Patent ID: 8453208

Claim:
A network authentication method, comprising: receiving synchronize (SYN) data sent by a client, wherein the SYN data comprises a sequence number SEQ 1 and a network parameter; sending synchronize acknowledge (SYN_ACK) data to the client in response to the SYN data, wherein the SYN_ACK data comprises an acknowledgment number ACK 2 , and a value of ACK 2 is the value obtained by carrying out a function transformation according to the network parameter of the SYN data; receiving RESET (RST) data sent by the client in response to the SYN_ACK data, wherein the RST data comprises a sequence number SEQ 3 or an acknowledgment number ACK 3 , a value of SEQ 3 or ACK 3 is the same as that of ACK 2 , and the RST data further comprises a network parameter the same as that of the SYN data; carrying out the function transformation according to the network parameter of the RST data to obtain a check value CHK; and passing the authentication of the client if CHK matches the value of SEQ 3 or ACK 3 ; wherein the network parameter comprises one or more of an Identification (ID), a Source Internet Protocol Address (SIP), a Source Port (SPORT), a Destination IP Address (DIP), a Destination Port (DPORT) a Protocol Type (Protocol), and a Time to Live (TTL) in an IP header of a data packet; wherein the function transformation is constructed as FUNC(TTL,ID,SIP,SPORT,DIP,DPORT,PROTOCOL)=( x *TTL+ y *ID+ z *HASH(SIP,SPORT,DIP,DPORT,PROTOCOL))Mod M, where x, y z are three constant parameters; Mod indicates modulus operation; M indicates modulus 65536; HASH indicates a hash function.