Protocol reverse resolution method, computer readable storage medium and program product

By combining frame structure analysis and keyword template matching with variable and fixed sliding windows, the problem of fast and accurate identification of frame structure and keywords in wireless communication devices is solved, enabling protocol parsing without prior information and improving the security and protocol analysis capabilities of wireless communication devices.

CN119583684BActive Publication Date: 2026-04-21CHINA ACAD OF LAUNCH VEHICLE TECH
0 Cites 0 Cited by

Patent Information

Application Number
CN202411656785.8
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-11-19
Publication Date
2026-04-21
Estimated Expiration
2044-11-19

AI Technical Summary

Technical Problem

Existing technologies struggle to quickly and accurately identify the frame structure and keywords of wireless communication signals when there is little or no prior information, especially in protocol parsing within satellite communication systems, IoT systems, and unmanned communication terminals.

Method used

A combination of variable sliding window coarse search and fixed sliding window fine search is adopted, combined with frame structure analysis and keyword template matching. The frame header, frame tail and synchronization word length are determined by frame structure analysis, and the frame structure and keywords are parsed by template induction-template matching-template addition.

Benefits of technology

It enables rapid and accurate identification of frame structure and keywords in the absence of or with little prior information, improving the effectiveness and robustness of protocol parsing. It is suitable for protocol consistency, integrity and availability testing, intrusion detection and security analysis of wireless communication devices.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

A protocol reverse engineering method, computer-readable storage medium, and program product, relating to the field of information warfare, includes: employing a variable sliding window coarse search to determine the minimum width of the sliding window containing the entire frame length; determining a fixed sliding window width based on the minimum sliding window width, and employing a fixed sliding window fine search to determine the frame header and frame trailer; segmenting the data stream based on the frame header and frame trailer; confirming whether the frame type is fixed-length or variable-length based on the results of the fixed sliding window fine search; statistically analyzing the segmented frame data to determine the synchronization word length; forming a frame structure-keyword template based on prior knowledge; the frame structure analysis results include the frame header, frame trailer, synchronization word length, and frame type; matching the frame structure analysis results with the frame structure-keyword template to obtain the parsed value, inferred value, or new sample of the actual keyword. Based on physical layer and link layer demodulation, parameter identification of the communication protocol is performed on the data stream under conditions of no or little prior information.
Need to check novelty before this filing date? Find Prior Art