synchronization in a network
AssigneeMarvell Israel (M.I.S.L) Ltd.
InventorTal Mizrahi
Life of this patent
Estimating the term…
Abstract
Aspects of the disclosure provide a method that includes receiving a first packet through a network at a first device. The first packet includes a first message generated according to a precision time protocol and a first encapsulation that encapsulates one or more fields of the first message. Further, the method includes security-verifying the first packet based on the first message and the first encapsulation, and processing the first message according to the precision time protocol after the first packet is security-verified.
Claims20
A method of a system, the method comprising:
- receiving a first packet through a communication network at a first device, the first packet including a first message generated according to a network time protocol, the first message including a first encapsulation;
- security-verifying the first packet based on the first message according to a security protocol;
- processing the first message according to the network time protocol after the first packet is security-verified, the first message including at least fields of (i) a header, (ii) a payload, (iii) zero or more type-length-values (TLVs), and (iv) the first encapsulation of security TLV that encapsulates the header, the payload, and the zero or more TLVs of the first message according to the security protocol;
- and
- transmitting the first packet according to the network time protocol with the security verification and measuring a transmitting time.
An apparatus for a system, the apparatus comprising:
- a receiving circuit configured to receive a first packet through a communication network and measure a first time of receiving the first packet, the first packet including a first message generated according to a network time protocol, the first message including a first encapsulation;
- and
- a processor configured to security-verify the first packet based on the first message according to a security protocol, process the first message according to the network time protocol after the first packet is security-verified, the first message including at least fields of (i) a header, (ii) a payload, (iii) zero or more type-length-values (TLVs), and (iv) the first encapsulation of security TLV that encapsulates the header, the payload, and the zero or more TLVs of the first message according to the security protocol, transmit the first packet according to the network time protocol with the security verification, and measure a transmission time.
A non-transitory computer readable medium storing program instructions for causing a processor to execute operations for a system, the operations comprising:
- receiving a first packet through a communication network at a first device, the first packet including a first message generated according to a network time protocol, the first message including a first encapsulation;
- security-verifying the first packet based on the first message according to a security protocol;
- processing the first message according to the network time protocol after the first packet is security-verified, the first message including at least fields of (i) a header, (ii) a payload, (iii) zero or more type-length-values (TLVs), and (iv) the first encapsulation of security TLV that encapsulates the header, the payload, and the zero or more TLVs of the first message according to the security protocol;
- and
- transmitting the first packet according to the network time protocol with the security verification and measuring a transmitting time.
Dependencies are inferred from the claim text.