Method for filtering and processing data in a packet-switched communication network

摘要

A method processes data in a packet-switched communication network having a plurality of network nodes, between which data packets are transmitted. Information contained in one data packet is extracted therefrom, the packet being received in a network node. One physical transmission parameter of the received data packet is ascertained, the physical transmission parameter specifies or is dependent on one property of the physical transmission of the received data packet. The received data packet is filtered based on a rule set, taking into account some of the extracted information and part of the physical transmission parameter, and further processed dependant on the filtering. An application of the method is “bootstrapping”, wherein network nodes are configured, cryptographic information being transmitted in the context of the configuration. A plausibility test of physical transmission parameters of the data packets that are transmitted during bootstrapping can ascertain whether an attacker is manipulating the bootstrapping process.