US6009102A
Expired / Lapsed
US
⏱️ 0.0 years remaining
NHRP packet authentication method and NHRP server
Assignee: NEC Corp
•
Filing: 1997-08-13
•
Granted: 1999-12-28
•
Expires: 2017-08-13
Abstract
Abstract An authentication method in an NHRP (Next Hop Resolution Protocol) for performing an address resolution for converting a network layer address in an NBMA (Non-broadcast, Multi-access) network to a datalink layer address. The method comprises steps of: providing an NHRP server for performing an address resolution which has a plurality of interfaces belonging to respective sub-networks, maintaining authentication keys and authentication types respectively allocated to the interfaces in the NHRP server; authenticating an NHRP packet received from one of the interfaces by using the authentication key allocated to the interface which receives the NHRP packet; and discarding the NHRP packet in case of authentication being unauthorized. The method is capable of setting for each domain a mode for redirecting an NHRP (Next Hop Resolution Protocol) packet when authentication types between LIS (Logical IP Subnet, IP: Internet Protocol) are different and a mode for when an NHRP packet is redirected between domains.
Inventors
- 👤 Koichi Horikawa
- 👤 Atsushi Iwata
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-04 14:51
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L61/00; H04L61/09; H04L61/10; H04L9/00; H04L9/40
Claims Analysis
Total Claims: 14
Claim 1
Independent Claim
113 words
An NHRP packet authentication method in an NHRP (Next Hop Resolution Protocol) for performing an address resolution for converting a network layer address in an NBMA (Non-broadcast, Multi-access) network to a datalink layer address, comprising steps of: providing an NHRP server for performing an address resolution which has a plurality of interfaces belonging to respective sub-networks, maintaining an authentication key and an authentication type of the authentication key allocated to each of the interfaces in the NHRP server; authenticating an NHRP packet received from one of the interfaces by using the authentication key allocated to the interface which receives the NHRP packet; and discarding the NHRP packet in case of authentication being unauthorized.
Claim 2
Dependent Claim
113 words
An NHRP packet authentication method in an NHRP (Next Hop Resolution Protocol) for performing an address resolution for converting a network layer address in an NBMA (Non-broadcast, Multi-access) network to a datalink layer address, comprising steps of: providing an NHRP server for performing an address resolution which has a plurality of interfaces belonging to respective sub-networks, maintaining an authentication key and an authentication type of the authentication key allocated to each of the interfaces in the NHRP server; authenticating an NHRP packet received from one of the interfaces by using the authentication key allocated to the interface which receives the NHRP packet; and discarding the NHRP packet in case of authentication being unauthorized.
Claim 3
Dependent Claim
79 words
The NHRP packet authentication method according to claim 1, wherein: in a case in which the NHRP packet received by the NHRP server has been authenticated using the authentication key allocated to the interface which receives the NHRP packet and the NHRP packet must then be redirected from a first interface to a second interface, the NHRP packet is discarded when the authentication type allocated to the first interface differs from the authentication type allocated to the second interface.
Claim 4
Dependent Claim
103 words
The NHRP packet authentication method according to claim 1, wherein: in a case in which the NHRP packet received by the NHRP server has been authenticated using an authentication key allocated to the interface which receives the NHRP packet and the NHRP packet must then be redirected from a first interface to a second interface, when the authentication type allocated to the first interface differs from the authentication type allocated to the second interface, an authentication key part of the NHRP packet is changed to the authentication key allocated to the second interface and the NHRP packet is redirected from the second interface.
Claim 5
Dependent Claim
89 words
The NHRP packet authentication method according to claim 1, wherein: in a case in which the NHRP packet received by the NHRP server has been authenticated using an authentication key allocated to the interface which receives the NHRP packet and the NHRP packet must then be redirected from a first interface to a second interface, when the authentication type allocated to the first interface differs from the authentication type allocated to the second interface, the NHRP server sends back address data of the first interface of said NHRP server.
Claim 6
Dependent Claim
54 words
The NHRP packet authentication method according to claim 4, wherein: in a case in which a router redirects a packet between a sub-network to which the first interface belongs and a sub-network to which the second interface belongs, the authentication method uses interface address data of the sub-network to which the first interface belongs.
Claim 7
Dependent Claim
45 words
The NHRP packet authentication method according to claim 2, wherein: the NHRP packet is processed in compliance with a set authentication mode, irrespective of whether or not the authentication type allocated to the first interface differs from the authentication type allocated to the second interface.
Claim 8
Dependent Claim
161 words
An NHRP packet authentication method in an NHRP (Next Hop Resolution Protocol) for performing an address resolution for converting a network layer address in an NBMA (Non-broadcast, Multi-access) network to a datalink layer address, comprising steps of: providing an NHRP server for performing an address resolution which has a plurality of interfaces belonging to respective sub-networks, maintaining an authentication key and an authentication type of the authentication key allocated to each of the interfaces in the NHRP server; maintaining an authentication mode which is defined to a combination of two of the interfaces in the NHRP server; authenticating an NHRP packet received from one of the interfaces by using the authentication key allocated to an input interface which receives the NHRP packet; and determining whether the NHRP packet should be discarded or redirected based on a result of authentication and an authentication mode defined between the input interface and an output interface from which the NHRP packet is to be outputted.
Claim 9
Dependent Claim
161 words
An NHRP packet authentication method in an NHRP (Next Hop Resolution Protocol) for performing an address resolution for converting a network layer address in an NBMA (Non-broadcast, Multi-access) network to a datalink layer address, comprising steps of: providing an NHRP server for performing an address resolution which has a plurality of interfaces belonging to respective sub-networks, maintaining an authentication key and an authentication type of the authentication key allocated to each of the interfaces in the NHRP server; maintaining an authentication mode which is defined to a combination of two of the interfaces in the NHRP server; authenticating an NHRP packet received from one of the interfaces by using the authentication key allocated to an input interface which receives the NHRP packet; and determining whether the NHRP packet should be discarded or redirected based on a result of authentication and an authentication mode defined between the input interface and an output interface from which the NHRP packet is to be outputted.
Claim 10
Dependent Claim
53 words
The NHRP packet authentication method according to claim 7, wherein an authentication key included in the NHRP packet is changed in accordance with the authentication mode defined between the input interface and the output interface and then the NHRP packet is redirected through the output interface when the NHRP packet should be redirected.
Claim 11
Dependent Claim
98 words
An NHRP (Next Hop Resolution Protocol) server for performing an address resolution for converting a network layer address in an NBMA (Non-broadcast, Multi-access) network to a datalink layer address, comprising: a plurality of interfaces belonging to respective sub-networks; memory means for maintaining an authentication key and an authentication type of the authentication key allocated to each of the interfaces; and processing means for authenticating an NHRP packet received from one of the interfaces by using the authentication key allocated to the interface which receives the NHRP packet and discarding the NHRP packet in case of authentication being unauthorized.
Claim 12
Dependent Claim
98 words
An NHRP (Next Hop Resolution Protocol) server for performing an address resolution for converting a network layer address in an NBMA (Non-broadcast, Multi-access) network to a datalink layer address, comprising: a plurality of interfaces belonging to respective sub-networks; memory means for maintaining an authentication key and an authentication type of the authentication key allocated to each of the interfaces; and processing means for authenticating an NHRP packet received from one of the interfaces by using the authentication key allocated to the interface which receives the NHRP packet and discarding the NHRP packet in case of authentication being unauthorized.
Claim 13
Dependent Claim
151 words
An NHRP (Next Hop Resolution Protocol) server for performing an address resolution for converting a network layer address in an NBMA (Non-broadcast, Multi-access) network to a datalink layer address, comprising: a plurality of interfaces belonging to respective sub-networks; first memory means for maintaining an authentication key and an authentication type of the authentication key allocated to each of the interfaces; second memory means for maintaining an authentication mode which is defined to a combination of two of the interfaces in the NHRP server; and processing means for authenticating an NHRP packet received from one of the interfaces by using the authentication key allocated to an input interface which receives the NHRP packet, and determining whether the NHRP packet should be discarded or redirected based on a result of authentication and an authentication mode defined between the input interface and an output interface from which the NHRP packet is to be outputted.
Claim 14
Dependent Claim
151 words
An NHRP (Next Hop Resolution Protocol) server for performing an address resolution for converting a network layer address in an NBMA (Non-broadcast, Multi-access) network to a datalink layer address, comprising: a plurality of interfaces belonging to respective sub-networks; first memory means for maintaining an authentication key and an authentication type of the authentication key allocated to each of the interfaces; second memory means for maintaining an authentication mode which is defined to a combination of two of the interfaces in the NHRP server; and processing means for authenticating an NHRP packet received from one of the interfaces by using the authentication key allocated to an input interface which receives the NHRP packet, and determining whether the NHRP packet should be discarded or redirected based on a result of authentication and an authentication mode defined between the input interface and an output interface from which the NHRP packet is to be outputted.
References Cited (Backward Citations)
US5600644A
Cited
US5583862A
Cited
US5617540A
Cited
US5699347A
Cited
US5822320A
Cited
US5809233A
Cited
US5828844A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-12-27 | 2003-06-28 | 2003-12-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-12-27 | 2007-06-28 | 2007-12-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-12-27 | 2011-06-28 | 2011-12-28 | $7700.00 | Window Closed / Lapsed |