Label instruction verification method and device, medium and product

Abstract

The invention discloses a label instruction verification method and device, a medium and a product, and relates to the field of instruction verification, and the method comprises the steps: constructing an overall list according to the configuration information of all obtained effective parameters; according to the configuration of the centralized configuration surface, parameters in the overall list are selected, and strategy numbers are distributed; taking the relationship between the strategy number and the corresponding parameter as a strategy entry; constructing a CRC parameter list database according to all strategy entries; determining a strategy number based on the time seed determined by the current time value; determining a corresponding strategy entry and a corresponding parameter in a CRC parameter list database according to the strategy number, and further determining a verification table entry execution parameter; and determining a CRC input field according to the verification table item execution parameter, and performing protocol-independent processing. According to the invention, the compatibility requirement of the network processing chip calculation mode can be met, and the security and credibility of verification are improved.

Description

Technical Field

[0001] The present application relates to the field of instruction verification, and in particular to a label instruction verification method, device, medium and product. Background Art

[0002] Label-based label instructions are the main protocol form of the next generation network. Label instructions improve the schedulability of the network at a minimal resource cost by carrying explicit labels in data packets. Depending on the type of function, label instructions contain different representative protocols. For forwarding functions, common label instruction protocols include MPLS, SR MPLS, etc., and the label instruction encapsulates the label of the next forwarding node; for source routing functions, common label protocols include SRv6, which encapsulates the label of the next routing node; for policy functions, common protocols include IOAM and IFIT, that is, encapsulating measurement instructions and measurement data types in instructions; for service quality assurance functions, common protocols include APN, etc., that is, encapsulating the service quality requirements of the service in the instruction.

[0003] Since label instructions are mostly transmitted explicitly in the network and can directly trigger the functional behavior of network nodes, the verification of label instructions is becoming increasingly important. False and forged labels have the risk of damaging the network. For example, forged forwarding and routing instructions may destroy the current routing system of the network; forged policy instructions will consume too much node resources of the network; forged quality of service assurance instructions can illegally obtain the quality of service assurance service of the network, etc. Therefore, how to verify label instructions is of great significance to ensure the security and normal operation of the network.

[0004] Since network tag instruction verification is different from common identity authentication, tag quality works entirely on the data plane and has strong data throughput requirements. Therefore, there are different requirements for the compatibility of computing methods, the type of input data, and the synchronization between different network nodes. As a result, the existing methods are difficult to directly apply to the verification of tag instructions under fast and high throughput. The existing methods mainly have the following problems:

[0005] (1) Compatibility of calculation methods: Network processing chips are good at bit calculations rather than numerical calculations. Numerical-based encryption and verification value calculation methods are not compatible with the data processing capabilities of network processing chips. If all data is calculated based on general-purpose chips, the latency and throughput requirements of network transmission cannot be met.

[0006] (2) Input data type: Most network processing chips are based on hardware programming and cannot recognize common data types (such as ASCII encoding, etc.) of general operating systems. Most input data only supports bit encoding. Therefore, verification schemes based on numerical calculations are difficult to provide the required data analysis on the network data plane.

[0007] (3) Synchronicity between network nodes: The network is large in scale and contains a variety of heterogeneous network devices and organizations. Establishing verification synchronization for multiple network nodes is one of the important challenges that need to be considered.

[0008] Therefore, based on the above problems, there is an urgent need to provide a label instruction verification method or system that can adapt to the compatibility requirements of the network processing chip computing method and improve the security and credibility of the verification. Summary of the invention

[0009] The purpose of this application is to provide a label instruction verification method, device, medium and product that can adapt to the compatibility requirements of network processing chip computing methods and improve the security and credibility of verification.

[0010] To achieve the above objectives, this application provides the following solutions:

[0011] In a first aspect, the present application provides a tag instruction verification method, the tag instruction verification method comprising:

[0012] Build a general list based on the configuration information of all valid parameters obtained;

[0013] According to the configuration of the centralized configuration plane, select the parameters in the overall list and assign a policy number; and use the relationship between the policy number and the corresponding parameter as the policy entry;

[0014] Build a CRC parameter list database based on all policy entries;

[0015] Determine the policy number based on the time seed determined by the current time value;

[0016] Determine the corresponding policy entry and corresponding parameters in the CRC parameter list database according to the policy number, and then determine the verification table entry execution parameters;

[0017] The CRC input field is determined based on the verification table entry execution parameters and protocol-independent processing is performed.

[0018] Optionally, the time seed determination strategy number determined based on the current time value specifically includes:

[0019] Obtaining a current time value; the current time value is determined based on Unix global time;

[0020] According to the current time value, a one-time time password is used to determine the time seed of the current cycle;

[0021] The strategy number to be executed is determined based on the time seed of the current cycle.

[0022] Optionally, the time seed uses a 6-digit value and the update period is 30 seconds.

[0023] Optionally, the protocol-independent processing includes: an encapsulation mode and a verification mode.

[0024] Optionally, the encapsulation mode specifically includes:

[0025] Extract the field parameters corresponding to the verification table entry execution parameters from the tag instruction data packet;

[0026] Use the extracted field parameters as the CRC input field to perform CRC16 calculation;

[0027] The calculation result value is encapsulated and inserted into a specific position of the label instruction and used as a CRC verification value.

[0028] Optionally, the verification mode specifically includes:

[0029] Parse and extract the CRC verification value;

[0030] Calculate the execution parameters of the verification table items issued in real time according to the parsing and extraction results;

[0031] Extracting real-time field parameters from the tag instruction data packet according to the verification table entry execution parameters issued in real time;

[0032] Perform CRC16 calculation according to the real-time field parameters to obtain the real-time calculation result value;

[0033] The real-time calculation result value is compared with the CRC verification value, and the credibility of the tag instruction is determined based on the comparison result.

[0034] In a second aspect, the present application provides a label instruction verification device, the label instruction verification device comprising:

[0035] The overall list building module is used to build the overall list according to the configuration information of all valid parameters obtained;

[0036] A policy item determination module is used to select parameters in the overall list according to the configuration of the centralized configuration plane, and assign a policy number; and the relationship between the policy number and the corresponding parameter is used as a policy item;

[0037] A CRC parameter list database determination module is used to construct a CRC parameter list database according to all policy items;

[0038] A strategy number determination module, used to determine the strategy number based on a time seed determined based on a current time value;

[0039] A verification table entry execution parameter determination module is used to determine the corresponding policy entry and corresponding parameters in the CRC parameter list database according to the policy number, and then determine the verification table entry execution parameters;

[0040] The protocol-independent processing module is used to determine the CRC input field according to the verification table entry execution parameter and perform protocol-independent processing.

[0041] In a third aspect, the present application provides a computer device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the label instruction verification method.

[0042] In a fourth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, which implements the label instruction verification method when executed by a processor.

[0043] In a fifth aspect, the present application provides a computer program product, including a computer program, characterized in that the computer program implements the label instruction verification method when executed by a processor.

[0044] According to the specific embodiments provided in this application, this application has the following technical effects:

[0045] The present application provides a label instruction verification method, device, medium and product, which determines the policy number by determining the time seed based on the current time value, and then determines the verification table execution parameter; that is, the ability to periodically update the policy items that need to be executed in the CRC parameter list database is established according to the time seed, and the dynamic self-update and synchronization mechanism of the verification rules of multiple nodes is determined based on the time seed, so as to ensure the timeliness of the CRC verification rules and reduce the risk of being cracked by collision; the CRC input field is determined according to the real-time verification table execution parameter, and then a variety of cross-protocol layer data fields are dynamically selected and used as the CRC input field; the protocol-independent processing is performed according to the CRC input field to obtain the verification value; on the one hand, the present application provides the privacy of CRC value calculation and the feasibility of verification through the definition of multiple configurable fields for verification, and on the other hand, the verification calculation is completely based on the programmable data plane operation, which can provide good throughput and latency performance. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0047] Figure 1 This is a flowchart of a tag instruction verification method in an embodiment of the present application;

[0048] Figure 2 This is a schematic diagram of the overall flow of a tag instruction verification method in an embodiment of the present application;

[0049] Figure 3 Configuring service diagram for CRC verification value;

[0050] Figure 4 It is a schematic diagram of the protocol-independent processing flow;

[0051] Figure 5 The following is a deployment diagram in an SRv6 network. DETAILED DESCRIPTION

[0052] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0053] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the present application is further described in detail below with reference to the accompanying drawings and specific implementation methods.

[0054] In an exemplary embodiment, Figure 1 and Figure 2 As shown, a tag instruction verification method is provided, the method includes the following S101 to S106. Wherein:

[0055] S101, construct a general list based on the configuration information of all valid parameters obtained; the general list is the generation target of the control configuration plane, and all the available parameters and numbers of the configuration are stored as entries, and the structure of each entry is: [valid parameter field name, valid parameter field number]; the collection of multiple entries is the general list. Table 1 is a general list of 10 fields, and Table 1 is as follows:

[0056] Table 1

[0057]

[0058] The control configuration plane is used to calculate and obtain configuration information of all valid parameters; the configuration information is specifically the field values ​​of different protocols in the data packet, namely MAC source / destination address, IPv4 source / destination address, IPv4 protocol number, IPv6 source / destination address, TCP / UDP port, etc. At the same time, each field value needs to be set with a field number for identification in the overall list. The control configuration plane works in the configuration state, that is, it is only responsible for receiving and storing the configuration parameters issued, and does not include real-time operation functions.

[0059] S102, according to the configuration of the centralized configuration plane, select the parameters in the overall list and assign a policy number; and use the relationship between the policy number and the corresponding parameter as a policy entry; the policy entry is specifically: [policy number, valid parameter field number list]; facing the overall list of Table 1, and setting 3 configuration policy numbers, establish 3 policy entries as shown in Table 2;

[0060] Table 2

[0061] Strategy Number List of available parameter field numbers 1 1,2,4,5 2 4,7,9,10 3 2,3,8

[0062] As shown in Table 2, the policy entry with policy number 1 indicates that the field selection is numbered 1, 2, 4, and 5, that is, the MAC source address, MAC destination address, IPv4 source address, and IPv4 destination address are selected as the calculation input. If the policy number is 3, it indicates that the field selection is numbered 2, 3, and 8, that is, the MAC destination address, Ethernet protocol number, and IP protocol number are selected as the calculation input.

[0063] S103, constructing a CRC parameter list database according to all policy items; the CRC parameter list database works in a configuration state;

[0064] S104, determining a strategy number based on a time seed determined based on the current time value;

[0065] S104 specifically includes:

[0066] Obtaining a current time value; the current time value is determined based on Unix global time;

[0067] According to the current time value, a one-time time password is used to determine the time seed of the current cycle; the time seed uses a 6-digit value and the update cycle is 30 seconds.

[0068] The strategy number to be executed is determined based on the time seed of the current cycle.

[0069] According to S104, the CRC verification value configuration calculation service is working in the running state, that is, real-time calculation and status update are performed during the running process. The CRC verification value configuration calculation service first maintains the time seed, and establishes a periodic policy update capability based on the time information during the running process. The time seed is a numerical value calculated based on the current time value, and this numerical value is used to determine the policy number that should be executed currently. Then, the policy number in the CRC parameter list database is matched according to the time seed information, and a list of optional parameters in the policy entry corresponding to the policy number that is the same as the policy reference value is obtained. Finally, the CRC verification value calculation service generates the verification table entry execution parameters based on the parameter information in the obtained optional parameter list, and sends it to the protocol-independent data plane. Figure 3 As shown, the CRC verification value configuration service includes: time seed maintenance, policy reference value calculation, policy number matching, and policy table entry issuance.

[0070] The strategy reference value is determined according to the strategy number to be executed. First, the number of strategy entries in the CRC parameter list database is obtained. Then, the time seed is modulo the number of strategy entries and 1 is added to obtain the strategy reference value to be executed in the current cycle, as shown below:

[0071] Strategy reference value = total number of rules in the time seed MOD strategy database + 1;

[0072] The obtained policy reference value is the policy number of the policy entry to be executed; according to Table 2, there are 3 policy numbers in total, that is, the number of policy entries is 3. Assuming that the time seed calculated for the current time period is 647155, firstly, the time seed 647155 is modulo the total number of policy numbers 3 to obtain the remainder value 1, and then the remainder value is added by 1 to obtain the policy reference value 2. That is, the policy number to be executed in the current time period is 2.

[0073] The main goal of the policy number matching is to search and match the CRC parameter list database according to the policy reference value, and obtain the list of available parameter field numbers of the policy entry corresponding to the policy number. Then, the verification table entry execution parameters are generated according to the encoding of the available parameter field number list. The specific encoding method is as follows:

[0074] 1) Initialize the bit string bitstring to 0. The length of the bitstring is determined by the specific application of this method. The bit string bitstring is mainly used to mark the parameter field corresponding to the strategy number by the bit position. For example, if the bit string is 0b0101, that is, the second and fourth bits are 1, it means that the parameters numbered 2 and 4 should be selected;

[0075] 2) Read the list of available parameter field numbers in the policy entry corresponding to the policy number;

[0076] 3) Traverse all parameter numbers in the list of available parameter field numbers, and set the corresponding bit positions of the bitstring in step 1) to 1 in sequence according to the parameter number. In particular, in this method, the bit number of the highest bit (leftmost bit) of the bitstring is 1.

[0077] 4) Get the updated bitstring, set it as the verification entry execution parameter, and output it to the policy entry for delivery.

[0078] For example, for the overall list in Table 1, if the bitstring length is set to 10 bits, the initial bitstring is 0b0000000000. If the current policy entry is 2, the list of available parameter field numbers corresponding to policy number 2 is [4,7,9,10] according to Table 2. Then, the bit positions 4, 7, 9, and 10 of the initialized 10-bit bitstring are set to 1, and the binary code is 0b0001001011. The binary code of the updated bitstring (0b0001001011) is output to the step policy table entry for delivery.

[0079] Policy entry delivery: Receives verification entry execution parameters from policy number matching and delivers the parameters to the protocol-independent processing plane. The parameters in the delivered entry only contain verification entry execution parameters. The specific entry format is explained in the protocol-independent processing.

[0080] S105, determining the corresponding policy entry and corresponding parameters in the CRC parameter list database according to the policy number, and then determining the verification table entry execution parameters;

[0081] S106, determining the CRC input field according to the verification entry execution parameter, and performing protocol-independent processing.

[0082] Specifically, the protocol-independent processing includes: encapsulation mode and verification mode.

[0083] The encapsulation modes include:

[0084] Extract the field parameters corresponding to the verification table entry execution parameters from the tag instruction data packet;

[0085] Use the extracted field parameters as the CRC input field to perform CRC16 calculation;

[0086] The calculation result value is encapsulated and inserted into a specific position of the label instruction and used as a CRC verification value.

[0087] The verification mode specifically includes:

[0088] Parse and extract the CRC verification value;

[0089] Calculate the execution parameters of the verification table items issued in real time according to the parsing and extraction results;

[0090] Extracting real-time field parameters from the tag instruction data packet according to the verification table entry execution parameters issued in real time;

[0091] Perform CRC16 calculation according to the real-time field parameters to obtain the real-time calculation result value;

[0092] The real-time calculation result value is compared with the CRC verification value, and the credibility of the tag instruction is determined based on the comparison result.

[0093] like Figure 4 As shown in the figure, a CRC-based tag instruction verification capability is established on the protocol-independent control plane. The protocol-independent processing functions include three parts: dynamic CRC matching table entries, multi-field CRC calculation, and verification operation determination;

[0094] The CRC matching table entry is to configure the verification table entry execution parameters output by the calculation service according to the CRC verification value, and instantiate the CRC matching table entry to actually complete the calculation of the CRC verification value, the encapsulation of the CRC verification value in the label instruction, the verification of the CRC verification value in the label instruction, and other functions.

[0095] Functionally, the CRC matching table items are divided into two types: CRC verification value encapsulation table items and CRC verification value check table items;

[0096] The main function of the CRC verification value encapsulation table entry is to insert the CRC verification value calculated according to the verification table entry execution parameter into the data packet according to the value of the currently active label instruction during the label instruction forwarding process. The basic form of the CRC verification value encapsulation table entry is shown in Table 3:

[0097] Table 3

[0098]

[0099]

[0100] The main function of the CRC verification value check table entry is to read the CRC verification value explicitly encapsulated in the data packet (called the instruction CRC verification value) and compare it with the CRC verification value calculated by the node. Based on the comparison result, it is decided to perform a forwarding operation or a discard operation to verify the credibility of the label instruction. The basic form of the CRC verification value check table entry is shown in Table 4:

[0101] Table 4

[0102]

[0103] The main function of the multi-field CRC calculation is to select the indicated field as the calculation input of the CRC verification value according to the parameter indication in the verification table entry execution parameter, and obtain the CRC verification value result for packaging or verification.

[0104] Specifically, the multi-field CRC calculation is performed using CRC16, the verification table entry execution parameter binary encoding is input, and the mask is set to perform a logical AND operation with the specified calculation specified by the overall list to implement the screening of the policy entry specified field, and CRC16 calculation is performed based on the screened fields. In particular, if the field set by the verification table entry execution parameter binary encoding does not exist in the data packet (for example, it does not contain the set protocol), the field is set to 0 in the calculation.

[0105] The steps for multi-field CRC calculation are as follows:

[0106] Step 1. Read the binary coded bit positions of the execution parameters of the verification table entry in sequence to obtain the bit number of the bit position;

[0107] Step 2. Set the mask value. If the bit number currently read is 1, the binary encoding of the mask value is all 1; if the bit number currently read is 0, the binary encoding of the mask value is all 0;

[0108] Step 3. Use the bit number in step 1 as the available parameter field number, read the corresponding available parameter field type in the overall list, and read the value of the available parameter field in the data packet;

[0109] Step 4. Perform a logical AND operation on the value of the available parameter field read in step 3 and the mask value in step 2, and the result is the CRC verification input calculation value;

[0110] Step 5. Loop through Step 1 to Step 4 until all bits in the verification entry execution parameter in Step 1 are read;

[0111] Step 6. Input all the obtained CRC verification input calculation values ​​into CRC16 calculation to obtain the CRC verification value;

[0112] According to different table entry information triggering multi-field CRC calculation, the calculated CRC verification value can be of two types: encapsulation CRC verification value and table entry CRC verification value.

[0113] Take Table 1 as an example of the overall list, and the current policy rule is the policy number 2 in Table 2 (that is, the binary code of the verification table entry execution parameter is 0b0001001011) as an example for explanation. Assuming that the MAC source and destination addresses of the received data packet are 01:02:03:04:05:06 and 11:22:33:33:22:11, the label instruction encapsulates the original data packet or the IP source and destination addresses of the encapsulated data packet are 10.0.0.1 and 10.0.1.0, the TCP protocol source port is 2001, and the destination port is 11451, then the corresponding CRC calculation rules are shown in Table 5:

[0114] Table 5

[0115]

[0116] According to the settings, the CRC verification value of the current cycle will be calculated using the IPv4 source address, source port, and destination port;

[0117] In the protocol-independent program, the CRC verification value encapsulation table item is matched first. If the CRC verification value encapsulation table item is hit, the calculated CRC verification value is used as the encapsulation CRC verification value, and the encapsulation operation is performed; if the CRC verification value encapsulation table item is not hit, the CRC verification value check table item is matched.

[0118] If the CRC verification value check table entry hits, the trigger operation after the hit is executed; if it does not hit, the label instruction is directly read and executed.

[0119] This application can be applied to label instructions (such as SRv6, SR MPLS, IOAM, etc.), and the method of triggering the operation of this application is defined based on protocol-independent programmability. The following is an explanation of the embodiment by applying it in SRv6 labels:

[0120] For the carrying of CRC verification value, SRv6 programmability is used to define FUNCT and ARGS fields to carry the verification value inside the SRv6 tag. The common programmability format of SRv6 is shown in Table 6:

[0121] Table 6

[0122] LOC FUNCT ARGS

[0123] In Table 6, LOC indicates the routable prefix of SRv6, which is the label instruction part that indicates routing and forwarding. FUNCT is used for function extension and indicates the function type of the bearer; ARGS indicates the parameters of the function.

[0124] The CRC verification value is carried by defining a new FUNCT type and carrying it through ARGS. That is, in the SRv6 processing process, a new FUNCT type is defined, for example:

[0125] Define FUNCT as 32 bits in length and 28 as the value for verification using this solution.

[0126] Define the length of ARGS to be 16 bits, which is used as the carrier of the CRC verification value.

[0127] Figure 5 The following is a deployment diagram in an SRv6 network: Figure 5 As shown, the same CRC check architecture is deployed on both the encapsulation node and the verification node (only shown on the encapsulation node). When the business database enters the SRv6 domain, the encapsulation node encapsulates the SRv6 list and triggers the CRC verification value encapsulation operation.

[0128] First, the time seed is updated and calculated every 30 seconds, and the set policy number is matched and selected according to the policy reference value calculated according to the time seed, and the verification table entry execution parameters are encoded.

[0129] In the encapsulation node (i.e., SRv6 encapsulation node), the matching item rule of the CRC verification value encapsulation table item will be set to be able to match and hit, and the CRC verification value is calculated according to the rule obtained by the CRC verification value configuration calculation service and used as the encapsulation CRC verification value, and the preset FUNCT and the CRC verification value generated by periodic calculation are encapsulated in the SRv6 SID.

[0130] In the verification node (i.e., SRv6 transmission node), the matching rules of the CRC verification value check table entry will be set to be able to match and hit. After the data packet arrives at the transmission node, the verification node reads the CRC verification value in the SID as the instruction CRC verification value; and compares it with the table entry CRC verification value generated by itself to decide whether to receive the SID instruction. If they are the same, they will be received, otherwise they will be discarded.

[0131] Since the time seeds of different nodes are roughly synchronized, and the typical values ​​of the time synchronization error and the network transmission time are much smaller than the set value of the period (the default is 30s), the periodic synchronization update of the time seeds of different nodes can ensure the consistency of the CRC verification values ​​between multiple nodes.

[0132] The CRC verification calculation method based on random multi-fields proposed in this application introduces multiple random, cross-layer network protocol fields as a general list. Verification based on CRC can adapt to the complexity requirements of the data plane, belongs to the calculation type that the network data plane is good at, and can ensure the processing performance and processing delay of data packets. CRC is introduced into the trusted verification of label instructions. Since CRC is a data type that the network processing chip is good at, it can adapt to the compatibility requirements of the calculation method of the network processing chip; through the optional configurable CRC parameter calculation list, the calculation of the CRC value is given a stronger privacy, which increases the difficulty of collision and reverse cracking. The mechanism for synchronizing the CRC verification value calculation list of multiple nodes based on time seeds can establish the synchronization of CRC verification rule updates for multiple nodes under the condition of weak time synchronization and no mutual interactive synchronization, further improving the security and credibility of verification.

[0133] Based on the same inventive concept, the embodiment of the present application also provides a label instruction verification device for implementing the label instruction verification method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more embodiments of the label instruction verification device provided below can refer to the limitations of the label instruction verification method above, and will not be repeated here.

[0134] In an exemplary embodiment, a label instruction verification device is provided, comprising:

[0135] The overall list building module is used to build the overall list according to the configuration information of all valid parameters obtained;

[0136] A policy item determination module is used to select parameters in the overall list according to the configuration of the centralized configuration plane, and assign a policy number; and the relationship between the policy number and the corresponding parameter is used as a policy item;

[0137] A CRC parameter list database determination module is used to construct a CRC parameter list database according to all policy items;

[0138] A strategy number determination module, used to determine the strategy number based on a time seed determined based on a current time value;

[0139] A verification table entry execution parameter determination module is used to determine the corresponding policy entry and corresponding parameters in the CRC parameter list database according to the policy number, and then determine the verification table entry execution parameters;

[0140] The protocol-independent processing module is used to determine the CRC input field according to the verification table entry execution parameter and perform protocol-independent processing.

[0141] In an exemplary embodiment, a computer device is provided, which may be a server or a terminal. The computer device includes a processor, a memory, an input / output interface (I / O for short) and a communication interface. The processor, the memory and the input / output interface are connected via a system bus, and the communication interface is connected to the system bus via the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal via a network connection. When the computer program is executed by the processor, a label instruction verification method is implemented.

[0142] In an exemplary embodiment, a computer-readable storage medium is provided, storing a computer program, and when the computer program is executed by a processor, the steps in the above method embodiments are implemented.

[0143] In an exemplary embodiment, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the steps in the above method embodiments are implemented.

[0144] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0145] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM may be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM).

[0146] The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. The non-relational database may include a distributed database based on blockchain, etc., but is not limited thereto. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but is not limited thereto.

[0147] In this application, all actions to obtain signals, information or data are carried out in compliance with the relevant data protection laws and policies of the country where they are located and with the authorization given by the owner of the corresponding device.

[0148] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0149] This article uses specific examples to illustrate the principles and implementation methods of this application. The description of the above embodiments is only used to help understand the method and core ideas of this application. At the same time, for those skilled in the art, according to the ideas of this application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as limiting this application.

Claims

1. A tag instruction verification method, characterized in that: The tag instruction verification method comprises: Build a general list based on the configuration information of all valid parameters obtained; According to the configuration of the centralized configuration plane, select the parameters in the overall list and assign a policy number; and use the relationship between the policy number and the corresponding parameter as the policy entry; Build a CRC parameter list database based on all policy entries; Determine the policy number based on the time seed determined by the current time value; Determine the corresponding policy entry and corresponding parameters in the CRC parameter list database according to the policy number, and then determine the verification table entry execution parameters; The CRC input field is determined based on the verification table entry execution parameters and protocol-independent processing is performed.

2. The tag instruction verification method according to claim 1, characterized in that: The time seed determination strategy number determined based on the current time value specifically includes: Obtaining a current time value; the current time value is determined based on Unix global time; According to the current time value, a one-time time password is used to determine the time seed of the current cycle; The strategy number to be executed is determined based on the time seed of the current cycle.

3. The tag instruction verification method according to claim 1 or 2, characterized in that: The time seed uses a 6-digit value and has an update period of 30 seconds.

4. The tag instruction verification method according to claim 1, characterized in that: Protocol-independent processing includes: encapsulation mode and verification mode.

5. The tag instruction verification method according to claim 4, characterized in that: The encapsulation modes specifically include: Extract the field parameters corresponding to the verification table entry execution parameters from the tag instruction data packet; Use the extracted field parameters as the CRC input field to perform CRC16 calculation; The calculation result value is encapsulated and inserted into a specific position of the label instruction and used as a CRC verification value.

6. The tag instruction verification method according to claim 5, characterized in that: The verification mode specifically includes: Parse and extract the CRC verification value; Calculate the execution parameters of the verification table items issued in real time according to the parsing and extraction results; Extracting real-time field parameters from the tag instruction data packet according to the verification table entry execution parameters issued in real time; Perform CRC16 calculation according to the real-time field parameters to obtain the real-time calculation result value; The real-time calculation result value is compared with the CRC verification value, and the credibility of the tag instruction is determined based on the comparison result.

7. A label instruction verification device, characterized in that: The label instruction verification device comprises: The overall list building module is used to build the overall list according to the configuration information of all valid parameters obtained; A policy item determination module is used to select parameters in the overall list according to the configuration of the centralized configuration plane, and assign a policy number; and the relationship between the policy number and the corresponding parameter is used as a policy item; A CRC parameter list database determination module is used to construct a CRC parameter list database according to all policy items; A strategy number determination module, used to determine the strategy number based on a time seed determined based on a current time value; A verification table entry execution parameter determination module is used to determine the corresponding policy entry and corresponding parameters in the CRC parameter list database according to the policy number, and then determine the verification table entry execution parameters; The protocol-independent processing module is used to determine the CRC input field according to the verification table entry execution parameter and perform protocol-independent processing.

8. A computer device comprising: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the label instruction verification method according to any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the label instruction verification method described in any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the label instruction verification method described in any one of claims 1 to 6 is implemented.

Images