摘要 |
<p>A method of verifying a request made in respect of an IPv6 address comprising a network routing prefix and a cryptographically generated Interface Identifier. The request includes a delegation certificate containing at least a public key of said host, one or more further parameters or a formula or formulae for generating one or more further parameters, a specification of a range or set of IPv6 network routing prefixes, an identity of a delegated host, and a digital signature taken over at least said identity and said specification of a range or set of IPv6 network routing prefixes using a private key associated with said public key. The method comprises verifying that said network routing prefix of said IPv6 address is contained within said specification, verifying that said public key and said further parameter(s) can be used to generate said cryptographically generated Interface Identifier, and verifying said signature using said public key.</p> |