Data packet filtering method and device, storage medium and electronic equipment

Abstract

The invention relates to a data packet filtering method and device, a storage medium and electronic equipment. The method comprises the following steps: acquiring mobile data of equipment and signal data of the equipment; determining a data filtering rule of the equipment according to the mobile data and the signal data; and filtering the transmission data packet of the equipment according to the data filtering rule. The technical problem that the data packet is not safely filtered is solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of data transmission, and in particular to a data packet filtering method and device, a storage medium and an electronic device. BACKGROUND

[0002] The vehicle-mounted telematics box (TBOX) is the core module of the vehicle-mounted communication system, and undertakes the wireless communication task of the whole vehicle. With the large-scale popularization of 5G communication applications, high bandwidth, low delay, large capacity and other experience advantages brought by the Internet of Vehicles, but network security problems also come with it, and complex scenarios such as remote wake-up, signal interference, network fluctuation may be encountered, and a dynamic data packet security filtering mechanism needs to be provided. SUMMARY

[0003] The present application provides a data packet filtering method, device, storage medium and electronic device to solve the technical problem of unsafe filtering of data packets.

[0004] In a first aspect, the present application provides a data packet filtering method, comprising: obtaining mobile data of a device and signal data of the device; determining a data filtering rule of the device according to the mobile data and the signal data; and filtering a transmission data packet of the device according to the data filtering rule.

[0005] For example, when determining the data filtering rule of the device according to the mobile data and the signal data, the level of the filtering rule can be determined according to the mobile data and the signal data, wherein the higher the level of the filtering rule, the more stringent the filtering of the transmission data packet; and the filtering rule corresponding to the level is enabled according to the level of the filtering rule.

[0006] By determining the level of the filtering rule, the high and low of the filtering requirement for the data packet is determined, so as to further determine the corresponding filtering rule and filter the data packet, thereby achieving the effect of accurately filtering the data packet.

[0007] For example, when determining the level of the filtering rule according to the mobile data and the signal data, the transmission level of the transmission data packet supported by the device can be determined according to the signal strength data and bandwidth data in the signal data; the transmission level of the transmission data packet supported by the device is adjusted according to the position data and speed data in the mobile data; and the level of the filtering rule is determined according to the adjusted transmission level.

[0008] In the example, the position data and the speed data in the movement data of the device are acquired, and the signal strength data and the bandwidth data in the signal data are acquired, so that the transmission level is determined according to the signal strength data and the bandwidth data, the transmission level is adjusted according to the position data and the movement speed, and then the appropriate filtering rule level is obtained according to the transmission level. The accuracy of the filtering rule level is ensured, and the accuracy of filtering the data packet is further improved.

[0009] For example, according to the adjusted transmission level, the level of the filtering rule can be the number of the transmission data packets to be transmitted of the device compared with the value of the transmission level, and the level of the filtering rule is determined according to the comparison result.

[0010] In the example, the transmission level is compared with the number of the transmission data packets to be transmitted, so that the appropriate filtering rule level is determined according to the comparison result, the determination accuracy of the filtering rule level is improved, and the accuracy of filtering the data packet is further improved.

[0011] For example, when the level of the filtering rule is determined, the filtering rule corresponding to the level can be started according to the level, which includes at least one of starting the network layer data packet filtering, the transmission layer data packet filtering and the application layer data packet filtering, and the more filtering functions are started as the level is higher.

[0012] The example provides multiple filtering means, and the more filtering means are started to filter the transmission data packet as the level of the filtering rule is higher, so that the filtering accuracy of the transmission data packet is improved.

[0013] For example, the filtering functions that are started can include filtering the source website of the transmission data packet when the network layer data packet filtering is started, filtering the transmission data packet of the unauthorized website; filtering the source interface of the transmission data packet when the transmission layer data packet filtering is started, filtering the transmission data packet of the unauthorized interface; and filtering the source application of the transmission data packet when the application layer data packet filtering is started, filtering the transmission data packet of the unauthorized application.

[0014] The example provides multiple filtering means such as the network layer data packet filtering, the transmission layer data packet filtering and the application layer data packet filtering, so that the transmission data packet is accurately filtered, and the filtering accuracy of the transmission data packet is improved.

[0015] For example, when the application layer packet filtering is enabled, the source of the transmission packet is filtered to filter out the transmission packet of the unauthorized application, and the authorized different applications can be sorted according to the use scenarios and the importance, and the transmission packet of the application at the rear of the sorting is filtered out according to the level of the sorting.

[0016] The present example sorts the different applications according to the scenarios and the importance when the application layer packet filtering is enabled, thereby preferentially ensuring the transmission of the transmission packet of the important application, and the transmission packet of the other application is transmitted later, and the effect of the precise control of the transmission packet is achieved.

[0017] In a second aspect, the present application provides a packet filtering device, comprising: an acquisition module configured to acquire the mobile data of a device and the signal data of the device; a determination module configured to determine the data filtering rule of the device according to the mobile data and the signal data; and a filtering module configured to filter the transmission packet of the device according to the data filtering rule.

[0018] In a third aspect, the present application provides an electronic device, comprising: at least one communication interface; at least one bus connected with the at least one communication interface; at least one processor connected with the at least one bus; and at least one memory connected with the at least one bus, wherein the memory stores a computer program, and the processor is configured to execute the computer program to implement the packet filtering method of any one of the above aspects.

[0019] In a fourth aspect, the present application further provides a computer storage medium storing computer executable instructions, wherein the computer executable instructions are used to execute the packet filtering method of any one of the above aspects.

[0020] Compared with the prior art, the above technical solution provided by the embodiments of the present application has the following advantages: the present application provides the following scheme: the mobile data of a device and the signal data of the device are acquired; the data filtering rule of the device is determined according to the mobile data and the signal data; and the transmission packet of the device is filtered according to the data filtering rule, thereby filtering the transmission packet of the vehicle-mounted TBOX according to the movement and the signal of the device, and the effect of the dynamic packet security filtering is achieved. BRIEF DESCRIPTION OF DRAWINGS

[0021] The accompanying drawings, which are incorporated herein and constitute part of the specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the application.

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings needed in the embodiments or prior art description. Obviously, for those skilled in the field, other drawings can also be obtained based on these drawings without any creative effort.

[0023] One or more embodiments are illustrated by way of example with reference to the drawings, which are not necessarily drawn to scale, and which are not intended to limit the embodiments to the arrangements shown, unless otherwise specifically stated. The drawings in the figures are not intended to limit the embodiments to the arrangements shown, unless otherwise specifically stated.

[0024] Figure 1 A flow chart of a data packet filtering method provided by an embodiment of the present application; Figure 2 A flow chart of another data packet filtering method provided by an embodiment of the present application; Figure 3 A flow chart of another data packet filtering method provided by an embodiment of the present application; Figure 4 A flow chart of another data packet filtering method provided by an embodiment of the present application; Figure 5 A flow chart of another data packet filtering method provided by an embodiment of the present application; Figure 6 A structural schematic diagram of a data packet filtering device provided by an embodiment of the present application; Figure 7 An electronic device schematic diagram provided by an embodiment of the present application. DETAILED DESCRIPTION

[0025] In order to make the objectives, technical solutions and advantages of the embodiments of the present application clearer, the following will combine the drawings in the embodiments of the present application to make a clear and complete description of the technical solutions in the embodiments of the present application. Obviously, the described embodiments are a part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without any creative effort fall within the scope of protection of the present application.

[0026] The following disclosure provides many different embodiments, or examples, for implementing different structures of the present application. For the purpose of simplifying the present application, the components and settings of specific examples are described in the following. Of course, they are merely examples, and the purpose is not to limit the present application. In addition, the present application can repeatedly refer to numbers and / or letters in different examples. Such repetition is for the purpose of simplification and clarity, and it does not indicate the relationship between the various embodiments and / or settings discussed.

[0027] In order to solve the technical problem of the prior art that the data packet is not safely filtered, the application provides a data packet filtering method, which can realize the effect of dynamic data packet safety filtering.

[0028] Figure 1 A flowchart of a data packet filtering method provided by an embodiment of the application is shown in FIG. 1. Figure 1 As shown in the figure, the data packet filtering method comprises the following steps. S102, obtaining the mobile data of the device and the signal data of the device; S104, determining the data filtering rule of the device according to the mobile data and the signal data; S106, filtering the transmission data packet of the device according to the data filtering rule.

[0029] The device in the example can be a mobile terminal, a smart bracelet, a vehicle-mounted terminal, etc., and the vehicle-mounted terminal can be a vehicle-mounted hardware, a vehicle-mounted chip, a vehicle-mounted TBOX, etc.

[0030] First, in order to filter the transmission data packet of the device, the mobile data of the device and the signal data of the device can be obtained. The mobile data of the device can include the position of the device, the moving speed of the device, the moving direction of the device, etc. The signal data of the device can include the broadband or wireless network connected by the device, the signal strength of the device, etc.

[0031] After obtaining the mobile data and the signal data of the device, the data filtering rule of the device can be determined according to the mobile data and the signal data of the device. The data filtering rule of the device is used to filter the transmission data packet of the device, so as to filter out part of the data packet in the transmission data packet, allow the remaining data packet to be transmitted, and the filtered data packet will not be transmitted.

[0032] In the example, when filtering the transmission data packet, it can be divided into filtering the sent data packet and filtering the received data packet, and different filtering rules can be used for the sent data packet and the received data packet.

[0033] For example, one filtering rule can be to prohibit sending data packets and only receive data packets, or prohibit receiving data packets and only send data packets, or use the data filtering rule of the example to filter the sent data packet and not filter the received data packet or comprehensively filter the received data packet, or use the data filtering rule of the example to filter the received data packet and not filter the sent data packet or comprehensively filter the sent data packet. Or the sent data packet and the received data packet are filtered by different filtering rules respectively. In addition, the sent data packet and the received data packet can also be unified as transmission data packets and filtered by the same rule.

[0034] In this example, the transmission data packet is filtered, and after obtaining the mobile data and signal data of the device, it is determined whether to start the function of filtering the transmission data packet according to the signal data. Or when the device is stuck due to network conditions, it is determined whether to start the function of filtering the transmission data packet. Or when the device starts the predetermined mode, or in a specific scene, it is determined whether to start the function of filtering the transmission data packet.

[0035] For example, in a vehicle scene, the user wants some applications to be executed stably, so the function of filtering the transmission data packet can be started to ensure that the data packet of the application is transmitted preferentially.

[0036] The scheme provided by the embodiments of the application obtains the mobile data of the device and the signal data of the device, determines the data filtering rule of the device according to the mobile data and the signal data, and filters the transmission data packet of the device according to the data filtering rule, so that the transmission data packet of the vehicle TBOX is filtered according to the movement and signal conditions of the device, and the effect of dynamic data packet safety filtering is achieved.

[0037] For example, as shown in FIG. 2, Figure 2 When the data filtering rule of the device is determined according to the mobile data and the signal data, S202-S204 can be performed, the level of the filtering rule is determined according to the mobile data and the signal data, the higher the level of the filtering rule, the more strict the filtering of the transmission data packet is, and the filtering rule corresponding to the level is started according to the level of the filtering rule.

[0038] In this example, after obtaining the mobile data and the signal data, the data filtering rule of the device is determined according to the mobile data and the signal data, and the level of the data filtering rule is determined according to the mobile data and the signal data. The higher the level of the filtering rule, the greater the filtering degree, and the filtering of the transmission data packet is more strict, and the lower the level of the data filtering rule, the smaller the degree, and the filtering of the transmission data packet is more relaxed.

[0039] For example, in this example, the data filtering rule of the device can be set to multiple levels, such as three levels, low, medium and high. Then after obtaining the mobile data and the signal data of the device, the level of the data filtering rule of the device can be determined according to the mobile data and the signal data, and the level of the data filtering rule of the device is set to low, medium or high. After the level is determined, the data filtering rule corresponding to the level can be selected according to the level.

[0040] If you want to filter transmitted and received data packets separately, you can set different filtering rule levels for each. Since the filtering rule levels are determined based on mobility data and signal data, the specific filtering rule levels used to determine the levels for transmitted and received data packets will differ depending on whether the level being determined is for the transmitted or received data packets.

[0041] For example, when determining the level of filtering rules for transmitted data packets, location and signal data might determine a low level, while the same location and signal data might determine a medium level for receiving data packets. The contribution of data to the level determination differs between the two methods.

[0042] By determining the level of the filtering rules, the required level of filtering for data packets is determined. This allows for the further identification of corresponding filtering rules to filter data packets, achieving precise filtering.

[0043] For example, such as Figure 3 As shown, when determining the level of the filtering rule based on the mobile data and signal data, steps S302-S306 can be executed to determine the transmission volume of the data packets supported by the device based on the signal strength data and bandwidth data in the signal data; adjust the transmission volume of the data packets supported by the device based on the location data and speed data in the mobile data; and determine the level of the filtering rule based on the adjusted transmission volume.

[0044] This example presents a method for determining the level of filtering rules based on mobility data and signal data. In determining the level of filtering rules, the transmission volume of data packets supported by the device can be determined based on signal strength and bandwidth data from the signal data. Here, transmission volume refers to the number of data packets the device can transmit per unit time. A larger transmission volume indicates that the device can transmit more data packets per unit time. Therefore, the level of filtering rules can be adjusted based on the transmission volume. In addition to determining the transmission volume based on signal strength and bandwidth data, the transmission volume should also be adjusted based on location and speed data from the mobility data. Location data determines the distance between the device and the signal source. A greater distance from the signal source allows for a smaller transmission volume, while a closer distance allows for a larger transmission volume. Furthermore, the device's speed must also be considered. Speed ​​data indicates how fast or slow the device is moving; a larger speed data requires a lower transmission volume, while a smaller speed data allows for a higher transmission volume.

[0045] After the transmission level is determined according to the signal data and the position data and the transmission level is adjusted, the level of the filtering rule is determined according to the size of the transmission level.

[0046] In this example, by obtaining the position data and the speed data in the movement data of the device and the signal strength data and the bandwidth data in the signal data, the transmission level can be determined according to the signal strength data and the bandwidth data, the transmission level is adjusted according to the position data and the movement speed, and then the appropriate level of the filtering rule is obtained according to the transmission level. The accuracy of the level of the filtering rule is ensured, and the accuracy of filtering the data packets is further improved.

[0047] For example, the level of the filtering rule is determined according to the adjusted transmission level, which can be the number of the transmission data packets to be transmitted by the device compared with the value of the transmission level; and the level of the filtering rule is determined according to the comparison result.

[0048] In the above example, the accurate transmission level, that is, the order of magnitude of the data packets that can be transmitted by the device in a unit of time, has been obtained. Then, the transmission level can be compared with the number of the transmission data packets to be transmitted by the device in a unit of time. It can be predicted that if the number of the transmission data packets to be transmitted is greater than the transmission level, the filtering rule needs to be provided to filter out part of the data packets. According to how much the number of the transmission data packets to be transmitted is greater than the transmission level, the level of the corresponding filtering rule can be set.

[0049] Since the level of the corresponding filtering rule can be set according to how much the number of the transmission data packets to be transmitted is greater than the transmission level, and it is unknown how many transmission data packets will be filtered out under different levels of the filtering rule, the number of the data packets that can be filtered out by different filtering rules can be determined in advance according to different filtering rules, and then the corresponding filtering rule can be selected according to how much the number of the transmission data packets to be transmitted is greater than the transmission level. For example, the number of the transmission data packets to be transmitted is 3000 packets / minute more than the transmission level. Then, the filtering rule with the filtering capacity of filtering out about 3000 packets / minute or more needs to be provided. The number of the transmission data packets that can be filtered out by different filtering rules under different scenarios can be determined in advance, and then the corresponding filtering rule or combination of the filtering rules can be selected to filter the transmission data packets.

[0050] In this example, by comparing the transmission level with the number of the transmission data packets to be transmitted, the appropriate level of the filtering rule can be determined according to the comparison result, the determination accuracy of the level of the filtering rule is improved, and the accuracy of filtering the data packets is further improved.

[0051] For example, the level of the filtering rule is determined according to the adjusted transmission level, which can be the number of the transmission data packets to be transmitted by the device compared with the value of the transmission level; and the level of the filtering rule is determined according to the comparison result. Figure 4When the level of the filtering rule is determined, S402 can be performed to enable the filtering rule corresponding to the level according to the level of the filtering rule. The filtering rule can be at least one of network layer packet filtering, transport layer packet filtering and application layer packet filtering. The higher the level, the more filtering functions are enabled.

[0052] In this example, various filtering means are provided. The filtering means can include network layer packet filtering, transport layer packet filtering and application layer packet filtering. One or more of the filtering means can be enabled. The higher the level of the filtering rule, the more filtering means are enabled.

[0053] For example, as the level of the filtering rule in this example increases from low to high, one filtering means, two filtering means or three filtering means can be enabled, respectively. The higher the level of the filtering rule, the more filtering means are enabled, and the more strict the filtering of the transmission packet is.

[0054] This example provides the above-mentioned three filtering means of network layer packet filtering, transport layer packet filtering and application layer packet filtering. When one filtering means or two filtering means are enabled, the filtering means can be randomly selected and enabled. Alternatively, in another example, the above-mentioned three filtering means can be sorted. If the level of the filtering rule is low, the first filtering means is enabled. If the level of the filtering rule is medium, the first and second filtering means are enabled. If the level of the filtering rule is high, all the three filtering means are enabled. This example proposes a sorting result of sorting the filtering means, in which the network layer packet filtering is the first level, the transport layer packet filtering is the second level, and the application layer packet filtering is the third level.

[0055] This example provides various filtering means, and the higher the level of the filtering rule, the more different or more filtering means are enabled to filter the transmission packet, thereby improving the filtering accuracy of the transmission packet.

[0056] For example, the enabled filtering functions can include filtering the source website of the transmission packet to filter out the transmission packet from an unauthorized website when the network layer packet filtering is enabled, filtering the source interface of the transmission packet to filter out the transmission packet from an unauthorized interface when the transport layer packet filtering is enabled, and filtering the source application of the transmission packet to filter out the transmission packet from an unauthorized application when the application layer packet filtering is enabled.

[0057] The various filtering means such as the network layer packet filtering, the transport layer packet filtering and the application layer packet filtering proposed in this example are respectively used to filter the packet in different scenarios.

[0058] The network layer packet filtering can filter packets of different websites. For different websites, a whitelist or a blacklist can be preset, so that the packets of websites in the whitelist are not filtered, the packets of websites in the black list are fully filtered, and the packets of websites not in the whitelist or the blacklist are selectively filtered. The transmission layer packet filtering can filter the source interface of the transmission packet. The transmission packet can be transmitted by calling different interfaces during transmission, and then the whitelist or the black list of the interface can be set for different interfaces. The data transmitted by the interface in the whitelist is not filtered, the data transmitted by the interface in the black list is fully filtered, and the data transmitted by other interfaces is selectively filtered. The application layer packet filtering can filter the application. Whether the transmission packet is filtered is determined by determining the application corresponding to the transmission packet. The application also includes a whitelist and a blacklist, so that the data transmitted by the application in the whitelist is not filtered, the data transmitted by the application in the black list is fully filtered, and the data transmitted by other applications is selectively filtered.

[0059] The selective filtering in the example can be determined in combination with network conditions, or can be determined in combination with application scenarios to determine which applications or interfaces or websites are more important, so that transmission data packets of more important applications or interfaces or websites are provided with transmission protection, and transmission data packets of other applications or interfaces or websites are selectively filtered.

[0060] The above network layer packet filtering, transmission layer packet filtering and application layer packet filtering provided by the example can realize accurate filtering of transmission data packets and improve the filtering accuracy of transmission data packets.

[0061] For example, when the application layer packet filtering is enabled, the source application of the transmission data packet is filtered, and the transmission data packet of the unauthorized application is filtered out, the authorized different applications can be sorted according to the use scenario and importance, and the transmission data packet of the application at the rear of the sorting is filtered out according to the level.

[0062] In the example, if the application layer packet filtering is enabled, the data packets transmitted by different applications can be filtered. In the filtering process, the above-mentioned whitelist or blacklist can be used for filtering, or different applications can be sorted according to the use scenario and importance, so as to guarantee the transmission of the transmission data packet of the application at the front of the sorting. For example, for the driving scenario of the vehicle-mounted device, the transmission data packet of the application of the vehicle-mounted function is preferentially transmitted, and the transmission priority of the transmission data packet of other entertainment applications is low. If it is for the parking and resting scenario, the transmission data packet of the entertainment software of the vehicle-mounted device has high priority, and the transmission data packet of the driving scenario application has low transmission priority.

[0063] This example achieves precise control over data packet transmission by prioritizing the transmission of data packets from important applications based on their scenarios and importance during application-layer packet filtering, while data packets from other applications are transmitted later.

[0064] This example illustrates a scenario where the device is an in-vehicle TBOX terminal. For in-vehicle devices, in-vehicle networks cover multiple application scenarios, including autonomous driving, in-vehicle entertainment, vehicle-to-vehicle communication, and vehicle-to-everything (V2X) communication. Each application has different network requirements; for example, autonomous driving requires low latency and high reliability, while in-vehicle entertainment focuses on high-bandwidth data transmission.

[0065] like Figure 5 As shown, initial default filtering rules can be preset. These default rules are suitable for most scenarios. Then, mobile data (such as location and speed) is acquired through vehicle sensors, and signal data (such as Received Signal Strength Indicator (RSSI) and available bandwidth) is obtained from 5G module monitoring. Environmental data is collected in real-time by vehicle sensors, forming a dynamic parameter set containing location information, vehicle speed, signal strength, bandwidth, and other parameters. Combined with environmental feature vectors such as real-time vehicle location, speed, signal strength, and bandwidth obtained from environmental monitoring, data filtering rules are dynamically generated or updated according to the scenario. The data filtering rules include a multi-layered filtering mechanism. For example, network layer packet filtering: based on predefined or dynamically generated filtering rules, it quickly intercepts known malicious attack sources and phishing websites, filtering connection requests from unauthorized devices and reducing subsequent processing load. Transport layer packet filtering: combining IP addresses and port numbers (e.g., UDP 53 for Domain Name System, DNS) further filters to prevent Trojans from transmitting data using private ports. For example, it prohibits the vehicle system from communicating with the outside world through non-standard ports, such as TCP 9999. Application layer detection and filtering: Parsing data packet content to identify application types such as navigation software and music software, prioritizing traffic from navigation software to ensure real-time traffic updates. This includes DNS lookup domains in HTTP headers.

[0066] By statistically analyzing metrics such as latency, packet loss rate, and throughput of filtered traffic, and based on preset objectives such as minimizing latency, maximizing bandwidth utilization, and preventing Distributed Denial of Service (DDoS) attacks, the adaptability of the filtering strategy is continuously improved through reverse optimization. For weak network environments, a strict filtering mode is automatically activated when a vehicle enters a signal blind spot.

[0067] Figure 6A structural schematic diagram of a data packet filtering device provided in an embodiment of the present application is shown in FIG. 1. Figure 6 As shown in FIG. 1, the data packet filtering device comprises: An acquisition module 602 is configured to acquire mobile data of a device and signal data of the device. A determination module 604 is configured to determine a data filtering rule of the device according to the mobile data and the signal data. A filtering module 606 is configured to filter a transmission data packet of the device according to the data filtering rule.

[0068] For example, the determination module can comprise a determination unit configured to determine a level of the filtering rule according to the mobile data and the signal data, wherein the higher the level of the filtering rule, the more strict the filtering of the transmission data packet; and start the filtering rule corresponding to the level according to the level of the filtering rule.

[0069] By determining the level of the filtering rule, the high or low of the filtering requirement of the data packet is determined, so that the corresponding filtering rule is further determined to filter the data packet, and the effect of accurately filtering the data packet is achieved.

[0070] For example, the determination unit can comprise a determination sub-unit configured to determine a transmission level of the transmission data packet supported by the device according to signal strength data and bandwidth data in the signal data; adjust the transmission level of the transmission data packet supported by the device according to position data and speed data in the mobile data; and determine the level of the filtering rule according to the adjusted transmission level.

[0071] In this example, by acquiring the position data and speed data in the mobile data of the device and the signal strength data and bandwidth data in the signal data, the transmission level can be determined according to the signal strength data and the bandwidth data, and the transmission level is adjusted according to the position data and the moving speed, and then the appropriate level of the filtering rule is obtained according to the transmission level. The accuracy of the level of the filtering rule is ensured, and the accuracy of filtering the data packet is further improved.

[0072] For example, the determination sub-unit is further configured to compare the value of the transmission level with the number of the transmission data packets to be transmitted by the device; and determine the level of the filtering rule according to the comparison result.

[0073] In this example, by comparing the transmission level with the number of the transmission data packets to be transmitted, the appropriate level of the filtering rule can be determined according to the comparison result, the determination accuracy of the level of the filtering rule is improved, and the accuracy of filtering the data packet is further improved.

[0074] According to the example, the determining unit comprises a filtering subunit configured to enable at least one of the network layer packet filtering, the transport layer packet filtering and the application layer packet filtering according to the level, wherein the higher the level is, the more filtering functions are enabled.

[0075] The example provides multiple filtering means, and the higher the level of the filtering rule is, the more filtering means are enabled to filter the transport packet, thereby improving the filtering accuracy of the transport packet.

[0076] According to the example, the filtering subunit is further configured to, when the network layer packet filtering is enabled, filter the source website of the transport packet to filter out the transport packet from the unauthorized website; when the transport layer packet filtering is enabled, filter the source interface of the transport packet to filter out the transport packet from the unauthorized interface; and when the application layer packet filtering is enabled, filter the source application of the transport packet to filter out the transport packet from the unauthorized application.

[0077] The example provides multiple filtering means such as the network layer packet filtering, the transport layer packet filtering and the application layer packet filtering, thereby achieving accurate filtering of the transport packet and improving the filtering accuracy of the transport packet.

[0078] According to the example, the filtering subunit is further configured to, when the application layer packet filtering is enabled, filter the source application of the transport packet to filter out the transport packet from the unauthorized application, sort the authorized different applications according to the use scenarios and the importance, and filter out the transport packet of the application at the rear of the sorting according to the level.

[0079] The example sorts different applications according to the scenarios and the importance when the application layer packet filtering is enabled, thereby preferentially ensuring transmission of the transport packet of the important application and transmitting the transport packet of the other application later, and accurate control of the transport packet is achieved.

[0080] Other examples of the embodiment are described in the above examples, which will not be described herein.

[0081] As shown in Figure 7 The embodiment of the present application provides an electronic device, which comprises a processor 111, a communication interface 112, a memory 113 and a communication bus 114, wherein the processor 111, the communication interface 112 and the memory 113 perform mutual communication through the communication bus 114. The memory 113 is used for storing a computer program. In an embodiment of the present application, the processor 111 is used for executing the program stored in the memory 113, thereby realizing the data packet filtering method provided by any one of the above method embodiments.

[0082] The embodiment of the present application further provides a computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to implement the data packet filtering method provided by any one of the foregoing method embodiments.

[0083] The apparatus embodiments described above are merely illustrative, wherein the units shown as separated components can or can not be physically separated, and the components shown as units can or can not be physical units, that is, can be located in one place, or can be distributed on multiple network units. Part or all of the modules can be selected to achieve the purpose of the embodiment according to actual needs.

[0084] Through the description of the foregoing embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus a general hardware platform, and of course, can also be implemented by hardware. Based on such understanding, the foregoing technical solutions can be embodied in the form of a software product, which can be stored in a computer readable storage medium, such as a ROM / RAM, a magnetic disk, or an optical disk, and includes a plurality of instructions to cause a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods of the embodiments or some parts of the embodiments.

[0085] It should be understood that the terms used herein are for the purpose of describing particular example embodiments only and are not intended to be limiting. As used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. The terms "comprises", "comprising", "includes", "including" and "has" are inclusive and therefore specify the presence of stated features, steps, operations, elements, and / or components, but do not preclude the presence or addition of one or more other features, steps, operations, elements, components, and / or groups thereof. The method steps, processes, and operations described herein are not to be construed as necessarily requiring their performance in the particular order in which they are described, unless specifically identified as an order dependent step. It is also to be understood that additional or alternative steps can be employed.

[0086] The above merely describes specific embodiments of the present application, enabling those skilled in the art to understand or implement the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to these embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features set forth herein.

Claims

1. A data packet filtering method, characterized in that, include: Acquire the device's motion data and the device's signal data; Based on the mobile data and the signal data, the data filtering rules of the device are determined; The data packets transmitted by the device are filtered according to the data filtering rules.

2. The method according to claim 1, characterized in that, The step of determining the data filtering rules of the device based on the mobile data and the signal data includes: The level of the filtering rule is determined based on the mobile data and the signal data, wherein the higher the level of the filtering rule, the more stringent the filtering of the transmitted data packets; Enable the filtering rule corresponding to the level of the filtering rule.

3. The method according to claim 2, characterized in that, The step of determining the level of the filtering rule based on the mobility data and the signal data includes: Based on the signal strength data and bandwidth data in the signal data, the transmission volume of the data packets supported by the device is determined; Based on the location and speed data in the mobile data, the transmission volume of the data packets supported by the device is adjusted. The level of the filtering rule is determined based on the adjusted transmission volume.

4. The method according to claim 3, characterized in that, Determining the level of the filtering rule based on the adjusted transmission volume includes: Compare the value of the transmission volume with the number of data packets to be transmitted by the device; The level of the filtering rule is determined based on the comparison results.

5. The method according to claim 2, characterized in that, The step of enabling the filtering rule corresponding to the level of the filtering rule includes: According to the level, at least one of network layer packet filtering, transport layer packet filtering, and application layer packet filtering is enabled, wherein the higher the level, the more filtering functions are enabled.

6. The method according to claim 5, characterized in that, The method further includes: When network layer packet filtering is enabled, the source website of the transmitted data packets is filtered to remove transmitted data packets belonging to unauthorized websites. When transport layer packet filtering is enabled, the source interface of the transmitted data packets is filtered to filter out transmitted data packets from unauthorized interfaces. When application-layer packet filtering is enabled, the source application of the transmitted packets is filtered to remove transmitted packets from unauthorized applications.

7. The method according to claim 6, characterized in that, When application-layer packet filtering is enabled, and the source application of the transmitted packets is filtered to remove transmitted packets from unauthorized applications, the method further includes: The authorized applications are sorted according to their usage scenarios and importance; After sorting the applications, filter out the data packets of applications that are ranked lower in the order of sorting.

8. A data packet filtering device, characterized in that, include: The acquisition module is used to acquire the device's motion data and the device's signal data; The determining module is used to determine the data filtering rules of the device based on the mobile data and the signal data; The filtering module is used to filter the data packets transmitted by the device according to the data filtering rules.

9. An electronic device, characterized in that, include: At least one communication interface; At least one bus connected to the at least one communication interface; At least one processor connected to the at least one bus; At least one memory connected to the at least one bus, wherein the memory stores a computer program, and the processor executes the computer program to implement the packet filtering method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The storage medium stores computer-executable instructions for performing the data packet filtering method according to any one of claims 1 to 7 of this application.

Images