Method and device for data transmission

• US 9,380,069 B2
• Filed: 07/02/2013
• Issued: 06/28/2016
• Est. Priority Date: 01/13/2011
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Jiang, Sheng
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US13/933,904
• Publication Number:
  US 20130298231A1
• Time in Patent Office: 1,092 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

Embodiments of the present disclosure provide a method and a device for data transmission. In the method, a network layer communication entity of a receiving device receives an IP packet from a sending device, where a header of the IP packet carries a random value corresponding to the sending device. The receiving device decapsulates the IP packet and obtains the random value carried in the header of the IP packet. The receiving device sends the random value to a transport layer communication entity of the receiving device so that the transport layer communication entity of the receiving device verifies the random value. The receiving device in embodiments of the present disclosure includes a receiving module, an obtaining module, and a verifying module.

Claims

1. A method for data transmission, comprising:

receiving, by a network layer communication entity of a receiving device, an IP packet from a sending device, wherein a header of the IP packet carries a random value corresponding to the sending device, and wherein the random value corresponding to the sending device is generated by the sending device according to a preset random function and a seed value;

decapsulating the IP packet and obtaining the random value carried in the header of the IP packet; and

sending the random value to a transport layer communication entity of the receiving device so that the transport layer communication entity of the receiving device verifies the random value.

2. The method according to claim 1, wherein:

the random value corresponding to the sending device is generated by a network layer communication entity of the sending device.

3. The method according to claim 1, wherein:

the random value corresponding to the sending device is carried in an option in the header of the IP packet, wherein the IP packet is an IPv4 packet.

4. The method according to claim 1, wherein:

the verifying, by the transport layer communication entity of the receiving device, the random value comprises;

verifying whether the random value complies with a specific random value generation function.

5. The method according to claim 1, wherein:

the random value corresponding to the sending device is generated by a transport layer communication entity of the sending device.

6. The method according to claim 1, wherein:

the random value corresponding to the sending device is carried in an extension header of the IP packet, wherein the IP packet is an IPv6 packet.

7. The method according to claim 1, wherein:

the verifying, by the transport layer communication entity of the receiving device, the random value comprises;

comparing the random value with a predetermined verifying random value, and accepting a data part of the IP packet if the random value is the same as the verifying random value, or, discarding the data part of the IP packet or handling the data part as a suspicious attack subsequently if the random value is different from the verifying random value.

8. A data transmission method, comprising:

receiving, by a network layer communication entity of a sending device, at least data from a transport layer communication entity of the sending device;

encapsulating an IP packet according to the data, wherein a header of the IP packet carries a random value corresponding to the sending device, and wherein the random value corresponding to the sending device is generated by the sending device according to a preset random function and a seed value; and

sending the IP packet to a receiving device so that the receiving device can verify the random value carried in the header of the IP packet.

9. The method according to claim 8, wherein:

the network layer communication entity of the sending device further receives the random value generated by the transport layer communication entity of the sending device.

10. The method according to claim 8, wherein:

the network layer communication entity of the sending device further receives parameters from the transport layer communication entity of the sending device, wherein the parameters are required for generating the random value; and

before encapsulating the IP packet according to the data, the method further comprises;

generating, by the network layer communication entity of the sending device, the random value according to the parameters.

11. A receiving device for data transmission comprising a processor and a non-transitory storage medium accessible to the processor, the non-transitory storage medium comprising:

a receiving module, configured to receive an IP packet from a sending device, wherein a header of the IP packet carries a random value corresponding to the sending device, and wherein the random value corresponding to the sending device is generated by the sending device according to a preset random function and a seed value;

an obtaining module, configured to decapsulate the IP packet and obtain the random value carried in the header of the IP packet; and

a verifying module, configured to verify the random value obtained by the obtaining module.

12. The receiving device according to claim 11, wherein the obtaining module comprises at least one of the following:

a first obtaining unit, configured to obtain the random value from an option in the header of the IP packet, wherein the IP packet is an IPv4 packet; and

a second obtaining unit, configured to obtain the random value from an extension header of the IP packet, wherein the IP packet is an IPv6 packet.

13. A sending device for data transmission comprising a processor and a non-transitory storage medium accessible to the processor, the non-transitory storage medium comprising:

a generating module, configured to generate a random value corresponding to the sending device;

an encapsulating module, configured to encapsulate an IP packet, wherein a header of the IP packet carries the random value generated by the generating module, and wherein the random value corresponding to the sending device is generated by the sending device according to a preset random function and a seed value; and

a sending module, configured to send the IP packet to a receiving device.

14. The sending device according to claim 13, wherein the generating module comprises at least one of the following:

a first generating unit, located in a transport layer communication entity of the sending device, and configured to generate the random value corresponding to the sending device; and

a second generating unit, located in a network layer communication entity of the sending device, and configured to generate the random value corresponding to the sending device according to parameters provided by the transport layer communication entity of the sending device.

15. The sending device according to claim 13, wherein the encapsulating module comprises at least one of the following:

a first encapsulating unit, configured to encapsulate the random value generated by the generating module into an option in the header of the IP packet, wherein the IP packet is an IPv4 packet; and

a second encapsulating unit, configured to encapsulate the random value generated by the generating module into an extension header of the IP packet, wherein the IP packet is an IPv6 packet.