CN105282266A - IPV6 address generating and analyzing methods and systems - Google Patents

Abstract

The present invention provides a method and device for generating and resolving an IPv6 address. The method for generating an IPv6 address includes: acquiring a user network identity of a first preset length, and acquiring current time information of a second preset length; The identification, the preset selection bit of the third preset length, the preset reserved bit of the fourth preset length and the current time information are sequentially connected to generate 64-bit data; according to the pre-selected first encryption algorithm and The first key encrypts the generated data to generate an interface identifier; combines the address prefix with the generated interface identifier to generate an IPv6 address. The above method has fast address generating speed and simple configuration, is suitable for traceability of users in the network, and is beneficial for network management and control.

Description

A method and device for generating and analyzing IPv6 addresses

technical field

The invention relates to the technical field of the Internet, in particular to a method and device for generating and analyzing an IPv6 address.

Background technique

As the traditional Internet Protocol Version 4 (Internet Protocol Version 4, referred to as IPv4) address space can no longer meet the needs of the development of the Internet, everyone believes that it is necessary to start designing and testing a new protocol to replace IPv4. Therefore, the Internet Protocol Version 6 (Internet Protocol Version 6, referred to as IPv6), the next version of the Internet protocol with a 128-bit address space, came into being.

The IPv6 protocol consists of an address prefix (the first 64 bits) and an interface address (the last 64 bits). The last 64 bits of the interface address in the 128-bit address have a huge subnet address space. This feature of the IPv6 protocol has two effects: on the one hand, it increases the difficulty for the source and traceability of the Internet Protocol (IP) packets in the subnet, and requires a finer-grained method to determine and verify the source information of the packets. On the other hand, it provides space for the embedding of other identification information.

In view of this, how to generate IPv6 addresses to realize the traceability of users in the network has become a technical problem that needs to be solved at present.

Contents of the invention

Aiming at the defects in the prior art, the present invention provides an IPv6 address generation and analysis method and device, which embeds user network identity and time information in the last 64-bit interface address of IPv6, which is simple in configuration and fast in address generation, and is suitable for network The traceability of users in the network is conducive to network management and control.

In a first aspect, the present invention provides a method for generating an IPv6 address, comprising:

Obtain a user network identity of a first preset length, and obtain current time information of a second preset length;

sequentially connecting the user network identity, a preset selection bit of a third preset length, a preset reserved bit of a fourth preset length, and current time information to generate 64-bit data;

Encrypt the generated data according to a pre-selected first encryption algorithm and a first key to generate an interface identifier;

Combine the address prefix with the generated interface ID to generate an IPv6 address.

Optionally, the first preset length is 40 bits, the second preset length is 22 bits, the third preset length is 1 bit, and the fourth preset length is 1 bit bit.

Optionally, the acquiring current time information of a second preset length includes:

Get the current time t1;

Make a difference between the current time t1 and the time t2 at the beginning of the year corresponding to said t1 to obtain the result t;

Converting the result t into an integer t' with a preset time period as a unit;

Convert the integer t' to 22-bit current time information.

Optionally, said encrypting the generated data according to a pre-selected first encryption algorithm and a first key to generate an interface identifier includes:

According to the pre-selected first key, the generated data is encrypted using the International Data Encryption Algorithm IDEA or the Triple Data Encryption Algorithm 3DES to generate the interface identifier.

Second aspect, the present invention provides a kind of IPv6 address resolution method, comprising:

Obtain the IPv6 address to be resolved, and extract the interface identifier from the IPv6 address;

Decrypt the extracted interface identifier according to the pre-selected second key and the second encryption algorithm to obtain 64-bit plaintext;

Extracting the information of the first fifth preset length of the plaintext, and using the extracted information as the user network identity.

Optionally, the fifth preset length is 40 bits.

Optionally, the decryption of the extracted interface identifier according to the pre-selected second key and the second encryption algorithm to obtain a 64-bit plaintext includes:

According to the pre-selected second key, use the international data encryption algorithm IDEA or the triple data encryption algorithm 3DES to decrypt the extracted interface identifier to obtain 64-bit plaintext.

In a third aspect, the present invention provides a device for generating an IPv6 address, comprising:

The first acquisition module is configured to acquire a user network identity of a first preset length, and acquire current time information of a second preset length;

The first generation module is used to sequentially connect the user network identity, the preset selection bit of the third preset length, the preset reserved bit of the fourth preset length and the current time information to generate 64 bits bits of data;

An encryption module, configured to encrypt the generated data according to a pre-selected first encryption algorithm and a first key, so as to generate an interface identifier;

The second generating module is used to combine the address prefix with the generated interface identifier to generate an IPv6 address.

In a fourth aspect, the present invention provides an IPv6 address resolution device, comprising:

The first extraction module is used to obtain the IPv6 address to be resolved, and extract the interface identifier from the IPv6 address;

A decryption module, configured to decrypt the extracted interface identifier according to a pre-selected second key and a second encryption algorithm to obtain 64-bit plaintext;

The second extraction module is configured to extract information of the first fifth preset length of the plaintext, and use the extracted information as a user network identity.

It can be seen from the above technical solution that a method and device for generating and resolving an IPv6 address of the present invention embed user network identity and time information in the last 64-bit interface address of IPv6, the configuration is simple, the address generation speed is fast, and it is suitable for User traceability is beneficial for network management and control.

Description of drawings

Fig. 1 is the schematic flow chart of the IPv6 address generation method that an embodiment of the present invention provides;

Fig. 2 is the schematic diagram of the principle of the IPv6 address generation method that an embodiment of the present invention provides;

Fig. 3 is the schematic flow chart of a kind of IPv6 address resolution method that an embodiment of the present invention provides;

FIG. 4 is a schematic structural diagram of an IPv6 address generation device provided by an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an IPv6 address resolution device provided by an embodiment of the present invention.

detailed description

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is only some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

Fig. 1 shows a schematic flowchart of a method for generating an IPv6 address provided by an embodiment of the present invention, and Fig. 2 shows a schematic diagram of the principle of a method for generating an IPv6 address provided by an embodiment of the present invention, as shown in Fig. 1 and Fig. 2 , the present invention The IPv6 address generation method of the embodiment is as follows.

101. Acquire a user network identity of a first preset length, and acquire current time information of a second preset length.

102. Connect the user network identity, the preset selection bits of the third preset length, the preset reserved bits of the fourth preset length, and the current time information in order to generate 64-bit data.

103. Encrypt the generated data according to a preselected first encryption algorithm and a first key to generate a (64-bit) interface identifier.

It should be noted that the first encryption algorithm pre-selected in this embodiment should satisfy the high-security symmetric encryption algorithm whose input data block is 64 bits and the output data block is also 64 bits; the first encryption algorithm pre-selected in this embodiment The key is a weak key other than the algorithm.

At present, encryption algorithms are developing vigorously, and a variety of encryption algorithms have appeared in various countries in the world. For example, the generated data may be encrypted by using an International Data Encryption Algorithm (IDEA for short) according to the pre-selected first key, so as to generate the interface identifier.

It should be noted that IDEA belongs to the block encryption algorithm (BlockCipher) category in cryptography. IDEA uses keys with a length of 128 bits and a data block size of 64 bits. Theoretically speaking, IDEA belongs to the "strong" encryption algorithm, and there is no effective attack algorithm for this algorithm yet.

For example, the generated data can be encrypted by using the Triple Data Encryption Algorithm (TDEA for short, 3DES) according to the pre-selected first key to generate the last 64-bit interface identifier of the IPv6 address.

It should be noted that 3DES is an encryption algorithm transitioning from Data Encryption Standard (DES) to Advanced Encryption Standard (AES). It uses three 56-bit keys to encrypt data three times. is a more secure variant of DES. It uses DES as the basic module, and designs a block encryption algorithm through a combined block method. 3DES is more secure than the original DES.

104. Combine the address prefix with the generated interface identifier to generate an IPv6 address.

The IPv6 address generation method of this embodiment, by embedding the user network identity and time information in the IPv6 last 64-bit interface address, the configuration is simple, the address generation speed is fast, and it is suitable for traceability of users in the network, which is beneficial to network management and control .

In a specific application, the first preset length of this embodiment may preferably be 40 bits, the second preset length may preferably be 22 bits, and the third preset length may preferably be 1 bit , the fourth preset length may preferably be 1 bit.

It should be noted that the preferred 40-bit user network identity in this embodiment has the characteristics of scalability, hierarchy, flexibility, privacy, memorability, and ease of use.

It should be noted that, in a specific application, the preset selection bits in this embodiment are used to distinguish this method from other similar address generation methods, and the preset reserved bits are the scalability usage fields of this IPv6 address generation method. By default, the two fields of the selection bit and the reserved bit preset in this embodiment are both 0.

In a specific application, the "obtaining the current time information of the second preset length" in the above step 101 of this embodiment may include:

Get the current time t1;

Make a difference between the current time t1 and the time t2 at the beginning of the year corresponding to said t1 to obtain the result t;

Converting the result t into an integer t' with a preset time period as a unit;

Convert the integer t' to 22-bit current time information.

It is understandable that, for example, the acquired current time t1 is: b, month, c day, year a, d o'clock, e minute, and the time t2 at the beginning of the year corresponding to t1 is: 0:00, January 1, year a, and the The difference between the current time information t1 and the time t2 at the beginning of the year is obtained to obtain the result t=t1-t2.

For example, the preset time period in this embodiment may preferably be 1 minute or 30 seconds. It should be noted that when 1 minute is used as the embedding time unit, the highest 2 bits of the 22-bit time information are actually unused (both are 0). Therefore, more fine-grained time can be embedded, such as half a minute, and every 30 seconds is a time unit.

The IPv6 address generation method of this embodiment, by embedding the user network identity and time information in the IPv6 last 64-bit interface address, the configuration is simple, the address generation speed is fast, and it is suitable for traceability of users in the network, which is beneficial to network management and control .

FIG. 3 shows a schematic flow chart of an IPv6 address resolution method provided by an embodiment of the present invention. As shown in FIG. 3 , the IPv6 address resolution method of this embodiment is described as follows.

301. Obtain an IPv6 address to be resolved, and extract an interface identifier from the IPv6 address.

302. Decrypt the extracted interface identifier according to a preselected second key and a second encryption algorithm to obtain 64-bit plaintext.

It should be noted that the IPv6 address resolution method of this embodiment can be used to analyze the IPv6 address generated by the embodiment shown in Figure 1 or Figure 2, and the pre-selected second encryption algorithm in this embodiment corresponds to Figure 1 or Figure 2 The preselected first encryption algorithm in the illustrated embodiment and the preselected second key in this embodiment correspond to the preselected first key in the embodiment shown in FIG. 1 or FIG. 2 .

For example, when the pre-selected first encryption algorithm in the embodiment shown in Figure 1 or Figure 2 is the International Data Encryption Algorithm IDEA, the pre-selected second encryption algorithm in this embodiment is also the IDEA algorithm; when Figure 1 Or when the preselected first encryption algorithm in the embodiment shown in FIG. 2 is the triple data encryption algorithm 3DES, the preselected second encryption algorithm in this embodiment is also the 3DES algorithm.

303. Extract information of the first fifth preset length of the plaintext, and use the extracted information as a user network identity.

It should be noted that the fifth preset length in this embodiment corresponds to the first preset length of the user network identity in the embodiment shown in FIG. 1 or FIG. 2 , when in the embodiment shown in FIG. 1 or FIG. When the first preset length of is 40 bits, the fifth preset length of this embodiment is also 40 bits.

The IPv6 address resolution method of this embodiment, by analyzing the IPv6 address generated by the embodiment shown in Figure 1 or Figure 2, can obtain the network identity of the user in the network, and then realize the traceability of the user in the network, which is beneficial to network management and control.

Fig. 4 shows a schematic structural diagram of an IPv6 address generating device provided by an embodiment of the present invention. As shown in Fig. 4, the IPv6 address generating device of this embodiment includes: a first acquiring module 41, a first generating module 42, an encryption Module 43 and second generating module 44;

The first acquiring module 41 is configured to acquire a user network identity of a first preset length, and acquire current time information of a second preset length;

The first generating module 42 is used to sequentially connect the user network identity, the preset selection bit of the third preset length, the preset reserved bit of the fourth preset length, and the current time information to generate 64 bits of data;

An encryption module 43, configured to encrypt the generated data according to a pre-selected first encryption algorithm and a first key, so as to generate an interface identifier;

The second generating module 44 is configured to combine the address prefix with the generated interface identifier to generate an IPv6 address.

It should be noted that the first encryption algorithm pre-selected in this embodiment should satisfy the high-security symmetric encryption algorithm whose input data block is 64 bits and the output data block is also 64 bits; the first encryption algorithm pre-selected in this embodiment The key is a weak key other than the algorithm. For example, the pre-selected first encryption algorithm in this embodiment may preferably be the International Data Encryption Algorithm (IDEA for short) or the Triple Data Encryption Algorithm (TDEA for short, 3DES in general).

It should be noted that IDEA belongs to the block encryption algorithm (BlockCipher) category in cryptography. IDEA uses keys with a length of 128 bits and a data block size of 64 bits. Theoretically speaking, IDEA belongs to the "strong" encryption algorithm, and no effective attack algorithm has been found so far; 3DES is an encryption algorithm for the transition from Data Encryption Standard (DES) to Advanced Encryption Standard (AES). , which uses three 56-bit keys to encrypt the data three times. is a more secure variant of DES. It uses DES as the basic module, and designs a block encryption algorithm through a combined block method. 3DES is more secure than the original DES.

In a specific application, the first preset length of this embodiment may preferably be 40 bits, the second preset length may preferably be 22 bits, and the third preset length may preferably be 1 bit , the fourth preset length may preferably be 1 bit.

It should be noted that the preferred 40-bit user network identity in this embodiment has the characteristics of scalability, hierarchy, flexibility, privacy, memorability, and ease of use; the preset selection bit of this embodiment It is used to distinguish this method from other similar address generation methods, and the preset reserved bits are the scalability fields of this IPv6 address generation method. By default, the preset selection bits and reserved bits in this embodiment All fields are 0.

In a specific application, the first acquisition module 41 described in this embodiment may include not shown in the figure:

The first acquiring unit 41a is configured to acquire a user network identity of a first preset length;

The second acquiring unit 41b is configured to acquire current time information of a second preset length.

In a specific application, the second acquisition unit 41b can be specifically used for

Get the current time t1;

Make a difference between the current time t1 and the time t2 at the beginning of the year corresponding to said t1 to obtain the result t;

Converting the result t into an integer t' with a preset time period as a unit;

Convert the integer t' to 22-bit current time information.

It is understandable that, for example, the acquired current time t1 is: b, month, c day, year a, d o'clock, e minute, and the time t2 at the beginning of the year corresponding to t1 is: 0:00, January 1, year a, and the The difference between the current time information t1 and the time t2 at the beginning of the year is obtained to obtain the result t=t1-t2.

For example, the preset time period in this embodiment may preferably be 1 minute or 30 seconds. It should be noted that when 1 minute is used as the embedding time unit, the highest 2 bits of the 22-bit time information are actually unused (both are 0). Therefore, more fine-grained time can be embedded, such as half a minute, and every 30 seconds is a time unit.

The IPv6 address generating device of this embodiment, by embedding user network identity and time information in the IPv6 last 64-bit interface address, the configuration is simple, the address generation speed is fast, and it is suitable for traceability of users in the network, which is beneficial to network management and control .

The device for generating an IPv6 address in this embodiment can be used to execute the technical solution of the method embodiment shown in FIG. 1 and FIG. 2 , and its implementation principle and technical effect are similar, and will not be repeated here.

Fig. 5 shows a schematic structural diagram of an IPv6 address resolution device provided by an embodiment of the present invention. As shown in Fig. 5, the IPv6 address resolution device of this embodiment includes: a first extraction module 51, a decryption module 52 and a second extraction module Module 53;

The first extraction module 51 is used to obtain the IPv6 address to be resolved, and extract the interface identifier from the IPv6 address;

The decryption module 52 is used to decrypt the extracted interface identifier according to the pre-selected second key and the second encryption algorithm to obtain 64-bit plaintext;

The second extraction module 53 is configured to extract information of the first fifth preset length of the plaintext, and use the extracted information as the user network identity.

It should be noted that the IPv6 address resolution device of this embodiment can be used to analyze the IPv6 address generated by the embodiment shown in Figure 1 or Figure 2, and the pre-selected second encryption algorithm in this embodiment corresponds to Figure 1 or Figure 2 The preselected first encryption algorithm in the illustrated embodiment and the preselected second key in this embodiment correspond to the preselected first key in the embodiment shown in FIG. 1 or FIG. 2 .

For example, when the pre-selected first encryption algorithm in the embodiment shown in Figure 1 or Figure 2 is the International Data Encryption Algorithm IDEA, the pre-selected second encryption algorithm in this embodiment is also the IDEA algorithm; when Figure 1 Or when the preselected first encryption algorithm in the embodiment shown in FIG. 2 is the triple data encryption algorithm 3DES, the preselected second encryption algorithm in this embodiment is also the 3DES algorithm.

It should be noted that the fifth preset length in this embodiment corresponds to the first preset length of the user network identity in the embodiment shown in FIG. 1 or FIG. 2 , when in the embodiment shown in FIG. 1 or FIG. When the first preset length of is 40 bits, the fifth preset length of this embodiment is also 40 bits.

The IPv6 address device method of this embodiment, by analyzing the IPv6 address generated by the embodiments shown in Figure 1, Figure 2 and Figure 4, can obtain the network identity of the user in the network, and then realize the traceability of the user in the network, which is beneficial Network management and control.

The IPv6 address resolution device of this embodiment can be used to implement the technical solution of the aforementioned method embodiment shown in FIG. 3 , and its implementation principle and technical effect are similar, and will not be repeated here.

In this embodiment, "first", "second", "third" and "fourth" do not stipulate the sequence, but only distinguish the names. In this embodiment, no any restrictions.

Those of ordinary skill in the art can understand that all or part of the steps for implementing the above method embodiments can be completed by program instructions and related hardware. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps including the above-mentioned method embodiments; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other various media that can store program codes.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than limiting them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: It is still possible to modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions depart from the scope defined by the claims of the present invention .

Claims (9)

1. an IPv6 address generating method, is characterized in that, comprising:

Obtain the user network identify label of the first preset length, and obtain the current time information of the second preset length;

The selection position of described user network identify label, the 3rd default preset length, the reserved place of the 4th default preset length are connected with current time information, successively to generate the data of 64 bits;

According to the first cryptographic algorithm selected in advance and the first key, generated data are encrypted, to generate interface identifier;

The interface identifier of address prefix and generation is merged, to generate IPv6 address.

2. method according to claim 1, is characterized in that, described first preset length is 40 bits, and described second preset length is 22 bits, and described 3rd preset length is 1 bit, and described 4th preset length is 1 bit.

3. method according to claim 2, is characterized in that, the current time information of described acquisition second preset length, comprising:

Obtain current time t1;

Time at beginning of the year t2 corresponding with described t1 for current time t1 is done difference, obtains result t;

Being converted to by described result t with preset time period is the integer t ' of a unit;

Integer t ' is converted to the current time information of 22 bits.

4. method according to claim 1, is characterized in that, the first cryptographic algorithm that described basis is selected in advance and the first key, be encrypted generated data, to generate interface identifier, comprise:

According to the first key selected in advance, adopt IDEA IDEA or triple DEA 3DES, generated data are encrypted, to generate interface identifier.

5. an IPv6 address resolution method, is characterized in that, comprising:

Obtain IPv6 address to be resolved, from IPv6 address, extract interface identifier;

According to the second key selected in advance and the second cryptographic algorithm, the interface identifier extracted is decrypted, obtains the plaintext of 64 bits;

Extract the information of front 5th preset length of described plaintext, using the information of extraction as user network identify label.

6. method according to claim 5, is characterized in that, described 5th preset length is 40 bits.

7. method according to claim 5, is characterized in that, the second key that described basis is selected in advance and the second cryptographic algorithm, is decrypted, obtains the plaintext of 64 bits, comprising the interface identifier extracted:

According to the second key selected in advance, adopt IDEA IDEA or triple DEA 3DES, the interface identifier extracted is decrypted, obtains the plaintext of 64 bits.

8. an IPv6 address generating device, is characterized in that, comprising:

First acquisition module, for obtaining the user network identify label of the first preset length, and obtains the current time information of the second preset length;

First generation module, for being connected the selection position of described user network identify label, the 3rd default preset length, the reserved place of the 4th default preset length successively with current time information, to generate the data of 64 bits;

Encrypting module, for according to the first cryptographic algorithm selected in advance and the first key, is encrypted generated data, to generate interface identifier;

Second generation module, for being merged by the interface identifier of address prefix and generation, to generate IPv6 address.

9. an IPv6 address analyzing device, is characterized in that, comprising:

First extraction module, for obtaining IPv6 address to be resolved, extracts interface identifier from IPv6 address;

Deciphering module, for according to the second key selected in advance and the second cryptographic algorithm, is decrypted the interface identifier extracted, obtains the plaintext of 64 bits;

Second extraction module, for extracting the information of the 5th preset length before described plaintext, using the information extracted as user network identify label.