Patent ID: 9338172
Filing Date: 2016-05-10
CPC Classification: H04L

Claim Text:
1. A method for authenticating an Internet Protocol Security (IPsec) packet, wherein the method comprises: receiving, by a receiving network node, the IPsec packet via an input port; determining one or more locations within the IPsec packet to extract one or more Sequence-Integrity Check Value (SEQ-ICV) segments located in the IPsec packet, wherein a modulo operation is used to determine the one or more locations within the IPsec packet, and wherein a length of a payload of the IPsec packet and the SEQ-ICV segments are used to perform the modulo operation; extracting a SEQ-ICV from the IPsec packet; generating, by the receiving network node, a local SEQ-ICV; performing, by the receiving network node, a SEQ-ICV check that validates a sequence number within the IPsec packet, wherein the SEQ-ICV check comprises comparing the SEQ-ICV with the local SEQ-ICV; and performing, by the receiving network node, an Integrity Check Value (ICV) check that validates a checksum within the IPsec packet, wherein the SEQ-ICV check is performed before the ICV check.