Data routing control method and control apparatus, data routing method and node device

Abstract

The present disclosure relates to the technical field of network, and particularly provides a data routing control method and device, a data routing method and node device. The data routing control method comprises: obtaining one or more of node device information, network state information and user demand information of one or more node devices in a communication network; determining routing strategy information of user data based on at least the node device information, the network state information and the user demand information; sending the routing strategy information to one or more forwarding node devices of the one or more node devices; controlling the user data to pass through the one or more forwarding node devices, and adding node label information to the user data at each forwarding node device; and verifying a routing path of the user data based on at least the node label information and the routing strategy information. By adding the node label information to the user data, consistency verification of the entire routing path and real-time regulation of the path are realized.

Description

Technical Field

[0001] This disclosure relates to the field of network technology, and in particular to a data routing control method and control device, a data routing method and node device. Background Technology

[0002] Routing security has always been a critical security issue in the internet field. Internet infrastructure relies on routers and routing protocols to transmit data, making routing security essential for network reliability and overall security. The severity of routing security issues lies in the fact that once problems such as route tampering, hijacking, or misconfiguration occur, attackers can manipulate network data paths, leading to serious consequences such as data breaches, service interruptions, man-in-the-middle attacks, network partitioning, and malicious traffic injection. Besides the inherent vulnerabilities of routing devices themselves, dynamically occurring network attacks also seriously threaten the security of routing systems. Therefore, as network operators, in addition to ensuring the operational security and routing reachability of the basic network, it is crucial to provide users with security capabilities dynamically and on demand, based on network and attack conditions.

[0003] Current routing protocols can only guarantee the security of route reachability, that is, ensure that reachable routes are not replaced by unreachable routes, but cannot perform consistency verification between the route actually forwarded and the route path intended to be forwarded. Summary of the Invention

[0004] This disclosure is made in view of the above-mentioned problems. This disclosure provides a data routing control method and control apparatus, a data routing method, and a node device.

[0005] According to one aspect of this disclosure, a data routing control method is provided, comprising: acquiring one or more of node device information, network status information, and user demand information from one or more node devices in a communication network; determining routing policy information for user data based at least on the node device information, network status information, and user demand information; sending the routing policy information to one or more forwarding node devices among the one or more node devices; controlling the user data to pass through one or more forwarding node devices, and controlling the addition of node label information to the user data at each forwarding node device; and verifying the routing path of the user data based at least on the node label information and the routing policy information.

[0006] Furthermore, according to one aspect of the data routing control method of this disclosure, the node label information indicates one of the following: the forwarding node device provides forwarding services for user data, the forwarding node device provides security services for user data, and the forwarding node device provides both forwarding services and security services for user data.

[0007] Furthermore, the data routing control method according to one aspect of this disclosure also includes: acquiring and updating node device information while controlling user data to pass through one or more forwarding node devices.

[0008] Furthermore, according to one aspect of the data routing control method of this disclosure, verifying the routing path of user data based at least on node label information and routing policy information includes: after the user data passes through the last forwarding node device, performing verification of the routing path of the user data based at least on node label information and routing policy information, and generating a routing report.

[0009] Furthermore, according to one aspect of the data routing control method of this disclosure, the routing path of user data is verified based at least on node label information and routing policy information, including: when user data arrives at each forwarding node device, verifying the routing path of user data based on node label information and routing policy information; if the verification is successful, forwarding the user data via the forwarding node device; and if the verification fails, updating the routing policy information of user data based at least on current node device information, network status information, and user demand information, and sending the updated routing policy information to the next forwarding node device.

[0010] According to another aspect of this disclosure, a data routing method is provided, comprising: receiving routing policy information for user data determined based on at least node device information, network status information, and user demand information; forwarding the user data based on the routing policy information; and adding node label information to the user data based on the routing policy information, wherein the node label information indicates providing forwarding services for the user data, providing security services for the user data, and one of providing forwarding services and security services for the user data.

[0011] According to another aspect of this disclosure, a data routing control apparatus is provided, including a controller unit and a verifier unit. The controller unit is configured to include an information acquisition subunit, configured to acquire one or more of node device information, network status information, and user demand information from one or more node devices in a communication network; a routing policy determination subunit, configured to determine routing policy information for user data based at least on the node device information, network status information, and user demand information, and send the routing policy information to one or more forwarding node devices among the one or more node devices to control the user data to pass through one or more forwarding node devices, and to control the addition of node label information to the user data at each forwarding node device; and a verifier unit is configured to verify the routing path of the user data based at least on the node label information and the routing policy information.

[0012] According to another aspect of this disclosure, a data routing node device is provided, comprising: a routing policy receiving unit configured to receive routing policy information for user data determined based at least on node device information, network status information, and user demand information; a user data forwarding unit configured to forward user data based on the routing policy information; and a node tag information adding unit configured to add node tag information to the user data, wherein the node tag information indicates one of the following: the data routing node device provides forwarding services for user data, the data routing node device provides security services for user data, and the data routing node device provides both forwarding services and security services for user data.

[0013] According to another aspect of this disclosure, an electronic device is provided, comprising: a memory for storing computer-readable instructions; and a processor for executing the computer-readable instructions, causing the electronic device to perform the data routing control method or data routing method as described above.

[0014] According to another aspect of this disclosure, a computer program product is provided, including a computer program that, when executed by a processor, implements the data routing control method or data routing method as described above.

[0015] As will be described in detail below, the data routing control method and control device, data routing method and node device according to embodiments of the present disclosure determine user data routing policy information based at least on node device information, network status information and user demand information, send the routing policy information to one or more forwarding node devices among one or more node devices, control user data to pass through one or more forwarding node devices, control the addition of node label information to user data on each forwarding node device, and verify the routing path of user data based at least on node label information and routing policy information, thereby realizing consistency verification of the entire routing path and real-time control of the path.

[0016] It should be understood that both the foregoing general description and the following detailed description are exemplary and intended to provide further illustration of the claimed technology. Attached Figure Description

[0017] The above and other objects, features, and advantages of this disclosure will become more apparent from the more detailed description of the embodiments thereof in conjunction with the accompanying drawings. The drawings are provided to further illustrate the embodiments of this disclosure and form part of the specification. They are used together with the embodiments of this disclosure to explain the disclosure and do not constitute a limitation thereof. In the drawings, the same reference numerals generally represent the same components or steps.

[0018] Figure 1This is a schematic diagram of the routing architecture of an application according to an embodiment of this disclosure.

[0019] Figure 2 This is a flowchart illustrating a data routing control method according to an embodiment of the present disclosure.

[0020] Figure 3 This is a flowchart illustrating a data routing method according to an embodiment of the present disclosure.

[0021] Figure 4 This is a schematic diagram illustrating the flow of control information in a routing architecture according to an embodiment of the present disclosure.

[0022] Figure 5 This is a schematic diagram illustrating the flow of data information in a routing architecture according to an embodiment of the present disclosure.

[0023] Figure 6 This is a block diagram illustrating a data routing control device according to an embodiment of the present disclosure.

[0024] Figure 7 This is a block diagram illustrating a data routing node device according to an embodiment of the present disclosure.

[0025] Figure 8 This is a hardware block diagram illustrating an electronic device according to an embodiment of the present disclosure.

[0026] Figure 9 This is a schematic diagram illustrating a computer program product according to an embodiment of the present disclosure. Detailed Implementation

[0027] To make the objectives, technical solutions, and advantages of this disclosure more apparent, exemplary embodiments according to this disclosure will now be described in detail with reference to the accompanying drawings. Obviously, the described embodiments are merely some embodiments of this disclosure, and not all embodiments of this disclosure. It should be understood that this disclosure is not limited to the exemplary embodiments described herein.

[0028] First, refer to Figure 1 Describe the routing architecture of the application according to embodiments of this disclosure.

[0029] like Figure 1As shown, the data routing control method and data routing method routing architecture according to embodiments of this disclosure include a controller unit 10, a verifier unit 20, and a node device 30. In one embodiment of this disclosure, the controller unit 10 and the verifier unit 20 may be implemented in a cloud control device, and the node device 30 may be a router device. In another embodiment of this disclosure, the controller unit 10 is implemented in a cloud control device, and the verifier unit 20 and the node device 30 may be implemented as router devices. It should be understood that the specific implementation and physical location of the controller unit 10, the verifier unit 20, and the node device 30 are not limiting, as long as the routing architecture including the controller unit 10, the verifier unit 20, and the node device 30 can implement the data routing control method and data routing method of this disclosure. Hereinafter, the data routing control method and data routing method implemented in the routing architecture according to embodiments of this disclosure, as well as the flow of control information and data information in the data routing control method and data routing method, will be described in further detail with reference to the accompanying drawings.

[0030] Figure 2 This is a flowchart illustrating a data routing control method according to an embodiment of the present disclosure. Figure 3 This is a flowchart illustrating a data routing method according to an embodiment of the present disclosure. Figure 4 This is a schematic diagram illustrating the flow of control information in a routing architecture according to an embodiment of the present disclosure. Figure 5 This diagram illustrates the flow of data information within a routing architecture according to an embodiment of this disclosure. The data routing control method according to an embodiment of this disclosure is described in reference to... Figure 1 The controller unit 10 and the verifier unit 20 shown can operate independently or collaboratively. The data routing method according to embodiments of this disclosure is described in reference... Figure 1 The node device 30 shown is complete.

[0031] like Figure 2 As shown, the data routing control method according to an embodiment of this disclosure includes the following steps.

[0032] In step S201, one or more of the following are obtained: node device information, network status information, and user requirement information of one or more node devices in the communication network.

[0033] In one embodiment of this disclosure, node device information includes node device health information, such as information indicating the completeness of the node device's routing table, whether the node device is available, and whether there are known vulnerabilities. Node device information also includes information about the node device's ability to provide security services, such as available firewall information. Node device information also includes the node device's own device information, such as manufacturer and geographical location. Network status information includes, for example, information indicating the current network load and network cost-effectiveness. User requirement information includes, for example, information indicating the user data transmission requirements, such as the allowed latency, required bandwidth, and security requirements, including, for example, the required security level for the user data and whether the user data needs firewall protection.

[0034] In one embodiment of this disclosure, while controlling user data to pass through one or more forwarding node devices, node device information is acquired and updated. Each time node device information is acquired, it is stored in the controller unit 10, using the node device's ID as a unique identifier. The collected node information is sorted according to timestamps, with the latest node information overwriting the previous node information.

[0035] In such Figure 4 In the schematic diagram of the control information flow of the routing architecture shown, node information is transmitted from node device 30 to controller unit 10.

[0036] In step S202, the routing policy information for user data is determined based at least on node device information, network status information, and user demand information.

[0037] In one embodiment of this disclosure, routing policy information includes, for example, instructions for user data to be forwarded in one or more forwarding node devices among one or more node devices in a network, as well as node label information rules and path verification rules at one or more forwarding node devices.

[0038] In step S203, routing policy information is sent to one or more forwarding node devices among one or more node devices.

[0039] In such Figure 4 In the schematic diagram of the control information flow of the routing architecture shown, the routing policy information is transmitted from the controller unit 10 to the node device 30.

[0040] In step S204, the user data is controlled to pass through one or more forwarding node devices, and node tag information is added to the user data at each forwarding node device.

[0041] In one embodiment of this disclosure, the node tag information indicates one of the following: the forwarding node device provides forwarding services for user data, the forwarding node device provides security services for user data, and the forwarding node device provides both forwarding and security services for user data.

[0042] In such Figure 5 In the schematic diagram of the control information flow in the routing architecture shown, when user data passes through a forwarding node device and that forwarding node device only performs forwarding services on user data, node label information is added to the user data, such as POT(FF1), POT(FF2), etc.; when user data passes through a forwarding node device and that forwarding node device only performs security services on user data, node label information is added to the user data, such as POT(SF1), POT(SF2), etc.; if the same forwarding node device performs both forwarding services and security services on user data, node label information is added to the user data, such as POT(FF, SF).

[0043] In step S205, the routing path of the user data is verified based at least on the node label information and the routing policy information.

[0044] In such Figure 4 In the schematic diagram of the control information flow of the routing architecture shown, the routing path is transmitted from node device 30 to verifier unit 20.

[0045] In one embodiment of this disclosure, after user data passes through the last forwarding node device, the routing path of the user data is verified based at least on node label information and routing policy information, and a routing report is generated. Verifying the routing path of the user data can be achieved, for example, by comparing the routing path transmitted from node device 30 to verifier unit 20 with the routing path indicated by the routing policy information to determine whether the user data is forwarded according to the planned path. That is, in this case, no real-time intervention is made in the forwarding process; instead, path verification is performed after reaching the final forwarding destination, and a routing report is generated for use by the user equipment. The user equipment can further determine the processing of the received user data based on the routing report. For example, if the routing report indicates a deviation between the actual path and the planned path, and a risky forwarding node device exists in the actual path, the user equipment can discard the user data and request the sender to retransmit it.

[0046] In another embodiment of this disclosure, when user data arrives at each forwarding node device, the routing path of the user data is verified based on node label information and routing policy information. Specifically, if the verification passes, the user data is forwarded via the forwarding node device; if the verification fails, the routing policy information of the user data is updated based at least on the current node device information, network status information, and user demand information, and the updated routing policy information is sent to the next forwarding node device. In other words, in this case, the forwarding path is intervened in real time during the data routing process, and when there is a forwarding path deviation, the routing policy is adjusted according to the current node device information, network status information, and user demand information, thereby ensuring that the user data ultimately reaches the user device in a secure and efficient manner.

[0047] like Figure 3 As shown, the data routing method according to an embodiment of this disclosure includes the following steps.

[0048] In step S301, routing policy information for user data determined based on at least node device information, network status information, and user demand information is received.

[0049] In one embodiment of this disclosure, the routing policy information is, for example, as described above. Figure 2 The steps S201 to S202 generated.

[0050] In step S302, user data is forwarded based on routing policy information.

[0051] In one embodiment of this disclosure, routing policy information includes, for example, instructions for user data to be forwarded in one or more forwarding node devices among one or more node devices in a network, as well as node label information rules and path verification rules at one or more forwarding node devices.

[0052] In step S303, node label information is added to the user data based on the routing policy information.

[0053] In one embodiment of this disclosure, the node tag information indicates one of the following: providing forwarding services for user data, providing security services for user data, and providing both forwarding and security services for user data.

[0054] Figure 6 This is a block diagram illustrating a data routing control device according to an embodiment of the present disclosure. Figure 6 As shown, the data routing control device 60 according to an embodiment of this disclosure includes a controller unit 601 and a verifier unit 602. Those skilled in the art will readily understand that these unit modules can be implemented individually in hardware, individually in software, or in combination thereof in various ways, and this disclosure is not limited to any one of them.

[0055] Specifically, the controller unit 601 is configured to include an information acquisition subunit 6011 and a routing policy determination subunit 6012. More specifically, the information acquisition subunit 6011 is configured to acquire one or more of the following: node device information, network status information, and user demand information from one or more node devices in the communication network; the routing policy determination subunit 6012 is configured to determine routing policy information for user data based at least on the node device information, network status information, and user demand information, and send the routing policy information to one or more forwarding node devices among the one or more node devices to control the user data to pass through one or more forwarding node devices, and to control the addition of node tag information to the user data at each forwarding node device.

[0056] Verifier unit 602 is configured to verify the routing path of user data based at least on node label information and routing policy information. Specifically, in one embodiment of this disclosure, after user data passes through the last forwarding node device, verifier unit 602 performs routing path verification of the user data based at least on node label information and routing policy information, and generates a routing report. In another embodiment of this disclosure, when user data arrives at each forwarding node device, verifier unit 602 performs routing path verification of the user data based on node label information and routing policy information. Specifically, if verification passes, the user data is forwarded via the forwarding node device; if verification fails, the routing policy information of the user data is updated based at least on the current node device information, network status information, and user demand information, and the updated routing policy information is sent to the next forwarding node device.

[0057] Figure 7 This is a block diagram illustrating a data routing node device according to an embodiment of the present disclosure. Figure 7 As shown, the data routing node device 70 according to an embodiment of this disclosure includes a routing policy receiving unit 701, a user data forwarding unit 702, and a node label information adding unit 703. Those skilled in the art will readily understand that these unit modules can be implemented individually in hardware, individually in software, or in combination thereof in various ways, and this disclosure is not limited to any one of them.

[0058] The routing policy receiving unit 701 is configured to receive routing policy information based on user data determined at least based on node device information, network status information, and user demand information.

[0059] User data forwarding unit 702 is configured to forward user data based on routing policy information.

[0060] The node tag information adding unit 703 is configured to add node tag information to user data, wherein the node tag information indicates one of the following: the data routing node device provides forwarding services for user data, the data routing node device provides security services for user data, and the data routing node device provides both forwarding services and security services for user data.

[0061] Figure 8 This is a hardware block diagram illustrating an electronic device 800 according to an embodiment of the present disclosure. The electronic device 800 according to an embodiment of the present disclosure includes at least a processor and a memory for storing computer-readable instructions. When the computer-readable instructions are loaded and executed by the processor, the processor performs the data routing control method or data routing method as described above.

[0062] Figure 8 The illustrated electronic device 800 specifically includes a central processing unit (CPU) 801, a graphics processing unit (GPU) 802, and a main memory 803. These units are interconnected via a bus 804. The CPU 801 and / or GPU 802 can function as the aforementioned processor, and the main memory 803 can function as the aforementioned memory storing computer-readable instructions. Furthermore, the electronic device 800 may also include a communication unit 805, a storage unit 806, an output unit 807, an input unit 808, and an external device 809, all of which are also connected to the bus 804.

[0063] Figure 9 This is a schematic diagram illustrating a computer program product according to an embodiment of the present disclosure. Figure 9 As shown, a computer program product 900 according to an embodiment of this disclosure stores a computer program 901. When the computer program 901 is run by a processor, it executes a data routing control method or a data routing method described with reference to the above figures. The computer program product includes, but is not limited to, volatile memory and / or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and / or cache memory. The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, optical disk, magnetic disk, etc.

[0064] The data routing control method and control device, data routing method and node device according to embodiments of the present disclosure have been described above with reference to the accompanying drawings. By determining routing policy information for user data based at least on node device information, network status information, and user demand information, the routing policy information is sent to one or more forwarding node devices among one or more node devices. The user data is controlled to pass through one or more forwarding node devices, and node label information is added to the user data at each forwarding node device. The routing path of the user data is verified based at least on the node label information and the routing policy information, thereby realizing consistency verification of the entire routing path and real-time control of the path.

[0065] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this disclosure.

[0066] The basic principles of this disclosure have been described above with reference to specific embodiments. However, it should be noted that the advantages, benefits, and effects mentioned in this disclosure are merely examples and not limitations, and should not be considered as essential features of each embodiment of this disclosure. Furthermore, the specific details disclosed above are for illustrative and facilitative purposes only, and are not limitations. These details do not limit the scope of this disclosure to the necessity of employing the aforementioned specific details for implementation.

[0067] The block diagrams of devices, apparatuses, devices, and systems disclosed herein are merely illustrative examples and are not intended to require or imply that they must be connected, arranged, or configured in the manner shown in the block diagrams. As those skilled in the art will recognize, these devices, apparatuses, devices, and systems can be connected, arranged, and configured in any manner. Words such as “comprising,” “including,” “having,” etc., are open-ended terms meaning “including but not limited to,” and are used interchangeably with them. The terms “or” and “and” as used herein refer to the terms “and / or,” and are used interchangeably with them unless the context clearly indicates otherwise. The term “such as” as used herein refers to the phrase “such as but not limited to,” and is used interchangeably with it.

[0068] Additionally, as used herein, the “or” used in a list of items beginning with “at least one” indicates a separate list, such that a list of, for example, “at least one of A, B, or C” means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Furthermore, the word “exemplary” does not imply that the described example is preferred or better than other examples.

[0069] It should also be noted that in the systems and methods of this disclosure, the components or steps can be decomposed and / or recombined. These decompositions and / or recombinations should be considered as equivalent solutions to this disclosure.

[0070] Various changes, substitutions, and modifications can be made to the technology described herein without departing from the teachings defined by the appended claims. Furthermore, the scope of the claims of this disclosure is not limited to the specific aspects of the processes, machines, manufactures, events, means, methods, and actions described above. Currently existing or later-developed processes, machines, manufactures, events, means, methods, or actions that perform substantially the same function or achieve substantially the same result as the corresponding aspects described herein can be utilized. Therefore, the appended claims include such processes, machines, manufactures, events, means, methods, or actions within their scope.

[0071] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use this disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of this disclosure. Therefore, this disclosure is not intended to be limited to the aspects shown herein, but rather to be carried out within the widest scope consistent with the principles and novel features disclosed herein.

[0072] The above description has been given for purposes of illustration and description. Furthermore, this description is not intended to limit the embodiments of this disclosure to the forms disclosed herein. Although numerous exemplary aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, alterations, additions, and sub-combinations thereof.

Claims

1. A data routing control method, characterized in that, include: The system acquires multiple data points from one or more node devices in a communication network, including node device information, network status information, and user demand information. The node device information includes health information and security service provision information, and the user demand information includes security requirements. Based at least on the node device information, the network status information, and the user demand information, determine the routing policy information for user data; Send the routing policy information to one or more forwarding node devices among the one or more node devices; The system controls the user data to pass through the one or more forwarding node devices, and controls each forwarding node device to add node tag information to the user data, the node tag information indicating one of the following: the forwarding node device provides forwarding services for the user data, the forwarding node device provides security services for the user data, and the forwarding node device provides both forwarding services and security services for the user data; and When the user data arrives at each of the forwarding node devices, the routing path of the user data is verified based at least on the node label information and the routing policy information; If the verification fails, the routing policy information of the user data is updated based on at least the current node device information, the network status information, and the user demand information, and the updated routing policy information is sent to the next forwarding node device.

2. The data routing control method as described in claim 1, characterized in that, Also includes: While controlling the user data to pass through the one or more forwarding node devices, the node device information is acquired and updated.

3. The data routing control method according to any one of claims 1 to 2, characterized in that, The step of verifying the routing path of the user data based at least on the node label information and the routing policy information includes: After the user data passes through the last forwarding node device, the routing path of the user data is verified based at least on the node label information and the routing policy information, and a routing report is generated.

4. The data routing control method according to any one of claims 1 to 2, characterized in that, The step of verifying the routing path of the user data based at least on the node label information and the routing policy information includes: If the verification is successful, the user data is forwarded via the forwarding node device.

5. A data routing method, characterized in that, include: The system receives routing policy information for user data determined at least based on node device information, network status information, and user demand information, wherein the node device information includes health information and security service provision information, and the user demand information includes security requirements. Based on the routing policy information, the user data is forwarded; and Based on the routing policy information, node label information is added to the user data, wherein the node label information indicates one of the following: providing forwarding services for the user data, providing security services for the user data, and providing both forwarding and security services for the user data; wherein The step of forwarding the user data based on the routing policy information includes: when the user data arrives and the routing path verification for the user data fails, forwarding the user data based on the updated routing policy information, wherein the updated routing policy information is determined based at least on the current node device information, the network status information, and the user demand information.

6. A data routing control device, characterized in that, Includes a controller unit and a verifier unit. The controller unit is configured to include an information acquisition subunit, configured to acquire multiple items from one or more node devices in the communication network, including node device information, network status information, and user demand information, wherein the node device information includes health information and security service provision information, and the user demand information includes security requirements. A routing policy determination subunit is configured to determine routing policy information for user data based at least on the node device information, the network status information, and the user demand information, and to send the routing policy information to one or more forwarding node devices among the one or more node devices to control the user data to pass through the one or more forwarding node devices, and to control each forwarding node device to add node label information to the user data, the node label information indicating one of the following: the forwarding node device provides forwarding services for the user data, the forwarding node device provides security services for the user data, and the forwarding node device provides both forwarding services and security services for the user data; The verifier unit is configured to verify the routing path of the user data at least based on the node label information and the routing policy information when the user data arrives at each of the forwarding node devices; if the verification fails, it updates the routing policy information of the user data at least based on the current node device information, the network status information, and the user demand information, and sends the updated routing policy information to the next forwarding node device.

7. A data routing node device, characterized in that, include: The routing policy receiving unit is configured to receive routing policy information based on user data determined at least based on node device information, network status information, and user demand information, wherein the node device information includes health information and security service provision information, and the user demand information includes security requirements. A user data forwarding unit is configured to forward user data based on the routing policy information, including: when the user data arrives and the routing path verification for the user data fails, forwarding the user data based on the updated routing policy information, wherein the updated routing policy information is determined at least based on the current node device information, the network status information, and the user demand information; and The node tag information adding unit is configured to add node tag information to the user data, wherein the node tag information indicates one of the following: the data routing node device provides forwarding services for the user data, the data routing node device provides security services for the user data, and the data routing node device provides both forwarding services and security services for the user data.

8. An electronic device, characterized in that, include: Memory, used to store computer-readable instructions; as well as A processor for executing the computer-readable instructions, causing the electronic device to perform the data routing control method as claimed in any one of claims 1 to 4 or the data routing method as claimed in claim 5.

9. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the data routing control method according to any one of claims 1 to 4 or the data routing method according to claim 5.

Images