Method and device for rule matching

A matching method and rule technology, applied in the network field, can solve problems such as performance needs to be improved, and achieve the effect of avoiding rule explosion and improving product performance

Active Publication Date: 2013-01-09
XFUSION DIGITAL TECH CO LTD
View PDF5 Cites 19 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a rule matching method and device, which are used to solve the problem that the performance of products based on DPI technology still needs to be improved in the prior art

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for rule matching
  • Method and device for rule matching
  • Method and device for rule matching

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0035] The embodiment of the present invention provides a rule matching method, such as image 3 As shown, the method includes the following steps:

[0036] 301. Receive a message;

[0037] 302. Detect the feature information in the message content, and judge whether the detected feature information in the message conforms to the classification characteristics of one of the preset rule groups, and among the multiple rule groups Each rule group is obtained by dividing one or more rules according to predetermined classification characteristics, and each rule group is compiled to correspond to a state machine, and the state machine is used to match the message, wherein the match Frequently used state machines are stored in the on-chip memory with faster read and write speeds, and other state machines are stored in off-chip memories with slower read and write speeds;

[0038] The on-chip memory here refers to the memory solidified inside the processing chip (such as FPGA), which...

Embodiment 2

[0046] In Embodiment 1, each rule group in the plurality of rule groups is obtained by dividing one or more rules according to predetermined classification characteristics. This division can use multiple rules, and this embodiment will specifically describe one of the rules The division method and the corresponding detection method based on this division method will be introduced in detail. It should be noted that this division method and the corresponding detection method based on this division method are not necessarily limited to the application scenario of embodiment 1. It can be applied in other scenarios where division and detection are required, that is, this embodiment can exist independently and solve corresponding technical problems, and does not necessarily depend on embodiment 1.

[0047] like Figure 4 As shown, in this embodiment, one or more rules are divided into multiple rule groups according to predetermined classification characteristics, including the follo...

Embodiment 3

[0073] This embodiment will specifically introduce another rule-specific division method and the corresponding detection method based on this division method. Similar to Embodiment 2, this division method and the corresponding detection method based on this division method are not It must be limited to the application scenario where Embodiment 1 is located, and can also be applied to other scenarios that require division and detection, that is, this embodiment can exist alone and solve corresponding technical problems, and does not necessarily depend on Embodiment 1 and Example 2.

[0074] see Figure 6 , the specific grouping method and some other preprocessing steps performed based on the grouping method are as follows:

[0075] 601. Divide one or more rules starting from the same offset and having as many identical characters as possible into a group.

[0076] Optionally, before grouping, the rules will be divided according to the protocol type and / or whether it is a hot ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method and a device for rule matching, relates to the technical field of communication, and solves the problem that the performance of a product based on DPI (deep packet inspection) technology in the prior art needs to be improved. The method includes the steps: receiving messages; detecting feature information in the content of the messages and judging whether the feature information in the detected message conforms to classification features of one of a plurality of preset rule groups or not; determining a state machine corresponding to one rule group as a first state machine when the feature information conforms to the classification features; judging whether the first state machine is stored in an on-chip memory or not, matching the messages to obtain matching results by the first state machine if the first state machine is stored in the on-chip memory; and loading the first state machine to the on-chip memory from an off-chip memory if the first state machine is not stored in the on-chip memory but stored in the off-chip memory, and matching the messages to obtain matching results by the first state machine. By the aid of the method and the device, products can achieve better performances.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a rule matching method and device. Background technique [0002] DPI (Deep Packet Inspection) technology, as an enhanced filter for network equipment, gradually integrates capabilities such as user management, security control, and fine service control to realize dynamic perception of various services , policy control, Qos (Quality of Service, service quality) guarantee, and network and service security guarantee and other functions, reduce the capital expenditure and operating expenditure of operators, and provide operators with a basic operation platform for telecom services. [0003] The basic principle of DPI technology includes detecting some characteristic characters in the high-level protocol (such as the application layer) in the message, and then matching with the state machine (compiled by rules), judging that the detected characteristic characters are some predetermin...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26H04L12/951G06F17/30H04L47/43
CPCH04L12/26H04L43/028H04L69/12G06F2221/2101G06N5/027
Inventor 郭智吴富强曾佳迪帕克·曼沙拉姆尼约翰·科特斯孙灵燕田聃
Owner XFUSION DIGITAL TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap