A data packet processing method, system, device and storage medium

Abstract

The application provides a data packet processing method, system, device and storage medium. The method comprises the following steps: obtaining an original data packet, a total number of hierarchical detection middle stations in a security grading detection system, a number of a current hierarchical detection middle station and a non-sensitive parameter type of a target security detection device. The non-sensitive parameter type of the security detection device comprises a port. The port comprises one of the following: a source port and a destination port. The data belonging to the non-sensitive parameter type in the original data packet is updated to obtain an updated data packet. The updated data packet is sent to the target security detection device. The method can be not affected by the change of a network interface between the hierarchical detection middle station and the security detection device. After the data packet is delivered from the hierarchical detection middle station to the security detection device, the data packet can still correctly return to the corresponding hierarchical detection middle station.

Description

A data packet processing method, system, device, and storage medium Technical Field

[0001] This article relates to data processing techniques, and in particular to a data packet processing method, system, device, and storage medium. Background Technology

[0002] In a security classification and detection application scenario, a data packet enters the classification and detection platform. After determining its security detection sequence, it is sent to the corresponding security detection device according to the current detection level. After receiving the data packet, the security detection device completes various security checks and then sends the data packet back to the classification and detection platform. The classification and detection platform identifies and guides the data packet to complete the next level of security detection.

[0003] If a security detection device corresponding to a detection level belongs not only to one security detection sequence of the current hierarchical detection platform but also to another hierarchical detection platform, then this security detection device is a shared security detection device. It must distinguish data packets originating from these two different hierarchical detection platforms to correctly send the data packets back to the originating hierarchical detection platform after completing the security check. Currently available solutions for identifying data packets from multiple different hierarchical detection platforms on a shared security detection device and correctly sending them back to the originating hierarchical detection platform after completing the security check are to use a policy-based routing technology on the shared security detection device that determines the next hop based on the source Media Access Control (MAC) address of the data packet.

[0004] However, the scheme of determining which hierarchical detection platform to return to based on the source MAC address of the data packet on the shared security detection device has poor adaptability in policy routing configuration. The security detection device cannot dynamically adjust its own parameters according to the real-time network status to ensure that the data packet is returned to the correct platform. The administrator must manually modify the source MAC address in the corresponding policy route on the security detection device to ensure that the data packet from this hierarchical detection platform can correctly hit the policy route, which makes the maintenance work very cumbersome. Summary of the Invention

[0005] This application provides a data packet processing method, system, device, and storage medium that can ensure data packets, after being delivered from the hierarchical detection platform to the security detection device, correctly return to the corresponding hierarchical detection platform, regardless of changes in the network interface between the hierarchical detection platform and the security detection device.

[0006] Firstly, this application provides a data packet processing method applied to a hierarchical detection platform in a security hierarchical detection system, comprising:

[0007] Obtain the original data packet, the total number of graded detection platforms in the security graded detection system, the number of the current graded detection platform, and the non-sensitive parameter type of the target security detection device. The non-sensitive parameter type of the security detection device includes the port, which includes one of the following: source port or destination port.

[0008] Update the data belonging to non-sensitive parameter types in the original data packet to obtain the updated data packet. Updating the data belonging to non-sensitive parameter types in the original data packet includes: determining the candidate port number by the sum of an integer multiple of the total number of hierarchical detection platforms and the current hierarchical detection platform number; based on the candidate port number and the original data packet, determining whether the connection corresponding to the candidate port number is the same as other existing connections in the hierarchical detection platform; if not, determining the candidate port number as the new port number; updating the port numbers of ports belonging to non-sensitive parameter types in the original data packet to the new port numbers.

[0009] Send the updated data packet to the target security detection device;

[0010] The candidate port number is determined by the sum of an integer multiple of the total number of hierarchical detection platforms and the number of the current hierarchical detection platform, including:

[0011] The calculation is performed using the following expression:

[0012] port_new = 1024 + (n – (1024 % n )) + n * i + y,

[0013] Where port_new represents the port number to be selected, n represents the total number of graded detection platforms in the security graded detection system, i represents the port correction coefficient, i=0,1,2,..., and y represents the number of the current graded detection platform.

[0014] In one possible implementation, before sending the updated data packet to the security detection device, the method further includes:

[0015] Get the total number of forwarding cores in the current graded detection platform;

[0016] Based on the current traffic splitting algorithm of the hierarchical detection platform, the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet are determined according to the total number of forwarding cores of the hierarchical detection platform.

[0017] Determine if the first forwarding core and the second forwarding core are the same. If not, adjust the port correction coefficient and re-determine the new port number until the first forwarding core and the second forwarding core are the same.

[0018] In one possible implementation, before sending the updated data packet to the security detection device, the method further includes:

[0019] Obtain the total number of forwarding cores of the target security detection device;

[0020] Based on the traffic splitting algorithm of the target security detection device, the forwarding core of the security detection device corresponding to the updated data packet is determined.

[0021] Obtain the minimum number of inter-core connections for the current security detection device, and determine whether the number of connections corresponding to the forwarding core of the security detection device for the updated data packet is the same as the minimum number of inter-core connections for the current security detection device. If not, adjust the port correction coefficient and re-determine the new port number until the number of connections corresponding to the forwarding core of the security detection device for the updated data packet is the same as the minimum number of inter-core connections for the current security detection device.

[0022] In one possible implementation, before sending the updated data packet to the security detection device, the method further includes:

[0023] Obtain the total number of forwarding cores of the target security detection device;

[0024] Based on the traffic splitting algorithm of the target security detection device, the forwarding core of the security detection device corresponding to the updated data packet is determined.

[0025] Obtain the minimum number of inter-core connections of the current security detection device, and determine whether the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device. If not, adjust the port correction coefficient and re-determine the new port number until the first forwarding core and the second forwarding core are the same, and the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device.

[0026] In one possible implementation, the non-sensitive parameter type of the security detection device also includes an address, which includes at least one of the following: source address and destination address;

[0027] Updating data in the original data packet that belongs to non-sensitive parameter types also includes:

[0028] Based on the address extension factor, the addresses belonging to non-sensitive parameter types in the original data packet are updated to new addresses;

[0029] Before sending the updated data packet to the security detection device, the method also includes:

[0030] Get the total number of forwarding cores in the current graded detection platform;

[0031] Based on the current traffic splitting algorithm of the hierarchical detection platform, the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet are determined according to the total number of forwarding cores of the hierarchical detection platform.

[0032] Determine whether the first forwarding core and the second forwarding core are the same. If not, adjust the port correction coefficient and redetermine the new port number, and / or adjust the address extension coefficient and redetermine the new address, until the first forwarding core and the second forwarding core are the same.

[0033] In one possible implementation, before sending the updated data packet to the security detection device, the method further includes:

[0034] Obtain the total number of forwarding cores of the target security detection device;

[0035] Based on the traffic splitting algorithm of the target security detection device, the forwarding core of the security detection device corresponding to the updated data packet is determined.

[0036] Obtain the minimum number of inter-core connections of the current security detection device, and determine whether the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device. If not, adjust the port correction coefficient and redetermine the new port number, and / or adjust the address extension coefficient and redetermine the new address, until the first forwarding core and the second forwarding core are the same, and the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device.

[0037] Secondly, this application also provides a data packet processing method, applied to a security detection device in a security classification detection system, comprising:

[0038] Obtain the total number of graded detection platforms in the safety graded detection system;

[0039] Based on the port number of the port belonging to the non-sensitive parameter type in the received data packet and the total number of hierarchical detection stations in the security hierarchical detection system, the number of the target hierarchical detection station is determined. The data packet is obtained and sent by the target hierarchical detection station through any of the methods provided in the first aspect.

[0040] Based on the target classification detection platform's number, the data packet is sent to the corresponding target classification detection platform.

[0041] Thirdly, embodiments of this application also provide a security classification detection system, including at least one classification detection platform for implementing any of the methods provided in the first aspect and at least one security detection device for implementing any of the methods provided in the second aspect.

[0042] Fourthly, embodiments of this application also provide an electronic device, including a processor, a memory, and a communication bus, wherein the processor and the memory communicate with each other through the communication bus;

[0043] Memory, used to store computer programs;

[0044] A processor, when executing a program stored in memory, implements either the method provided in the first or second aspect.

[0045] Fifthly, embodiments of this application also provide a computer-readable storage medium storing a computer program that, when executed by a processor, implements any of the methods provided in the first or second aspect.

[0046] The data packet processing method, system, device, and storage medium provided in this application embodiment are applied to a hierarchical detection platform in a security hierarchical detection system. The method involves obtaining the original data packet, the total number of hierarchical detection platforms in the security hierarchical detection system, the current hierarchical detection platform number, and the non-sensitive parameter type of the target security detection device. The non-sensitive parameter type of the security detection device includes a port, which includes one of the following: a source port or a destination port. The method updates the data belonging to the non-sensitive parameter type in the original data packet to obtain an updated data packet. Updating the data belonging to the non-sensitive parameter type in the original data packet includes: adjusting the total number of hierarchical detection platforms... The sum of an integer multiple of the current hierarchical detection platform number is used to determine the candidate port number. Based on the candidate port number and the original data packet, it is determined whether the connection corresponding to the candidate port number is the same as other existing connections in the hierarchical detection platform. If not, the candidate port number is determined as the new port number. The port numbers of ports belonging to non-sensitive parameter types in the original data packet are updated to the new port numbers. The updated data packet is sent to the target security detection device. This ensures that the data packet is not affected by changes in the network interface between the hierarchical detection platform and the security detection device, and that the data packet can still correctly return to the corresponding hierarchical detection platform after being delivered from the hierarchical detection platform to the security detection device.

[0047] Other features and advantages of this application will be set forth in the following description, and will be apparent in part from the description, or may be learned by practicing the application. Other advantages of this application can be realized and obtained by means of the embodiments described in the description and the accompanying drawings. Attached Figure Description

[0048] The accompanying drawings are used to provide an understanding of the technical solutions of this application and constitute a part of the specification. They are used together with the embodiments of this application to explain the technical solutions of this application and do not constitute a limitation on the technical solutions of this application.

[0049] Figure 1 is a schematic diagram of an application scenario of a safety classification detection system provided in an embodiment of this application;

[0050] Figure 2 is a flowchart illustrating a data packet processing method provided in an embodiment of this application;

[0051] Figure 3 is a flowchart illustrating another data packet processing method provided in an embodiment of this application;

[0052] Figure 4 is a schematic diagram of a safety classification detection system provided in an embodiment of this application. Detailed Implementation

[0053] This application describes several embodiments, but these descriptions are exemplary and not limiting, and it will be apparent to those skilled in the art that many more embodiments and implementations are possible within the scope of the embodiments described herein. Although many possible combinations of features are shown in the drawings and discussed in the detailed description, many other combinations of the disclosed features are also possible. Unless specifically limited, any feature or element of any embodiment may be used in combination with, or may replace, any feature or element of any other embodiment.

[0054] This application includes and contemplates combinations of features and elements known to those skilled in the art. The embodiments, features, and elements disclosed in this application can also be combined with any conventional features or elements to form unique inventive solutions. Any feature or element of any embodiment can also be combined with features or elements from other inventive solutions to form another unique inventive solution. Therefore, it should be understood that any feature shown and / or discussed in this application can be implemented individually or in any suitable combination. Therefore, the embodiments are not limited except by the limitations imposed by the appended claims and their equivalents. Furthermore, various modifications and changes can be made within the scope of the appended claims.

[0055] Furthermore, in describing representative embodiments, the specification may have presented methods and / or processes as a specific sequence of steps. However, the method or process should not be limited to a specific order of steps to the extent that it does not depend on this specific order. As will be understood by those skilled in the art, other sequences of steps are also possible. Therefore, the specific order of steps set forth in the specification should not be construed as a limitation of the claims. Moreover, the claims relating to the method and / or process should not be limited to the steps performed in the order written, and those skilled in the art will readily understand that these orders can be varied and still remain within the spirit and scope of the embodiments of this application.

[0056] In security classification and detection application scenarios, security classification and detection systems typically have multiple classification and detection middleware and multiple shared security detection devices. Each shared security detection device may belong to a security detection sequence of a certain classification and detection middleware, and therefore may receive data packets from multiple different classification and detection middleware. As shown in Figure 1, a security detection device intrusion prevention system belongs not only to a security detection sequence of classification and detection middleware A, but also to a security detection sequence of classification and detection middleware B. To identify data packets from multiple different classification and detection middleware on the shared security detection device, and correctly send the data packets back to the source classification and detection middleware after completing the security check, the currently available solution is to use a policy routing technology on the shared security detection device to determine the next hop of the data packet based on the source MAC address of the data packet. Specifically: 1) Before the data packet is sent from the classification and detection middleware to the security detection device, the source MAC address is modified to the outgoing interface MAC address; 2) Policy routing is configured on the security detection device to determine which middleware the data packet should be sent back to after completing the security check, based on which middleware the source MAC address of the data packet belongs to; 3) After the data packet returns to the classification and detection middleware, subsequent classification and detection continue.

[0057] However, the scheme of determining which hierarchical detection platform to return to based on the source MAC address of data packets on a shared security detection device has poor adaptability in policy routing configuration. Specifically: 1) When the topology between the hierarchical detection platform and the security detection device changes, the network interface through which data packets are sent from the hierarchical detection platform to the security detection device may also change; 2) When the hierarchical detection platform fails and needs to be replaced with other hardware, the network interface connecting to the security detection device will also change. However, the MAC address is a unique identifier for a network interface. When the hierarchical detection platform undergoes the above changes, resulting in a change in the network interface connecting to the security detection device, the security detection device cannot dynamically adjust its parameters according to the real-time network status to ensure that data packets are returned to the correct platform. Administrators must manually modify the source MAC address in the corresponding policy route on the security detection device to ensure that data packets from this hierarchical detection platform can correctly match the policy route, making maintenance work very cumbersome.

[0058] Since changes in the network interface through which data packets are sent from the hierarchical detection platform to the security detection device do not affect the network layer and above data in the data packets, if the source of the data packets can be parsed based on the network layer and above data in the data packets, then even if the network interface connecting to the security detection device changes, it can still be ensured that the data packets, after being delivered from the hierarchical detection platform to the shared security detection device, can correctly return to the original hierarchical detection platform. The inventors have analyzed and found that since the sensitivity of security detection devices to the data in data packets varies, changing the non-sensitive parameter types of the security detection devices in the data packets does not affect the security inspection function of the security detection devices. Based on this, to solve the problems existing in the prior art, this application provides a data packet processing method. This method is applied to the hierarchical detection platform in a security hierarchical detection system, as shown in Figure 2. The method includes:

[0059] S201. Obtain the original data packet, the total number of graded detection platforms in the security graded detection system, the number of the current graded detection platform, and the non-sensitive parameter type of the target security detection device.

[0060] The target security detection device is a shared security detection device, capable of receiving data packets from at least two different tiered detection platforms.

[0061] Among them, the non-sensitive parameter types of security detection equipment include ports, which include one of the following: source port and destination port.

[0062] Non-sensitive parameters of security inspection equipment are those with low sensitivity; changes in these parameters do not affect the security inspection function of the equipment. Different security inspection devices may have the same or different non-sensitive parameters.

[0063] Every data packet transmitted over a network contains at least four attributes: source address, source port, destination address, and destination port. Different security detection devices have varying degrees of sensitivity to these attributes. Based on this, the non-sensitive parameter type of the target security detection device can be set to one or more of the following: source address, source port, destination address, and destination port, according to the target security detection device's sensitivity to these attributes. Specifically, it can be either source port or destination port, or it can include one or more of source address and destination address.

[0064] S202. Update the data in the original data packet that belongs to the non-sensitive parameter type to obtain the updated data packet.

[0065] The process of updating data belonging to non-sensitive parameter types in the original data packet includes: determining the candidate port number by summing an integer multiple of the total number of hierarchical detection platforms with the current hierarchical detection platform number; determining whether the connection corresponding to the candidate port number is the same as other existing connections in the hierarchical detection platform based on the candidate port number and the original data packet; if not, determining the candidate port number as the new port number; and updating the port numbers of ports belonging to non-sensitive parameter types in the original data packet to the new port numbers.

[0066] This method ensures that the determined new port number is an unused port number, thus guaranteeing the validity of the calculation results.

[0067] Specifically, the sum of an integer multiple of the total number of hierarchical detection platforms and the number of the current hierarchical detection platform is used to determine the candidate port numbers, including:

[0068] The calculation is performed using the following expression:

[0069] port_new =1024 + (n – (1024 % n )) + n * i + y,

[0070] Where port_new represents the port number to be selected, n represents the total number of graded detection platforms in the security graded detection system, i represents the port correction coefficient, i=0,1,2,..., and y represents the number of the current graded detection platform.

[0071] This method avoids conflicts between the calculated new port number and the dedicated public port numbers 0-1023, ensuring the validity of the calculation results.

[0072] The port correction coefficient can be set according to the range of port numbers. Optionally, when the port number range is between 0 and 65535, the maximum value of the port correction coefficient i must ensure that the calculated new port number is not greater than 65535. For example, taking a scenario with 8 hierarchical detection platforms as an example, assuming the current hierarchical detection platform number is 5 and the total number of hierarchical detection platforms in the security hierarchical detection system is 8, to ensure that the calculated candidate port number port_new is between 0 and 65535, the value of the port correction coefficient i must not be greater than 8062.

[0073] It is understandable that when the non-sensitive parameter type of the security detection device is the source port, the new port number determined by the above method is the new source port number, and the updated content is the source port number in the original data packet; when the non-sensitive parameter type of the security detection device is the destination port, the new port number determined by the above method is the new destination port number, and the updated content is the destination port number in the original data packet.

[0074] S203. Send the updated data packet to the target security detection device.

[0075] On the hierarchical detection platform, to ensure that the updated data packet can be delivered to the same forwarding core of the hierarchical detection platform as the original data packet for processing, optionally, before sending the updated data packet to the security detection device, the following steps are also included: obtaining the total number of forwarding cores of the current hierarchical detection platform; based on the current hierarchical detection platform's traffic splitting algorithm, determining the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet according to the total number of forwarding cores of the hierarchical detection platform; determining whether the first forwarding core and the second forwarding core are the same; if not, adjusting the port correction coefficient and re-determining a new port number until the first forwarding core and the second forwarding core are the same.

[0076] For example, taking the non-sensitive parameter type of the security detection device as the source port, assuming the current hierarchical detection platform number is k, the total number of forwarding cores of the current hierarchical detection platform is core_num_C, and the current hierarchical detection platform's traffic splitting algorithm is:

[0077] core_C = hash_C(sip, sport, dip, dport) % core_num_C,

[0078] Wherein, core_C represents the forwarding core, hash_C represents a hash function that can calculate a hash value based on its parameters, sip represents the source address, sport represents the source port number, dip represents the destination address, dport represents the destination port number, and % represents the modulo operation.

[0079] The hash value calculated by hash_C(sip, sport, dip, dport) is moduloed with the total number of forwarding cores of the current hierarchical detection platform, core_num_C. The final result, core_C, is used to determine which specific core of the hierarchical detection platform to assign the data packet and its data stream to for processing.

[0080] The first forwarding core corresponding to the original data packet is:

[0081] core_C_orig = hash_C(sip_orig, sport_orig, dip_orig, dport_orig) %core_num_C,

[0082] Where sip_orig represents the source address in the original data packet, sport_orig represents the source port number in the original data packet, dip_orig represents the destination address in the original data packet, and dport_orig represents the destination port number in the original data packet.

[0083] The second forwarding core corresponding to the updated source port number in the original data packet is:

[0084] core_C_new = hash_C(sip_orig, sport_new, dip_orig, dport_orig) %core_num_C.

[0085] Here, sport_new represents the new source port number.

[0086] If core_C_orig and core_C_new are not the same, adjust the value of the port correction coefficient i. For example, increment i and substitute it into the formula port_new = 1024 + (n – (1024 % n )) + n * i + k, recalculate the port value, and redetermine the new source port number. Iterate until the first forwarding core and the second forwarding core are the same, then exit the loop.

[0087] This method uses iterative calculations to determine that the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet are the same core, so that the updated data packet and the original data packet are delivered to the same forwarding core of the hierarchical detection platform for processing.

[0088] Data packets sent from the hierarchical detection platform to the security detection device and then returned to the hierarchical detection platform are typically assigned to the forwarding core of the hierarchical detection platform to which the packet was originally sent for processing. Based on this, the above method not only enables the updated and original data packets to be delivered to the same forwarding core for processing, but also allows data packets returned from the security detection device to the hierarchical detection platform, along with their corresponding updated and original data packets, to be delivered to the same forwarding core of the hierarchical detection platform for processing.

[0089] Furthermore, the updated data packet's data stream is assigned to the second forwarding core corresponding to the updated data packet on the hierarchical detection platform for processing.

[0090] By having other data packets in the data stream to which the updated data packet belongs continue to use the second forwarding core corresponding to the updated data packet, it is possible to assign the data stream to which the updated data packet belongs to the same forwarding core of the hierarchical detection platform for processing. This achieves the goal of assigning all data packets on the same data stream to the same forwarding core, avoiding out-of-order and synchronization overhead.

[0091] The hash-based traffic splitting algorithm commonly used in network devices relies on the uniformity of the hash function. Once a hash collision occurs, causing load skew, traffic cannot be evenly distributed among cores. If the hash-based traffic splitting algorithm is combined with a traffic-related load balancing algorithm, dynamically adjusting traffic distribution based on actual load conditions, it can ensure that traffic flows to the same core while achieving dynamic load balancing. Commonly used load balancing algorithms include round-robin, weighted round-robin, least-connection, and weighted least-connection algorithms. Taking the hash-based traffic splitting algorithm combined with the least-connection algorithm as an example, each tiered detection platform maintains a statistics table of information for the security detection device's forwarding core.

[0092] Table 1 is a statistical table of information for a forwarding core of a security detection device provided in an embodiment of this application. This table involves two security detection devices: security detection device Dev1 and security detection device Dev2. Security detection device Dev1 includes four forwarding cores: core0, core1, core2, and core3. Security detection device Dev2 includes eight forwarding cores: core0, core1, core2, core3, core4, core5, core6, and core7. The minimum number of connections between cores is the number of connections corresponding to the core with the fewest allocated connections.

[0093] Table 1. Information Statistics Table of Security Detection Equipment Forwarding Core

[0094]

[0095] A single connection typically includes multiple data packets. Once the forwarding core corresponding to the first data packet is determined, other data packets in the connection directly inherit the forwarding core corresponding to the first data packet.

[0096] To achieve dynamic load balancing, optionally, before sending the updated data packet to the security detection device, the process includes: obtaining the total number of forwarding cores of the target security detection device; determining the forwarding core of the security detection device corresponding to the updated data packet based on the target security detection device's traffic splitting algorithm; obtaining the minimum number of inter-core connections of the current security detection device; determining whether the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device; if not, adjusting the port correction coefficient and re-determining a new port number until the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device.

[0097] For example, assuming the total number of forwarding cores in the security detection device is core_num_S, the traffic splitting algorithm is as follows:

[0098] core_S = hash_S(sip, sport, dip, dport) % core_num_S,

[0099] Wherein, core_S represents the forwarding core of the security detection device, and hash_S represents a hash function.

[0100] Taking the non-sensitive parameter type of the security detection device as the source port as an example, the forwarding core of the security detection device corresponding to the updated data packet is:

[0101] core_S_new = hash_S(sip_orig, sport_new, dip_orig, dport_orig) %core_num_S.

[0102] If the number of connections corresponding to the forwarding core of the security detection device for the updated data packet is different from the minimum number of inter-core connections of the current security detection device, then adjust the value of the port correction coefficient i and substitute it into the formula:

[0103] port_new = 1024 + (n – (1024 % n )) + n * i + k,

[0104] A new source port number is determined, and the process is repeated until the number of connections corresponding to the forwarding core of the security detection device for the updated data packet is the same as the minimum number of inter-core connections of the current security detection device.

[0105] This method dynamically adjusts traffic distribution based on actual load conditions, ensuring that traffic reaching the security detection device is allocated to cores with lighter loads. This guarantees that traffic flows to the same core and achieves traffic load balancing among multiple cores on a single multi-core security detection device, thus ensuring traffic load balancing among the cores of the security detection device.

[0106] Optionally, it also includes: updating the information statistics table of the security detection device's forwarding core based on the new port number and the corresponding security detection device's forwarding core.

[0107] Specifically, if the number of connections corresponding to the forwarding core of the security detection device for the updated data packet is the same as the current minimum number of connections between cores of the security detection device, the final new port number is determined. This leads to the determination of the forwarding core of the security detection device corresponding to the connection containing the data packet, and the number of connections allocated to the corresponding forwarding core and the minimum number of connections between cores are updated in the information statistics table of the security detection device's forwarding core. This method enables timely updates to the information statistics table of the security detection device's forwarding core, dynamically adjusting traffic allocation results to optimize load conditions.

[0108] Furthermore, in order to achieve both delivery of updated and original data packets to the same forwarding core of the hierarchical detection platform for processing, and to dynamically adjust traffic allocation based on actual load conditions so that traffic reaching the security detection device can be allocated to a less loaded core, optionally, before sending the updated data packet to the security detection device, the method further includes: obtaining the total number of forwarding cores of the target security detection device; determining the forwarding core of the security detection device corresponding to the updated data packet based on the traffic splitting algorithm of the target security detection device; obtaining the minimum number of inter-core connections of the current security detection device; determining whether the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device; if not, adjusting the port correction coefficient and re-determining a new port number until the first and second forwarding cores are the same, and the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device.

[0109] The data packet processing method provided in this application is applied to a hierarchical detection platform in a security hierarchical detection system. It obtains the original data packet, the total number of hierarchical detection platforms in the security hierarchical detection system, the current hierarchical detection platform number, and the non-sensitive parameter type of the target security detection device. The non-sensitive parameter type of the security detection device includes a port, which includes one of the following: source port or destination port. The method updates the data belonging to the non-sensitive parameter type in the original data packet to obtain an updated data packet. Updating the data belonging to the non-sensitive parameter type in the original data packet includes: multiplying the total number of hierarchical detection platforms by an integer multiple of the current number of platforms. The sum of the numbers of the hierarchical detection platform is used to determine the candidate port number. Based on the candidate port number and the original data packet, it is determined whether the connection corresponding to the candidate port number is the same as other existing connections in the hierarchical detection platform. If not, the candidate port number is determined as the new port number. The port numbers of ports belonging to non-sensitive parameter types in the original data packet are updated to the new port numbers. The updated data packet is sent to the target security detection device. This ensures that the data packet is not affected by changes in the network interface between the hierarchical detection platform and the security detection device, and that the data packet can still correctly return to the corresponding hierarchical detection platform after being delivered from the hierarchical detection platform to the security detection device.

[0110] As mentioned above, the security detection device may have one or more non-sensitive parameter types. When there is more than one non-sensitive parameter type, multiple non-sensitive parameter types can be combined to expand the dimensions of data packet changes and the scope of port changes, thereby improving the success rate and efficiency of updating port numbers.

[0111] Based on this, and in addition to the above embodiments, optionally, the non-sensitive parameter type of the security detection device may also include an address, which may include at least one of the following: source address or destination address;

[0112] Updating data in the original data packet that belongs to non-sensitive parameter types also includes:

[0113] Based on the address extension factor, the addresses belonging to non-sensitive parameter types in the original data packet are updated to new addresses.

[0114] Before sending the updated data packet to the security detection device, the method also includes:

[0115] Obtain the total number of forwarding cores in the current hierarchical detection platform; based on the current traffic splitting algorithm of the hierarchical detection platform, determine the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet according to the total number of forwarding cores in the hierarchical detection platform; determine whether the first forwarding core and the second forwarding core are the same, if not, adjust the port correction coefficient and redetermine the new port number, and / or adjust the address extension coefficient and redetermine the new address, until the first forwarding core and the second forwarding core are the same.

[0116] This method expands the variable space of data packets by adding variable dimensions to the extended data packets, enabling flexible data packet transformation, meeting the needs of different scenarios, and improving user experience.

[0117] In one possible implementation, the addresses belonging to non-sensitive parameter types in the original data packet are updated to new addresses based on the address expansion factor, including:

[0118] The calculation is performed using the following expression:

[0119] ip_new = (ip_orig & 0xFFFFFF00) | ip_low,

[0120] Where ip_new represents the new address, ip_orig represents the address in the original data packet, and ip_low represents the address extension factor. Optionally, the value of ip_low can be in the range of [1, 255].

[0121] This method can modify the lower 8 bits of the address. Furthermore, the number of new port numbers obtained based on ports and addresses belonging to non-sensitive parameter types in the original data packet will be increased exponentially compared to methods that only use ports belonging to non-sensitive parameter types in the original data packet.

[0122] Furthermore, when the non-sensitive parameter type of the security detection device also includes an address, optionally, before sending the updated data packet to the security detection device, the method further includes: obtaining the total number of forwarding cores of the target security detection device; determining the forwarding core of the security detection device corresponding to the updated data packet based on the traffic splitting algorithm of the target security detection device; obtaining the minimum number of inter-core connections of the current security detection device; determining whether the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device; if not, adjusting the port correction coefficient and re-determining a new port number, and / or adjusting the address extension coefficient and re-determining a new address, until the first forwarding core and the second forwarding core are the same, and the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device.

[0123] Understandably, when the non-sensitive parameter types of a security detection device include port numbers and addresses, the new port number can initially be determined solely based on the ports belonging to the non-sensitive parameter types in the original data packet. If none of the port numbers determined solely based on the ports belonging to the non-sensitive parameter types in the original data packet meet the requirements (e.g., they are already occupied, or the forwarding core of the hierarchical detection platform corresponding to the data packet with the updated port number is different from the forwarding core of the hierarchical detection platform corresponding to the original data packet, or the number of connections corresponding to the forwarding core of the security detection device corresponding to the data packet with the updated port number is different from the minimum number of connections between cores of the current security detection device), then one or more addresses belonging to the non-sensitive parameter types can be specified as auxiliary factors to determine the new port number based on the ports and addresses belonging to the non-sensitive parameter types in the original data packet.

[0124] Furthermore, when the address belonging to the non-sensitive parameter type includes both the source address and the destination address, a new port number can be determined first based on the port belonging to the non-sensitive parameter type in the original data packet and a single address belonging to the non-sensitive parameter type. If all the port numbers determined based on this cannot meet the requirements, a new port number can be determined based on the port belonging to the non-sensitive parameter type in the original data packet and all addresses belonging to the non-sensitive parameter type.

[0125] This method uses address as an auxiliary factor, prioritizing ports belonging to non-sensitive parameter types. This balances computational efficiency and the usability of the results, while also expanding the range of port variations and increasing the likelihood that new port numbers will meet requirements. For example, determining a new port number based on ports and addresses belonging to non-sensitive parameter types in the original data packet can be achieved by adjusting the port correction coefficient and / or address expansion coefficient. It is understood that the port correction coefficient and address expansion coefficient can be adjusted simultaneously or in stages; there are no specific restrictions.

[0126] Figure 3 is a flowchart illustrating another data packet processing method provided in an embodiment of this application. This method is applied to a security detection device in a security classification detection system. As shown in Figure 3, the method includes:

[0127] S301. Obtain the total number of graded detection platforms in the safety graded detection system.

[0128] S302. Based on the port number of the port belonging to the non-sensitive parameter type in the received data packet and the total number of hierarchical detection stations in the security hierarchical detection system, determine the number of the target hierarchical detection station. The data packet is obtained and sent by the target hierarchical detection station through any of the methods provided in the method embodiment shown in Figure 2.

[0129] S303. Based on the target classification detection platform number, send the data packet to the corresponding target classification detection platform.

[0130] Optionally, the target classification detection platform number is determined based on the port number of the port belonging to the non-sensitive parameter type in the received data packet and the total number of classification detection platforms in the security classification detection system, including:

[0131] The calculation is performed using the following expression:

[0132] f(x) = x % n,

[0133] Where f(x) represents the number of the target hierarchical detection platform, x represents the port number of the port belonging to the non-sensitive parameter type in the received data packet, n represents the total number of hierarchical detection platforms in the security hierarchical detection system, and % represents the modulo operation.

[0134] This application also provides a security classification detection system, including at least one classification detection platform for implementing any of the methods provided in the embodiments shown in FIG2, and at least one security detection device for implementing any of the methods provided in the embodiments shown in FIG3. As shown in FIG4, the classification detection platform includes a packet converter, which performs data transformation on the acquired raw data packets based on global data to obtain updated data packets.

[0135] The global data includes the total number of hierarchical detection platforms in the security hierarchical detection system, the number of each hierarchical detection platform, the non-sensitive parameter types of each security detection device, the total number of forwarding cores of each hierarchical detection platform, the traffic splitting algorithm of each hierarchical detection platform, the total number of forwarding cores of each security detection device, and the traffic splitting algorithm of each security detection device.

[0136] The packet converter may include a minimum return module, and may also include at least one of the following: a middleware forwarding core maintenance module, a security device inter-core load balancing module, and an auxiliary factor dynamic expansion module.

[0137] In one possible implementation, the minimum feedback module is used to obtain the original data packet, the total number of hierarchical detection stations in the security hierarchical detection system, the current hierarchical detection station number, and the non-sensitive parameter type of the target security detection device. The non-sensitive parameter type of the security detection device includes ports, which include one of the following: source port and destination port. The module updates the data belonging to the non-sensitive parameter type in the original data packet to obtain the updated data packet. Updating the data belonging to the non-sensitive parameter type in the original data packet includes: determining the candidate port number by the sum of an integer multiple of the total number of hierarchical detection stations and the current hierarchical detection station number; determining whether the connection corresponding to the candidate port number is the same as other existing connections in the hierarchical detection station based on the candidate port number and the original data packet; if not, determining the candidate port number as a new port number; updating the port number of the port belonging to the non-sensitive parameter type in the original data packet to the new port number; and sending the updated data packet to the target security detection device. Determining the candidate port number by the sum of an integer multiple of the total number of hierarchical detection stations and the current hierarchical detection station number includes: calculating using the following expression:

[0138] port_new = 1024 + (n – (1024 % n )) + n * i + y,

[0139] Where port_new represents the port number to be selected, n represents the total number of graded detection platforms in the security graded detection system, i represents the port correction coefficient, i=0,1,2,..., and y represents the number of the current graded detection platform.

[0140] In one possible implementation, the middleware forwarding core maintenance module is used to obtain the total number of forwarding cores of the current hierarchical detection middleware; based on the traffic splitting algorithm of the current hierarchical detection middleware, and according to the total number of forwarding cores of the hierarchical detection middleware, determine the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet; determine whether the first forwarding core and the second forwarding core are the same, and if not, send the core judgment result to the minimum feedback module;

[0141] The minimum feedback module is used to adjust the port correction coefficient and redetermine the new port number to obtain the updated data packets;

[0142] The middle platform forwarding core module and the minimum feedback module are executed alternately until the first forwarding core and the second forwarding core are the same.

[0143] In one possible implementation, the inter-core load balancing module of the security detection device is used to obtain the total number of forwarding cores of the target security detection device; determine the forwarding core of the security detection device corresponding to the updated data packet based on the traffic splitting algorithm of the target security detection device; obtain the minimum number of inter-core connections of the current security detection device; determine whether the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the minimum number of inter-core connections of the current security detection device; if not, the connection number judgment result is sent to the minimum feedback module.

[0144] The minimum feedback module is used to adjust the port correction coefficient and redetermine the new port number to obtain the updated data packets;

[0145] The inter-core load balancing module and the minimum return module of the security device execute alternately until the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the current minimum number of inter-core connections of the security detection device.

[0146] Optionally, the middleware forwarding core maintenance module, the security detection device inter-core load balancing module, and the minimum return module can also be executed alternately in a loop until the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet are the same, and the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the current minimum number of inter-core connections of the security detection device. For a detailed description, please refer to the above method embodiments, which will not be repeated here.

[0147] In one possible implementation, the non-sensitive parameter type of the security detection device also includes an address, which includes at least one of the following: source address or destination address.

[0148] The auxiliary factor dynamic expansion module is used to update the addresses belonging to non-sensitive parameter types in the original data packet to new addresses based on the address expansion coefficient;

[0149] The middle platform forwarding core maintenance module is used to obtain the total number of forwarding cores of the current hierarchical detection middle platform; based on the current traffic splitting algorithm of the hierarchical detection middle platform, it determines the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet according to the total number of forwarding cores of the hierarchical detection middle platform; it determines whether the first forwarding core and the second forwarding core are the same, and if not, it sends the core judgment result to the minimum feedback module.

[0150] The minimum feedback module is used to adjust the port correction coefficient and redetermine the new port number, and / or the auxiliary factor dynamic expansion module is used to adjust the address expansion coefficient and determine the new address, thus obtaining the updated data packet;

[0151] The middle platform forwarding core module, the minimum feedback module, and / or the auxiliary factor dynamic expansion module are executed alternately until the first forwarding core and the second forwarding core are the same.

[0152] Optionally, the middleware forwarding core maintenance module, the security detection device inter-core load balancing module, the minimum feedback module, and / or the auxiliary factor dynamic expansion module can also be executed alternately and cyclically until the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet are the same, and the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the current minimum number of inter-core connections of the security detection device. For a detailed description, please refer to the above method embodiments, which will not be repeated here.

[0153] As shown in Figure 4, the security detection device includes a data packet parser. The data packet parser is used to obtain the total number of hierarchical detection stations in the security hierarchical detection system; determine the target hierarchical detection station number based on the port number of the port belonging to the non-sensitive parameter type in the received data packet and the total number of hierarchical detection stations in the security hierarchical detection system; and send the data packet to the corresponding target hierarchical detection station based on the target hierarchical detection station number.

[0154] Specifically, the packet parser is used to determine the target hierarchical detection platform corresponding to the data packet based on the port number of the port belonging to the non-sensitive parameter type in the received data packet, the total number of hierarchical detection platforms in the security hierarchical detection system, and the decoding algorithm of the current security detection device.

[0155] Optionally, the target classification detection platform number is determined based on the port number of the port belonging to the non-sensitive parameter type in the received data packet and the total number of classification detection platforms in the security classification detection system, including:

[0156] The calculation is performed using the following expression:

[0157] f(x) = x % n,

[0158] Where f(x) represents the number of the target hierarchical detection platform, x represents the port number of the port belonging to the non-sensitive parameter type in the received data packet, n represents the total number of hierarchical detection platforms in the security hierarchical detection system, and % represents the modulo operation.

[0159] Optionally, the packet parser is used to allocate packets to the corresponding cores on the security detection device based on the port number of the port belonging to the non-sensitive parameter type in the received packet, the total number of hierarchical detection platforms in the security hierarchical detection system, and the current traffic splitting algorithm of the security detection device.

[0160] This application also provides an electronic device, including a processor, a memory, and a communication bus, wherein the processor and the memory communicate with each other through the communication bus;

[0161] Memory, used to store computer programs;

[0162] A processor, when executing a program stored in memory, implements any of the methods provided in any of the above embodiments.

[0163] This application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements any of the methods provided in any embodiment.

[0164] It will be understood by those skilled in the art that all or some of the steps, systems, or apparatuses disclosed above, and their functional modules / units, can be implemented as software, firmware, hardware, or suitable combinations thereof. In hardware implementations, the division between functional modules / units mentioned above does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed collaboratively by several physical components. Some or all components may be implemented as software executed by a processor, such as a digital signal processor or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit (ASIC). Such software may be distributed on a computer-readable medium, which may include computer storage media (or non-transitory media) and communication media (or transient media). As is known to those skilled in the art, the term "computer storage medium" includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridges, magnetic tape, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and can be accessed by a computer. Furthermore, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transmission mechanisms, and may include any information delivery medium.

[0165] Furthermore, the terms "first," "second," etc., are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Therefore, a feature defined with "first," "second," etc., may explicitly or implicitly include at least one of those features.

[0166] In the description of this application, "multiple" means at least two, such as two, three, etc., unless otherwise expressly and specifically limited.

[0167] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0168] Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of this application.

Claims

1. A data packet processing method, characterized in that, A tiered detection platform applied in a security tiered detection system includes: acquiring an original data packet, the total number of tiered detection platforms in the security tiered detection system, the current tiered detection platform number, and the non-sensitive parameter type of the target security detection device. The non-sensitive parameter type of the security detection device includes a port, which includes one of the following: a source port or a destination port; updating the data belonging to the non-sensitive parameter type in the original data packet to obtain an updated data packet; wherein, updating the data belonging to the non-sensitive parameter type in the original data packet includes: summing the total number of tiered detection platforms by an integer multiple thereof and the current tiered detection platform number. The following steps are performed: First, determine the candidate port number. Then, based on the candidate port number and the original data packet, determine whether the connection corresponding to the candidate port number is the same as other existing connections in the current hierarchical detection platform. If not, determine the candidate port number as a new port number. Next, update the port numbers of ports belonging to non-sensitive parameter types in the original data packet to the new port number. Finally, send the updated data packet to the target security detection device. The step of determining the candidate port number by the sum of an integer multiple of the total number of hierarchical detection platforms and the number of the current hierarchical detection platform includes: calculating using the following expression: port_new = 1024 + (n – (1024 % n )) + n * i + y, where port_new represents the candidate port number, n represents the total number of hierarchical detection platforms in the security hierarchical detection system, i represents the port correction coefficient (i = 0, 1, 2, ...), and y represents the number of the current hierarchical detection platform.

2. The method according to claim 1, characterized in that, Before sending the updated data packet to the security detection device, the method further includes: obtaining the total number of forwarding cores of the current hierarchical detection platform; based on the traffic splitting algorithm of the current hierarchical detection platform, determining the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet according to the total number of forwarding cores of the current hierarchical detection platform; determining whether the first forwarding core and the second forwarding core are the same, and if not, adjusting the port correction coefficient and re-determining the new port number until the first forwarding core and the second forwarding core are the same.

3. The method according to claim 1, characterized in that, Before sending the updated data packet to the security detection device, the method further includes: obtaining the total number of forwarding cores of the target security detection device; determining the forwarding core of the security detection device corresponding to the updated data packet based on the traffic splitting algorithm of the target security detection device; obtaining the current minimum number of inter-core connections of the security detection device; determining whether the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the current minimum number of inter-core connections of the security detection device; if not, adjusting the port correction coefficient and re-determining the new port number until the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the current minimum number of inter-core connections of the security detection device.

4. The method according to claim 2, characterized in that, Before sending the updated data packet to the security detection device, the method further includes: obtaining the total number of forwarding cores of the target security detection device; determining the forwarding core of the security detection device corresponding to the updated data packet based on the traffic splitting algorithm of the target security detection device; obtaining the current minimum number of inter-core connections of the security detection device; determining whether the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the current minimum number of inter-core connections of the security detection device; if not, adjusting the port correction coefficient and re-determining the new port number until the first forwarding core and the second forwarding core are the same, and the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the current minimum number of inter-core connections of the security detection device.

5. The method according to claim 1, characterized in that, The non-sensitive parameter types of the security detection device also include addresses, and the addresses include at least one of the following: source address and destination address; updating the data belonging to the non-sensitive parameter type in the original data packet further includes: updating the addresses belonging to the non-sensitive parameter type in the original data packet to new addresses according to the address expansion coefficient; before sending the updated data packet to the security detection device, the method further includes: obtaining the total number of forwarding cores of the current hierarchical detection platform; based on the traffic splitting algorithm of the current hierarchical detection platform, determining the first forwarding core corresponding to the original data packet and the second forwarding core corresponding to the updated data packet according to the total number of forwarding cores of the current hierarchical detection platform; determining whether the first forwarding core and the second forwarding core are the same, if not, adjusting the port correction coefficient and re-determining the new port number, and / or adjusting the address expansion coefficient and re-determining the new address, until the first forwarding core and the second forwarding core are the same.

6. The method according to claim 5, characterized in that, Before sending the updated data packet to the security detection device, the method further includes: obtaining the total number of forwarding cores of the target security detection device; determining the forwarding core of the security detection device corresponding to the updated data packet based on the traffic splitting algorithm of the target security detection device; obtaining the current minimum number of inter-core connections of the security detection device; determining whether the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the current minimum number of inter-core connections of the security detection device; if not, adjusting the port correction coefficient and re-determining the new port number, and / or adjusting the address extension coefficient and re-determining the new address, until the first forwarding core and the second forwarding core are the same, and the number of connections corresponding to the forwarding core of the security detection device corresponding to the updated data packet is the same as the current minimum number of inter-core connections of the security detection device.

7. A data packet processing method, characterized in that, A security detection device applied to a security classification detection system includes: obtaining the total number of classification detection stations in the security classification detection system; determining the number of a target classification detection station based on the port number of a port belonging to a non-sensitive parameter type in a received data packet and the total number of classification detection stations in the security classification detection system, wherein the data packet is obtained and sent by the target classification detection station through processing by any one of the methods described in claims 1-6; and sending the data packet to the corresponding target classification detection station according to the number of the target classification detection station.

8. A safety classification detection system, characterized in that, It includes at least one graded detection platform for implementing the method as described in any one of claims 1-6 and at least one security detection device for implementing the method as described in claim 7.

9. An electronic device, characterized in that, It includes a processor, a memory, and a communication bus, wherein the processor and the memory communicate with each other through the communication bus; the memory is used to store computer programs; and the processor, when executing the program stored in the memory, implements the method as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the method as described in any one of claims 1-7.

Images