Message processing method and device, electronic equipment, storage medium and computer program product

Abstract

The application provides a message processing method and device, electronic equipment, storage medium and computer program product, relates to the technical field of message detection, and the method comprises the following steps: in response to receiving a first message sent by a client, a second message carrying redirection information is sent to the client; wherein the redirection information is used for instructing the client to alarm and prompt the first message matched by plugging; the redirection information comprises preset parameters; a third message sent by the client is received, and corresponding processing is performed on the third message based on the matching between the third message and the preset parameters; the third message is a message retransmitted based on a user operation on the first message. Through the scheme in the embodiment of the application, the misdiscard of the message can be reduced.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of message detection, and in particular to a message processing method and device, electronic equipment, storage medium and computer program product. BACKGROUND

[0002] In related technologies, after a deep packet inspection (DPI) device is issued with a blocking policy, the DPI device matches a message according to the issued policy after receiving the message, and directly discards the message after a successful match. The DPI device can only perform a discarding operation on the message matched to the blocking policy, and this blocking method is very inflexible, the blocking logic is relatively fixed and single, and is prone to cause false discarding of the message. SUMMARY

[0003] The message processing method and device, electronic equipment, storage medium and computer program product provided by the embodiments of the present application can reduce false discarding of the message.

[0004] The technical solution of the present application is implemented as follows:

[0005] The embodiments of the present application provide a message processing method, comprising:

[0006] In response to receiving a first message sent by a client, a second message carrying redirection information is sent to the client, wherein the redirection information is used to instruct the client to perform alarm prompting on the first message matched by the blocking; the redirection information includes a preset parameter.

[0007] A third message sent by the client is received, and corresponding processing is performed on the third message based on matching of the third message and the preset parameter; the third message is a message re-sent for the first message based on user operation.

[0008] In the above solution, the redirection information includes access location information, address information of a first network service node and the preset parameter; the sending of the second message carrying the redirection information to the client comprises:

[0009] The second message carrying the access location information, the address information of the first network service node and the preset parameter generated based on the first message is sent to the client; wherein the second message is used to instruct the client to access the first network service node based on the second message, and to perform alarm prompting on the first message based on feedback information of the first network service node.

[0010] In the scheme, the preset parameter comprises at least one of the following: a first sub-parameter and a second sub-parameter; the first sub-parameter is formed based on a time of receiving the first message; and the second sub-parameter is formed based on encryption of the time of receiving the first message.

[0011] In the scheme, the method further comprises:

[0012] Based on a matching result of any information in the first message and preset blocking information, a blocking matching hit result is determined for the first message.

[0013] In the scheme, the corresponding processing of the third message based on the matching of the third message and the preset parameter comprises:

[0014] If any information in the third message matches the preset blocking information, and the first parameter in the third message matches the preset parameter, the third message is released.

[0015] In the scheme, the method further comprises:

[0016] The number of the third messages released in a predetermined historical period is counted.

[0017] If the number is greater than a preset threshold, the preset blocking information is deleted.

[0018] Embodiments of the present application also provide a message processing method applied to a client, comprising:

[0019] A first message is sent to a message detection node, and a second message sent by the message detection node in response to the first message is received; wherein the second message comprises redirection information; the redirection information is used to indicate that the client performs alarm prompting on the first message of blocking matching hits; the redirection message comprises a preset parameter;

[0020] Based on user operation, a third message is re-sent to the message detection node for the first message, so that the message detection node performs corresponding processing of the third message based on the matching of the third message and the preset parameter.

[0021] In the scheme, after the first message is sent to the message detection node, and the second message sent by the message detection node in response to the first message is received, the method further comprises:

[0022] Based on address information of a first network service node in the second message, a fourth message is sent to the first network service node, carrying access location information and a preset parameter;

[0023] receive feedback information fed back by the first network service node in response to the fourth message; wherein the feedback information comprises the access location information and the preset parameter; and the feedback information is used to instruct the client to perform alarm prompt on the first message.

[0024] add a first parameter determined based on the preset parameter in the first message to form the third message and send the third message to the message detection node in response to a user operation triggering an active release operation.

[0025] The embodiment of the present application further provides a message processing device applied to a message detection node, comprising:

[0026] a first sending unit configured to send a second message to the client in response to receiving a first message sent by the client, wherein the second message carries redirection information, the redirection information is used to instruct the client to perform alarm prompt on the first message matched by the blocking, and the redirection information comprises a preset parameter;

[0027] a message processing unit configured to receive a third message sent by the client and perform corresponding processing on the third message based on matching between the third message and the preset parameter, wherein the third message is a message re-sent by the client for the first message based on a user operation.

[0028] The embodiment of the present application further provides a message processing device applied to a client, comprising:

[0029] a second sending unit configured to send a first message to a message detection node and receive a second message sent by the message detection node in response to the first message, wherein the second message comprises redirection information, the redirection information is used to instruct the client to perform alarm prompt on the first message matched by the blocking, and the redirection information comprises a preset parameter;

[0030] a second sending unit configured to re-send a third message to the message detection node for the first message based on a user operation, so that the message detection node performs corresponding processing on the third message based on matching between the third message and the preset parameter.

[0031] The embodiment of the present application further provides an electronic device comprising a first memory and a first processor, wherein the first memory stores a computer program capable of running on the first processor, and the first processor implements steps in the method on the message detection node side when running the computer program.

[0032] The embodiment of the present application further provides an electronic device, comprising a second memory and a second processor, the second memory stores a computer program capable of running on the second processor, and the second processor implements the steps in the method on the client side when executing the computer program.

[0033] The embodiment of the present application further provides a computer readable storage medium, which stores a computer program, and the computer program implements the steps in the method on the packet detection node side when being executed by a first processor.

[0034] The embodiment of the present application further provides a computer readable storage medium, which stores a computer program, and the computer program implements the steps in the method on the client side when being executed by a second processor.

[0035] The embodiment of the present application further provides a computer program product, which comprises a computer program, and the computer program implements the steps in the method on the packet detection node side when being executed by a first processor.

[0036] The embodiment of the present application further provides a computer program product, which comprises a computer program, and the computer program implements the steps in the method on the client side when being executed by a second processor.

[0037] In the embodiment of the present application, in response to receiving the first packet sent by the client, a second packet carrying redirection information is sent to the client; wherein the redirection information is used to instruct the client to alarm and prompt the first packet matched by the blocking; the redirection information comprises preset parameters; the third packet sent by the client is received, and corresponding processing is performed on the third packet based on the matching between the third packet and the preset parameters; the third packet is a packet re-sent for the first packet based on user operation. In this way, since the third packet is a packet re-sent for the first packet matched by the blocking based on user operation, the way of performing corresponding processing on the third packet based on the matching between the third packet and the preset parameters reduces the misoccurrence frequency of the discarding operation compared with the scheme of only discarding the blocking packet in the related art, and thus the misdiscarding of the packet can be reduced. BRIEF DESCRIPTION OF DRAWINGS

[0038] Figure 1 An optional flowchart of the packet processing method provided by the embodiment of the present application is shown in the figure;

[0039] Figure 2 An optional flowchart of the packet processing method provided by the embodiment of the present application is shown in the figure;

[0040] Figure 3 An optional flowchart of the packet processing method provided by the embodiment of the present application is shown in the figure;

[0041] Figure 4An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1;

[0042] Figure 5 An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1;

[0043] Figure 6 An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1;

[0044] Figure 7 An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1;

[0045] Figure 8 An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1;

[0046] Figure 9 An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1;

[0047] Figure 10 An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1; Figure 1 ;

[0048] Figure 11 An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1; Figure 1 ;

[0049] Figure 12 An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1; Figure 2 ;

[0050] Figure 13 An optional flowchart of a packet processing method provided by the embodiment of the present application is shown in FIG. 1; Figure 2 . DETAILED DESCRIPTION

[0051] In order to make the objectives, technical solutions and advantages of the present application clearer, the technical solutions of the present application are further described in detail below with reference to the accompanying drawings and embodiments. The described embodiments should not be regarded as limiting the present application, and all other embodiments obtained by those of ordinary skill in the art without making any creative efforts fall within the scope of protection of the present application.

[0052] In the following description, “some embodiments” are described, which describe a subset of all possible embodiments, but it can be understood that “some embodiments” can be the same subset or different subsets of all possible embodiments, and can be combined with each other without conflict.

[0053] If the application file contains similar description of "first / second", the following description is added, in the following description, the term "first / second / third" is only to distinguish similar objects, not to represent the specific order of the object, and it can be understood that "first / second / third" can be exchanged in specific order or sequence as allowed, so that the application described herein can be implemented in an order other than that illustrated or described herein.

[0054] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used in the specification is for the purpose of describing the embodiments of the application only and is not intended to be limiting of the application.

[0055] The application provides a packet processing method, please refer to Figure 1 , an optional flowchart of the packet processing method provided by the application embodiment will be described in combination with Figure 1 illustrated steps:

[0056] S101, in response to receiving the first packet sent by the client, a second packet carrying redirection information is sent to the client; wherein the redirection information is used to instruct the client to alarm prompt the first packet matched by the blocking.

[0057] In the application embodiment, when the client accesses a certain website, the first packet is sent to the server of the certain website, and the first packet is intercepted and received in the network during the process of sending the first packet. The packet detection node determines that the first packet is a packet matched by the blocking, and determines the corresponding redirection information for the first packet. The second packet carrying the redirection information is sent to the client. Wherein, the redirection information is used to instruct the client to alarm prompt the first packet matched by the blocking.

[0058] Wherein, the redirection information can include any one of the following: access address information of the client, access location information, preset parameters and address information of the first network service node. The first network service node is used to instruct the client to alarm prompt the first packet.

[0059] Wherein, the packet detection node can be a deep packet inspection (DPI) device set in the network. In other embodiments, the packet detection node can also be other network nodes with the same function.

[0060] In the embodiments of the present application, after receiving the first message, the message detection node can first match the string information in the first message with the preset blocking information to determine whether to block the matching hit for the first message. The preset blocking information can be any string information set in advance. For example, the preset blocking information is a specified character in a uniform resource locator (URL): http: / / www.***.com.

[0061] S102, receiving the third message sent by the client, and performing corresponding processing on the third message based on the matching of the third message and the preset parameter; the third message is a message re-sent for the first message based on a user operation.

[0062] In the embodiments of the present application, after the client receives the second message, the client performs alarm prompt for the first message under the action of the second message, and re-sends the first message in response to the operation of the user on the alarm prompt box, that is, sends the third message to the message detection node. After the message detection node receives the third message, the message detection node matches the third message with the preset parameter in the redirection information, and processes the third message based on the matching result.

[0063] The processing of the third message based on the matching result can include discarding and passing. For example, if the specified information in the third message matches the preset parameter, the third message is passed. If the specified information in the third message does not match the preset parameter, the third message can be discarded or processed by alarm.

[0064] In some other embodiments, the message detection node can also count the interval duration between the time point of sending the second message and the time point of receiving the third message. If the interval duration is not greater than a preset duration, the process of performing corresponding processing on the third message based on the matching of the third message and the preset parameter is performed. If the interval duration is greater than the preset duration, the third message is determined to be invalid, and the subsequent steps are not performed.

[0065] In the embodiment of the present application, in response to receiving the first message sent by the client, a second message carrying redirection information is sent to the client; wherein the redirection information is used to instruct the client to perform alarm prompt on the first message of the blocking match; the redirection information includes: preset parameters; receiving the third message sent by the client, and performing corresponding processing on the third message based on the matching between the third message and the preset parameters; the third message is a message re-sent by the user operation for the first message. In this way, since the third message is a message re-sent by the user operation for the first message of the blocking match, the way of performing corresponding processing on the third message based on the matching between the third message and the preset parameters reduces the false occurrence frequency of the discard operation compared with the scheme of only discarding the blocking message in the related art, and thus the false discard of the message can be reduced.

[0066] Please refer to Figure 2 An optional flowchart of the message processing method provided in the embodiment of the present application is shown in FIG. 2, Figure 1 S102 in FIG. 1 can also be implemented by S201, which will be described in combination with the steps:

[0067] S201, sending a second message carrying the access location information, the address information of the first network service node and the preset parameters generated based on the first message to the client; wherein the second message is used to instruct the client to access the first network service node based on the second message, and perform alarm prompt on the first message based on the information fed back by the first network service node.

[0068] In the embodiment of the present application, the message detection node can extract the access location information in the first message after receiving the first message, and form corresponding preset parameters for the first message. The message detection node sends a second message carrying the access location information, the address information of the first network service node and the preset parameters to the client. Wherein, the second message is used to instruct the client to access the first network service node based on the second message, and perform alarm prompt on the first message based on the information fed back by the first network service node.

[0069] Wherein, the first network service node can be a pre-designated alarm server, and in other embodiments, it can also be other network nodes with the same alarm function. The access location information can be URL information accessed by the client.

[0070] The preset parameter comprises at least one of a first sub-parameter and a second sub-parameter, the first sub-parameter is formed based on a time of receiving the first message, and the second sub-parameter is formed based on encryption of the time of receiving the first message. For example, the preset parameter can be passcode information. In the embodiment of the application, when the second message is formed, the preset parameter (passcode information) can be placed at the end of the URL, and the second message is formed in combination with address information of the first network service node.

[0071] In the embodiment of the application, the second message carrying the access location information, the address information of the first network service node and the preset parameter generated based on the first message is sent to the client, the second message is used to instruct the client to access the first network service node based on the second message, and the client is prompted to alarm based on information fed back by the first network service node for the first message. In this way, after the first message is blocked and matched, the client can be instructed to alarm for the first message based on the redirection information. Compared with the solution in the related art that the message is discarded as soon as the blocking and matching is hit, the solution can provide a larger operation space for the user to handle independently, and reduces the occurrence of message misdiscarding.

[0072] Please refer to Figure 3 An optional flowchart of the message processing method provided in the embodiment of the application will be described in combination with the steps.

[0073] S301, determining a blocking and matching hit result for the first message based on a matching result of any information in the first message and preset blocking information.

[0074] In the embodiment of the application, the preset blocking information can be configured on the message detection node. After receiving the first message, the message detection node can match information of the same type as the preset blocking information in the first message with the preset blocking information, and determine the blocking and matching hit result of the first message based on the matching result.

[0075] The preset blocking information can be a preset URL address. After receiving the first message, the message detection node can extract the URL address in the first message, match the extracted URL address with the preset blocking information, and determine the blocking and matching hit result of the first message based on the matching result. If the extracted URL address matches the preset blocking information, it is determined that the first message is blocked and matched, and if the extracted URL address does not match the preset blocking information, it is determined that the first message is not blocked and matched.

[0076] In the embodiment of the present application, the matching result of the first message is determined based on the matching result of the arbitrary information in the first message and the preset blocking information. In this way, after receiving the first message, the first message is first subjected to the blocking matching detection to determine whether the first message is the message of the blocking matching hit. If the blocking matching hit, the subsequent redirection message alarm prompt process is executed. If the blocking matching miss, the release processing is executed to save the subsequent redirection message alarm prompt process and the processing time of part of the messages, thereby improving the processing efficiency of the messages.

[0077] Please refer to Figure 4 An optional flowchart of the message processing method provided by the embodiment of the present application is provided, and S102 can also be implemented by S401, which will be described in combination with the steps.

[0078] S401, if the arbitrary information in the third message matches the preset blocking information and the first parameter in the third message matches the preset parameter, the third message is released.

[0079] In the embodiment of the present application, after receiving the third message, the message detection node can extract the string information of the same type as the preset blocking information in the third message and match the preset blocking information, and match the first parameter in the third message with the preset parameter. If the extracted string information matches the preset blocking information and the first parameter matches the preset parameter, the third message is released. If the extracted string information matches the preset blocking information and the first parameter does not match the preset parameter, the third message is discarded.

[0080] The first parameter in the third message is a parameter determined by the client based on the received preset parameter. The first parameter can be the same as the preset parameter.

[0081] In the embodiment of the present application, if the arbitrary information in the third message matches the preset blocking information and the first parameter in the third message matches the preset parameter, the third message is released. In this way, in the case that the user needs to release the first message, the first message can be processed as the third message that can pass through the message detection node, and finally the third message is released. Since the third message is obtained by transforming the first message, the application information in the third message is the same as that in the first message, so the smooth access of the first message of the client can be realized, and the message detection node is not discarded by mistake.

[0082] Please refer to Figure 5 An optional flowchart of the message processing method provided by the embodiment of the present application is provided, which will be described in combination with the steps.

[0083] S501, the number of the plurality of third messages released in the predetermined historical period is counted.

[0084] In the embodiments of the present application, the message detection node can count the number of third messages that are re-sent by each client in response to user operations in the alarm prompt window, received by the message detection node and released.

[0085] S502, if the number is greater than a preset threshold, deleting the preset blocking information.

[0086] In the embodiments of the present application, if the number of the plurality of third messages counted by the message detection node is greater than the preset threshold, the preset blocking information is deleted.

[0087] In the embodiments of the present application, the number of the plurality of third messages released in the predetermined historical period is counted. If the number is greater than a preset threshold, the preset blocking information is deleted. In this way, when the messages matched by the preset blocking information reach a certain re-sending release number, the preset blocking information is deleted specifically, so that the subsequent messages will not be matched by the preset blocking information, reducing the processing process of transmitting messages through the message detection node, and thus improving the transmission efficiency of the messages.

[0088] Please refer to Figure 6 An optional flowchart of the message processing method provided by the embodiments of the present application will be described in combination with the steps:

[0089] S601, sending a first message to a message detection node and receiving a second message sent by the message detection node in response to the first message; wherein the second message includes redirection information; the redirection information is used to instruct the client to perform alarm prompt on the first message matched by the blocking.

[0090] In the embodiments of the present application, when the client accesses a certain website, the client sends a first message to a certain website server, and the process of sending the first message is intercepted and received by the message detection node in the network. The message detection node determines the corresponding redirection information for the first message, and sends a second message carrying the redirection information to the client. The redirection information is used to instruct the client to perform alarm prompt on the first message matched by the blocking.

[0091] S602, re-sending a third message to the message detection node based on user operations for the first message, for the message detection node to perform corresponding processing on the third message based on the matching of the third message and the preset parameter.

[0092] In the embodiment of the present application, the redirection information is used to instruct the client to alarm the first message of the blocking match. After the client receives the second message, the alarm is given for the first message. The client triggers the retransmission of the first message in the alarm box based on the operation of the user, and sends the third message formed based on the first message to the message detection node. The message detection node performs corresponding processing on the third message based on the matching result of the third message and the preset parameter.

[0093] If any string information in the third message matches the preset parameter, the message detection node can release the third message. If any string information in the third message does not match the preset parameter, the message detection node can discard or alarm the third message.

[0094] In this way, since the third message is retransmitted based on the user operation for the first message of the blocked match, the corresponding processing on the third message based on the matching of the third message and the preset parameter reduces the number of false occurrences of the discarding operation compared with the scheme of only discarding the blocked message in the related art, thereby reducing the false discarding of the message.

[0095] Please refer to Figure 7 An optional flowchart of the message processing method provided in the embodiment of the present application is shown in Figure 6 The S601 shown can further include S603-S605, which will be described in combination with the steps:

[0096] S603, based on the address information of the first network service node in the second message, the fourth message is sent to the first network service node carrying the access location information and the preset parameter.

[0097] In the embodiment of the present application, the client receives the second message sent by the message detection node. The second message includes access location information, address information of the first network service node and a preset parameter. The client sends the fourth message to the first network service node carrying the access location information and the preset parameter based on the address information of the first network service node.

[0098] S604, receiving feedback information fed back by the first network service node in response to the fourth message; wherein the feedback information includes the access location information and the preset parameter; the feedback information is used to instruct the client to alarm the first message.

[0099] In the embodiment of the present application, after the first network service node receives the fourth message, the feedback information can be formed based on the access location information and the preset parameter in the fourth message and sent to the client. The feedback information is used to instruct the client to perform alarm prompt on the first message.

[0100] For example, the client accesses the alarm server, carries information including the originally accessed website URL and passcode information. The alarm server responds, implants pop-up information, adds the originally accessed website URL and passcode, and returns 200OK information. The 200OK information is used to instruct the client to perform pop-up alarm on the first message. The pop-up window can display a prompt “The website you accessed is a suspicious website. Do you want to continue to access?”.

[0101] S605, in response to the operation of the user, a trigger active release operation, the first parameter determined based on the preset parameter is added in the first message to form the third message sent to the message detection node.

[0102] In the embodiment of the present application, after the client performs pop-up alarm on the first message, the first control and the second control can be set in the pop-up window. The first control is used to trigger the retransmission operation, and the second control is used to trigger the termination of the first message. The client responds to the operation of the user on the first control, triggers the retransmission operation of the first message, and the client can form the first parameter based on the preset parameter and add it in the first message to form the third message sent to the message detection node.

[0103] In the embodiment of the present application, based on the address information of the first network service node in the second message, the fourth message is sent to the first network service node carrying the access location information and the preset parameter; the feedback information fed back by the first network service node in response to the fourth message is received; wherein the feedback information includes: access location information and preset parameter; the feedback information is used to instruct the client to perform alarm prompt on the first message; in response to the operation of the user, a trigger active release operation, the first parameter determined based on the preset parameter is added in the first message to form the third message sent to the message detection node. Since the first parameter in the third message is formed based on the preset parameter, on the basis that the first parameter in the third message matches the preset parameter, the release of the third message can be performed when the third message is blocked and matched. Compared with the operation of discarding the message as long as the message is matched and blocked in the related art, a diversified message processing mode is realized, and the occurrence of message misdiscarding is reduced.

[0104] Please refer to Figure 8 An optional flowchart of the message processing method provided by the embodiment of the present application will be described in combination with the steps:

[0105] S11, the client accesses the original website.

[0106] In the embodiment of the application, the client sends a request message, and the requested url is www.123.com. Before sending the request message, the DPI device needs to be set with a blocking policy. The specific policy can be that the request containing the 123.com character in the url is processed by a pop-up alarm, and the request containing a specific parameter and the 123.com character is released. The specific url can be processed by a pop-up alarm according to the needs.

[0107] S12, a fake 302 message is sent to the client.

[0108] In the embodiment of the application, the DPI matches the blocking instruction, and the processing mode is a pop-up alarm. Specifically, a fake 302 message is sent to the client, and the message is filled with an alarm server address, an original accessed website URL and passcode information. Specifically, www.warning.com / w.html?originalurl={www.123.com?passcode=1693837440} the passcode information is generated by the DPI, which can be the current UTC time or can be encrypted and presented, without specific limitation.

[0109] S13, access the alarm server, and carry information including the original accessed original website URL and the preset parameter.

[0110] In the embodiment of the application, the client accesses the alarm server, and carries information including the original accessed website URL and passcode

[0111] S14, the alarm server responds, implants a pop-up message, adds the original accessed original website URL and the preset parameter, and returns 200OK.

[0112] In the embodiment of the application, the alarm server responds, implants a pop-up message, adds the original accessed website URL and passcode, and returns 200OK.

[0113] S15, after receiving the 200OK response, the terminal browser appears a "whether to continue to access" button, and if the continue to access is clicked.

[0114] In the embodiment of the application, after receiving the 200OK response, the client appears a "whether to continue to access" button, or a prompt "the website you accessed is a suspicious website, please confirm whether to continue to access", which is not limited here.

[0115] S16, access the original website, and add the preset parameter after the original website URL.

[0116] In the embodiment of the present application, if the continue access is clicked, the original website URL is accessed and the passcode information is added, http: / / www.123.com?passcode=1693837440.

[0117] S17, the blocking URL instruction is hit, but the preset parameter meets the release requirement, and the current access is still released.

[0118] In the embodiment of the present application, the DPI hits the blocking URL instruction, but the passcode meets the release requirement, and the DPI releases the current access.

[0119] Further, the number of clicks of the blocked website can be counted by the DPI, or the blocked website can be actively tested. If the number of visits exceeds a certain number or the test is successful, it can be determined that the website is a non-suspicious website, and the website is removed from the blocking list, thereby realizing dynamic updating of the blocking strategy.

[0120] Please refer to Figure 9 The interaction diagram of the packet processing method provided by the embodiment of the present application will be described in combination with the steps:

[0121] S701, the packet detection node carries out response to receiving the first packet sent by the client, and sends the second packet to the client carrying the redirection information; wherein the redirection information is used to instruct the client to alarm and prompt the first packet of the blocking matching.

[0122] In the embodiment of the present application, the specific implementation process of S701 can refer to S101, which will not be described here.

[0123] S702, the packet detection node receives the third packet sent by the client, and carries out corresponding processing on the third packet based on the matching of the third packet and the preset parameter; the third packet is a packet re-sent for the first packet based on user operation.

[0124] In the embodiment of the present application, the specific implementation process of S702 can refer to S102, which will not be described here.

[0125] Please refer to Figure 10 The structure diagram of the packet processing device provided by the embodiment of the present application Figure 1 .

[0126] The embodiment of the present application further provides a packet processing device 600 applied to a packet detection node, comprising a first sending unit 601 and a packet processing unit 602.

[0127] The first sending unit 601 is configured to, in response to receiving the first message sent by the client, send a second message carrying redirection information to the client; wherein the redirection information is used to instruct the client to perform alarm prompt on the first message of the blockage matching hit; the redirection information comprises preset parameters.

[0128] The message processing unit 602 is configured to receive a third message sent by the client, and perform corresponding processing on the third message based on the matching between the third message and the preset parameters; the third message is a message re-sent for the first message based on user operation.

[0129] In the embodiment of the application, the redirection information comprises access location information, address information of the first network service node and the preset parameters; the first sending unit 601 in the message processing apparatus 600 is configured to send a second message carrying the access location information, the address information of the first network service node and the preset parameters generated based on the first message to the client; wherein the second message is used to instruct the client to access the first network service node based on the second message, and perform alarm prompt on the first message based on the information fed back by the first network service node.

[0130] In the embodiment of the application, the preset parameters comprise at least one of the following: a first sub-parameter and a second sub-parameter; wherein the first sub-parameter is formed based on the time of receiving the first message; and the second sub-parameter is formed based on the time of receiving the first message and encryption.

[0131] In the embodiment of the application, the message processing unit 602 in the message processing apparatus 600 is configured to determine the blockage matching hit result for the first message based on the matching result between any information in the first message and preset blockage information.

[0132] In the embodiment of the application, the message processing unit 602 in the message processing apparatus 600 is configured to, if any information in the third message matches the preset blockage information and the first parameter in the third message matches the preset parameter, release the third message.

[0133] In the embodiment of the application, the message processing unit 602 in the message processing apparatus 600 is configured to count the number of a plurality of third messages released in a predetermined historical period; and if the number is greater than a preset threshold, delete the preset blockage information.

[0134] It should be noted that, in the embodiments of this application, if the above-described message processing method is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiments of this application, or the part that contributes to the related technology, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a message processing device (which may be a personal computer, etc.) to execute all or part of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), magnetic disks, or optical disks. Thus, the embodiments of this application are not limited to any specific hardware and software combination.

[0135] Correspondingly, embodiments of this application provide a computer-readable storage medium storing a computer program thereon, which, when executed by a first processor, implements the steps in the method of the message processing apparatus 600.

[0136] Correspondingly, this application also provides a computer program product, including a computer program that can be executed by a first processor 701 of an electronic device 700 to complete the steps in the method of the message processing device 600.

[0137] Correspondingly, this application provides an electronic device 700, including a first memory 702 and a first processor 701. The first memory 702 stores a computer program that can run on the first processor 701. When the first processor 701 executes the program, it implements the steps in the above method.

[0138] It should be noted that the descriptions of the storage medium and device embodiments above are similar to the descriptions of the method embodiments above, and have similar beneficial effects. For technical details not disclosed in the storage medium and device embodiments of this application, please refer to the descriptions of the method embodiments of this application for understanding.

[0139] It should be noted that, Figure 11 A hardware entity illustration of an electronic device provided in the embodiments of this application. Figure 1 ,like Figure 11 As shown, the hardware entity of the electronic device 700 includes: a first processor 701 and a first memory 702, wherein;

[0140] The first processor 701 typically controls the overall operation of the electronic device 700.

[0141] The first memory 702 is configured to store instructions and applications executable by the first processor 701, and can also cache data (for example, image data, audio data, voice communication data and video communication data) to be processed by the first processor 701 and modules in the electronic device 700 and data processed by the first processor 701 and modules in the electronic device 700. The first memory 702 can be implemented by a FLASH or a Random Access Memory (RAM).

[0142] Please refer to Figure 12 The structure of the packet processing apparatus provided in the embodiments of the present application is shown in FIG. 2. Figure 2 .

[0143] The embodiments of the present application also provide a packet processing apparatus 800 applied to a client, which comprises a second sending unit 801.

[0144] The second sending unit 801 is configured to send a first packet to a packet detection node and receive a second packet sent by the packet detection node in response to the first packet, wherein the second packet comprises redirection information; the redirection information is used to instruct the client to perform alarm prompting on the first packet matched by plugging; the redirection packet comprises preset parameters.

[0145] The second sending unit 801 is configured to resend a third packet to the packet detection node based on a user operation, so that the packet detection node performs corresponding processing on the third packet based on matching between the third packet and the preset parameters.

[0146] In the embodiments of the present application, the second sending unit 802 in the packet processing apparatus 800 is configured to send a fourth packet to a first network service node based on address information of the first network service node in the second packet, wherein the fourth packet carries access location information and preset parameters;

[0147] The second sending unit 801 is configured to resend a third packet to the packet detection node based on a user operation, so that the packet detection node performs corresponding processing on the third packet based on matching between the third packet and the preset parameters.

[0148] In response to the operation of the user triggering the active release operation, a first parameter determined based on the preset parameters is added in the first packet to form the third packet, which is sent to the packet detection node.

[0149] Correspondingly, the embodiments of the present application provide a computer readable storage medium, which stores a computer program, and the computer program is executed by a second processor to implement steps in the method of the packet processing apparatus 800.

[0150] Correspondingly, this application provides a computer program product, including a computer program that can be executed by a second processor 901 of an electronic device 900 to complete the steps in the method of the message processing device 800.

[0151] Correspondingly, this application provides an electronic device 900, including a second memory 902 and a second processor 901. The second memory 902 stores a computer program that can run on the second processor 901. When the second processor 901 executes the program, it implements the steps in the above method.

[0152] It should be noted that the descriptions of the storage medium and device embodiments above are similar to the descriptions of the method embodiments above, and have similar beneficial effects. For technical details not disclosed in the storage medium and device embodiments of this application, please refer to the descriptions of the method embodiments of this application for understanding.

[0153] It should be noted that, Figure 13 A hardware entity illustration of an electronic device provided in the embodiments of this application. Figure 2 ,like Figure 13 As shown, the hardware entity of the electronic device 900 includes: a second processor 901 and a second memory 902, wherein;

[0154] The second processor 901 typically controls the overall operation of the electronic device 900.

[0155] The second memory 902 is configured to store instructions and applications executable by the second processor 901, and can also cache data to be processed or already processed by the second processor 901 and various modules in the electronic device 900 (e.g., image data, audio data, voice communication data, and video communication data), which can be implemented by flash memory or random access memory (RAM).

[0156] It should be understood that the phrase "one embodiment" or "an embodiment" throughout the specification means that a specific feature, structure, or characteristic related to the embodiment is included in at least one embodiment of this application. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. It should be understood that in the various embodiments of this application, the sequence numbers of the above-described processes do not imply a sequential order of execution; the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application. The sequence numbers of the above-described embodiments are merely descriptive and do not represent the superiority or inferiority of the embodiments.

[0157] It should be noted that, in the present document, the terms "comprising", "containing" or any other similar term are intended to encompass non-exclusive inclusion, such that processes, methods, articles, or apparatuses that comprise a list of elements are not limited to those elements, but can also include other elements not expressly listed, or inherent to such processes, methods, articles, or apparatuses. Without further limitation, an element defined by the phrase "comprising a" does not exclude the presence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0158] In several embodiments provided in the present application, it should be understood that the disclosed apparatus and method can be implemented in other ways. The apparatus embodiments described above are merely illustrative. For example, the division of the units is only a logical function division, and actual implementation can have another division manner, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the displayed or discussed components can be indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0159] The units described above as separate components can or can not be physically separate, and the components shown as units can or can not be physical units; they can be located in one place or distributed on multiple network units; and part or all of the units can be selected according to actual needs to achieve the purpose of the embodiment.

[0160] In addition, each functional unit in each embodiment of the present application can be integrated into one processing unit, or each unit can be a separate unit, or two or more units can be integrated into one unit; the integrated unit can be realized in the form of hardware or in the form of hardware plus software functional unit.

[0161] Those of ordinary skill in the art can understand that all or part of the steps of the above method embodiments can be completed by program instruction related hardware, and the foregoing program can be stored in a computer readable storage medium, and the program executes the steps of the above method embodiments when executed; and the foregoing storage medium includes mobile storage devices, read only memory (ROM), magnetic discs or optical discs, and various media that can store program codes.

[0162] Alternatively, the above-mentioned integrated units of the present application, if realized in the form of software function modules and sold or used as independent products, can also be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the embodiments of the present application can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in the embodiments of the present application. The aforementioned storage medium includes: mobile storage devices, ROM, magnetic disks or optical disks, and various media that can store program codes.

[0163] The above is only an embodiment of the present application, but the protection scope of the present application is not limited thereto, and any person skilled in the art can easily think of changes or replacements within the technical scope disclosed in the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A method of processing a packet, the method comprising: The application is applied to a message detection node, comprising: In response to receiving a first message sent by a client, a second message carrying redirection information is sent to the client; wherein the redirection information is used to instruct the client to perform alarm prompt on the first message matched by blocking; the redirection information includes preset parameters; A third message sent by the client is received, if any information in the third message matches preset blocking information, and a first parameter in the third message matches the preset parameters, the third message is released; the third message is a message re-sent by the client based on user operation on the first message; the first parameter is a parameter determined by the client based on the received preset parameters.

2. The packet processing method of claim 1, wherein, The redirection information includes access location information, address information of the first network service node and the preset parameters; the second message carrying the redirection information is sent to the client, comprising: The access location information, the address information of the first network service node and the preset parameters based on the first message are sent to the client; wherein the second message is used to instruct the client to access the first network service node based on the second message, and to perform alarm prompt on the first message based on the feedback information of the first network service node.

3. The packet processing method of claim 2, wherein, The preset parameters include at least one of the following: a first sub parameter and a second sub parameter; wherein the first sub parameter is formed based on the time of receiving the first message; the second sub parameter is formed based on the time of receiving the first message.

4. The packet processing method of claim 1, wherein, The method further comprises: Based on the matching result of any information in the first message and the preset blocking information, the matching hit result of the first message is determined.

5. The packet processing method of claim 1, wherein, The method further comprises: The number of a plurality of third messages released in a predetermined historical period is counted; If the number is greater than a preset threshold, the preset blocking information is deleted.

6. A message processing method characterized by, The application is applied to a client, comprising: A first message is sent to a message detection node, and a second message sent by the message detection node in response to the first message is received; wherein the redirection information is included in the second message; the redirection information is used to instruct the client to perform alarm prompt on the first message matched by blocking; the redirection information includes preset parameters; Based on user operation, a third message is re-sent to the message detection node for the first message, so that the message detection node detects that if any information in the third message matches preset blocking information, and a first parameter in the third message matches the preset parameters, the third message is released; the first parameter is a parameter determined by the client based on the received preset parameters.

7. The packet processing method of claim 6, wherein, After the first message is sent to the message detection node, and the second message sent by the message detection node in response to the first message is received, the method further comprises: Based on the address information of the first network service node in the second message, a fourth message carrying access location information and preset parameters is sent to the first network service node; receive feedback information fed back by the first network service node in response to the fourth message; wherein the feedback information comprises the access location information and the preset parameter; and the feedback information is used to instruct the client to perform alarm prompt on the first message; add a first parameter determined based on the preset parameter in the first message to form the third message and send the third message to the message detection node in response to a user operation triggering an active release operation.

8. A packet processing device, characterized by, Applied to a message detection node, comprising: a first sending unit configured to send a second message to the client carrying redirection information in response to receiving a first message sent by the client; wherein the redirection information is used to instruct the client to perform alarm prompt on the first message matched by the blocking; and the redirection information comprises a preset parameter; a message processing unit configured to receive a third message sent by the client, and release the third message if any information in the third message matches preset blocking information and a first parameter in the third message matches the preset parameter; the third message is a message re-sent by the client for the first message based on a user operation; and the first parameter is a parameter determined by the client based on the received preset parameter.

9. A packet processing device, characterized by, Applied to a client, comprising: a second sending unit configured to send a first message to a message detection node and receive a second message sent by the message detection node in response to the first message; wherein the second message comprises redirection information; the redirection information is used to instruct the client to perform alarm prompt on the first message matched by the blocking; and the redirection information comprises a preset parameter; a second sending unit configured to re-send a third message to the message detection node for the first message based on a user operation, so that the message detection node releases the third message if any information in the third message matches preset blocking information and a first parameter in the third message matches the preset parameter; and the first parameter is a parameter determined by the client based on the received preset parameter.

10. An electronic device, comprising: comprising a memory and a processor, the memory storing a computer program capable of running on the processor, and the processor implements the steps in the method of any one of claims 1 to 5 or the steps in the method of claim 6 or 7 when executing the computer program.

11. A computer readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the steps in the method of any one of claims 1 to 5 or the steps in the method of claim 6 or 7.

12. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps in the method of any one of claims 1 to 5 or the steps in the method of claim 6 or 7.

Images