VERIFICATION METHOD AND NODE FOR BIDIRECTIONAL FORWARDING DETECTION SESSION

• US 20140157367A1
• Filed: 02/07/2014
• Published: 06/05/2014
• Est. Priority Date: 08/10/2011
• Status: Abandoned Application

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: ZHANG, Dacheng
• Application Number:
  US14/175,221
• Publication Number:
  US 20140157367A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Abstract

A verification method and node for a BFD session relate to the field of communications technologies. The method includes: adding, by an initiating node, a first random number to a first BFD control packet and sending the first BFD control packet to a remote node; obtaining and saving, by the remote node, the first random number in the received first BFD control packet; adding, by the remote node, a second random number to the received first BFD control packet and sending the first BFD control packet to the initiating node; and obtaining and saving, by the initiating node, the second random number in the received second BFD control packet.

Claims

1. A verification method for a bidirectional forwarding detection BFD session, comprising:

generating a first random number, adding the first random number to a first BFD control packet, and sending the first BFD control packet added with the first random number to a remote node;

receiving a second BFD control packet sent by the remote node, and obtaining and saving a second random number generated by the remote node in the second BFD control packet; and

in subsequent communication, sending a random number pair formed of the first random number and the second random number, or a third random number generated according to the first random number and the second random number, along with a packet, so as to implement freshness verification of the packet subsequently.

2. The method according to claim 1, wherein the adding the first random number to a first BFD control packet comprises:

adding the first random number after an optional authentication part of the first BFD control packet, wherein the first BFD control packet comprises a mandatory part and the optional authentication part.

3. The method according to claim 1, wherein after adding, after the first random number, ‘

0’

s the number of which is the same as the number of bits in the first random number, the first random number and the ‘

0’

s are added to the first BFD control packet, and the first BFD control packet obtained by adding ‘

0’

s after the first random number is sent to the remote node.

4. An initiating node, comprising:

a first generating module, configured to generate a first random number;

a first adding and sending module, configured to add the first random number generated by the first generating module to a first bidirectional forwarding detection BFD control packet, and send the first BFD control packet added with the first random number to a remote node;

a first receiving and obtaining module, configured to receive a second BFD control packet sent by the remote node and obtain a second random number generated by the remote node in the second BFD control packet; and

a first saving and verification module, configured to save the second random number generated by the remote node and obtained by the first receiving and obtaining module.

5. The initiating node according to claim 4, wherein the first adding and sending module is configured to add the first random number after an optional authentication part of the first BFD control packet, wherein the first BFD control packet comprises a mandatory part and the optional authentication part.

6. The initiating node according to claim 4, wherein the first adding and sending module is further configured to:

after adding, after the first random number, ‘

0’

s the number of which is the same as the number of bits in the first random number, add the first random number and the ‘

0’

s to the first BFD control packet, and send the first BFD control packet obtained by adding ‘

0’

s after the first random number to the remote node.

7. A verification method for a bidirectional forwarding detection BFD session, comprising:

receiving a first BFD control packet sent by an initiating node, and obtaining and saving a first random number generated by the initiating node in the first BFD control packet;

generating a second random number, adding the second random number to the received first BFD control packet, and sending the first BFD control packet added with the second random number to the initiating node; and

in subsequent communication, sending a random number pair formed of the first random number and the second random number, or a third random number generated according to the first random number and the second random number, along with a packet, so as to implement freshness verification of the packet subsequently.

8. The method according to claim 7, wherein the adding the second random number to the received first BFD control packet comprises:

adding the second random number before the first random number generated by the initiating node in the first BFD control packet, wherein the first random number generated by the initiating node is positioned after an optional authentication part of the first BFD control packet, and the first BFD control packet comprises a mandatory part and the optional authentication part.

9. A remote node, comprising:

a second receiving and obtaining module, configured to receive a first bidirectional forwarding detection BFD control packet sent by an initiating node and obtain a first random number generated by the initiating node in the first BFD control packet;

a second saving and verification module, configured to save the first random number generated by the initiating node and obtained by the second receiving and obtaining module;

a second generating module, configured to generate a second random number; and

a second adding and sending module, configured to add the second random number generated by the second generating module to the received first BFD control packet, and send the first BFD control packet added with the second random number to the initiating node.

10. The remote node according to claim 9, wherein the second adding and sending module is configured to add the second random number before the first random number generated by the initiating node in the first BFD control packet, wherein the first random number generated by the initiating node is positioned after an optional authentication part of the first BFD control packet, and the first BFD control packet comprises a mandatory part and the optional authentication part.

11. An apparatus comprising:

an initiating node; and

a remote node, wherein;

the initiating node is configured to generate a first random number, to add the first random number to a first bidirectional forwarding detection BFD control packet, to send the first BFD control packet added with the first random number to the remote node, to receive a second BFD control packet sent by the remote node and obtain a second random number generated by the remote node in the second BFD control packet, and to save the second random number generated by the remote node, and

the remote node is configured to receive the first bidirectional forwarding detection BFD control packet sent by the initiating node, obtain the first random number generated by the initiating node in the first BFD control packet, to save the first random number generated by the initiating node, generate the second random number, to add the second random number to the received first BFD control packet, and send the first BFD control packet added with the second random number to the initiating node.