Network data processing method and terminal

Abstract

The application discloses a network data processing method and a terminal, which accepts data requests sent by a device node, wherein the data requests comprise an in-out network identifier and a communication protocol; if the in-out network identifier is an out network identifier, the data requests are distributed to protocol blocks corresponding to protocol types according to the protocol types of the communication protocol to obtain data types through analysis; the data requests are distributed to block members corresponding to the data types in the protocol blocks to obtain data analysis results; the data analysis results are processed through preset data processing rules to obtain data processing results, and the data processing results are returned to the device node. The application processes the received data requests by different blocks and block members according to different parts, guarantees the safety of the data processing process, accelerates the efficiency of the data processing, and realizes the expansion of the data processing capacity by only expanding the block members.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of data security, in particular to a network data processing method and terminal. BACKGROUND

[0002] For network data of access equipment, security monitoring is needed to avoid the case that the equipment is maliciously manipulated; the existing usually adds a gateway between the equipment and the public network, intercepts malicious data through the data interception function of the gateway, or intercepts malicious data through the interception tool installed in the equipment such as a firewall, or realizes interception of malicious data by verifying the data of each member through the structure of web3.0.

[0003] Among them, the mode through the gateway or the firewall is to intercept or filter a set target, and cannot further process the data; and the structure of web3.0 includes multiple server nodes (members), and the amount of data to be processed is large when the data permission is directly judged during interaction, which reduces the access efficiency. SUMMARY

[0004] The technical problem to be solved by the present application is to provide a network data processing method and terminal, to realize high-security and flexible network data processing, and to improve the access efficiency of network data.

[0005] In order to solve the above technical problems, one technical solution adopted by the present application is:

[0006] A network data processing method, comprising the steps of:

[0007] receiving a data request sent by an equipment node, wherein the data request comprises an in-out network identifier and a communication protocol;

[0008] if the in-out network identifier is an out-network identifier, distributing the data request to a protocol block corresponding to a protocol type of the communication protocol according to the protocol type to obtain a data type by analysis;

[0009] distributing the data request to a block member corresponding to the data type in the protocol block according to the data type to obtain a data analysis result;

[0010] processing the data analysis result through a preset data processing rule to obtain a data processing result, and returning the data processing result to the equipment node.

[0011] In order to solve the above technical problems, another technical solution adopted by the present application is:

[0012] A network data processing terminal includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it performs the following steps:

[0013] Accept data requests sent by device nodes, the data requests including network entry / exit identifiers and communication protocols;

[0014] If the network entry / exit identifier is an outgoing identifier, then the data request is allocated to the protocol block corresponding to the protocol type according to the protocol type of the communication protocol for analysis to obtain the data type;

[0015] The data request is allocated to the block member corresponding to the data type in the protocol block according to the data type, and the data analysis result is obtained;

[0016] The data analysis results are processed according to preset data processing rules to obtain data processing results, and the data processing results are returned to the device node.

[0017] The beneficial effects of this invention are as follows: After a device node sends a data request, if it is outbound data (i.e., data that needs to be sent to the device node), the protocol type corresponding to the data request is first obtained and assigned to the corresponding protocol block for analysis to obtain the data type. Then, according to the data type, the data request is assigned to the block members to obtain the data analysis results. The analysis process of the received data request is processed by different blocks and block members according to the different parts of the data. While ensuring the security of the data processing process, the efficiency of data processing is accelerated. Moreover, the ability to expand data processing can be achieved simply by expanding the block members. Attached Figure Description

[0018] Figure 1 This is a flowchart illustrating the steps of a network data processing method according to an embodiment of the present invention.

[0019] Figure 2 This is a schematic diagram illustrating the implementation framework of a network data processing method according to an embodiment of the present invention;

[0020] Figure 3 This is another schematic diagram of a network data processing method according to an embodiment of the present invention;

[0021] Figure 4 This is a schematic diagram of the structure of a network data processing terminal according to an embodiment of the present invention;

[0022] Label Explanation:

[0023] 1. A network data processing terminal; 2. A processor; 3. A memory. Detailed Implementation

[0024] To explain in detail the technical content, objectives, and effects of the present invention, the following description is provided in conjunction with the embodiments and accompanying drawings.

[0025] Please refer to Figure 1 A network data processing method, comprising the following steps:

[0026] Accept data requests sent by device nodes, the data requests including network entry / exit identifiers and communication protocols;

[0027] If the network entry / exit identifier is an outgoing identifier, then the data request is allocated to the protocol block corresponding to the protocol type according to the protocol type of the communication protocol for analysis to obtain the data type;

[0028] The data request is allocated to the block member corresponding to the data type in the protocol block according to the data type, and the data analysis result is obtained;

[0029] The data analysis results are processed according to preset data processing rules to obtain data processing results, and the data processing results are returned to the device node.

[0030] As can be seen from the above description, the beneficial effects of the present invention are as follows: After a device node sends a data request, if it is outbound data, that is, data that needs to be sent to the device node, the protocol type corresponding to the data request is first obtained and assigned to the corresponding protocol block for analysis to obtain the data type. Then, according to the data type, the data request is assigned to the block member to obtain the data analysis result. The analysis process of the received data request is processed by different blocks and block members according to the different parts of the data. While ensuring the security of the data processing process, the efficiency of data processing is accelerated. Moreover, the ability to expand data processing can be realized by only expanding the block members.

[0031] Furthermore, the step of allocating the data request to the block member corresponding to the data type in the protocol block according to the data type, and obtaining the data analysis result, includes:

[0032] Retrieve all block members corresponding to the data type;

[0033] The data request is iterated and allocated to the block members. When allocated to a target block member, it is determined whether the data analysis result has been successfully obtained. If so, the step of processing the data analysis result according to the preset data processing rules is executed to obtain the data processing result. Otherwise, the iteration continues.

[0034] If no data analysis results are obtained after the traversal is completed, the data request and the data type corresponding to the data request are recorded in the incomplete record.

[0035] As described above, different data types are assigned to different blocks, and each block contains multiple block members. By traversing the block members to try which member can successfully process the data request, there is no need to establish a separate mapping relationship for searching. This traversal method saves memory storage. Furthermore, if multiple members have configured basic functions, they can be processed quickly, improving data processing efficiency.

[0036] Furthermore, it also includes:

[0037] When new block member registration information is received, retrieve the incomplete data request corresponding to the data type of the new block member from the incomplete record;

[0038] The incomplete data request is assigned to the new block member. It is determined whether the data analysis result has been successfully obtained. If so, the incomplete data request is deleted from the incomplete record, and the step of processing the data analysis result according to the preset data processing rules is executed to obtain the data processing result.

[0039] As described above, incomplete data refers to data that has not yet been processed after all existing blocks have been traversed. Therefore, when a new block member registers, the new block member processes the remaining incomplete data first, and uses the feature that blocks can be expanded by adding new members to enrich the functionality of the block and the data that can be processed.

[0040] Furthermore, after receiving the data request sent by the receiving device node, the process also includes:

[0041] If the network entry / exit identifier is a network entry identifier, then the data request is received directly.

[0042] As described above, outgoing data is data that needs to be sent to device nodes. Therefore, the data needs to be processed according to the requests of the device nodes so that it can be displayed normally in the device nodes and the security of the device nodes can be guaranteed. Incoming data, on the other hand, usually only needs to be saved. Therefore, if the incoming data is received and saved directly and then waited for subsequent detailed processing, the data processing speed will be accelerated.

[0043] Furthermore, the data types include text data types, image data types, and other data types.

[0044] As described above, data types are divided into text, images, and others. Text and images can encompass most data types, so they are processed by blocks with corresponding type processing functions. If a block cannot be processed successfully, it is transferred to the block corresponding to another data type for processing. This greatly improves the system's flexibility and scalability. If the module corresponding to another data type processes the data and obtains text or other data types, it can be transferred back to the corresponding block for processing.

[0045] A network data processing terminal includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it performs the following steps:

[0046] Accept data requests sent by device nodes, the data requests including network entry / exit identifiers and communication protocols;

[0047] If the network entry / exit identifier is an outgoing identifier, then the data request is allocated to the protocol block corresponding to the protocol type according to the protocol type of the communication protocol for analysis to obtain the data type;

[0048] The data request is allocated to the block member corresponding to the data type in the protocol block according to the data type, and the data analysis result is obtained;

[0049] The data analysis results are processed according to preset data processing rules to obtain data processing results, and the data processing results are returned to the device node.

[0050] The beneficial effects of this invention are as follows: After a device node sends a data request, if it is outbound data (i.e., data that needs to be sent to the device node), the protocol type corresponding to the data request is first obtained and assigned to the corresponding protocol block for analysis to obtain the data type. Then, according to the data type, the data request is assigned to the block members to obtain the data analysis results. The analysis process of the received data request is processed by different blocks and block members according to the different parts of the data. While ensuring the security of the data processing process, the efficiency of data processing is accelerated. Moreover, the ability to expand data processing can be achieved simply by expanding the block members.

[0051] Furthermore, the step of allocating the data request to the block member corresponding to the data type in the protocol block according to the data type, and obtaining the data analysis result, includes:

[0052] Retrieve all block members corresponding to the data type;

[0053] The data request is iterated and allocated to the block members. When allocated to a target block member, it is determined whether the data analysis result has been successfully obtained. If so, the step of processing the data analysis result according to the preset data processing rules is executed to obtain the data processing result. Otherwise, the iteration continues.

[0054] If no data analysis results are obtained after the traversal is completed, the data request and the data type corresponding to the data request are recorded in the incomplete record.

[0055] As described above, different data types are assigned to different blocks, and each block contains multiple block members. By traversing the block members to try which member can successfully process the data request, there is no need to establish a separate mapping relationship for searching. This traversal method saves memory storage. Furthermore, if multiple members have configured basic functions, they can be processed quickly, improving data processing efficiency.

[0056] Furthermore, it also includes:

[0057] When new block member registration information is received, retrieve the incomplete data request corresponding to the data type of the new block member from the incomplete record;

[0058] The incomplete data request is assigned to the new block member. It is determined whether the data analysis result has been successfully obtained. If so, the incomplete data request is deleted from the incomplete record, and the step of processing the data analysis result according to the preset data processing rules is executed to obtain the data processing result.

[0059] As described above, incomplete data refers to data that has not yet been processed after all existing blocks have been traversed. Therefore, when a new block member registers, the new block member processes the remaining incomplete data first, and uses the feature that blocks can be expanded by adding new members to enrich the functionality of the block and the data that can be processed.

[0060] Furthermore, after receiving the data request sent by the receiving device node, the process also includes:

[0061] If the network entry / exit identifier is a network entry identifier, then the data request is received directly.

[0062] As described above, outgoing data is data that needs to be sent to device nodes. Therefore, the data needs to be processed according to the requests of the device nodes so that it can be displayed normally in the device nodes and the security of the device nodes can be guaranteed. Incoming data, on the other hand, usually only needs to be saved. Therefore, if the incoming data is received and saved directly and then waited for subsequent detailed processing, the data processing speed will be accelerated.

[0063] Furthermore, the data types include text data types, image data types, and other data types.

[0064] As described above, data types are divided into text, images, and others. Text and images can encompass most data types, so they are processed by blocks with corresponding type processing functions. If a block cannot be processed successfully, it is transferred to the block corresponding to another data type for processing. This greatly improves the system's flexibility and scalability. If the module corresponding to another data type processes the data and obtains text or other data types, it can be transferred back to the corresponding block for processing.

[0065] The network data processing method described above is applicable to the processing of incoming and outgoing data networks, especially in systems with large data volumes, diverse data types, and the need for expansion. Specific embodiments are described below.

[0066] Please refer to Figure 1 Embodiment 1 of the present invention is as follows:

[0067] A network data processing method includes the following steps:

[0068] Registering blocks and block members: A block can be added to the blockchain and become a link in the blockchain. Block members are registered in the block to ensure the security of objects participating in the data processing process.

[0069] S1. Receive a data request sent by a device node, the data request including network entry / exit identifier and communication protocol;

[0070] S2. If the network entry / exit identifier is a network exit identifier, then execute S3; otherwise, execute S6.

[0071] In one optional implementation, the header of the data request includes either an outgoing network identifier or an incoming network identifier, the protocol type of the communication protocol, etc., wherein the protocol type includes transport protocols such as UDP and TCP.

[0072] S3. Based on the protocol type of the communication protocol, the data request is allocated to the protocol block corresponding to the protocol type for analysis to obtain the data type;

[0073] In one alternative implementation, the data type includes text data type, image data type, and other data types;

[0074] S4. Allocate the data request to the block member corresponding to the data type in the protocol block according to the data type, and obtain the data analysis results, including:

[0075] S41. Obtain all block members corresponding to the data type;

[0076] S42. The data request is traversed and allocated to the block members. When allocated to the target block member, it is determined whether the data analysis result has been successfully obtained. If yes, S5 is executed; otherwise, the traversal continues.

[0077] The target block member receives a data request and processes it according to its own data processing rules. For example, if the data type is other data and the target block member's data processing rule is to decrypt the data request using its private key, then upon receiving the data request, it will attempt to decrypt it using the private key stored in its own memory. If the decryption is successful, the data analysis result is successfully obtained; otherwise, the process continues. The target block member may also include functions such as data encryption, data obfuscation, and data repair.

[0078] In one optional implementation, if the data type is other data type, the obtained data analysis result is used as the initial result for another data type judgment. If it belongs to the text data type or image data type, the initial result is executed again according to the data type judgment result; otherwise, S5 is executed.

[0079] If the block member corresponding to other data types obtains the data analysis result and the result belongs to the image data type or text data type, it means that the analysis has not been completed. It needs to be transferred back to the block member corresponding to the image data type or text data type for further processing. For example, if the data request is encrypted, it needs to be decrypted before the data request content can be obtained. The block member corresponding to other data types can first perform the decryption process to ensure that the data request can be thoroughly analyzed and improve the accuracy of the processing result.

[0080] S43. If no data analysis results are obtained after the traversal is completed, the data request and the data type corresponding to the data request are recorded in the incomplete record.

[0081] S5. Process the data analysis results according to preset data processing rules to obtain data processing results, and return the data processing results to the device node;

[0082] In one optional implementation, the data processing rules include blocking or replacing sensitive words, blacklisting data according to a preset blacklist or according to preset rules, and recording unknown data.

[0083] S6. If the network entry / exit identifier is a network entry identifier, then the data request is received directly;

[0084] In one alternative implementation, it further includes:

[0085] S71. When new block member registration information is received, obtain the incomplete data request corresponding to the data type of the new block member in the incomplete record;

[0086] S72. Assign the incomplete data request to the new block member, determine whether the data analysis result has been successfully obtained. If yes, delete the incomplete data request from the incomplete record and execute S5; otherwise, continue to save the incomplete data request; that is, retain the incomplete data and wait for a member that can be processed to appear.

[0087] Please refer to Figures 2-3 Embodiment two of the present invention is as follows:

[0088] A network data processing device includes a device node, a communication block, a detection block, a protocol block, a protocol data member block, and a data processing block.

[0089] A device node serves as the unique identifier for software / hardware members within the same device to access other device members. When a software / hardware member in device A accesses device B, device A is considered a device node.

[0090] The communication block is used to receive data requests from device nodes and send them to the detection block. The communication block can send data requests as soon as it receives them from each device node, or it can package the data requests received from device nodes within a preset time period into a single packet and send them. If the packet sending fails, the individual sending method will be used instead. If the packet sending is successful, it can reduce the number of interactions and thus speed up the data transmission efficiency. However, due to bandwidth and other factors, the amount of data after packaging is large, and the risk of problems during transmission will also increase accordingly. Therefore, if the sending fails, it is still necessary to switch to the method of sending one by one to reduce the occurrence of failures.

[0091] The device nodes and communication blocks work together to complete step S1 in Example 1.

[0092] The detection block is used to detect whether the data request is outbound or inbound. If it is inbound, it is saved directly; if it is outbound, it is allocated to the corresponding protocol block according to the protocol type of the communication protocol of the data request. That is, it is used to execute steps S2 and S6 of Embodiment 1.

[0093] In one alternative implementation, the incoming data is directly filtered in the detection block. That is, the filtering rules for incoming data can be configured in the detection block, such as the replacement of blocked words and sensitive words. When the data is detected and enters the network, the filtering is performed directly and the filtered data is saved.

[0094] The protocol block is used for distribution processing according to the communication protocol and for analyzing data types. It sends data requests to the corresponding protocol data member blocks based on the data type, which includes text, image, and other data types. Specifically, it executes step S3 in Embodiment 1 and works with the protocol data member blocks to complete step S4.

[0095] The protocol data member block is used to process data requests with a data structure that matches its own and to send the data analysis results to the data processing block. For example, if the instant messaging data is text data, the corresponding protocol data member block is responsible for decrypting it and sending the obtained data analysis results to the data processing block. The protocol data member block can add new protocol data members to perform functions such as identification, detection, and analysis of protocol data. That is, the protocol data member block is used to execute steps S41-S3 and S7 in Embodiment 1.

[0096] The data processing block is used to receive the data analysis results sent by the protocol data member block, process the data analysis results according to the stored processing rules to obtain the processing result, and return the processing result to the device node, that is, to execute step S5 of the first embodiment.

[0097] Please refer to Figure 4 Embodiment 3 of the present invention is as follows:

[0098] A network data processing terminal 1 includes a processor 2, a memory 3, and a computer program stored in the memory 3 and executable on the processor 2. When the processor 2 executes the computer program, it implements the steps in Embodiment 1.

[0099] In summary, this invention provides a network data processing method and terminal that captures and processes data during network outbound and inbound processes, while simultaneously intercepting data according to preset rules to filter harmful and potentially high-risk information, ensuring data security during inbound and outbound processes. Furthermore, the method described in this invention performs secondary verification of data during network outbound and inbound processes to guarantee data security. Additionally, a data processing workflow is established, enabling the matching of data of different protocol types and data types to different block members for processing, improving block processing efficiency in big data scenarios.

[0100] The above description is merely an embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent modifications made based on the content of the present invention specification and drawings, or direct or indirect applications in related technical fields, are similarly included within the patent protection scope of the present invention.

Claims

1. A network data processing method, characterized by, The method comprises the steps of: receiving a data request sent by a device node, wherein the data request comprises an in-out network identifier and a communication protocol; if the in-out network identifier is an out-network identifier, distributing the data request into a protocol block corresponding to a protocol type of the communication protocol according to the protocol type to obtain a data type; distributing the data request into a block member corresponding to the data type in the protocol block according to the data type to obtain a data analysis result; processing the data analysis result through a preset data processing rule to obtain a data processing result, and returning the data processing result to the device node; the step of distributing the data request into the block member corresponding to the data type in the protocol block according to the data type to obtain the data analysis result comprises the steps of: obtaining all block members corresponding to the data type; iteratively distributing the data request into the block members, and when the data request is distributed into a target block member, judging whether the data analysis result is successfully obtained; if yes, executing the step of processing the data analysis result through the preset data processing rule to obtain the data processing result; otherwise, continuing the iteration; if the data analysis result is not obtained after the iteration is completed, recording the data request and the data type corresponding to the data request in an unfinished record; the method further comprises the steps of: when receiving new block member registration information, obtaining an unfinished data request corresponding to a data type of the new block member in the unfinished record; distributing the unfinished data request into the new block member, and judging whether the data analysis result is successfully obtained; if yes, deleting the unfinished data request from the unfinished record, and executing the step of processing the data analysis result through the preset data processing rule to obtain the data processing result.

2. The network data processing method of claim 1, wherein, after the step of receiving the data request sent by the device node, the method further comprises the step of: if the in-out network identifier is an in-network identifier, directly accepting the data request.

3. The network data processing method of claim 1, wherein, the data type comprises a text data type, an image data type and other data types.

4. A network data processing terminal comprising a memory, a processor, and a computer program stored on said memory and executable on said processor, characterized in that, when the processor executes the computer program, the following steps are implemented: receiving a data request sent by a device node, wherein the data request comprises an in-out network identifier and a communication protocol; if the in-out network identifier is an out-network identifier, distributing the data request into a protocol block corresponding to a protocol type of the communication protocol according to the protocol type to obtain a data type; distributing the data request into a block member corresponding to the data type in the protocol block according to the data type to obtain a data analysis result; processing the data analysis result through a preset data processing rule to obtain a data processing result, and returning the data processing result to the device node; the step of distributing the data request into the block member corresponding to the data type in the protocol block according to the data type to obtain the data analysis result comprises the steps of: obtaining all block members corresponding to the data type; The data request is distributed to the block members, and when distributed to a target block member, it is determined whether the data analysis result is successfully obtained; if yes, the data analysis result is processed according to a preset data processing rule to obtain a data processing result; otherwise, the distribution is continued; If the data analysis result is not obtained after the distribution is completed, the data request and the data type corresponding to the data request are recorded in an unfinished record; further comprising: When receiving new block member registration information, the unfinished data request corresponding to the data type of the new block member in the unfinished record is obtained; The unfinished data request is distributed to the new block member, and it is determined whether the data analysis result is successfully obtained; if yes, the unfinished data request is deleted from the unfinished record, and the data analysis result is processed according to a preset data processing rule to obtain a data processing result.

5. A network data processing terminal according to claim 4, wherein, The receiving device node further comprises: If the access network identifier is an access identifier, the data request is directly accepted.

6. A network data processing terminal according to claim 4, wherein, The data type includes a text data type, an image data type and other data types.

Images