Trusted routing between communication network systems

1. A method for use by an apparatus of a communication network system, which routes data packets and stores trusted routes between different communication network systems in a database, the method comprising:

sending, to another communication network system, security information of the communication network system:

receiving an update message from the other communication network system, which transfers information on reachability between communication network systems, the update message including first path information from the other communication network system, that indicates whether or not a path between nodes of different communication network systems, through which routing information carried in the update message has passed, has been validated;

updating the trusted routes stored in the database based on the first path information:

detecting that a data packet requires a route with a specific level of trust;

determining, from the trusted routes stored in the database, a specific trusted route towards a destination as indicated in the data packet; and

setting the data packet on the specific trusted route towards the destination.

2. The method of claim 1 , comprising:

receiving, from another communication network system, security information of the other communication network system; and

storing the security information in the database.

3. The method of claim 2 , wherein the security information is communicated in an open message in response to an establishment of a connection between the communication network system and the other communication network system, or

the security information is communicated in an update message which transfers information on reachability between communication network systems.

4. The method of claim 3 , wherein at least one of the open message, the update message and the keep alive message is integrity protected and signed, or individual fields of the respective message and the integrity protected message are signed.

5. The method of claim 2 , comprising:

including first path information into an update message which transfers information on reachability between communication network systems, the first path information indicating whether or not a path between nodes of different communication network systems, through which routing information carried in the update message has passed, has been validated, or

including, into the update message, second path information on trustworthiness between the nodes, or

including, into the update message, third path information defining an address of a router to be used as a next hop to the nodes, or

including, into the update message, fourth path information defining local routing conditions;

sending the update message towards the other communication network system; and

signing the update message with a key complying with the security information received from the other communication network system.

6. The method of claim 1 , comprising:

checking whether or not the update message is signed with a key complying with the security information sent to the other communication network system; and

in case the checking result is negative, discarding the update message.

7. The method of claim 1 , wherein the update message contains at least one of the following:

second path information on trustworthiness between the nodes,

third path information defining an address of a router to be used as a next hop to the nodes and

fourth path information defining local routing conditions, and the method comprises:

updating the trusted routes stored in the database based on at least one of the second, third and fourth path information.

8. The method of claim 1 , comprising:

exchanging keep alive messages with the different communication network systems.

9. The method of claim 1 , comprising:

including first path information into an update message which transfers information on reachability between communication network systems, the first path information indicating whether or not a path between nodes of different communication network systems, through which routing information carried in the update message has passed, has been validated, or

including, into the update message, second path information on trustworthiness between the nodes, or

including, into the update message, third path information defining an address of a router to be used as a next hop to the nodes, or

including, into the update message, fourth path information defining local routing conditions; and

sending the update message towards the other communication network system.

10. The method of claim 9 , wherein the address of the router is defined based on local routing conditions.

11. A computer program product embodied on a non-transitory computer-readable medium, said product including a program for a processing device, said program comprising software code portions which when the program is run on the processing device performs the steps of

sending by a communication network system, to another communication network system, security information of the communication network system;

receiving an update message from the other communication network system, which transfers information on reachability between communication network systems, the update message including first path information from the other communication network system, that indicates whether or not a path between nodes of different communication network systems, through which routing information carried in the update message has passed has been validated;

updating the trusted routes stored in a database based on the first path information;

detecting that a data packet requires a route with a specific level of trust;

determining, from the trusted routes stored in the database, a specific trusted route towards a destination as indicated in the data packet; and

setting the data packet on the specific trusted route towards the destination.

12. The computer program product according to claim 11 , wherein the program is directly loadable into an internal memory of the processing device.

13. An apparatus of a communication network system, which is configured to route data packets and store trusted routes between different communication network systems in a database, the apparatus comprising:

at least one processor, and

at least one memory including computer program code, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus at least to perform

sending security information of the communication network system to another communication network system;

receiving an update message from the other communication network system, which transfers information on reachability between communication network systems, the update message including first path information from the other communication network system, that indicates whether or not a path between nodes of different communication network systems, through which routing information carried in the update message has passed, has been validated;

updating the trusted routes stored in the database based on the first path information;

detecting that a data packet requires a route with a specific level of trust;

determining, from the trusted routes stored in the database, a specific trusted route towards a destination as indicated in the data packet; and

setting the data packet on the specific trusted route towards the destination.

14. The apparatus of claim 13 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to further perform:

receiving, from another communication network system, security information of the other communication network system; and

storing the security information in the database.

15. The apparatus of claim 14 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to further perform:

including first path information into an update message which transfers information on reachability between communication network systems, the first path information indicating whether or not a path between nodes of different communication network systems, through which routing information carried in the update message has passed, has been validated, or

including, into the update message, second path information on trustworthiness between the nodes, or

including, into the update message, third path information defining an address of a router to be used as a next hop to the nodes, or

including, into the update message, fourth path information defining local routing conditions; and

sending the update message towards the other communication network system; and

signing the update message with a key complying with the security information received from the other communication network system.

16. The apparatus of claim 13 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to further perform:

checking whether or not the update message is signed with a key complying with the security information sent to the other communication network system; and

in case the checking result is negative, discarding the update message.

17. The apparatus of claim 13 , wherein the update message contains at least one of the following:

second path information on trustworthiness between the nodes,

third path information defining an address of a router to be used as a next hop to the nodes and

fourth path information defining local routing conditions, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform:

updating the trusted routes stored in the database based on at least one of the second, third and fourth path information.

18. The apparatus of claim 13 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to further perform:

exchanging keep alive messages with the different communication network systems.

19. The apparatus of claim 13 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to further perform:

including first path information into an update message which transfers information on reachability between communication network systems, the first path information indicating whether or not a path between nodes of different communication network systems, through which routing information carried in the update message has passed, has been validated, or

including, into the update message, second path information on trustworthiness between the nodes, or

including, into the update message, third path information defining an address of a router to be used as a next hop to the nodes, or

including, into the update message, fourth path information defining local routing conditions; and

sending the update message towards the other communication network system.