A method, device, network equipment and computer storage medium for address protection

Abstract

The embodiment of the present invention discloses an address protection method, device, network equipment and computer storage medium. The method comprises: an intranet router receives a first data packet, the first data packet includes a collection node address; determines whether the collection node address is the address of the intranet management node; if the collection node address is not the address of the intranet management node, sends a second data packet to the intranet management node, the second data packet is used to instruct the intranet management node to send the Internet Protocol Version 6 (IPv6) address converted and processed according to a first conversion method to the collection node address; the second data packet includes the collection node address.

Description

Technical Field

[0001] The present invention relates to the field of Internet security, and in particular to an address protection method, device, network equipment and computer storage medium. Background Art

[0002] With the rapid development of technologies such as mobile Internet and the Internet of Things, as well as the rapid application of communication network technologies such as 5G, the addresses of Internet Protocol version 4 (IPv4) have been allocated, and the next-generation Internet based on Internet Protocol version 6 (IPv6) has made great progress in network deployment and application construction. However, with the development of IPv6, network vulnerabilities and network attacks targeting IPv6 continue to emerge, and its development and application face challenges and problems in various aspects. Among them, fast scanning of IPv6 addresses and protection of IPv6 addresses are two key problems.

[0003] When performing a quick scan of IPv6 addresses, it is necessary to protect IPv6 addresses to improve the privacy protection and auditability of IPv6 assets. Currently, there is no effective solution for protecting IPv6 addresses. Summary of the invention

[0004] In order to solve the existing technical problems, the embodiments of the present invention provide an address protection method, an apparatus, a network device and a computer storage medium.

[0005] To achieve the above object, the technical solution of the embodiment of the present invention is implemented as follows:

[0006] In a first aspect, an embodiment of the present invention provides an address protection method, the method comprising:

[0007] The intranet router receives a first data packet, wherein the first data packet includes a collection node address;

[0008] Determine whether the acquisition node address is the address of the intranet management node;

[0009] If the collection node address is not the address of the intranet management node, a second data packet is sent to the intranet management node, and the second data packet is used to instruct the intranet management node to send the IPv6 address converted and processed according to the first conversion method to the collection node address; the second data packet includes the collection node address.

[0010] In the above solution, the method further includes: if the collection node address is the address of an intranet management node, sending a real IPv6 address to the collection node address.

[0011] In the above scheme, the method further comprises:

[0012] The intranet router receives a scan task data packet from a scanner; the scan task data packet includes an address of a collection node associated with the scanner;

[0013] If the address of the collection node is not the address of the intranet management node, the destination address in the scanning task data packet is converted according to the second conversion method, and the scanning task data packet after the destination address conversion is forwarded; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address after the conversion according to the first conversion method.

[0014] In the above scheme, the method further comprises:

[0015] The intranet router receives a scan task data packet from a scanner; the scan task data packet includes an address of a collection node associated with the scanner;

[0016] If the address of the collection node is not the address of the intranet management node, a third data packet is sent to the intranet management node, and the third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

[0017] In the above scheme, the method further comprises:

[0018] If the collection node is the intranet management node, the scanning task data packet is forwarded.

[0019] In the above solution, if the acquisition node address is not the address of the intranet management node, the method further includes: the intranet router saves the acquisition node address and discards the first data packet.

[0020] In a second aspect, an embodiment of the present invention further provides an address protection method, the method comprising:

[0021] The intranet management node receives a second data packet sent by the intranet router; the second data packet is sent when the intranet router determines that the collection node address in the received first data packet is not the address of the intranet management node; the second data packet includes the collection node address;

[0022] The collected IPv6 addresses are converted according to a first conversion method based on the second data packet, and the converted IPv6 addresses are sent to the collection node address.

[0023] In the above scheme, the method further comprises:

[0024] The intranet management node receives a third data packet sent by the intranet router; the third data packet is sent when the intranet router determines that the address of the collection node in the received scanning task data packet is not the address of the intranet management node;

[0025] The intranet management node converts the destination address in the scanning task data packet according to a second conversion method, and forwards the scanning task data packet after the destination address conversion; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address after the conversion according to the first conversion method.

[0026] In a third aspect, an embodiment of the present invention further provides an address protection device, the device comprising: a first receiving unit, a first processing unit and a first sending unit; wherein,

[0027] The first receiving unit is used to receive a first data packet, wherein the first data packet includes a collection node address;

[0028] The first processing unit is used to determine whether the acquisition node address is the address of the intranet management node;

[0029] The first sending unit is used to send a second data packet to the intranet management node if the first processing unit determines that the collection node address is not the address of the intranet management node, and the second data packet is used to instruct the intranet management node to send the Internet Protocol version 6 IPv6 address converted and processed according to the first conversion method to the collection node address; the second data packet includes the collection node address.

[0030] In the above solution, the first sending unit is further used to send a real IPv6 address to the collection node address if the first processing unit determines that the collection node address is the address of the intranet management node.

[0031] In the above solution, the first receiving unit is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes the address of the collection node associated with the scanner;

[0032] The first processing unit is further configured to convert the destination address in the scanning task data packet according to a second conversion method if the address of the acquisition node is not the address of the intranet management node; the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method;

[0033] The first sending unit is further used to forward the scanning task data packet after the destination address conversion processing.

[0034] In the above solution, the first receiving unit is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes the address of the collection node associated with the scanner;

[0035] The first sending unit is also used to send a third data packet to the intranet management node if the address of the collection node is not the address of the intranet management node. The third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

[0036] In the above solution, the first sending unit is further used to forward the scanning task data packet if the collection node is the intranet management node.

[0037] In the above solution, the device further comprises a first storage unit, which is used to store the address of the collection node if the address of the collection node is not the address of the intranet management node;

[0038] The first processing unit is further configured to discard the first data packet.

[0039] In a fourth aspect, an embodiment of the present invention further provides an address protection device, the device comprising: a second receiving unit, a second processing unit, and a second sending unit; wherein,

[0040] The second receiving unit is used to receive a second data packet sent by the intranet router; the second data packet is sent when the intranet router determines that the collection node address in the received first data packet is not the address of the intranet management node; the second data packet includes the collection node address;

[0041] The second processing unit is used to convert the collected IPv6 addresses according to the first conversion method based on the second data packet;

[0042] The second sending unit is used to send the converted IPv6 address to the collection node address.

[0043] In the above scheme, the second receiving unit is further used to receive a third data packet sent by the intranet router; the third data packet is sent when the intranet router determines that the address of the collection node in the received scanning task data packet is not the address of the intranet management node;

[0044] The second processing unit is further used to convert the destination address in the scanning task data packet according to a second conversion method; wherein the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method;

[0045] The second sending unit is further used to forward the scanning task data packet after the destination address conversion processing.

[0046] In a fifth aspect, an embodiment of the present invention further provides an address protection method, the method comprising:

[0047] The intranet router receives a first data packet, wherein the first data packet includes a collection node address;

[0048] Determine whether the acquisition node address is the address of the intranet management node;

[0049] If the collection node address is not the address of the intranet management node, an IPv6 address converted in a first conversion manner is sent to the collection node address.

[0050] In the above solution, the method further includes: if the collection node address is the address of an intranet management node, sending a real IPv6 address to the collection node address.

[0051] In the above scheme, the method further comprises:

[0052] The intranet router receives a scan task data packet from a scanner; the scan task data packet includes an address of a collection node associated with the scanner;

[0053] If the address of the collection node is not the address of the intranet management node, the destination address in the scanning task data packet is converted according to the second conversion method, and the scanning task data packet after the destination address conversion is forwarded; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address after the conversion according to the first conversion method.

[0054] In the above scheme, the method further comprises:

[0055] The intranet router receives a scan task data packet from a scanner; the scan task data packet includes an address of a collection node associated with the scanner;

[0056] If the address of the collection node is not the address of the intranet management node, a third data packet is sent to the intranet management node, and the third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

[0057] In the above scheme, the method further comprises:

[0058] If the collection node is the intranet management node, the scanning task data packet is forwarded.

[0059] In the above solution, if the address of the acquisition node is not the address of the intranet management node, the method further includes:

[0060] The intranet router saves the collection node address and discards the first data packet.

[0061] In a sixth aspect, an embodiment of the present invention further provides an address protection device, the device comprising: a third receiving unit, a third processing unit and a third sending unit; wherein,

[0062] The third receiving unit is used to receive a first data packet, wherein the first data packet includes a collection node address;

[0063] The third processing unit is used to determine whether the acquisition node address is the address of the intranet management node;

[0064] The third sending unit is used to send the IPv6 address converted in the first conversion mode to the collection node address if the third processing unit determines that the collection node address is not the address of the intranet management node.

[0065] In the above solution, the third sending unit is further used to send a real IPv6 address to the collection node address if the third processing unit determines that the collection node address is the address of the intranet management node.

[0066] In the above solution, the third receiving unit is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes the address of the collection node associated with the scanner;

[0067] The third processing unit is further configured to convert the destination address in the scanning task data packet according to a second conversion method if the address of the acquisition node is not the address of the intranet management node, wherein the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method;

[0068] The third sending unit is further used to forward the scanning task data packet after the destination address conversion processing.

[0069] In the above solution, the third receiving unit is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes the address of the collection node associated with the scanner;

[0070] The third sending unit is also used to send a third data packet to the intranet management node if the address of the collection node is not the address of the intranet management node. The third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

[0071] In the above solution, the third sending unit is further used to forward the scanning task data packet if the collection node is the intranet management node.

[0072] In the above solution, the device further includes a second storage unit for storing the address of the collection node if the address of the collection node is not the address of the intranet management node;

[0073] The third processing unit is further configured to discard the first data packet.

[0074] In the seventh aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the address protection method described in the first aspect, the second aspect or the fifth aspect of the embodiment of the present invention.

[0075] In an eighth aspect, an embodiment of the present invention further provides a network device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the address protection method described in the first aspect, the second aspect, or the fifth aspect of the embodiment of the present invention are implemented.

[0076] The address protection method, device, network device and computer storage medium provided by the embodiment of the present invention include: the intranet router receives a first data packet, the first data packet includes a collection node address; determines whether the collection node address is the address of the intranet management node; if the collection node address is not the address of the intranet management node, sends a second data packet to the intranet management node, the second data packet is used to instruct the intranet management node to send the IPv6 address converted and processed according to the first conversion method to the collection node address; the second data packet includes the collection node address. By adopting the technical solution of the embodiment of the present invention, when the collection node is not the intranet management node, the IPv6 address to be sent to the non-intranet collection node is converted, and the converted IPv6 address is sent to the non-intranet collection node, thereby realizing the protection of the IPv6 address, improving the privacy of the IPv6 address, reducing the risk of network asset exposure, and improving the overall security protection of the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0077] Figure 1 A schematic diagram of a system architecture for an address protection method according to an embodiment of the present invention;

[0078] Figure 2 The address protection method of the present invention is shown in FIG. Figure 1 ;

[0079] Figure 3 The interactive process diagram of the address protection method according to the embodiment of the present invention is as follows Figure 1 ;

[0080] Figure 4 The interactive process diagram of the address protection method according to the embodiment of the present invention is as follows Figure 2 ;

[0081] Figure 5 The structure diagram of the address protection device according to the embodiment of the present invention is shown in FIG. Figure 1 ;

[0082] Figure 6 The structure diagram of the address protection device according to the embodiment of the present invention is shown in FIG. Figure 2 ;

[0083] Figure 7 The address protection method of the present invention is shown in FIG. Figure 2 ;

[0084] Figure 8 The structure diagram of the address protection device according to the embodiment of the present invention is shown in FIG. Figure 3 ;

[0085] Fig. 9 The figure is a schematic diagram of the hardware structure of the network device according to the embodiment of the present invention. DETAILED DESCRIPTION

[0086] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0087] Figure 1 Schematic diagram of the system architecture of the address protection method of the embodiment of the present invention; Figure 1 As shown, the system may include various network devices of the intranet and various network devices of the non-intranet. Among them, the network devices of the intranet may include various terminal nodes with IPv6 addresses in the intranet, intranet routers, intranet operator management nodes (i.e., intranet management nodes in the following embodiments of the present invention), upper-level routers and scanners of intranet routers, etc.; the network devices of the non-intranet may include: non-intranet collection nodes, non-intranet upper-level routers and scanners, etc.

[0088] Among them, terminal nodes with IPv6 addresses can be various networked devices such as laptops, desktops, Internet of Things devices, industrial Internet devices, etc.

[0089] The intranet router refers to a router in the routing path of the intranet network; the intranet router in this embodiment may be one or more.

[0090] The intranet operator management node (i.e., the intranet management node in the following embodiments of the present invention) is a node in the intranet operator with IPv6 address management authority, which can also be understood as the intranet collection node. The IP address of the intranet operator management node needs to be pre-configured on each device in the intranet.

[0091] The upper-level router of the intranet router is the upper-level router of the intranet border router, or the upper-level router of the upper-level router of the intranet border router, and so on. The upper-level router of the intranet router is a non-intranet router, such as a router of an operator.

[0092] Among them, non-intranet collection nodes are collection nodes other than the intranet operator management nodes, and are non-intranet nodes.

[0093] The scanner is a device that scans the terminal device, and there is a linkage relationship between the scanner and the collection node. The scanner can be a scanner in the intranet, which is linked to the operator management node of the intranet for scanning; the scanner can also be a scanner outside the intranet, which is linked to the collection node outside the intranet for scanning.

[0094] Based on the above system architecture, the following embodiments of the present invention are proposed.

[0095] An embodiment of the present invention provides an address protection method, which is applied to an intranet router. Figure 2 The address protection method of the present invention is shown in FIG. Figure 1 ;like Figure 2 As shown, the method includes:

[0096] Step 101: An intranet router receives a first data packet, wherein the first data packet includes a collection node address;

[0097] Step 102: Determine whether the acquisition node address is the address of the intranet management node;

[0098] Step 103: If the collection node address is not the address of the intranet management node, send a second data packet to the intranet management node, the second data packet is used to instruct the intranet management node to send the IPv6 address converted according to the first conversion method to the collection node address; the second data packet includes the collection node address.

[0099] This embodiment is proposed on the basis of pre-implementing the rapid discovery of IPv6 addresses. In some optional embodiments, each router (including an intranet router, etc.) modifies the Router Advertisement (RA) data packet in the Neighbor Discovery Protocol (NDP). Specifically, each router (including an intranet router, etc.) adds the global unicast address (Collection Point Address) of the collection node in the RA data packet and sends the RA data packet; wherein the RA data packet may also include the collection node address; wherein the options in the RA data packet may include the collection node address. After each terminal receives the data packet containing the global unicast address (Collection Point Address), it sends another data packet (such as an echo packet) to the collection node address; the data packet includes the terminal's own IPv6 address, thereby realizing rapid discovery of the IPv6 address.

[0100] In this embodiment, the first data packet is an RA data packet. The intranet router may receive the first data packet from an upper-level node. The first data packet includes a collection point address (Collection Point Address).

[0101] In this embodiment, the intranet router extracts the collection node address from the first data packet, and performs role and authority determination on the collection node corresponding to the collection node address. Exemplarily, the intranet router is pre-configured with the address of the intranet management node, and by comparing the collection node address with the pre-configured address of the intranet management node to see if they are consistent, it is determined whether the collection node address is the address of the intranet management node.

[0102] If the collection node address is not the address of the intranet management node, that is, the collection node address is the address of a non-intranet collection node, then in order to protect the IPv6 address, the real IPv6 address needs to be converted according to the first conversion method or obfuscated according to a specific algorithm, and the converted or obfuscated IPv6 address is sent to the collection node address, that is, the converted or obfuscated IPv6 address is sent to the non-intranet collection node corresponding to the collection node address. In this embodiment, the intranet router sends a second data packet to the intranet management node, and instructs the intranet management node to send the above-mentioned converted or obfuscated IPv6 address to the collection node address through the second data packet.

[0103] In some optional embodiments of the present invention, the method further comprises: if the collection node address is the address of an intranet management node, sending a real IPv6 address to the collection node address.

[0104] In this embodiment, if the collection node address is the address of the intranet management node, that is, the collection node address is the address of the intranet collection node, then the real IPv6 address can be directly sent to the collection node address, that is, the real IPv6 address can be directly sent to the intranet management node corresponding to the collection node address.

[0105] In some optional embodiments, if the collection node address is not the address of the intranet management node, the method further includes: the intranet router saving the collection node address and discarding the first data packet.

[0106] Based on the above embodiment, the embodiment of the present invention further provides an address protection method, which is applied to an intranet management node. The method includes:

[0107] Step 201: the intranet management node receives a second data packet sent by the intranet router; the second data packet is sent when the intranet router determines that the collection node address in the received first data packet is not the address of the intranet management node; the second data packet includes the collection node address;

[0108] Step 202: Based on the second data packet, the collected IPv6 addresses are converted according to a first conversion method, and the converted IPv6 addresses are sent to the collection node address.

[0109] By adopting the technical solution of the embodiment of the present invention, when the collection node is not an intranet management node, the IPv6 address to be sent to the collection node outside the intranet is converted, and the converted IPv6 address is sent to the collection node outside the intranet, thereby realizing the protection of the IPv6 address, improving the privacy of the IPv6 address, reducing the risk of network asset exposure, and improving the overall security protection of the network.

[0110] In some optional embodiments of the present invention, the method further includes: the intranet router receives a scanning task data packet from a scanner; the scanning task data packet includes the address of a collection node associated with the scanner; if the address of the collection node is not the address of the intranet management node, the destination address in the scanning task data packet is converted according to a second conversion method, and the scanning task data packet after the destination address conversion is forwarded; wherein the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method.

[0111] In this embodiment, the intranet router will receive a scanning task data packet that may come from a non-intranet collection node or an intranet collection node (i.e., an intranet management node), and the destination address in the scanning task data packet is the address of the terminal of the IPv6 address to be scanned. If the collection node is not the intranet management node, that is, the collection node is a non-intranet collection node, then based on the above embodiment, the non-intranet collection node will obtain an IPv6 address after conversion or obfuscation; then after receiving the scanning task data packet, the intranet router performs reverse conversion processing on the destination address in the scanning task data packet, that is, converts the destination address according to a second conversion method opposite to the first conversion method, thereby obtaining a real IPv6 address corresponding to the converted or obfuscated IPv6 address, and further forwards the scanning task data packet according to the real IPv6 address, so that the scanning task data packet can reach the terminal corresponding to the real IPv6 address.

[0112] In some other optional embodiments, the method also includes: the intranet router receives a scanning task data packet from a scanner; the scanning task data packet includes the address of a collection node associated with the scanner; if the address of the collection node is not the address of the intranet management node, a third data packet is sent to the intranet management node, and the third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to a second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method.

[0113] In this embodiment, the intranet router will receive a scanning task data packet that may come from a non-intranet collection node or an intranet collection node (i.e., an intranet management node), and the destination address in the scanning task data packet is the address of the terminal whose IPv6 address is to be scanned. If the collection node is not the intranet management node, i.e., the collection node is a non-intranet collection node, then based on the aforementioned embodiment, the non-intranet collection node will obtain an IPv6 address after conversion or obfuscation; then after receiving the scanning task data packet, the intranet router sends a third data packet to the intranet management node, and through the third data packet, instructs the intranet management node to reversely convert the destination address in the scanning task data packet, i.e., reversely convert the destination address according to the second conversion method, thereby obtaining the real IPv6 address corresponding to the scanning task data packet, and then the scanning task data packet can be sent to the terminal corresponding to the real IPv6 address.

[0114] It should be noted that the scanning task data packet in this embodiment may also be referred to as a data packet or a fourth data packet. The data packet or the fourth data packet corresponds to a scanning task, and the scanning task is used to obtain the IPv6 address of the terminal.

[0115] In some optional embodiments of the present invention, the method further includes: if the collection node is the intranet management node, forwarding the scanning task data packet.

[0116] The address protection method according to the embodiment of the present invention is described below with reference to specific examples.

[0117] Figure 3 The interactive process diagram of the address protection method according to the embodiment of the present invention is as follows Figure 1 ;like Figure 3 As shown, the method includes:

[0118] Step 11 to Step 12: The intranet router receives the RA packet including the collection point address (Collection Point Address), and extracts the collection point address (Collection Point Address) from the RA packet.

[0119] Step 13 to Step 14: The intranet router determines the role and authority of the collection node corresponding to the collection node address, that is, determines whether the collection node address is the address of the intranet management node. If the result of the determination is yes, execute Step 15; if the result of the determination is no, execute Step 16 to Step 18. Specifically:

[0120] Step 15: The intranet router sends the real IPv6 address to the collection node address; that is, the real IPv6 address is sent to the intranet management node corresponding to the collection node address.

[0121] Step 16: The intranet router saves the collection node address and discards the received RA packet.

[0122] Step 17: The intranet router sends a data packet to the intranet management node, instructing the intranet management node to send the IPv6 address converted by certain rules or the IPv6 address obfuscated by a specific algorithm to the collection node address.

[0123] Step 18: The intranet management node sends the IPv6 address converted according to certain rules or the IPv6 address obfuscated by a specific algorithm to the collection node address.

[0124] Figure 4 The interactive process diagram of the address protection method according to the embodiment of the present invention is as follows Figure 2 ;like Figure 4 As shown, the method includes:

[0125] Step 21: The scanner initiates a scan for terminal devices with IPv6 addresses.

[0126] Step 22: The scanner and the corresponding collection node perform scanning linkage.

[0127] Step 23: The intranet router receives the scanning task data packet from the collection node. If the collection node is an intranet management node, the scanning task data packet is directly forwarded.

[0128] Step 24: The intranet router receives the scanning task data packet from the collection node. If the collection node is a non-intranet collection node, the destination address in the scanning task data packet is reversely converted, and the data packet after the destination address conversion is forwarded.

[0129] Step 25: The scanning data packet of the collection node performs subsequent scanning operations according to the routing path.

[0130] Step 26: Obtain the corresponding scanning results.

[0131] The embodiment of the present invention also provides an address protection device. Figure 5 The structure diagram of the address protection device according to the embodiment of the present invention is shown in FIG. Figure 1 ;like Figure 5 As shown, the device includes: a first receiving unit 31, a first processing unit 32 and a first sending unit 33; wherein,

[0132] The first receiving unit 31 is used to receive a first data packet, wherein the first data packet includes a collection node address;

[0133] The first processing unit 32 is used to determine whether the collection node address is the address of the intranet management node;

[0134] The first sending unit 33 is used to send a second data packet to the intranet management node if the first processing unit 32 determines that the collection node address is not the address of the intranet management node, and the second data packet is used to instruct the intranet management node to send the IPv6 address converted and processed according to the first conversion method to the collection node address; the second data packet includes the collection node address.

[0135] In some optional embodiments of the present invention, the first sending unit 33 is further configured to send a real IPv6 address to the collection node address if the first processing unit 32 determines that the collection node address is the address of an intranet management node.

[0136] In some optional embodiments of the present invention, the first receiving unit 31 is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes an address of a collection node associated with the scanner;

[0137] The first processing unit 32 is further configured to convert the destination address in the scanning task data packet according to a second conversion method if the address of the acquisition node is not the address of the intranet management node; the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method;

[0138] The first sending unit 33 is further configured to forward the scan task data packet after the destination address conversion processing.

[0139] In some optional embodiments of the present invention, the first receiving unit 31 is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes an address of a collection node associated with the scanner;

[0140] The first sending unit 33 is also used to send a third data packet to the intranet management node if the address of the collection node is not the address of the intranet management node. The third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

[0141] In some optional embodiments of the present invention, the first sending unit 33 is further configured to forward the scanning task data packet if the collection node is the intranet management node.

[0142] In some optional embodiments of the present invention, the device further comprises a first storage unit, which is used to store the address of the collection node if the address of the collection node is not the address of the intranet management node;

[0143] The first processing unit 32 is further configured to discard the first data packet.

[0144] In an embodiment of the present invention, the first processing unit 32 in the address protection device can be implemented by a central processing unit (CPU), a digital signal processor (DSP), a microcontroller unit (MCU) or a programmable gate array (FPGA) in actual applications; the first receiving unit 31 and the first sending unit 33 in the device can be implemented by a communication module (including: basic communication kit, operating system, communication module, standardized interface and protocol, etc.) and a transceiver antenna in actual applications; the storage unit in the device can be implemented by a memory in actual applications; the first storage unit in the address protection device can be implemented by a memory in actual applications.

[0145] It should be noted that: when the address protection device provided in the above embodiment performs information processing, only the division of the above program modules is used as an example. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the address protection device provided in the above embodiment and the address protection method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0146] The embodiment of the present invention also provides an address protection device. Figure 6 The structure diagram of the address protection device according to the embodiment of the present invention is shown in FIG. Figure 2 ;like Figure 6 As shown, the device includes: a second receiving unit 41, a second processing unit 42 and a second sending unit 43; wherein,

[0147] The second receiving unit 41 is used to receive a second data packet sent by the intranet router; the second data packet is sent when the intranet router determines that the collection node address in the received first data packet is not the address of the intranet management node; the second data packet includes the collection node address;

[0148] The second processing unit 42 is used to convert the collected IPv6 addresses according to the first conversion method based on the second data packet;

[0149] The second sending unit 43 is used to send the converted IPv6 address to the collection node address.

[0150] In some optional embodiments of the present invention, the second receiving unit 41 is further used to receive a third data packet sent by the intranet router; the third data packet is sent when the intranet router determines that the address of the collection node in the received scanning task data packet is not the address of the intranet management node;

[0151] The second processing unit 42 is further used to convert the destination address in the scanning task data packet according to a second conversion method; wherein the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method;

[0152] The second sending unit 43 is further configured to forward the scan task data packet after the destination address conversion processing.

[0153] In an embodiment of the present invention, the second processing unit 42 in the address protection device can be implemented by a CPU, a DSP, an MCU or an FPGA in actual applications; the second receiving unit 41 and the second sending unit 43 in the device can be implemented by a communication module (including: a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna in actual applications.

[0154] It should be noted that: when the address protection device provided in the above embodiment performs information processing, only the division of the above program modules is used as an example. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the address protection device provided in the above embodiment and the address protection method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0155] The embodiment of the present invention also provides an address protection method. Figure 7 The address protection method of the present invention is shown in FIG. Figure 2 ;like Figure 7 As shown, the method includes:

[0156] Step 301: an intranet router receives a first data packet, wherein the first data packet includes a collection node address;

[0157] Step 302: Determine whether the acquisition node address is the address of the intranet management node;

[0158] Step 303: If the collection node address is not the address of the intranet management node, an IPv6 address converted in a first conversion manner is sent to the collection node address.

[0159] In some optional embodiments of the present invention, the method further comprises: if the collection node address is the address of an intranet management node, sending a real IPv6 address to the collection node address.

[0160] In some optional embodiments, the method also includes: the intranet router receives a scanning task data packet from a scanner; the scanning task data packet includes the address of a collection node associated with the scanner; if the address of the collection node is not the address of the intranet management node, the destination address in the scanning task data packet is converted according to a second conversion method, and the scanning task data packet after the destination address conversion is forwarded; wherein the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method.

[0161] In some other optional embodiments, the method also includes: the intranet router receives a scanning task data packet from a scanner; the scanning task data packet includes the address of a collection node associated with the scanner; if the address of the collection node is not the address of the intranet management node, a third data packet is sent to the intranet management node, and the third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to a second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method.

[0162] In some optional embodiments of the present invention, the method further includes: if the collection node is the intranet management node, forwarding the scanning task data packet.

[0163] In some optional embodiments of the present invention, if the collection node address is not the address of the intranet management node, the method further includes: the intranet router saves the collection node address and discards the first data packet.

[0164] The specific implementation of this embodiment can refer to the aforementioned Figure 2 The description of steps 101 to 103 shown in FIG. Figure 2 The difference of the illustrated embodiment is that, in this embodiment, when the collection node address is not the address of the intranet management node, the intranet router converts the IPv6 address according to the first conversion mode and sends the converted IPv6 address to the collection node address.

[0165] Based on the above embodiments, an embodiment of the present invention further provides an address protection device. Figure 8 The structure diagram of the address protection device according to the embodiment of the present invention is shown in FIG. Figure 3 ;like Figure 8 As shown, the device includes: a third receiving unit 51, a third processing unit 52 and a third sending unit 53; wherein,

[0166] The third receiving unit 51 is used to receive a first data packet, wherein the first data packet includes a collection node address;

[0167] The third processing unit 52 is used to determine whether the collection node address is the address of the intranet management node;

[0168] The third sending unit 53 is configured to send the IPv6 address converted in the first conversion manner to the collection node address if the third processing unit 52 determines that the collection node address is not the address of the intranet management node.

[0169] In some optional embodiments of the present invention, the third sending unit 53 is further configured to send a real IPv6 address to the collection node address if the third processing unit 52 determines that the collection node address is the address of an intranet management node.

[0170] In some optional embodiments of the present invention, the third receiving unit 51 is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes an address of a collection node associated with the scanner;

[0171] The third processing unit 52 is further configured to convert the destination address in the scanning task data packet according to a second conversion method if the address of the acquisition node is not the address of the intranet management node, wherein the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method;

[0172] The third sending unit 53 is further used to forward the scanning task data packet after the destination address conversion processing.

[0173] In some optional embodiments of the present invention, the third receiving unit 51 is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes an address of a collection node associated with the scanner;

[0174] The third sending unit 53 is also used to send a third data packet to the intranet management node if the address of the collection node is not the address of the intranet management node. The third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

[0175] In some optional embodiments of the present invention, the third sending unit 53 is further configured to forward the scanning task data packet if the collection node is the intranet management node.

[0176] In some optional embodiments of the present invention, the device further comprises a second storage unit, which is used to store the address of the collection node if the address of the collection node is not the address of the intranet management node;

[0177] The third processing unit 52 is further configured to discard the first data packet.

[0178] In an embodiment of the present invention, the third processing unit 52 in the address protection device can be implemented by a CPU, a DSP, an MCU or an FPGA in actual applications; the third receiving unit 51 and the third sending unit 53 in the device can be implemented by a communication module (including: a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna in actual applications; the second storage unit in the device can be implemented by a memory in actual applications.

[0179] It should be noted that: when the address protection device provided in the above embodiment performs information processing, only the division of the above program modules is used as an example. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the address protection device provided in the above embodiment and the address protection method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0180] An embodiment of the present invention further provides a network device, which may be the intranet router or intranet management node in the aforementioned embodiment. Fig. 9 This is a schematic diagram of the hardware composition structure of a network device according to an embodiment of the present invention. The network device includes a memory 62, a processor 61, and a computer program stored in the memory 62 and executable on the processor 61. When the processor 61 executes the program, the steps of the address protection method according to the embodiment of the present invention applied to an intranet router or an intranet management node are implemented.

[0181] Optionally, the network device further includes one or more network interfaces 63. It is understood that the various components in the network device are coupled together via a bus system 64. It is understood that the bus system 64 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 64 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, the bus system 64 is not described in detail. Fig. 9 Various buses are labeled as bus system 64.

[0182] It can be understood that the memory 62 can be a volatile memory or a non-volatile memory, and can also include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory, a magnetic surface memory, an optical disk, or a compact disc read-only memory (CD-ROM); the magnetic surface memory can be a disk memory or a tape memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM, SyncLink Dynamic Random Access Memory), and direct RAM bus random access memory (DRRAM, Direct Rambus Random Access Memory).The memory 62 described in the embodiments of the present invention is intended to include, but is not limited to, these and any other suitable types of memory.

[0183] The method disclosed in the above embodiment of the present invention can be applied to the processor 61, or implemented by the processor 61. The processor 61 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit in the processor 61 or the instruction in the form of software. The above processor 61 can be a general processor, DSP, or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The processor 61 can implement or execute the methods, steps and logic block diagrams disclosed in the embodiment of the present invention. The general processor can be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the embodiment of the present invention can be directly embodied as a hardware decoding processor to execute, or the hardware and software modules in the decoding processor can be combined to execute. The software module can be located in a storage medium, which is located in the memory 62. The processor 61 reads the information in the memory 62 and completes the steps of the above method in combination with its hardware.

[0184] In an exemplary embodiment, the network device may be implemented by one or more application specific integrated circuits (ASIC), DSP, programmable logic device (PLD), complex programmable logic device (CPLD), field programmable gate array (FPGA), general processor, controller, microcontroller (MCU), microprocessor, or other electronic components to execute the aforementioned method.

[0185] In an exemplary embodiment, the present invention also provides a computer-readable storage medium, such as a memory 62 including a computer program, and the computer program can be executed by a processor 61 of a network device to complete the steps of the aforementioned method. The computer-readable storage medium can be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disk, or CD-ROM; or it can be various devices including one or any combination of the above memories.

[0186] The computer-readable storage medium provided by the embodiment of the present invention stores a computer program thereon, and when the program is executed by a processor, the steps of the address protection method applied in an intranet router or an intranet management node according to the embodiment of the present invention are implemented.

[0187] The methods disclosed in several method embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments.

[0188] The features disclosed in several product embodiments provided in this application can be arbitrarily combined without conflict to obtain new product embodiments.

[0189] The features disclosed in several method or device embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments or device embodiments.

[0190] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.

[0191] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0192] In addition, all functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0193] A person of ordinary skill in the art can understand that: all or part of the steps of implementing the above-mentioned method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium, which, when executed, executes the steps of the above-mentioned method embodiment; and the aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, disks or optical disks.

[0194] Alternatively, if the above-mentioned integrated unit of the present invention is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present invention can be essentially or partly reflected in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, magnetic disks or optical disks.

[0195] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. An address protection method, characterized in that: The method comprises: The intranet router receives a first data packet, wherein the first data packet includes a collection node address; Determine whether the acquisition node address is the address of the intranet management node; If the collection node address is not the address of the intranet management node, sending a second data packet to the intranet management node, the second data packet is used to instruct the intranet management node to send the Internet Protocol version 6 IPv6 address converted according to the first conversion method to the collection node address; the second data packet includes the collection node address; If the collection node address is the address of the intranet management node, a real IPv6 address is sent to the collection node address.

2. The method according to claim 1, characterized in that The method further comprises: The intranet router receives a scan task data packet from a scanner; the scan task data packet includes an address of a collection node associated with the scanner; If the address of the collection node is not the address of the intranet management node, the destination address in the scanning task data packet is converted according to the second conversion method, and the scanning task data packet after the destination address conversion is forwarded; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address after the conversion according to the first conversion method.

3. The method according to claim 1, characterized in that The method further comprises: The intranet router receives a scan task data packet from a scanner; the scan task data packet includes an address of a collection node associated with the scanner; If the address of the collection node is not the address of the intranet management node, a third data packet is sent to the intranet management node, and the third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

4. The method according to claim 2 or 3, characterized in that: The method further comprises: If the collection node is the intranet management node, the scanning task data packet is forwarded.

5. The method according to claim 1, characterized in that If the acquisition node address is not the address of the intranet management node, the method further includes: The intranet router saves the collection node address and discards the first data packet.

6. An address protection method, characterized in that: The method comprises: The intranet management node receives a second data packet sent by the intranet router; the second data packet is sent when the intranet router determines that the collection node address in the received first data packet is not the address of the intranet management node; the second data packet includes the collection node address; if the intranet router determines that the collection node address in the received first data packet is the address of the intranet management node, the real IPv6 address sent by the intranet router is received; The collected IPv6 addresses are converted according to a first conversion method based on the second data packet, and the converted IPv6 addresses are sent to the collection node address.

7. The method according to claim 6, characterized in that The method further comprises: The intranet management node receives a third data packet sent by the intranet router; the third data packet is sent when the intranet router determines that the address of the collection node in the received scanning task data packet is not the address of the intranet management node; The intranet management node converts the destination address in the scanning task data packet according to a second conversion method, and forwards the scanning task data packet after the destination address conversion; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address after the conversion according to the first conversion method.

8. An address protection device, characterized in that: The device comprises: a first receiving unit, a first processing unit and a first sending unit; wherein, The first receiving unit is used to receive a first data packet, wherein the first data packet includes a collection node address; The first processing unit is used to determine whether the acquisition node address is the address of the intranet management node; The first sending unit is used to send a second data packet to the intranet management node if the first processing unit determines that the collection node address is not the address of the intranet management node, the second data packet is used to instruct the intranet management node to send the Internet Protocol version 6 IPv6 address converted and processed according to the first conversion method to the collection node address; the second data packet includes the collection node address; The first sending unit is further configured to send a real IPv6 address to the collection node address if the first processing unit determines that the collection node address is the address of the intranet management node.

9. The device according to claim 8, characterized in that The first receiving unit is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes an address of a collection node associated with the scanner; The first processing unit is further configured to convert the destination address in the scanning task data packet according to a second conversion method if the address of the acquisition node is not the address of the intranet management node; the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method; The first sending unit is further used to forward the scanning task data packet after the destination address conversion processing.

10. The device according to claim 8 or 9, characterized in that The first receiving unit is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes an address of a collection node associated with the scanner; The first sending unit is also used to send a third data packet to the intranet management node if the address of the collection node is not the address of the intranet management node. The third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

11. The device according to claim 9 or 10, characterized in that The first sending unit is further configured to forward the scanning task data packet if the collection node is the intranet management node.

12. The device according to claim 8, characterized in that The device further comprises a first storage unit, for storing the address of the collection node if the address of the collection node is not the address of the intranet management node; The first processing unit is further configured to discard the first data packet.

13. An address protection device, characterized in that: The device comprises: a second receiving unit, a second processing unit and a second sending unit; wherein, The second receiving unit is used to receive a second data packet sent by the intranet router; the second data packet is sent when the intranet router determines that the collection node address in the received first data packet is not the address of the intranet management node; the second data packet includes the collection node address; and is also used to receive the real IPv6 address sent by the intranet router when the intranet router determines that the collection node address in the received first data packet is the address of the intranet management node; The second processing unit is used to convert the collected IPv6 addresses according to the first conversion method based on the second data packet; The second sending unit is used to send the converted IPv6 address to the collection node address.

14. The device according to claim 13, characterized in that The second receiving unit is further used to receive a third data packet sent by the intranet router; the third data packet is sent when the intranet router determines that the address of the collection node in the received scanning task data packet is not the address of the intranet management node; The second processing unit is further used to convert the destination address in the scanning task data packet according to a second conversion method; wherein the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method; The second sending unit is further used to forward the scanning task data packet after the destination address conversion processing.

15. An address protection method, characterized in that: The method comprises: The intranet router receives a first data packet, wherein the first data packet includes a collection node address; Determine whether the acquisition node address is the address of the intranet management node; If the collection node address is not the address of the intranet management node, sending the IPv6 address converted in the first conversion mode to the collection node address; If the collection node address is the address of the intranet management node, a real IPv6 address is sent to the collection node address.

16. The method according to claim 15, characterized in that The method further comprises: The intranet router receives a scan task data packet from a scanner; the scan task data packet includes an address of a collection node associated with the scanner; If the address of the collection node is not the address of the intranet management node, the destination address in the scanning task data packet is converted according to the second conversion method, and the scanning task data packet after the destination address conversion is forwarded; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address after the conversion according to the first conversion method.

17. The method according to claim 15, characterized in that The method further comprises: The intranet router receives a scan task data packet from a scanner; the scan task data packet includes an address of a collection node associated with the scanner; If the address of the collection node is not the address of the intranet management node, a third data packet is sent to the intranet management node, and the third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

18. The method according to claim 16 or 17, characterized in that The method further comprises: If the collection node is the intranet management node, the scanning task data packet is forwarded.

19. The method according to claim 15, characterized in that If the acquisition node address is not the address of the intranet management node, the method further includes: The intranet router saves the collection node address and discards the first data packet.

20. An address protection device, characterized in that: The device comprises: a third receiving unit, a third processing unit and a third sending unit; wherein, The third receiving unit is used to receive a first data packet, wherein the first data packet includes a collection node address; The third processing unit is used to determine whether the acquisition node address is the address of the intranet management node; The third sending unit is used to send the IPv6 address converted in the first conversion mode to the collection node address if the third processing unit determines that the collection node address is not the address of the intranet management node; The third sending unit is further configured to send a real IPv6 address to the collection node address if the third processing unit determines that the collection node address is the address of the intranet management node.

21. The device according to claim 20, characterized in that The third receiving unit is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes an address of a collection node associated with the scanner; The third processing unit is further configured to convert the destination address in the scanning task data packet according to a second conversion method if the address of the acquisition node is not the address of the intranet management node, wherein the second conversion method is a reverse conversion process of the first conversion method; the destination address in the scanning task data packet is an IPv6 address converted according to the first conversion method; The third sending unit is further used to forward the scanning task data packet after the destination address conversion processing.

22. The device according to claim 20, characterized in that The third receiving unit is further used to receive a scanning task data packet from a scanner; the scanning task data packet includes an address of a collection node associated with the scanner; The third sending unit is also used to send a third data packet to the intranet management node if the address of the collection node is not the address of the intranet management node. The third data packet is used to instruct the intranet management node to forward the scanning task data packet after converting the destination address in the scanning task data packet according to the second conversion method; wherein the second conversion method is the reverse conversion process of the first conversion method; the destination address in the scanning task data packet is the IPv6 address converted according to the first conversion method.

23. The device according to claim 21 or 22, characterized in that The third sending unit is further used to forward the scanning task data packet if the collection node is the intranet management node.

24. The device according to claim 20, characterized in that The device further comprises a second storage unit, for storing the address of the collection node if the address of the collection node is not the address of the intranet management node; The third processing unit is further configured to discard the first data packet.

25. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, it implements the steps of the address protection method described in any one of claims 1 to 5; or, when the program is executed by a processor, it implements the steps of the address protection method described in claim 6 or 7; or, when the program is executed by a processor, it implements the steps of the address protection method described in any one of claims 15 to 19.

26. A network device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the address protection method described in any one of claims 1 to 5 are implemented; or, when the processor executes the program, the steps of the address protection method described in claim 6 or 7 are implemented; or, when the processor executes the program, the steps of the address protection method described in any one of claims 15 to 19 are implemented.

Images