IP Time to Live (TTL) field used as a covert channel
US7415018B2 · kind B2 · utility
41Cited by
1References
11Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Sep 17, 2003 |
| Grant date | Aug 19, 2008 |
| Priority date | — |
| Expiry date | Mar 23, 2026 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L2463/146
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
The Time to Live (TTL) field in an IP header is used as a covert channel in a communication system. More particularly the TTL field can be used to selectively mark packets with unique identifiers as they pass through an upstream station on their way to a downstream station. In this way the source of a traffic flow at least within a particular domain can be absolutely identified. This method of performing a traceback operation doesn't utilize additional resources as it relies on functionality which already exists in the system.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.