Systems and methods for applying attestation tokens to LISP messages
In one embodiment, an apparatus of a LISP environment includes one or more processors and computer-readable non-transitory storage media coupled to the one or more processors. The computer-readable non-transitory storage media include instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including receiving an attestation token from a first component of the LISP environment. The operations also include encoding the attestation token using a LISP message format. The operations further include distributing the encoded attestation token with a LISP signaling message to a third component of the LISP environment.
1. An apparatus of a Locator/ID Separation Protocol (LISP) environment, comprising:
one or more processors; and
one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions operable when executed by the one or more processors to cause the one or more processors to perform operations comprising:
receiving an attestation token from a first component of the LISP environment;
encoding the attestation token using a LISP message format, wherein encoding the attestation using the LISP message format comprises:
assigning an attestation token identifier value to a first field of the LISP message format, the attestation token identifier value identifying the attestation token and having has a value between 0 and 254;
assigning a token length value to a second field of the LISP message format, the token length value indicating a length of the attestation token; and
assigning an attestation token value to a third field of the LISP message format, the attestation token value indicating a value of the attestation token ranging from 1 byte to 251 bytes; and
distributing the encoded attestation token with a LISP signaling message to a second component of the LISP environment.
2. The apparatus of claim 1 , wherein the LISP message format is a LISP canonical address format (LCAF).
3. The apparatus of claim 1 , wherein:
the LISP message format is a vendor specific LCAF; and
encoding the attestation token using the LISP message format comprises:
assigning an Organizationally unique Identifier (OUI) value to a fourth field of the vendor specific LCAF, wherein the OUI value identifies the LISP LCAF as vendor specific; and
assigning an internal type value to a second fifth field of the vendor specific LCAF, wherein the internal type value represents the attestation token as defined by a vendor.
4. The apparatus of claim 1 , wherein:
the LISP message format is a LISP Encapsulated Control Message (ECM); and
encoding the attestation token using the LISP message format comprises assigning an Authentication Data (AD) type to a fourth field of the LISP ECM.
5. The apparatus of claim 1 , wherein the LISP message format is distributed to the second component of the LISP environment as an individual attribute in a mapping.
6. The apparatus of claim 1 , the operations further comprising:
assigning an Address Family Identifier (AFI) value to a fourth field of the LISP message format; and
assigning an address value to a fifth field of the LISP message format;
wherein the AFI value and the address value are used to distribute data associated with the attestation token.
7. A method, comprising:
receiving an attestation token from a first component of a Locator/ID Separation Protocol (LISP) environment;
encoding the attestation token using a LISP message format, wherein encoding the attestation using the LISP message format comprises:
assigning an attestation token identifier value to a first field of the LISP message format, the attestation token identifier value identifying the attestation token and having has a value between 0 and 254;
assigning a token length value to a second field of the LISP message format, the token length value indicating a length of the attestation token; and
assigning an attestation token value to a third field of the LISP message format; the attestation token value indicating a value of the attestation token ranging from 1 byte to 251 bytes; and
distributing the encoded attestation token with a LISP signaling message to a second component of the LISP environment.
8. The method of claim 7 , wherein the LISP message format is a LISP canonical address format (LCAF).
9. The method of claim 7 , wherein:
the LISP message format is a vendor specific LCAF; and
encoding the attestation token using the LISP message format comprises:
assigning an Organizationally unique Identifier (OUI) to a fourth field of the vendor specific LCAF, wherein the OUI identifies the LISP LCAF as vendor specific; and
assigning an internal type to a fifth field of the vendor specific LCAF, wherein the internal type represents the attestation token as defined by a vendor.
10. The method of claim 7 , wherein:
the LISP message format is a LISP Encapsulated Control Message (ECM); and
encoding the attestation token using the LISP message format comprises assigning an Authentication Data (AD) type to a fourth field of the LISP ECM.
11. The method of claim 7 , wherein the LISP message format is distributed to the second component of the LISP environment as an individual attribute in a mapping.