Peer enrollment method, route updating method, communication system, and relevant devices

• US 9,819,688 B2
• Filed: 11/17/2014
• Issued: 11/14/2017
• Est. Priority Date: 04/14/2009
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Gu, Yingjie, Jiang, Xingfeng, Song, Haibin
• Primary Examiner(s): SCHMIDT, KARI L
• Application Number:
  US14/543,381
• Publication Number:
  US 20150074779A1
• Time in Patent Office: 1,093 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/1046 Joining mechanisms

Abstract

A peer enrollment method, a route updating method, a communication system, and relevant devices to improve security of a peer-to-peer (P2P) network. The peer enrollment method includes: receiving an enrollment request from a peer, where the enrollment request carries identity information of the peer; verifying the identity information of the peer, and if the verification succeeds, obtaining peer location information of the peer and generating a peer credential according to the peer location information; and sending the peer credential carrying the peer location information to the peer so that the peer joins the P2P network according to the peer credential. Embodiments of the present application further provide a route updating method, a communication system, and relevant devices. Embodiments of the present application may improve security of the P2P network effectively.

Claims

1. A peer enrollment method comprising:

receiving, by an enrollment server in a peer-to-peer network, an enrollment request of a peer device, wherein the enrollment request comprises identity information of the peer device;

verifying, by the enrollment server, the identity information of the peer device, and when the verification succeeds, obtaining peer location information of the peer device, and generating a peer credential of the peer device according to the peer location information, wherein the peer credential includes anti-counterfeiting information which verifies the peer credential, wherein the anti-counterfeiting information comprises a character string for generating check information by applying an algorithm and the peer credential is verified by comparing the generated check information and preset check information; and

sending, by the enrollment server, the peer credential comprising the peer location information to the peer device, wherein the peer credential is used by the peer device to join the peer-to-peer network, the peer-to-peer network configured to prevent malicious peers without peer credentials from joining, and

wherein upon successfully joining the peer-to-peer network, a second peer device in the peer-to-peer network updates a routing table of the second peer device according to the peer credential of the peer device.

2. The method of claim 1, wherein the obtaining the peer location information of the peer device comprises:

sending a request for obtaining the peer location information to a topology information server, wherein the request carries the identity information of the peer device; and

receiving the peer location information of the peer device returned by the topology information server, wherein the peer location information is one of the following;

an autonomous system identification (ID) allocated by the topology information server for the peer device according to the identity information,

an area ID allocated by the topology information server for the peer device according to the identity information, and

peer coordinates allocated by the topology information server for the peer device according to the identity information.

3. The method of claim 1, wherein the obtaining the peer location information of the peer device comprises:

sending a request for obtaining the peer location information to a content delivery network (CDN) redirection server, wherein the request comprises the identity information of the peer device;

receiving an address of an edge server which is closest to the peer device in a physical distance, returned by the CDN redirection server, wherein the address of the edge server is determined by the CDN redirection server for the peer device according to the identity information; and

using the address of the edge server as the peer location information of the peer device.

4. The method of claim 1, wherein the obtaining the peer location information of the peer device comprises:

sending a request for obtaining the peer location information to a content delivery network (CDN) redirection server, wherein the request comprises the identity information of the peer device;

receiving an address of an edge server which is the closest to the peer device in a physical distance, returned by the CDN redirection server, wherein the address of the edge server is determined by the CDN redirection server for the peer device according to the identity information;

converting the address of the edge server into a corresponding location identification (ID) according to a preset algorithm; and

using the corresponding location ID as the peer location information of the peer device.

5. The method of claim 1, wherein the peer credential is a preset template structure.

6. A communication system comprising:

an enrollment server in a peer-to-peer network, configured to receive an enrollment request of a peer device, wherein the enrollment request comprises identity information of the peer device;

verify the identity information of the peer device;

when the verification succeeds, obtain peer location information of the peer device, and send a peer credential comprising the peer location information to the peer device, wherein the peer credential carries anti-counterfeiting information which verifies the peer credential, wherein the anti-counterfeiting information comprises a character string for generating check information by applying an algorithm and the peer credential is verified by comparing the generated check information and preset check information; and

the peer device, configured to send the enrollment request to the enrollment server, wherein the enrollment request comprises the identity information of the peer device;

receive the peer credential that is sent by the enrollment server and comprises the peer location information; and

join the peer-to-peer network according to the peer credential, wherein the peer-to-peer network is configured to prevent malicious peers without peer credentials from joining, and wherein upon successfully joining the peer-to-peer network, a second peer device in the peer-to-peer network updates a routing table of the second peer device according to the peer credential of the peer device.

7. The communication system of claim 6, further comprising:

an information providing server, configured to provide the peer location information of the peer device to the enrollment server.

8. The communication system of claim 7, wherein:

the information providing server is a topology information server;

the enrollment server is further configured to send the identity information of the peer device to the topology information server, and receive the peer location information returned by the topology information server; and

the topology information server is configured to allocate the peer location information for the peer device according to the identity information sent by the enrollment server, and return the peer location information to the enrollment server, wherein the peer location information is one of an autonomous system identification (ID), an area ID, and peer coordinates.

9. The communication system of claim 7, wherein:

the information providing server is a content delivery network (CDN) redirection server;

the enrollment server is further configured to send the identity information of the peer device to the CDN redirection server, and receive the peer location information returned by the CDN redirection server; and

the CDN redirection server is configured to determine an address of an edge server closest to the peer device in a physical distance, according to the identity information sent by the enrollment server, use the address of the edge server as the peer location information of the peer device, and send the peer location information to the enrollment server.

10. The communication system of claim 9, wherein the enrollment server is further configured to convert the address of the edge server into a corresponding location identification (ID) according to a preset algorithm and use the location ID as the peer location information of the peer device.

11. The communication system of claim 6, wherein the peer credential is a preset template structure.

12. A server in a peer-to-peer network, the server comprising:

a hardware processor; and

a non-transitory processor readable medium having processor-executed instructions stored thereon, the processor-executed instructions including a plurality of units, the units including;

a receiving unit, configured to receive an enrollment request of a peer device, wherein the enrollment request carries identity information of the peer device;

a verifying unit, configured to verify the identity information of the peer device;

an obtaining unit, configured to obtain peer location information of the peer device after the verifying unit verifies the identity information successfully;

a credential generating unit, configured to generate a peer credential according to the peer location information, wherein the peer credential carries anti-counterfeiting information which verifies the peer credential, wherein the anti-counterfeiting information comprises a character string for generating check information by applying an algorithm and the peer credential is verified by comparing the generated check information and preset check information; and

a sending unit, configured to send the peer credential carrying the peer location information to the peer device, wherein the peer credential is used by the peer device to join the peer-to-peer network, the peer-to-peer network configured to prevent malicious peers without peer credentials from joining, and wherein upon successfully joining the peer-to-peer network, a second peer device in the peer-to-peer network updates a routing table of the second peer device according to the peer credential of the peer device.

13. The server of claim 12, wherein the obtaining unit comprises one of a first obtaining unit, a second obtaining unit and a third obtaining unit, wherein:

the first obtaining unit is configured to send the identity information of the peer device to a topology information server and receive peer location information of the peer device returned by the topology information server, wherein the peer location information is one of;

an autonomous system identification (ID) allocated by the topology information server for the peer device according to the identity information, an area ID allocated by the topology information server for the peer device according to the identity information, and peer coordinates allocated by the topology information server for the peer device according to the identity information;

the second obtaining unit is configured to send the identity information of the peer device to a content delivery network (CDN) redirection server, receive an address of an edge server returned by the CDN redirection server, wherein the address of the edge server which is the closest to the peer device in a physical distance, is determined by the CDN redirection server for the peer device according to the identity information, and use the address of the edge server as the peer location information of the peer device; and

the third obtaining unit is configured to send the identity information of the peer device to the CDN redirection server, receive the address of the edge server returned by the CDN redirection server, wherein the address of the edge server which is the closest to the peer device in a physical distance, is determined by the CDN redirection server for the peer device according to the identity information, convert the address of the edge server into a corresponding location ID according to a preset algorithm, and use the corresponding location ID as the peer location information of the peer device.

14. The server of claim 12, wherein the peer credential is a preset template structure.