Route updating method, communication system, and relevant devices

Patent metadata

Field	Value
Publication number	US-10616243-B2
Application number	US-201715811144-A
Country	US
Kind code	B2
Filing date	Nov 13, 2017
Priority date	Apr 14, 2009
Publication date	Apr 7, 2020
Grant date	Apr 7, 2020

Abstract

A peer enrollment method, a route updating method, a communication system, and relevant devices to improve security of a peer-to-peer (P2P) network are provided. The peer enrollment method includes: receiving an enrollment request from a peer, where the enrollment request carries identity information of the peer; verifying the identity information of the peer, and if the verification succeeds, obtaining peer location information of the peer and generating a peer credential according to the peer location information; and sending the peer credential carrying the peer location information to the peer so that the peer joins the P2P network according to the peer credential. Embodiments of the present application further provide a route updating method, a communication system, and relevant devices. Embodiments of the present application may improve security of the P2P network effectively.

First claim

What is claimed is:

1. A method in a peer-to-peer (P2P) network comprising a first peer device and an enrollment server, wherein the enrollment server is configured to send a peer credential to each peer device in the P2P network when each peer device is enrolled on the enrollment server and before each peer device joins the P2P network, the method comprises:
receiving, by the first peer device, a message sent by a second peer device when the second peer device joins in the P2P network,
wherein the message comprises a second peer identifier identifying the second peer device and a peer credential of the second peer device,
wherein the peer credential of the second peer device carries anti-counterfeiting information of the second peer device,
wherein the anti-counterfeiting information of the second peer device is for use by the first peer device in the P2P network to verify the peer credential of the second peer device when the second peer device joins the P2P network, and
wherein the peer credential of the second peer device comprises location information of the second peer device;

obtaining, by the first peer device, the peer credential of the second peer device from the message;
determining, by the first peer device, according to first peer location information of the first peer device and the second peer location information, that the second peer device is closest to the first peer device in physical distance compared to other peer devices in the P2P network, wherein the second peer identifier and a first peer identifier identifying the first peer device have a same prefix; and
adding the second peer identifier into a neighborhood set in a routing table stored by the first peer device.

2. The method of claim 1 , wherein the peer credential comprises one or more of:
an identifier of the second peer device;
a name of the second peer device; and
information uniquely identifying the second peer device.

3. The method of claim 1 , wherein the first peer device obtaining the peer credential of the second peer device according to the message comprises:
judging, by the first peer device, whether the first peer device stores the peer credential of the second peer device; and
when the first peer device does not store the peer credential of the second peer device, requesting the second peer device for the peer credential, and receiving the peer credential of the second peer device sent by the second peer device.

4. The method of claim 1 , wherein the second peer location information is assigned by a topology information server and sent from the topology information server to the enrollment server.

5. The method of claim 1 , wherein the peer location information comprises one or more of:
an autonomous system ID allocated by a topology information server;
an area ID allocated by the topology information server;
peer coordinates allocated by the topology information server;
an address of an edge server queried by a content delivery network (CDN) redirection server; and
a location ID associated with the address of the edge server determined by the enrollment server.

6. The method of claim 5 , wherein the topology information server is one of:
a topology information server deployed by an operator;
a trusted topology information server deployed by a third party; and
a device that is able to obtain peer location information through algorithms or protocols.

7. The method of claim 1 , wherein the peer credential is a preset template structure.

8. The method of claim 1 , where the peer credential is generated by the enrollment server.

9. A communication system comprising a first peer device in a peer-to-peer (P2P) network, wherein
the first peer device is configured to:
receive a message sent by a second peer device out of the P2P network, where the message comprises a second peer identifier identifying the second peer device;
obtain a peer credential of the second peer device according to the message,
wherein the peer credential of the second peer device carries anti-counterfeiting information which is for use by the first device to verify the peer credential of the second peer device when the second peer device joins the P2P network; and
wherein the peer credential comprises second peer location information of the second peer device;

determine that the second peer device is closest to the first peer device in a physical distance compared to other peer devices in the P2P network and that the second peer identifier and a first peer identifier identifying the first peer device have a same prefix, according to first peer location information of the first peer device, wherein the second peer location information of the second peer device comprised in the peer credential of the second peer device; and
add the second peer identifier into a neighborhood set in a routing table stored by the first peer device; and

the second peer device is configured to:
enroll on an enrollment server before the second peer device joins in the P2P network;
receive the peer credential sent by the enrollment server; and
send the message to the first peer device.

10. The communication system of claim 9 , wherein the peer credential comprises one or more of:
an identifier of the second peer device;
a name of the second peer device; and
information uniquely identifying the second peer device.

11. The communication system of claim 9 , wherein:
the first peer device is further configured to judge whether the first peer device stores the peer credential of the second peer device; and
when the first peer device does not store the peer credential of the second peer device, one of the following occurs:
(a) the first peer device is configured to request the second peer device for the peer credential and receive the peer credential sent by the second peer device, and the second peer device is further configured to send the peer credential of the second peer device to the first peer device according to a request of the first peer device; and
(b) the first peer device is configured to obtain the peer credential of the second peer device comprised in the message.

12. The communication system of claim 9 , wherein the peer location information comprises one or more of:
an autonomous system ID allocated by a topology information server;
an area ID allocated by the topology information server;
peer coordinates allocated by the topology information server;
an address of an edge server queried by a content delivery network (CDN) redirection server; and
a location ID associated with the address of the edge server determined by the enrollment server.

13. The communication system of claim 9 , wherein the topology information server is one of:
a topology information server deployed by an operator;
a trusted topology information server deployed by a third party; and
a device that is able to obtain peer location information through algorithms or protocols.

14. The communication system of claim 9 , wherein the peer credential is a preset template structure.

15. A first network peer device in a peer-to-peer (P2P) network comprising a processor and a non-transitory processor readable medium having processor-executed instructions stored thereon, the processor-executed instructions when executed by the processor cause the processor to implement operations including:
receiving a message sent by a second network peer device out of the P2P network,
wherein the message comprises a second peer identifier identifying the second peer device and a peer credential of the second peer device,
the message comprises a second

Assignees

• Huawei Tech Co Ltd

Inventors

• Gu Yingjie
• Jiang Xingfeng
• Song Haibin

Classifications

• H04L67/104

  Peer-to-peer [P2P] networks · CPC title

• G06F21/44

  Program or device authentication · CPC title

• H04L63/1466

  Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks · CPC title

• H04L63/126 Primary

  the source of the received data · CPC title

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title