Address mapping table updating method, electronic equipment, storage medium and program product

Abstract

The embodiment of the invention provides an address mapping table updating method, electronic equipment, a storage medium and a program product. The network address change information is actively reported by the terminal equipment or the server-side equipment, and a passive mode of periodic scanning of gateway equipment in the prior art is replaced, so that the updating efficiency and the real-time performance of the address mapping table are remarkably improved; meanwhile, whether the address change information conforms to the network access strategy or not is checked through the preset checking model, updating operation is executed only when the change information passes verification and conforms to the access strategy, illegal and non-compliant address change information can be effectively filtered, network security risks and communication anomalies caused by invalid or illegal updating are avoided, and the user experience is improved. The security and the stability of network operation are improved; in addition, the gateway does not need to execute full-amount periodic scanning, computing resources and network bandwidth occupation of gateway equipment are reduced, and the overall service performance of the gateway is optimized.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to an address mapping table update method, electronic device, storage medium, and program product. Background Technology

[0002] With the rapid development of IoT and cloud computing technologies, the number of terminal and server devices has surged, and network communication between devices has become increasingly frequent. As a key node connecting different networks, the gateway's internal address mapping table is the core foundation for enabling device address resolution and ensuring smooth communication links.

[0003] In the prior art, gateway devices periodically scan linked network devices to update their address mapping tables.

[0004] However, periodic scanning has an inherent time lag. When the address of a terminal device or server device changes, the gateway cannot capture the change information in real time, resulting in low efficiency of address mapping table updates. Summary of the Invention

[0005] The address mapping table update method, electronic device, storage medium, and program product provided in this application are used to improve the update efficiency of seismic mapping tables.

[0006] In a first aspect, embodiments of this application provide an address mapping table update method, including:

[0007] Obtain network address change information. Address change information is the information sent to the gateway device when the network address of the terminal device or server device changes.

[0008] Input the network address change information into the preset verification model to obtain the verification result. The verification result is used to indicate whether the network address change information complies with the preset network access policy.

[0009] When the network address change information is verified and the verification result indicates that it conforms to the preset network access policy, the address mapping table of the gateway device is updated to obtain the updated address mapping table.

[0010] Output the updated address mapping table.

[0011] Secondly, embodiments of this application provide an address mapping table updating apparatus, comprising:

[0012] The acquisition module is used to acquire network address change information, which is the information sent to the gateway device when the network address of the terminal device or server device changes.

[0013] The processing module is used to input network address change information into a preset verification model and obtain verification results. The verification results are used to indicate whether the network address change information complies with the preset network access policy.

[0014] The processing module is also used to update the address mapping table of the gateway device when the network address change information is verified and the verification result indicates that it conforms to the preset network access policy, so as to obtain the updated address mapping table.

[0015] The output module is used to output the updated address mapping table.

[0016] Thirdly, embodiments of this application provide an electronic device, including: a memory and a processor;

[0017] The memory stores instructions that the computer executes;

[0018] The processor executes computer execution instructions stored in memory, causing the processor to perform the first aspect and / or various possible implementations of the first aspect as described above.

[0019] Fourthly, embodiments of this application provide a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, are used to implement the first aspect and / or various possible implementations of the first aspect.

[0020] Fifthly, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the first aspect and / or various possible implementations of the first aspect.

[0021] The address mapping table update method, electronic device, storage medium, and program product provided in this application replace the passive mode of periodic scanning by gateway devices in the prior art by having terminal devices or server devices actively report network address change information. This effectively eliminates the information lag problem caused by the inherent time difference of scanning, significantly improves the update efficiency and real-time performance of the address mapping table, and ensures timely and smooth communication links between devices. At the same time, by using a preset verification model to verify whether the address change information complies with the network access policy, the update operation is only performed when the change information passes the verification and complies with the access policy. This can effectively filter illegal and non-compliant address change information, avoid network security risks and communication anomalies caused by invalid or illegal updates, and improve the security and stability of network operation. In addition, the gateway does not need to perform a full periodic scan, which reduces the computing resources and network bandwidth consumption of the gateway device, optimizes the overall service performance of the gateway, and makes it more suitable for the application needs of massive device interaction in the current Internet of Things and cloud computing scenarios. Attached Figure Description

[0022] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0023] Figure 1 A flowchart illustrating the address mapping table update method provided in this application embodiment. Figure 1 ;

[0024] Figure 2 A flowchart illustrating the address mapping table update method provided in this application embodiment. Figure 2 ;

[0025] Figure 3 A flowchart illustrating the address mapping table update method provided in this application embodiment. Figure 3 ;

[0026] Figure 4 This is a schematic diagram of the address mapping table updating device provided in the embodiments of this application;

[0027] Figure 5 This is a schematic diagram of the gateway device provided in an embodiment of this application.

[0028] The accompanying drawings have illustrated specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to specific embodiments. Detailed Implementation

[0029] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0030] To address the technical problem of low address mapping table update efficiency caused by the gateway's inability to capture change information in real time, the following technical concept is proposed: First, when a terminal device or server device actively sends network address change information to the gateway device, the gateway can directly obtain the change data without waiting for a scanning cycle, thus solving the problem of unreal-time change information capture at the source. Second, to avoid network security risks or communication anomalies caused by illegal or non-compliant address change information, a preset verification model is introduced to verify the received address change information. The core of the verification focuses on whether the change information conforms to the preset network access policy (such as whether the changed address is in the allowed access network segment and whether it matches the device's access permissions). Third, a dual verification pass condition is set. The gateway device's address mapping table update operation is only triggered when the address change information itself is genuine and valid (such as passing basic verifications such as device identity verification) and the verification model indicates that it conforms to the preset network access policy, ensuring the security and compliance of the update. Finally, the updated address mapping table is output to ensure that the gateway's subsequent address resolution and communication link scheduling are based on the latest and legitimate address information, ultimately achieving a dual improvement in the efficiency and security of address mapping table updates.

[0031] The technical solution of this application and how the technical solution of this application solves the above-mentioned technical problems are described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will be described below with reference to the accompanying drawings.

[0032] Figure 1 A flowchart illustrating the address mapping table update method provided in this application embodiment. Figure 1 The method described above in this application embodiment can be applied to any gateway device. For example... Figure 1 As shown, the method includes:

[0033] S101. Obtain network address change information. Address change information is information sent to the gateway device when the network address of the terminal device or server device changes.

[0034] In this context, a gateway device is a device located at the intersection of two or more different networks, possessing network interconnection capabilities. It can perform core functions such as conversion between different network protocols, data forwarding, and address mapping, serving as a "bridge" for data interaction between terminal devices and server devices, as well as between different networks. The device is the subject of execution in this method.

[0035] Terminal devices are end-node devices that are directly operated by users or used for data collection and interaction, such as personal computers, smartphones, smart cameras, and industrial sensors. They are the initiators or receivers of network data.

[0036] Server-side equipment is equipment that provides services (such as data storage, business processing, resource sharing, etc.) to terminal devices, such as database servers, application servers, cloud hosts, etc., and is the core node providing network services.

[0037] Specifically, when the network address of a terminal device or server device changes (e.g., a terminal device switches networks resulting in a change in its IP address, or a server device adds new IP addresses after expansion), these devices proactively send "network address change information" containing details of the change to the gateway device. The gateway device receives this information through its own communication interface (such as an Ethernet interface or a wireless communication interface) and completes the initial collection and storage of the information, providing data input for subsequent verification steps. This step is the "data entry point" of the entire update process, ensuring that the gateway device can promptly detect changes in device addresses.

[0038] S102. Input the network address change information into the preset verification model to obtain the verification result. The verification result is used to indicate whether the network address change information complies with the preset network access policy.

[0039] The verification model is a pre-set algorithm or rule engine within the gateway device used to verify the legality and compliance of network address change information. It incorporates pre-defined network access policy-related judgment logic, enabling automated verification of input address change information and outputting the verification results.

[0040] Network access policies are a set of rules pre-configured on gateway devices to regulate network access behavior. They include allowing / denying access from specific addresses, limiting the scope of address changes, and specifying the types of devices authorized to make address changes. The purpose is to ensure the security and orderliness of network access and prevent risks to the network from unauthorized address changes or unauthorized access.

[0041] Specifically, the gateway device receives network address change information and inputs it into a pre-deployed verification model according to a preset format. The verification model automatically judges the input change information based on the built-in network access policy (such as judging whether the changed address is within the allowed address range, whether the device initiating the change is a legitimate authorized device, and whether the address change process conforms to preset specifications, etc.), and finally generates a verification result of "conforms to the preset network access policy" or "does not conform to the preset network access policy". This result is the key basis for determining whether to perform the update operation in the future.

[0042] S103. When the network address change information is verified and the verification result indicates that it conforms to the preset network access policy, the address mapping table of the gateway device is updated to obtain the updated address mapping table.

[0043] Network address change information refers to the information generated and sent to the gateway device when the network address of a terminal device (such as a computer, mobile phone, or IoT terminal) or a server device (such as a server or database host) changes. It includes key information such as the address before the change, the address after the change, the device identifier, and the change time, and is the core triggering data for subsequent address mapping table updates.

[0044] Specifically, the first prerequisite is that "the network address change information is verified" (here, "verification" can be understood as basic legality verification, such as whether the information format is complete, whether there is data tampering, etc., forming a double verification with the "verification model" mentioned above). The second prerequisite is that "the verification result indicates that it conforms to the preset network access policy". When both prerequisites are met, the gateway device locates the old address record corresponding to the changed device in the address mapping table, replaces it with the new address information after the change, and completes the dynamic update of the mapping table to ensure that the mapping table data is consistent with the actual device address status. If either prerequisite is not met (such as information verification failure or non-compliance with the access policy), the update operation is not performed to avoid illegal or non-compliant address information entering the mapping table and causing network failure.

[0045] S104. Output the updated address mapping table.

[0046] Specifically, the gateway device will synchronize the updated address mapping table to its own forwarding module, routing module and other related functional modules, or send the updated mapping table to the network management system and other related devices as needed.

[0047] It is possible to automatically record complete traceability information for this address mapping table update while outputting the updated mapping table, including but not limited to the update time, the device identifier that triggered the update, specific information before and after the address change, and the verification results of the verification model, forming a traceable update log. The purpose is twofold: firstly, to ensure that each functional module of the gateway device can perform subsequent network operations such as data forwarding and routing decisions based on the latest address mapping information, ensuring the accuracy and continuity of network communication; secondly, to achieve full-process traceability of the update behavior through traceability, facilitating subsequent network fault diagnosis (such as communication interruptions caused by address mapping anomalies), access security auditing, and accountability, further improving the standardization and security of network management.

[0048] The address mapping table update method provided in this application replaces the passive mode of periodic scanning by gateway devices in the prior art by having terminal devices or server devices actively report network address change information. This effectively eliminates the information lag problem caused by the inherent time difference of scanning, significantly improves the update efficiency and real-time performance of the address mapping table, and ensures timely and smooth communication links between devices. At the same time, by using a preset verification model to verify whether the address change information complies with the network access policy, the update operation is only performed when the change information passes the verification and complies with the access policy. This can effectively filter illegal and non-compliant address change information, avoid network security risks and communication anomalies caused by invalid or illegal updates, and improve the security and stability of network operation. In addition, the absence of a full periodic scan by the gateway reduces the computing resources and network bandwidth consumption of the gateway device, optimizes the overall service performance of the gateway, and makes it more suitable for the application needs of massive device interaction in the current Internet of Things and cloud computing scenarios.

[0049] Figure 2 A flowchart illustrating the address mapping table update method provided in this application embodiment. Figure 2 .like Figure 2 As shown, the method includes:

[0050] S201. Receive the first certificate sent by the terminal device. The first certificate includes the terminal device's identity identifier, timestamp, private key signature of the operator to which it belongs, and the current Internet Protocol IP address and port range.

[0051] The first certificate is a credential file sent by the terminal device to the gateway device for identity authentication and address information confirmation. It contains key information such as the terminal device's identity identifier, timestamp, carrier private key signature, current IP address, and port range. It is the core basis for the gateway device to verify the legitimacy of the terminal device and obtain network address change information.

[0052] An identity identifier is a unique identifier used to distinguish terminal devices, such as a device serial number. Its core function is to enable gateway devices to accurately locate the terminal devices that send address change information, providing a unique index for subsequent matching of public keys and associating address mapping entries.

[0053] A timestamp is a time information contained in the first certificate that records when the certificate was generated. It is used to verify the validity of the certificate, prevent terminal devices from reusing old certificates to initiate illegal address change requests (preventing replay attacks), and ensure the timeliness and validity of address change information.

[0054] Carrier private key signing is an encrypted signature performed by the terminal device's carrier using its own private key on the content of the initial certificate. It is a core proof of the terminal device's legitimacy and can be subsequently verified using the corresponding public key to ensure that the certificate content has not been tampered with and that the sender is a legitimate, authorized terminal.

[0055] An Internet Protocol (IP) address is the logical address of a terminal device on the Internet, used to locate devices within the network and for target addressing in data transmission. Here, it specifically refers to the terminal device's current IP address in the first certificate, and is one of the core data points for updating the address mapping table.

[0056] A port range is the range of ports used by a terminal device for network communication. The combination of port and IP address can accurately locate the specific communication process on the device, and the address mapping table needs to be updated synchronously to ensure that data can be accurately delivered to the corresponding process.

[0057] Specifically, when a terminal device experiences a network address change (such as switching networks or dynamic IP address updates), it generates a first certificate (signed by its operator using a private key) containing key information such as its own identity and current IP address, and sends it to the gateway device. The gateway device receives this first certificate through a pre-defined communication interface (such as an Ethernet interface or a wireless communication interface), completing the initial data collection and laying the foundation for subsequent information extraction and identity verification. The core value of this step is to obtain "address change-related data with identity credentials," preventing the receipt of unauthorized information without an identity.

[0058] S202. Obtain network address change information based on the first certificate.

[0059] Specifically, after receiving the first certificate, the gateway device parses the certificate content and extracts core address information such as the current IP address and port range of the terminal device from the certificate. Combined with the identity identifier, timestamp and other information in the certificate, it integrates them to form complete "network address change information" (including the subject of the change, the changed address information, the change time, etc.).

[0060] S203. Input the network address change information into the preset verification model to obtain the verification result. The verification result is used to indicate whether the network address change information conforms to the preset network access policy.

[0061] S204. When the network address change information is verified and the verification result indicates that it conforms to the preset network access policy, update the address mapping table of the gateway device to obtain the updated address mapping table.

[0062] In one possible implementation, the corresponding public key is determined based on the identity of the terminal device; when the signature verification of the private key using the public key is successful, the address mapping table of the gateway device is updated based on the current IP address of the terminal device.

[0063] The public key is a decryption / verification key paired with the private key of the terminal device's operator, and is pre-stored in the gateway device. Its core function is to verify the signature of the private key in the first certificate, confirming the validity of the signature (i.e., confirming that the sender is a legitimate terminal authorized by the operator).

[0064] Specifically, the gateway device pre-stores the public keys of each operator (which correspond one-to-one with the private keys in the first certificate of the terminal device), as well as the association between the terminal device's identity identifier and its operator. After obtaining the terminal device's identity identifier in the first certificate, the gateway device uses the identity identifier to locate its operator, and then matches and obtains the corresponding public key from the pre-stored data.

[0065] The gateway device uses the matched public key to decrypt and verify the operator's private key signature in the first certificate. The verification logic is as follows: if the public key can successfully decrypt the private key signature, and the decrypted data is consistent with other information in the certificate (such as identity identifier and timestamp), it means that the terminal device is a legitimate device authorized by the operator, the content of the first certificate has not been tampered with, and the verification passes; otherwise, the verification fails, and no subsequent update operation is performed.

[0066] Once the private key signature verification is successful, the gateway device, based on the current IP address and port range of the terminal device extracted from the first certificate, locates the old address mapping entry corresponding to that terminal device in the address mapping table, and replaces the old IP address, port range, and other information with the new information, thus completing the address mapping table update. This step, through a public-private key encryption verification mechanism, ensures that only address changes of legitimate terminals can trigger the mapping table update, avoiding network security risks caused by unauthorized devices forging address change information, while accurately completing the dynamic update of the terminal device address mapping relationship.

[0067] S205. Output the updated address mapping table.

[0068] Sending the first certificate containing identity information, timestamp, and operator private key signature by the terminal device not only provides complete data support for subsequent identity verification, but also prevents replay attacks by leveraging the certificate's validity period (timestamp), and ensures the legitimacy and integrity of the information source through the operator's signature. This prevents the address change information sent by the terminal device from being tampered with or forged, ensuring that the address change information obtained by the gateway device is authentic and reliable, and laying the foundation for the security of subsequent mapping table updates.

[0069] By employing an encrypted verification logic of "identity identifier matching public key + public key verification of private key signature," illegal terminal devices can be effectively identified. Only legitimate terminals authorized by the operator are allowed to trigger address mapping table updates. This eliminates security risks such as network address conflicts and data leaks caused by illegal devices forging address change information. At the same time, it ensures that the address mapping table only synchronizes the real address changes of legitimate terminals, guaranteeing the accuracy of the mapping table data and the security of network communication.

[0070] Figure 3 A flowchart illustrating the address mapping table update method provided in this application embodiment. Figure 3 .like Figure 3 As shown, the method includes:

[0071] S301. Receive the first message sent by the server device. The first message includes the media access control address of the server device, the current IP address, and the port range.

[0072] The first message is a network data unit sent by the server device to the gateway device, carrying information related to address changes. Its core includes key information such as the server device's Media Access Control address, current IP address, and port range; it is the core data carrier for the gateway device to obtain information about server network address changes.

[0073] The Media Access Control (MAC) address is the physical address of the server device's network interface card. It is globally unique and used to identify the device's physical identity within a local area network. As a core identifier for verifying the server device's legitimacy, it ensures that the gateway can accurately identify the server's identity.

[0074] Specifically, it receives address change-related data proactively sent by the server. When the server device experiences a network address change (such as device migration, IP reassignment, port adjustment, etc.), it generates a first packet containing its own MAC address, current IP address, and port range, and sends it to the gateway device via the network. The gateway device receives this first packet through a preset network interface, completing the initial data collection and preparing for subsequent parsing and information extraction.

[0075] S302. Obtain network address change information based on the first message.

[0076] Specifically, after receiving the first message, the gateway device parses the data packet structure of the message and extracts core information such as the MAC address, current IP address, and port range of the server device from the message, and integrates them to form complete "network address change information" (including the subject of the change, the changed address information, etc.).

[0077] S303. Input the network address change information into the preset verification model to obtain the verification result. The verification result is used to indicate whether the network address change information complies with the preset network access policy.

[0078] S304. When the network address change information is verified and the verification result indicates that it conforms to the preset network access policy, update the address mapping table of the gateway device to obtain the updated address mapping table.

[0079] In one possible implementation, a list of trusted server devices is obtained; when a media access control address with the same media access control address as the server device exists in the list of trusted server devices, the address mapping table of the gateway device is updated based on the first message.

[0080] The trusted server device list is a collection of authenticated and legitimate server device information pre-configured and stored by the gateway device. The list includes core identity information such as the MAC address of each trusted server, and serves as the basis for the gateway to determine whether the server sending the first packet is legitimate.

[0081] Specifically, the gateway device pre-stores a list of authenticated trusted server devices. When server legitimacy needs to be verified, the gateway device retrieves this list from its local storage module as the benchmark for subsequent identity comparison. The gateway device compares the server's MAC address extracted from the first packet with the MAC addresses in the retrieved list of trusted server devices one by one. If a record with an identical MAC address exists in the list, the server device is considered an authenticated and legitimate device, and the verification passes; otherwise, it is deemed an illegitimate device, and no further update operation is performed. After the legitimacy verification passes, the gateway device, based on the server's current IP address, port range, and other information extracted from the first packet, locates the corresponding old address mapping entry in the address mapping table and replaces the old address information with the new information, completing the initial update of the address mapping table.

[0082] In one possible implementation, a first address mapping entry for the server device is determined based on the address mapping table. The first address mapping entry is the address mapping entry corresponding to the server device before the address mapping table is updated. The first address mapping entry is retained in the address mapping table until the address mapping table is updated, after which it is deleted.

[0083] The first address mapping entry is the old address mapping record corresponding to the target server device before the address mapping table is updated. This entry contains the mapping relationship of the server device's IP address, port range, MAC address, etc. before the update, and is crucial to ensuring the continuity of data communication during the update.

[0084] The preset duration is the time period for retaining the first address mapping entry, which is pre-set by the gateway device. The duration setting needs to balance the continuity of data transmission (avoiding instantaneous disconnection during updates) and the simplicity of the mapping table (avoiding old entries occupying resources for a long time). The specific duration can be flexibly configured according to the network scenario.

[0085] Specifically, the gateway device first locates the old address mapping record (i.e., the first address mapping entry) corresponding to the server in the current address mapping table based on the server's MAC address (extracted from the first packet), and then determines the old data content that needs to be retained.

[0086] When performing an address mapping table update operation, the first address mapping entry (old entry) is not deleted immediately. Instead, both the old entry and the newly updated entry are retained in the mapping table to ensure that if a data packet is transmitted to the old address at this moment, it can still be forwarded through the old entry, thus avoiding disconnection.

[0087] After the address mapping table is updated, the gateway device starts a timer of a preset duration to begin counting down. The timing period is a pre-configured preset duration, which is sufficient to cover the delay in data packet transmission that may occur during the update.

[0088] When the timer finishes its countdown (i.e., the preset duration ends), the gateway device automatically deletes the first retained address mapping entry and only retains the updated new address mapping entry, ensuring the simplicity of the address mapping table and avoiding old entries from occupying storage resources for a long time or causing address conflicts.

[0089] S305. Output the updated address mapping table.

[0090] By carrying core information such as the MAC address, current IP address, and port range in the first message, the process of transmitting address change information from the server to the gateway device is simplified, improving the efficiency of information transmission and acquisition. At the same time, using the globally unique MAC address as the core carrier of the server's identity identification provides an accurate and reliable identity basis for subsequent server legitimacy verification, balancing the efficiency of server address change information acquisition with the uniqueness of identity identification.

[0091] By pre-setting a list of trusted server devices and comparing their MAC addresses, the system achieves fast and accurate verification of server identities. It can efficiently block address change requests from unauthorized servers, avoiding security risks such as service hijacking and data tampering caused by unauthorized server access to the network. At the same time, it only allows trusted servers to trigger mapping table updates, ensuring the security and reliability of server address mapping relationship updates and guaranteeing the stable operation of network services that rely on the servers.

[0092] By employing an optimized design that combines "retaining old address mapping entries with deletion after a preset time," the potential communication interruption issue during server-side address mapping table updates is effectively resolved. Retaining both old and new address mapping entries for a preset time after the update ensures that delayed data packets can still be addressed and forwarded using the old entries, preventing packet loss. Deleting the old entries after the preset time ensures the simplicity of the address mapping table, preventing old entries from occupying resources for extended periods or causing address conflicts. This achieves a balance between the timeliness of server-side address updates and communication continuity, improving network service stability and user experience.

[0093] Figure 4 This is a schematic diagram of the address mapping table updating device provided in the embodiments of this application, as shown below. Figure 4 As shown, the address mapping table update device 40 provided in this embodiment includes an acquisition module 401, a processing module 402, and an output module 403.

[0094] The acquisition module 401 is used to acquire network address change information, which is the information sent to the gateway device when the network address of the terminal device or the server device changes.

[0095] The processing module 402 is used to input network address change information into a preset verification model to obtain verification results. The verification results are used to indicate whether the network address change information conforms to the preset network access policy.

[0096] The processing module 402 is also used to update the address mapping table of the gateway device when the network address change information is verified and the verification result indicates that it conforms to the preset network access policy, so as to obtain the updated address mapping table.

[0097] Output module 403 is used to output the updated address mapping table.

[0098] In one possible implementation, the acquisition module 401 is specifically used for:

[0099] The first certificate sent by the receiving terminal device includes the terminal device's identity identifier, timestamp, private key signature of the operator to which it belongs, and the current Internet Protocol IP address and port range;

[0100] Obtain network address change information based on the first certificate.

[0101] In one possible implementation, the processing module 402 is specifically used for:

[0102] Determine the corresponding public key based on the identity of the terminal device;

[0103] When the signature verification between the public key and the private key is successful, the address mapping table of the gateway device is updated based on the current IP address of the terminal device.

[0104] In one possible implementation, the acquisition module 401 is specifically used for:

[0105] Receive the first message sent by the server device. The first message includes the media access control address of the server device, the current IP address, and the port range.

[0106] Based on the first message, obtain network address change information.

[0107] In one possible implementation, the processing module 402 is specifically used for:

[0108] Obtain a list of trusted server devices;

[0109] When a media access control address with the same media access control address as the server device exists in the list of trusted server devices, the address mapping table of the gateway device is updated based on the first message.

[0110] In one possible implementation, the processing module 402 is further configured to:

[0111] Based on the address mapping table, the first address mapping entry of the server device is determined. The first address mapping entry is the address mapping entry of the server device before the address mapping table is updated.

[0112] The first address mapping entry is retained in the address mapping table until the address mapping table is updated, after which it is deleted.

[0113] The address mapping table update device provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0114] Figure 5 This is a schematic diagram of the gateway device provided in an embodiment of this application. Figure 5 As shown, the gateway device 50 provided in this embodiment includes at least one processor 501 and a memory 502. Optionally, the gateway device 50 further includes a communication component 503. The processor 501, memory 502, and communication component 503 are connected via a bus.

[0115] In a specific implementation, at least one processor 501 executes computer execution instructions stored in memory 502, causing at least one processor 501 to perform the above-described method.

[0116] The specific implementation process of processor 501 can be found in the above method embodiments, and its implementation principle and technical effect are similar. It will not be repeated here.

[0117] In the above embodiments, it should be understood that the processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), etc. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in this invention can be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules within the processor.

[0118] The memory may include random access memory (RAM) and may also include non-volatile memory (NVM), such as at least one disk storage device.

[0119] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of illustration, the buses shown in the accompanying drawings are not limited to a single bus or a single type of bus.

[0120] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the above-described method.

[0121] This application also provides a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, implement the above-described method.

[0122] The aforementioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. The readable storage medium can be any available medium accessible to a general-purpose or special-purpose computer.

[0123] An exemplary readable storage medium is coupled to a processor, enabling the processor to read information from and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can reside in an Application Specific Integrated Circuit (ASIC). Alternatively, the processor and the readable storage medium can exist as discrete components in the device.

[0124] The division of units is merely a logical functional division; in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be indirect coupling or communication connection through some interfaces, devices, or units, and may be electrical, mechanical, or other forms.

[0125] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment, depending on actual needs.

[0126] In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0127] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0128] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0129] Finally, it should be noted that other embodiments of the invention will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This invention is intended to cover any variations, uses, or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not disclosed herein, and is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of the invention is limited only by the appended claims.

Claims

1. A method for updating an address mapping table, characterized in that, Applied to gateway devices, including: Obtain network address change information, which is information sent to the gateway device when the network address of the terminal device or server device changes; The network address change information is input into a preset verification model to obtain a verification result. The verification result is used to indicate whether the network address change information conforms to a preset network access policy. When the network address change information is verified and the verification result indicates that it conforms to the preset network access policy, the address mapping table of the gateway device is updated to obtain the updated address mapping table. Output the updated address mapping table.

2. The method according to claim 1, characterized in that, The acquisition of network address change information includes: The terminal device receives a first certificate, which includes the terminal device's identity identifier, timestamp, private key signature of the operator to which it belongs, and the current Internet Protocol IP address and port range. Based on the first certificate, obtain the network address change information.

3. The method according to claim 2, characterized in that, The update of the address mapping table of the gateway device includes: Based on the identity identifier of the terminal device, the corresponding public key is determined; When the signature verification of the private key using the public key is successful, the address mapping table of the gateway device is updated based on the current IP address of the terminal device.

4. The method according to claim 1, characterized in that, The acquisition of network address change information includes: Receive a first message sent by the server device, the first message including the media access control address of the server device, the current IP address and port range; Based on the first message, obtain the network address change information.

5. The method according to claim 4, characterized in that, The update of the address mapping table of the gateway device includes: Obtain a list of trusted server devices; When a media access control address with the same media access control address as the server device exists in the list of trusted server devices, the address mapping table of the gateway device is updated based on the first message.

6. The method according to claim 5, characterized in that, When updating the address mapping table of the gateway device based on the first message, the following is included: Based on the address mapping table, a first address mapping entry for the server device is determined. The first address mapping entry is the address mapping entry for the server device before the address mapping table is updated. The first address mapping entry is retained in the address mapping table until it is updated, after which it is deleted.

7. An address mapping table updating device, characterized in that, Applied to gateway devices, including: The acquisition module is used to acquire network address change information, which is information sent to the gateway device when the network address of the terminal device or the server device changes. The processing module is used to input the network address change information into a preset verification model to obtain a verification result. The verification result is used to indicate whether the network address change information conforms to a preset network access policy. The processing module is further configured to update the address mapping table of the gateway device when the network address change information is verified and the verification result indicates that it conforms to the preset network access policy, so as to obtain the updated address mapping table. The output module is used to output the updated address mapping table.

8. A gateway device, characterized in that, include: Memory, processor; The memory stores computer-executed instructions; The processor executes computer execution instructions stored in the memory, causing the processor to perform the method as described in any one of claims 1-6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method as described in any one of claims 1-6.

10. A computer program product, characterized in that, Includes a computer program that, when executed by a processor, implements the method described in any one of claims 1-6.

Images