METHOD AND APPARATUS FOR PROTECTING THE ROUTING OF DATA PACKETS,申请号US20080599472-传众专利搜索

METHOD AND APPARATUS FOR PROTECTING THE ROUTING OF DATA PACKETS

申请公布号：US2010250930(A1)

申请号：US20080599472

申请日期：2008.05.09

申请公布日期：2010.09.30

申请人：

CSASZAR ANDRAS;WESTBERG LARS;NASLUND MATS

发明人：CSASZAR ANDRAS;WESTBERG LARS;NASLUND MATS

分类号：H04L9/32

主分类号：H04L9/32

摘要：A method and apparatus for protecting the routing of data packets in a packet data network. When a first end-host sends an address query to a DNS server system regarding a second end-host, the DNS server system responds by providing a destination parameter containing an encrypted destination address associated with the second end-host. Thereby, the first end-host is able to get across data packets to the second end-host by attaching the destination parameter to each transmitted data packet. A router in the packet data network admits a received packet if a destination parameter is attached to the pocket including a valid destination address encrypted by a key dependent on a distributed master encryption key. Otherwise, the router discards the packet if no such valid destination address can be derived from the packet by applying decryption to the destination parameter.