System and method for securing source routing using public key based digital signatures

摘要

Embodiments are provided for maintaining source routing using a digital signature based on a public key. If the protected source route is tampered with, the method based on the public key allows the downstream node to detect tampering. The method is based on using a digital signature to protect the integrity of the source route. When creating the source route for the traffic flow, the specified network element calculates the digital signature and adds a digital signature to the packet. When a packet is received at a node on the route, the node verifies the source route using the digital signature and the public key, and based on it, determines whether the source route has been tampered. When tampering is detected, the receiving node stops forwarding the packet.