Time-key hopping

摘要

In certain embodiments, a first network device stores a security key associated with a second network device. The first network device computes access information according to the security key and a time value. The access information may be a network address or a port/socket. The first network device sends a packet to the second network device using the access information. The first network device then computes next access information according to the security key and a next time value and sends a packet to the second network device using the next access information.

主权项

1. A method comprising:
storing, at one or more memories of a network device, a first security key associated with a first adjacent network device; determining, by one or more processors of the network device, a time value; computing, by the one or more processors, a first Internet Protocol (IP) address of the first adjacent network device according to the first security key and the time value; sending a packet to the first adjacent network device using the first IP address; determining, by the one or more processors, a next time value; and computing, by the one or more processors, a next IP address of the first adjacent network device according to the first security key and the next time value; and determining, by the one or more processors, a first hopping schedule that controls the computing of the next IP address based on the first security key according to a first frequency: and a second hopping schedule that controls the computing of the next IP address based on the first security key according to a second frequency higher than the first frequency and dynamically switching from the first hopping schedule to the second hopping schedule in response to detecting a change in a network factor corresponding to at least one of the network device and the first adjacent network device.