Patent ID: 8499146
Filing Date: 2013-07-30
Classification: H04L

Abstract:
1. A method performed by a network entity for preventing network attacks, comprising: receiving a data packet including a source address of the data packet, wherein the source address is a cryptographically generated address (CGA); detecting the received data packet, and determining whether the data packet comprises a CGA parameter and signature information; authenticating the CGA parameter when the data packet comprises the CGA parameter and the signature information, and authenticating the signature information according to a successfully-authenticated CGA parameter; wherein the authenticating the signature information according to the successfully-authenticated CGA parameter comprises: querying a record table to determine whether the source address of the data packet is contained in the record table; authenticating the CGA parameter when the source address is not contained in the record table, authenticating the signature information according to the successfully-authenticated CGA parameter, and saving the source address and a corresponding public key in the record table, wherein the corresponding public key is extracted from the successfully-authenticated CGA parameter; and discarding the data packet when authenticating the signature information by using the corresponding public key when the source address is contained in the record table, wherein the corresponding public key is contained in the record table and corresponds to the source address; and discarding the data packet when sending the data packet to a destination address after the signature information is authenticated.