Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Message identification method and device, DPI equipment and storage medium

A recognition method and message technology, applied in the field of communication, can solve the problems of low message recognition efficiency, high cost of feature library development and maintenance, and achieve the effect of saving development and maintenance costs and improving efficiency

Inactive Publication Date: 2020-06-30
CHINA MOBILEHANGZHOUINFORMATION TECH CO LTD +1
View PDF4 Cites 6 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The present invention provides a message recognition method, device, electronic equipment and storage medium to solve the problems of low message recognition efficiency and high cost of development and maintenance of a feature library in the prior art

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Message identification method and device, DPI equipment and storage medium
  • Message identification method and device, DPI equipment and storage medium
  • Message identification method and device, DPI equipment and storage medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0053] figure 1 A schematic diagram of a message identification process provided by an embodiment of the present invention, the process includes:

[0054] S101: Receive a message to be identified.

[0055] The message identification method provided by the embodiment of the present invention is applied to DPI equipment. DPI equipment has the capabilities of message identification, analysis and statistics, data flow control, security monitoring, etc., can identify and manage traffic carried by the network, and can be deployed Network equipment in backbone network, metropolitan area network and enterprise.

[0056] In the embodiment of the present invention, the process of generating a feature library for message identification includes:

[0057] For each message type, write the protocol identification rules of each protocol layer corresponding to the message type in the feature library, and write the association relationship between the protocol identification rules of each pr...

Embodiment 2

[0073] In order to improve the scalability of the feature library, on the basis of the above embodiments, in the embodiment of the present invention, the identification rules include:

[0074] Text rules and rule plugins.

[0075] The identification rules of each protocol in the signature database are regarded as a node in the tree-shaped storage structure presented by the signature database, and each path in the tree-shaped storage structure corresponds to an identification rule of a packet type. When extending the feature library, the path in the tree-shaped storage structure can be increased by adding nodes in the tree-shaped storage structure, or branches formed by nodes, so as to realize the expansion of the feature library.

[0076] In addition, the description of the identification rules of the protocol in the prior art mostly exists in the form of text that can be loaded by the analysis software run by the DPI device, that is, it exists in the form of text rules, and t...

Embodiment 3

[0081] Figure 8 It is a schematic structural diagram of a message identification device provided by an embodiment of the present invention, and the device includes:

[0082] A receiving module 81, configured to receive messages to be identified;

[0083] Determining module 82, for each protocol level in the feature library according to the order of protocol levels from low to high, according to the identification rules of the target protocol matching the message in the previous protocol level of the protocol level, in the Find the identification rules of the candidate protocols associated with the identification rules of the target protocol in the protocol layer; according to the identification rules of each candidate protocol, determine the target in the protocol layer that matches the message in the protocol layer protocol;

[0084] The determining module 82 is further configured to determine the message type of the message according to the target protocol with the highes...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a message identification method and device, DPI equipment and a storage medium. The method comprises the steps of receiving a to-be-identified message by the DPI device; according to a sequence of protocol levels from low to high, for each protocol level in a feature library, according to an identification rule of a target protocol matched with the message in a previous protocol level of the protocol level, searching for an identification rule of a to-be-selected protocol associated with the identification rule of the target protocol in the protocol level; according tothe identification rule of each to-be-selected protocol, determining a target protocol matched with the message in the protocol level in the to-be-selected protocols; and determining the message typeof the message according to the target protocol with the highest corresponding protocol level in the target protocols matched with the message. The message identification method and device are used for improving the message identification efficiency, avoiding repeatedly recording identification rules of part of protocols in a feature library and saving the development and maintenance cost of the feature library.

Description

technical field [0001] The present invention relates to the technical field of communications, and in particular to a message identification method, device, DPI device and storage medium. Background technique [0002] Deep Packet Inspection (DPI) is a protocol identification technology. Compared with ordinary packet inspection, it only analyzes the IP, port, and protocol number in the packet header. DPI also increases packet detection. The analysis of the application layer (payload) in the medium, when the messages of various message types based on different protocols pass through the DPI device, the protocol corresponding to the message is identified by analyzing the message header and the content of the load of the message. The packet type of the outgoing packet. [0003] In the existing message recognition technology, a commonly used method is to classify, summarize, and abstract the features of all message types that need to be supported to form a feature library. When ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06
CPCH04L69/22
Inventor 张博刘鹃
Owner CHINA MOBILEHANGZHOUINFORMATION TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com