Universal method and device for processing the match of the segmented message mode

A pattern matching and message technology, applied in the field of communication

Active Publication Date: 2010-06-30
NEW H3C TECH CO LTD
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0010] The technical problem to be solved by the present invention is to provide a general method and device for processing segmented message pattern matching, so as to overcome the need to perform stream reassembly in the prior art Pattern matching, and many defects such as protocol stack destruction, security problems caused by large memory usage, false positives, time delays and service quality degradation

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Universal method and device for processing the match of the segmented message mode
  • Universal method and device for processing the match of the segmented message mode
  • Universal method and device for processing the match of the segmented message mode

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0077] For the convenience of explanation, set the content of the transport stream as the matching mode as "rule A'abc'offset 3 depth 50, rule B'def'distance 4 within 10, rule C'ghk'distance 3within 8", referred to as this mode In mode ABC, the transmission content is still "abdddddcabcokabcddrtdefabcdddefdfdkdefkadghkdef". What the above content expresses is that in the transport stream, search for patterns that meet the specified rules A, B, and C: search for "abc" in the content that starts at offset 3 in the transport stream and has a length of 50, and matches A at the position Search for "def" in the content with a length of 10 starting from offset 4, and search for "ghk" in the content with a length of 8 starting at offset 3 at the position that matches B. If the final matching rule ABC is successful, it means that the pattern is matched in the transport stream content. However, those skilled in the art should understand that the setting of the above transport stream ma...

Embodiment 2

[0114] Step 201, when any segmented message is received, judge whether the transport stream where the segmented message is located has flow state information of the current mode, if so, perform step 203, otherwise perform step 202;

[0115] Step 202: Initialize the stream state information of the current mode for the transport stream, including creating the stream state information, specifically, initialize the state tree of the current mode for the transport stream, specifically, set the root node as the stream state information of the current mode and set a record A specified unit of pre-stored characters, the root node is the first matching unit node, at least including matching start position information and matching end position information for recording the first rule match of the pattern;

[0116] Step 203. Combine the segmented message with the pre-stored characters in the flow state information to form a target segmented message, and clear the pre-stored characters in ...

Embodiment 3

[0140] The state machine is mainly applicable to multi-mode matching. Taking the multi-mode matching including four modes as an example, the four modes included are "he", "she", "his" and "hers". It can be seen that multi-pattern matching is more suitable for the case where there are overlapping characters in the included patterns, and the state machine constructed in this way can effectively improve the efficiency. However, the rules in the single mode are often independent of each other. If a state machine is used to construct the result, the result will be linear; a, b, and c as linear states driven by state transitions.

[0141] see Figure 9 , is a schematic diagram of the finite state machine of this embodiment, wherein:

[0142] State 0 is the initial state, states 1, 3, 4, 6, and 8 are intermediate states, and states 2, 5, 7, and 9 are final states. --> is the state transition direction, the character above --> is the state transition driver, such as between state 0 a...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The disclosed general method for matching segmented message pattern comprises: creating flow state information for segmented message without current pattern information; matching message executive pattern according to flow state information, and succeeding when matching completely; or else, updating flow state information, and re-executing former steps. This invention provides a general method for AC, BF, BM and PCRE algorithms, improves message-process security, and overcomes problems of network delay and decreased service.

Description

technical field [0001] The invention relates to a general method and device for processing segmented message pattern matching, and belongs to the technical field of communication. Background technique [0002] like figure 1 and figure 2 In the system shown, the gateway device and the bypass device need to implement network security, anti-virus (Anti-Virus, AV for short), bandwidth management, application identification, security detection and wide area network through pattern matching (Pattern Matching, PM for short) method Acceleration and other upper-layer applications, it can be said that the pattern matching method is the basis for building a high-performance content detection engine for network devices. The implementation of upper-layer applications such as identification, security detection, and WAN acceleration provides technical support. Therefore, the realization of pattern matching is the technical cornerstone of building a manageable and operable secure intelli...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/56H04L12/24H04L29/06H04L12/70
Inventor 张利达
Owner NEW H3C TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap