PCDN service processing method and device, electronic equipment and readable storage medium

Abstract

The invention provides a PCDN service processing method and device, electronic equipment and a readable storage medium, and relates to the technical field of network security. The PCDN service processing method comprises the following steps: identifying a received data stream based on a data stream feature; and under the condition that the data stream is identified to be a peer-to-peer network content distribution network PCDN scheduling request data stream, performing blocking processing on the PCDN scheduling request data stream. According to the scheme provided by the invention, the PCDN scheduling request data stream can be accurately identified and blocked, other services are not influenced, and the user experience is improved.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a PCDN service processing method, device, electronic device and readable storage medium. Background Art

[0002] PCDN (P2P Content Delivery Network) is a low-cost content distribution network service built on the basis of P2P (Peer TOPeer) technology by tapping into and utilizing the massive fragmented idle resources of the edge network. PCDN service is a situation where enterprises and individual customers rent a large amount of broadband (including home broadband products, business broadband products, and business dedicated line products) from telecom operators, arbitrarily change the purpose of the products, aggregate their own upstream bandwidth into a large bandwidth for traffic management, and sell it at a low price in the form of PCDN service. PCDN service violates the requirements and is an illegal business, involving illegal activities such as unlicensed operation and operation beyond the scope of business. Moreover, PCDN service has poor confidentiality performance and there is a risk of leaking personal information.

[0003] In response to the above problems of PCDN services, the current PCDN service processing solutions are: one is to use manual intervention to set approval requirements before user services are activated, screen out suspicious accounts after activation, and shut down services for on-site inspection, which results in long activation approval time, and the shutdown of services may involve contract disputes, resulting in poor user experience and increased customer complaints. The other is to monitor user uplink traffic and indiscriminately discard or limit the speed of users whose uplink traffic exceeds a certain threshold, which is likely to cause the user's normal services to be discarded or limited, resulting in poor user experience and increased customer complaints. Summary of the invention

[0004] The technical solution of the present invention aims to provide a PCDN service processing method, device, electronic device and readable storage medium to solve the problem that the PCDN service processing method in the prior art leads to poor user experience and increased customer complaints.

[0005] To achieve the above object, an embodiment of the present invention provides a PCDN service processing method, which is applied to a deep packet inspection (DPI) device. The method includes:

[0006] Based on the data stream characteristics, the received data stream is identified;

[0007] In the case where it is identified that the data flow is a peer-to-peer content delivery network PCDN scheduling request data flow, blocking processing is performed on the PCDN scheduling request data flow.

[0008] Optionally, in the PCDN service processing method, before identifying the received data stream based on the data stream feature, the method further includes:

[0009] Acquire rule information, where the rule information is used to indicate a corresponding relationship between a data flow feature and a data flow;

[0010] The step of identifying the received data stream based on the data stream feature includes:

[0011] The received data stream is identified based on the data stream characteristics and the rule information.

[0012] Optionally, in the PCDN service processing method, the rule information is determined by analyzing a data flow of a PCDN client.

[0013] Optionally, in the PCDN service processing method, before identifying the received data stream based on the data stream feature, the method further includes:

[0014] A blocking policy is obtained, where the blocking policy is used to instruct to perform blocking processing on the PCDN scheduling request data flow.

[0015] Optionally, in the PCDN service processing method, before identifying the received data stream based on the data stream feature, the method further includes:

[0016] Acquire the updated rule information according to a predetermined period;

[0017] The step of identifying the received data stream based on the data stream feature includes:

[0018] The received data stream is identified based on the data stream characteristics and the updated rule information.

[0019] Optionally, in the PCDN service processing method, the DPI device is deployed at at least one of the following locations:

[0020] Provincial network egress traffic node;

[0021] Metropolitan area network egress traffic node;

[0022] Internet data center egress traffic node.

[0023] To achieve the above object, an embodiment of the present invention further provides an electronic device, including a processor, wherein the processor is configured to:

[0024] Based on the data stream characteristics, the received data stream is identified;

[0025] In the case where it is identified that the data flow is a peer-to-peer content delivery network PCDN scheduling request data flow, blocking processing is performed on the PCDN scheduling request data flow.

[0026] To achieve the above object, an embodiment of the present invention further provides a PCDN service processing device, including:

[0027] An identification module, used for identifying the received data stream based on the data stream characteristics;

[0028] The processing module is used to block the PCDN scheduling request data flow when identifying that the data flow is a PCDN scheduling request data flow.

[0029] To achieve the above objectives, an embodiment of the present invention further provides an electronic device, comprising: a processor, a memory, and a program stored in the memory and executable on the processor, wherein when the program is executed by the processor, the PCDN service processing method as described in any one of the above items is implemented.

[0030] To achieve the above objective, an embodiment of the present invention further provides a readable storage medium, on which a program is stored. When the program is executed by a processor, the PCDN service processing method as described in any one of the above items is implemented.

[0031] The beneficial effects of the above technical solution of the present invention are as follows:

[0032] By adopting the PCDN service processing method described in the embodiment of the present invention, the received data stream is identified based on the data stream characteristics; when the data stream is identified as a peer-to-peer content distribution network PCDN scheduling request data stream, the PCDN scheduling request data stream is blocked. In this way, the PCDN data stream is accurately identified and blocked, and the PCDN service flow between the PCDN client and the PCDN scheduling server is quickly blocked, thereby realizing PCDN service control, while not affecting other services, ensuring user experience, and avoiding user complaints. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 A schematic diagram of a process of a PCDN service processing method according to an embodiment of the present invention;

[0034] Figure 2 A schematic diagram of a flow chart of one implementation of the method described in an embodiment of the present invention;

[0035] Figure 3 A schematic diagram of the structure of one implementation of the electronic device described in an embodiment of the present invention;

[0036] Figure 4It is a structural diagram of the PCDN service processing device according to an embodiment of the present invention;

[0037] Figure 5 It is a schematic structural diagram of another implementation manner of the electronic device described in an embodiment of the present invention. DETAILED DESCRIPTION

[0038] In order to make the technical problems, technical solutions and advantages to be solved by the present invention more clear, a detailed description will be given below with reference to the accompanying drawings and specific embodiments.

[0039] In order to solve the problem that the PCDN service processing method in the prior art leads to poor user experience and increased customer complaints, an embodiment of the present invention provides a PCDN service processing method, which identifies a received data stream based on data stream characteristics; when the data stream is identified as a peer-to-peer content distribution network PCDN scheduling request data stream, the PCDN scheduling request data stream is blocked. Therefore, by adopting this implementation method, the PCDN data stream is accurately identified and blocked, and the PCDN service process between the PCDN client and the PCDN scheduling server is quickly blocked, thereby realizing PCDN service control, while not affecting other services, ensuring user experience, and avoiding user complaints.

[0040] like Figure 1 As shown, an embodiment of the present invention provides a PCDN service processing method, which is applied to a DPI (Deep Packet Inspection) device, and the method includes the following steps:

[0041] Step 101: Identify the received data stream based on the data stream characteristics.

[0042] It is understandable that after receiving the data stream, the DPI device can accurately identify it based on the characteristics of the data stream.

[0043] Step 102: When it is identified that the data flow is a PCDN scheduling request data flow, blocking the PCDN scheduling request data flow.

[0044] It should be noted that the PCDN service system includes the PCDN client, PCDN dispatch server and PCDN hardware box. The process of the PCDN client obtaining network resources is as follows:

[0045] The PCDN client sends a PCDN scheduling request data flow to the PCDN server;

[0046] The PCDN scheduling server allocates the corresponding PCDN hardware box to the PCDN scheduling request data flow according to the scheduling policy, and returns the PCDN scheduling request result to the PCDN client;

[0047] The PCDN client accesses the corresponding PCDN hardware box according to the PCDN scheduling request result. The PCDN hardware box acts as a PCDN cache node and uses its own upstream broadband to provide network resources to the PCDN client.

[0048] The PCDN scheduling request data flow passes through the DPI device during the transmission process from the PCDN client to the PCDN scheduling server.

[0049] In this embodiment of the present invention, since the DPI device can accurately identify all received data streams according to the data stream characteristics, when the received data stream is identified as a PCDN scheduling request data stream, the PCDN scheduling request data stream is blocked to block the PCDN service flow between the PCDN client and the PCDN scheduling server. The PCDN scheduling server cannot receive the PCDN scheduling request data stream sent by the PCDN client and cannot complete normal scheduling, thereby realizing PCDN service control. Moreover, the PCDN service processing method described in the embodiment of the present invention does not affect other services, improves user experience, and avoids user complaints.

[0050] Moreover, the PCDN service processing method described in the embodiment of the present invention can be applied to DPI devices deployed in existing networks, fully utilizing resources, reducing overhead, and being able to efficiently, automatically, and low-costly identify PCDN services and quickly block them.

[0051] In the embodiment of the present invention, optionally, the DPI device is deployed at at least one of the following locations:

[0052] Provincial network egress traffic node;

[0053] Metropolitan area network egress traffic node;

[0054] Internet data center egress traffic node.

[0055] It should be noted that DPI devices can be deployed at various traffic nodes. For example, DPI devices can also be deployed at 4G / 5G network nodes.

[0056] In one implementation manner, optionally, before identifying the received data stream based on the data stream feature, the method further includes:

[0057] Acquire rule information, where the rule information is used to indicate a corresponding relationship between a data flow feature and a data flow;

[0058] The step of identifying the received data stream based on the data stream feature includes:

[0059] The received data stream is identified based on the data stream characteristics and the rule information.

[0060] It is understandable that before the DPI device identifies the received data flow based on the data flow characteristics, it is necessary to configure rule information to the DPI device so that the DPI device can accurately identify the received data flow based on the data flow characteristics and the rule information.

[0061] It should be noted that the rule information can be in a tabular form, including the correspondence between different data flow characteristics and data flows. After receiving the data flow and performing data flow feature detection, the DPI device queries the type or name of the corresponding data flow in the rule information based on the data flow characteristics, thereby realizing data flow identification.

[0062] In the embodiment of the present invention, optionally, the rule information is determined by analyzing a data flow of the PCDN client.

[0063] The PCDN client surfing behavior is simulated in an offline manner to obtain data flow, analyze the data flow, extract PCDN scheduling request data flow and data flow characteristics, and generate rule information.

[0064] In one implementation manner, optionally, before identifying the received data stream based on the data stream feature, the method further includes:

[0065] A blocking policy is obtained, where the blocking policy is used to instruct to perform blocking processing on the PCDN scheduling request data flow.

[0066] It is understandable that before the DPI device identifies the received data flow based on the data flow characteristics, it is necessary to configure a blocking policy for the DPI device, so that when the DPI device identifies the PCDN scheduling request data flow, it can respond quickly based on the blocking policy and block the received PCDN scheduling request data flow.

[0067] In one implementation manner, optionally, before identifying the received data stream based on the data stream feature, the method further includes:

[0068] Acquire the updated rule information according to a predetermined period;

[0069] The step of identifying the received data stream based on the data stream feature includes:

[0070] The received data stream is identified based on the data stream characteristics and the updated rule information.

[0071] It should be noted that in order to adapt to the continuous changes and updates of PCDN services and achieve the purpose of effective blocking, the rule information needs to be updated regularly. Therefore, it is necessary to configure the updated rule information to the DPI device regularly, so that the DPI device can identify the latest PCDN scheduling request data flow based on the data flow characteristics and the updated rule information, and improve the recognition accuracy.

[0072] like Figure 2 This is a flow chart of one implementation of the PCDN service processing method according to an embodiment of the present invention. Figure 2 This embodiment will be described.

[0073] The PCDN scheduling server is deployed at a node outside the A Province network, the DPI device is deployed at the A Province network exit traffic node, and the PCDN client and PCDN hardware box are deployed within A Province.

[0074] Among them, the PCDN client is connected to metropolitan area network 1, the PCDN hardware box is connected to metropolitan area network 2, and the PCDN client needs to access the corresponding PCDN hardware box resources through the A provincial network.

[0075] The PCDN client sends a PCDN scheduling request data stream to the PCDN scheduling server through metropolitan area network 1 and provincial network A. The DPI device blocks the PCDN scheduling request data stream. The PCDN scheduling server cannot receive the PCDN scheduling request data stream and cannot complete normal scheduling, thereby realizing PCDN service control.

[0076] In summary, the PCDN service processing method described in the embodiment of the present invention is applied to a DPI device, which may be a DPI device deployed in an existing network. The method can automatically, simply, efficiently, and inexpensively identify the PCDN scheduling request data flow based on the data flow characteristics, and quickly respond to block it, so that the PCDN scheduling server cannot receive the PCDN scheduling request data flow, cannot complete normal scheduling, and implements PCDN service control; and does not affect other services, thereby improving user experience and avoiding user complaints.

[0077] The embodiment of the present invention further provides an electronic device, such as Figure 3 As shown, the electronic device 300 includes a processor 301, and the processor 301 is used to:

[0078] Based on the data stream characteristics, the received data stream is identified;

[0079] In the case where it is identified that the data flow is a peer-to-peer content delivery network PCDN scheduling request data flow, blocking processing is performed on the PCDN scheduling request data flow.

[0080] Optionally, in the electronic device, the processor 301 is further configured to:

[0081] Acquire rule information, where the rule information is used to indicate a corresponding relationship between a data flow feature and a data flow;

[0082] The processor 301 is used for:

[0083] The received data stream is identified based on the data stream characteristics and the rule information.

[0084] Optionally, in the electronic device, the rule information is determined by analyzing a data stream of a PCDN client.

[0085] Optionally, in the electronic device, the processor 301 is further configured to:

[0086] A blocking policy is obtained, where the blocking policy is used to instruct to perform blocking processing on the PCDN scheduling request data flow.

[0087] Optionally, in the electronic device, the processor 301 is further configured to:

[0088] Acquire the updated rule information according to a predetermined period;

[0089] The processor 301 is used for:

[0090] The received data stream is identified based on the data stream characteristics and the updated rule information.

[0091] Optionally, in the electronic device, the DPI device is deployed at at least one of the following locations:

[0092] Provincial network egress traffic node;

[0093] Metropolitan area network egress traffic node;

[0094] Internet data center egress traffic node.

[0095] like Figure 4 As shown, the embodiment of the present invention further provides a PCDN service processing device, including:

[0096] The identification module 401 is used to identify the received data stream based on the data stream characteristics;

[0097] The processing module 402 is used to block the PCDN scheduling request data flow when identifying that the data flow is a PCDN scheduling request data flow.

[0098] Optionally, the PCDN service processing device further includes:

[0099] A first acquisition module, used to acquire rule information, where the rule information is used to indicate a corresponding relationship between a data flow feature and a data flow;

[0100] The identification module 401 is used for:

[0101] The received data stream is identified based on the data stream characteristics and the rule information.

[0102] Optionally, in the PCDN service processing device, the rule information is determined by analyzing a data flow of a PCDN client.

[0103] Optionally, the PCDN service processing device further includes:

[0104] The second acquisition module is used to acquire a blocking policy, where the blocking policy is used to instruct to block the PCDN scheduling request data flow.

[0105] Optionally, the PCDN service processing device further includes:

[0106] A third acquisition module, used to acquire the updated rule information according to a predetermined period;

[0107] The identification module 401 is used for:

[0108] The received data stream is identified based on the data stream characteristics and the updated rule information.

[0109] Optionally, in the PCDN service processing apparatus, the DPI device is deployed at at least one of the following locations:

[0110] Provincial network egress traffic node;

[0111] Metropolitan area network egress traffic node;

[0112] Internet data center egress traffic node.

[0113] like Figure 5 As shown, an embodiment of the present invention also provides an electronic device, including: a processor 501; and a memory 502 connected to the processor 501 through a bus interface, the memory 502 is used to store programs and data used by the processor 501 when performing operations, and the processor 501 calls and executes the programs and data stored in the memory 502.

[0114] The electronic device further includes a transceiver 503, which is connected to the bus interface and is used to receive and send data under the control of the processor 501;

[0115] Specifically, the processor 501 executes the following process:

[0116] Based on the data stream characteristics, the received data stream is identified;

[0117] In the case where it is identified that the data flow is a peer-to-peer content delivery network PCDN scheduling request data flow, blocking processing is performed on the PCDN scheduling request data flow.

[0118] Optionally, in the electronic device, the processor 501 performs the following process:

[0119] Acquire rule information, where the rule information is used to indicate a corresponding relationship between a data flow feature and a data flow;

[0120] The processor 501 executes the following process:

[0121] The received data stream is identified based on the data stream characteristics and the rule information.

[0122] Optionally, in the electronic device, the rule information is determined by analyzing a data stream of a PCDN client.

[0123] Optionally, in the electronic device, the processor 501 further performs the following process:

[0124] A blocking policy is obtained, where the blocking policy is used to instruct to perform blocking processing on the PCDN scheduling request data flow.

[0125] Optionally, in the electronic device, the processor 501 further performs the following process:

[0126] Acquire the updated rule information according to a predetermined period;

[0127] The processor 501 executes the following process:

[0128] The received data stream is identified based on the data stream characteristics and the updated rule information.

[0129] Optionally, in the electronic device, the DPI device is deployed at at least one of the following locations:

[0130] Provincial network egress traffic node;

[0131] Metropolitan area network egress traffic node;

[0132] Internet data center egress traffic node.

[0133] Among them, Figure 5In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically linking together various circuits of one or more processors represented by processor 501 and memory represented by memory 502. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides a user interface 504. The transceiver 503 may be a plurality of components, i.e., including a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium. The processor 501 is responsible for managing the bus architecture and general processing, and the memory 502 may store data used by the processor 501 when performing operations.

[0134] In addition, a specific embodiment of the present invention further provides a readable storage medium on which a computer program is stored, wherein the program, when executed by a processor, implements the steps in any one of the above PCDN service processing methods.

[0135] Specifically, the computer-readable storage medium is applied to the above-mentioned electronic device. When applied to the electronic device, the execution steps in the corresponding PCDN service processing method are as described in detail above and will not be repeated here.

[0136] In the several embodiments provided in the present application, it should be understood that the disclosed methods and devices can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0137] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may be physically included separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0138] The above-mentioned integrated unit implemented in the form of a software functional unit can be stored in a computer-readable storage medium. The above-mentioned software functional unit is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform some steps of the sending and receiving methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store program codes.

[0139] The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A PCDN service processing method, characterized in that: Applied to a deep packet inspection (DPI) device, the method comprises: Based on the data stream characteristics, the received data stream is identified; In the case where it is identified that the data flow is a peer-to-peer content delivery network PCDN scheduling request data flow, blocking processing is performed on the PCDN scheduling request data flow.

2. The PCDN service processing method according to claim 1, characterized in that: Before identifying the received data stream based on the data stream feature, the method further includes: Acquire rule information, where the rule information is used to indicate a corresponding relationship between a data flow feature and a data flow; The step of identifying the received data stream based on the data stream feature includes: The received data stream is identified based on the data stream characteristics and the rule information.

3. The PCDN service processing method according to claim 2, characterized in that: The rule information is determined by analyzing the data flow of the PCDN client.

4. The PCDN service processing method according to claim 1, characterized in that: Before identifying the received data stream based on the data stream feature, the method further includes: A blocking policy is obtained, where the blocking policy is used to instruct to perform blocking processing on the PCDN scheduling request data flow.

5. The PCDN service processing method according to claim 2, characterized in that: Before identifying the received data stream based on the data stream feature, the method further includes: Acquire the updated rule information according to a predetermined period; The step of identifying the received data stream based on the data stream feature includes: The received data stream is identified based on the data stream characteristics and the updated rule information.

6. The PCDN service processing method according to claim 1, characterized in that: The DPI device is deployed at at least one of the following locations: Provincial network egress traffic node; Metropolitan area network egress traffic node; Internet data center egress traffic node.

7. An electronic device, characterized in that: comprising a processor configured to: Based on the data stream characteristics, the received data stream is identified; In the case where it is identified that the data flow is a peer-to-peer content delivery network PCDN scheduling request data flow, blocking processing is performed on the PCDN scheduling request data flow.

8. A PCDN service processing device, characterized in that: include: An identification module, used for identifying the received data stream based on the data stream characteristics; The processing module is used to block the PCDN scheduling request data flow when identifying that the data flow is a PCDN scheduling request data flow.

9. An electronic device, characterized in that: include: A processor, a memory, and a program stored in the memory and executable on the processor, wherein when the program is executed by the processor, the PCDN service processing method according to any one of claims 1 to 6 is implemented.

10. A readable storage medium, characterized in that: The readable storage medium stores a program, and when the program is executed by the processor, the PCDN service processing method according to any one of claims 1 to 6 is implemented.

Images