Unlock instant, AI-driven research and patent intelligence for your innovation.

A message matching method and device

A matching method and a technology of a matching device, which are applied in the field of network security and can solve problems such as low efficiency and long time-consuming message matching

Active Publication Date: 2022-07-12
BEIJING TOPSEC NETWORK SECURITY TECH +2
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, in practice, it is found that the existing packet matching method must perform in-depth inspection on the packet. During the matching judgment process, the payload field needs to be compared byte by byte, resulting in long time-consuming and low efficiency for packet matching.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0053] see figure 1 , figure 1 A schematic flowchart of a packet matching method is provided in the embodiment of the present application. Wherein, the packet matching method includes:

[0054] S101. After sending the target request message, receive a response message.

[0055]In the embodiment of the present application, the method is applied to the matching scenario of request packets and response packets, and is specifically applied to the matching of request packets (that is, request packets) and reply packets (that is, response packets) based on the ICMP protocol. in the scene.

[0056] In the embodiment of the present application, the ICMP protocol on which the method is based is only for the specification of the IPv4 period.

[0057] In this embodiment of the present application, although the ICMP protocol does not transmit user data, it plays an important role in transmitting user data. ICMP messages are sent using the basic IP header, and each message contains at...

Embodiment 2

[0068] see figure 2 , figure 2 This is a schematic flowchart of a packet matching method provided by an embodiment of the present application. like figure 2 shown, wherein, the packet matching method includes:

[0069] S201. After sending the target request message, receive a response message.

[0070] In this embodiment of the present application, after a target request message of type 8 is sent, the next message of type 0 that arrives is a response message.

[0071] S202. Extract the first check value of the target request message.

[0072] In the embodiment of the present application, the first check value of the target request message is the Checksum field of the target request message, which is located in the 2-byte content starting from the third byte of the ICMP header.

[0073] In this embodiment of the present application, Checksum, that is, a sum check code and a checksum, in the field of data processing and data communication, is the sum of a group of data i...

Embodiment 3

[0130] see image 3 , image 3 This is a schematic structural diagram of a packet matching apparatus provided in an embodiment of the present application. like image 3 As shown, the message matching device includes:

[0131] a receiving unit 300, configured to receive a response message after sending the target request message;

[0132] The calculation unit 400 is configured to calculate the theoretical check value according to the target request message;

[0133] The matching determining unit 500 is configured to determine a message matching result between the response message and the target request message according to the theoretical check value.

[0134] In this embodiment of the present application, for the description of the packet matching apparatus, reference may be made to the description in Embodiment 1 or Embodiment 2, and details are not repeated in this embodiment.

[0135] It can be seen that implementing the packet matching device described in this embodim...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

Embodiments of the present application provide a message matching method and device, which relate to the technical field of network security. The message matching method includes: after sending a target request message, receiving a response message; then calculating a theoretical check according to the target request message Finally, the packet matching result between the response packet and the target request packet is determined according to the theoretical check value. It can be seen that this method can quickly complete the matching judgment between the response packet and the request packet, and does not need to In-depth detection of packets is beneficial to improve the efficiency of packet matching detection.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular, to a packet matching method and device. Background technique [0002] ICMP (Internet Control Message Protocol), the Internet Control Message Protocol, is used to transmit control messages between IP hosts and routers, such as whether the network is smooth, whether the host is reachable, and whether the route is available. During the communication process of the ICMP protocol, it is necessary to perform matching judgment between the request message (ie, the request message) and the reply message (response message) to judge whether the two are compliant. The existing message matching method usually first obtains the data content of the payload field in the request message and the data content of the payload field in the response message, and then performs string matching on the data content of the two, and then judges the response message. Whether the message ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L43/02H04L43/16H04L69/06H04L69/00
CPCH04L43/02H04L43/16H04L69/06H04L69/03
Inventor 李渊李建国谢鹏程
Owner BEIJING TOPSEC NETWORK SECURITY TECH
Features
  • R&D
  • Intellectual Property
  • Life Sciences
  • Materials
  • Tech Scout
Why Patsnap Eureka
  • Unparalleled Data Quality
  • Higher Quality Content
  • 60% Fewer Hallucinations
Social media
Patsnap Eureka Blog
Learn More