Patent ID: 7966651

Claim:
A method for realizing network security protection by TTL (Time to Live) partition, comprising: A) allocating different TTL segments to a wholesale carrier network, a subordinate carrier network and a customer network in CsC (Carrier's Carrier) networking; B) realizing a TPSM (TTL Partition Security Mechanism) simultaneously in the wholesale carrier network and the subordinate carrier network using the allocated TTL segments; and wherein when the subordinate carrier network accepts a message sent from a device in the wholesale carrier network, step A further comprises: a range of a TTL allocated to the wholesale carrier network is A 1 _min≦TTL≦255, where A 1 _min is an allowable minimum for a TTL of the wholesale carrier network; a range of a TTL allocated to the subordinate carrier network is B 1 _min≦TTL≦255, where B 1 _min is an allowable minimum for a TTL of the subordinate carrier network, and is less than A 1 _min; and a range of a TTL allocated to the customer network is 0<TTL≦U 1 _max, where U 1 _max is an allowable maximum for a TTL of the customer network, and is less than B 1 _min.