Revealing address information in systems where network address translations occur

• US 8,914,873 B2
• Filed: 08/28/2013
• Issued: 12/16/2014
• Est. Priority Date: 06/15/1999
• Status: Expired due to Fees

• Current Assignee: SSH Communications Security Oyj
• Original Assignee: SSH Communications Security Oyj
• Inventors: Kivinen, Tero, Ylonen, Tatu
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US14/012,074
• Publication Number:
  US 20130346555A1
• Time in Patent Office: 475 Days
• Field of Search: 726/14
• US Class Current: 726/14
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 2101/663 Transport layer addresses, e.g. aspects of transmission control protocol [TCP] or user datagram protocol [UDP] ports
• CPC Class Codes: H04L 45/026 Details of "hello" or keep-alive messages
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2553 Binding renewal aspects, e.g. using keep-alive messages
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 61/2564 for a higher-layer protocol, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 61/2575 using address mapping retrieval, e.g. simple traversal of user datagram protocol through session traversal utilities for NAT [STUN]
• CPC Class Codes: H04L 61/2578 without involvement of the NAT server
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/165 : Combined use of TCP and UDP protocols; selection criteria therefor

Abstract

A method, apparatus, and computer-readable media are presented that provide a configuration for communicating by a computer device with another computer device wherein network address translation that translate address information in packet headers can occur between the computer devices, and revealing, by the computer device to the other computer device, address information as seen by the computer device on its side of the network address translation, by including in a payload of a packet transmitted to the other computer device, an encoding of the address information as seen by the computer device.

Claims

1. A method comprising:

communicating by a computer device with another computer device wherein network address translation that translates address information in packet headers can occur between the computer devices; and

revealing, by the computer device to the other computer device, address information as seen by the computer device on its side of the network address translation, by including in a payload of a packet transmitted to the other computer device, an encoding of the address information as seen by the computer device.

2. The method according to claim 1, wherein the encoding identifies the type of the address.

3. The method according to claim 1, wherein the address information comprises one of an IPv4 address and IPv6 address.

4. An apparatus comprising:

at least one processor, and

at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus to;

communicate with another device wherein network address translation that translates address information in packet headers can occur on the route to the other device, and

reveal to the other device address information as seen by the apparatus on its side of the network address translation by including in a payload of a packet to be transmitted by the apparatus to the other device an encoding of the address information as seen by the apparatus.

5. The apparatus according to in claim 4, wherein the encoding identifies the type of the address.

6. The apparatus according to claim 4, wherein the address information comprises one of an IPv4 address and IPv6 address.

7. The apparatus according to claim 4, wherein the address information comprises one of an Internet Protocol (IP) address and a combination of an IP address and a port number.

8. The apparatus according to claim 4, configured to include the encoding of the address information in the payload of the packet to be transmitted in response to receiving a packet from the other device.

9. A non-transitory computer readable media, comprising program code for causing a processor to perform instructions for:

communicating by a computer device with another computer device wherein network address translation that translates address information in packet headers can occur between the computer devices, and

revealing, by the computer device to the other computer device, address information as seen by the computer device on its side of the network address translation by including in a payload of a packet transmitted to the other computer device an encoding of the address information as seen by the computer device.

10. The non-transitory computer readable media according to claim 9, wherein the encoding identifies the type of the address.

11. The non-transitory computer readable media according to claim 9, wherein the address comprises one of an IPv4 address and IPv6 address.

12. A method comprising:

communicating by a computer device with another computer device wherein network address translation that translates address information in packet headers can occur between the computer devices,

receiving, by the computer device, a packet from the other computer device, the packet including in a payload thereof an encoding of address information as seen by the other computer device, and

determining, by the computer device, from the payload of the received packet address information as seen by the other computer device on its side of the network address translation.

13. The apparatus according to claim 12, configured to determine the type of the address based on the payload of the received packet.

14. The apparatus according to claim 12, wherein the address information comprises one of an IPv4 address and IPv6 address.

15. The apparatus according to claim 12, wherein the address information comprises one of an Internet Protocol (IP) address and a combination of an IP address and a port number.

16. The apparatus according to claim 12, wherein the encoding of address information comprises encoding of address information of the computer device and the other computer device as seen by the other computer device.

17. The apparatus according to claim 12, configured to compare the determined address information as seen by the other computer device to address information as seen by the apparatus.

18. The apparatus according to claim 12, configured to cause the computer device to send a packet to the other computer device, wherein said packet including in the payload thereof the encoding of the address information is received in response to said packet send to the other computer device.

19. An apparatus comprising:

at least one processor, and

at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processor, cause a computer device to;

communicate with another computer device wherein network address translation that translate address information in packet headers can occur between the computer devices,

receive a packet from the other computer device, the packet including in a payload thereof an encoding of address information as seen by the other computer device, and

determine from the payload of the received packet address information as seen by the other computer device on its side of the network address translation.

20. A non-transitory computer readable media, comprising program code for causing a processor of a computer device to perform instructions for:

communicating with another computer device wherein network address translation that translate address information in packet headers can occur between the computer devices,

receiving a packet from the other computer device, the packet including in a payload thereof an encoding of address information as seen by the other computer device, and

determining from the payload of the received packet address information as seen by the other computer device on its side of the network address translation.