发明授权
US07500102B2 Method and apparatus for fragmenting and reassembling internet key exchange data packets
有权
将互联网密钥交换数据包分段和重组的方法和装置
- 专利标题: Method and apparatus for fragmenting and reassembling internet key exchange data packets
- 专利标题(中): 将互联网密钥交换数据包分段和重组的方法和装置
-
申请号: US10056889申请日: 2002-01-25
-
公开(公告)号: US07500102B2公开(公告)日: 2009-03-03
- 发明人: Brian Swander , Christian Huitema
- 申请人: Brian Swander , Christian Huitema
- 申请人地址: US WA Redmond
- 专利权人: Microsoft Corporation
- 当前专利权人: Microsoft Corporation
- 当前专利权人地址: US WA Redmond
- 代理机构: Merchant & Gould, P.C.
- 主分类号: H04L9/00
- IPC分类号: H04L9/00 ; H04L1/00
摘要:
A method and apparatus for fragmenting and reassembling IKE protocol data packets that exceed a Maximum Transmission Unit is provided. A transmitting node determines whether to fragment IKE data depending on whether the receiving node has the capability to receive and reassemble fragmented data packets. The transmitting node detects whether fragmentation is appropriate and then intercepts and fragments appropriate IKE payloads for transmission over a network. The invention further includes a method and apparatus for reassembling fragmented IKE payloads. The receiving node discards certain packets according to a set of predetermined rules that are designed to prevent denial of service attacks and other similar attacks. No modification is required to the existing IKE protocol or to other lower level networking protocols.
公开/授权文献
信息查询