Request data processing method, device and equipment and computer storage medium

Abstract

The invention discloses a request data processing method and device, equipment and a computer storage medium. The method obtains a first request data packet. And adding a data packet header carrying the target information to the first request data packet by using the gateway of the first autonomous system to obtain a second request data packet. And encrypting the path position information and the computing power information corresponding to the first autonomous system to obtain encrypted information. And storing the encrypted information to the second request data packet. Therefore, the second autonomous system can verify the second request data packet, the probability that the second request data packet is tampered is reduced, and the security of the computing power network is improved.

Description

Technical Field

[0001] This field relates to the field of communication networks, and more particularly to a method, apparatus, device, computer storage medium, and computer program product for requesting data processing. Background Technology

[0002] A computing power network refers to a communication network that integrates computing resources to provide computing power services to users. The core construction technology of traditional computing power networks relies on the Border Gateway Protocol (BGP) and the integrated application of the IPv6-based Segment Routing Over IPv6 protocol.

[0003] However, due to the inherent characteristics of the BGP protocol, data packets are easily hijacked and tampered with during routing and forwarding, thereby reducing the security of computing networks. Summary of the Invention

[0004] This disclosure provides a method, apparatus, device, computer storage medium, and computer program product for requesting data processing, which can improve the security of computing networks.

[0005] In a first aspect, embodiments of this disclosure provide a method for requesting data processing, applied to a first autonomous system, the method comprising:

[0006] Obtain the first request data packet;

[0007] The gateway of the first autonomous system adds a header carrying target information to the first request data packet to obtain the second request data packet. The target information is obtained through the computing power information processing terminal. The target information includes target path information, which includes path information composed of the first autonomous system and the second autonomous system.

[0008] The path location information and computing power information corresponding to the first autonomous system are encrypted to obtain encrypted information, which is used for decryption and verification by the second autonomous system.

[0009] Store the encrypted information in the second request data packet;

[0010] A second request data packet is sent to the second autonomous system based on the target path information.

[0011] In one feasible implementation, before adding a header carrying the target information to the first request packet using the gateway of the first autonomous system, the method further includes:

[0012] Obtain the third request data packet;

[0013] By using the gateway of the third autonomous system to add a header to the third request data packet, a fourth request data packet is obtained;

[0014] Upon detecting a fourth request data packet, the third autonomous system sends detection information to multiple autonomous systems within a preset range, and obtains path information composed of multiple autonomous systems and computing power information corresponding to each of the multiple autonomous systems based on the detection information;

[0015] The path information consisting of multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems are sent to the computing power information processing terminal.

[0016] The target information sent by the computing power information processing terminal is obtained. The target information corresponds to the path information composed of multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems.

[0017] In one feasible implementation, the autonomous systems within the preset range include upstream autonomous systems and downstream autonomous systems. The distance between the upstream autonomous system and the third autonomous system is less than a preset threshold, and the distance between the downstream autonomous system and the third autonomous system is greater than or equal to the preset threshold. The upstream autonomous system is used to add the path information and computing power information corresponding to the upstream autonomous system to the detection information and send it to the downstream autonomous system. The downstream autonomous system is used to send detection response information to the third autonomous system. The detection response information includes the path information and computing power information corresponding to the downstream autonomous system and the path information and computing power information corresponding to the upstream autonomous system.

[0018] In one feasible implementation, upon detecting a fourth request data packet, after sending detection information to multiple autonomous systems within a preset range via a third autonomous system to obtain path information of the multiple autonomous systems and computing power information corresponding to each of the multiple autonomous systems, the method further includes:

[0019] The path information composed of multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems are encrypted to obtain the target encrypted information;

[0020] Add the path information of multiple autonomous systems and the computing power information corresponding to each autonomous system to the header of the fourth request data packet; store the target encrypted information in the fourth request data packet;

[0021] The fourth request data packet is sent to the fourth autonomous system based on the path information composed of multiple autonomous systems.

[0022] In one feasible implementation, after sending the fourth request data packet to the fourth autonomous system according to the path information composed of multiple autonomous systems, the method further includes:

[0023] The target encrypted information of the fourth request data packet is decrypted using the fourth autonomous system to obtain the target decryption result;

[0024] If the target decryption result matches the corresponding path information and computing power information in the header of the fourth request data packet, the fourth request data packet is sent to the fifth autonomous system according to the path information composed of multiple autonomous systems.

[0025] In one feasible implementation, after sending the second request data packet to the second autonomous system based on the target path information, the method further includes:

[0026] The encrypted information of the second request data packet is decrypted using the second autonomous system to obtain the decryption result;

[0027] If the decryption result matches the corresponding path information and computing power information in the header of the second request data packet, the second request data packet is sent to the sixth autonomous system according to the target path information.

[0028] Secondly, embodiments of this disclosure provide a request data processing apparatus applied to a first autonomous system, the apparatus comprising:

[0029] The acquisition module is used to acquire the first request data packet;

[0030] An addition module is used to add a data packet header carrying target information to a first request data packet using the gateway of the first autonomous system, thereby obtaining a second request data packet. The target information is obtained through a computing power information processing terminal and includes target path information, which includes path information composed of the first autonomous system and the second autonomous system.

[0031] The encryption module is used to encrypt the path location information and computing power information corresponding to the first autonomous system to obtain encrypted information, which is used for decryption and verification by the second autonomous system.

[0032] A storage module is used to store encrypted information into the second request data packet;

[0033] The sending module is used to send a second request data packet to the second autonomous system based on the target path information.

[0034] Thirdly, embodiments of this disclosure provide a gateway device, the gateway device including any of the gateways in the first aspect; the gateway device is used to add a data packet header to a data packet, the data packet including a request data packet.

[0035] Fourthly, embodiments of this disclosure provide an apparatus for requesting data processing, the apparatus including a processor and a memory storing computer program instructions; the processor reads and executes the computer program instructions to implement the requesting data processing method as described in any of the first aspects.

[0036] Fifthly, embodiments of this disclosure provide a computer-readable storage medium storing computer program instructions that, when executed by a processor, implement a request data processing method as described in any of the first aspects.

[0037] In a sixth aspect, embodiments of this disclosure provide a computer program product, including a computer program that, when executed by a processor, implements a method for requesting data processing as described in any of the first aspects.

[0038] This disclosure provides a method, apparatus, device, computer storage medium, and computer program product for request data processing. The method obtains a first request data packet. A data packet header carrying target information is added to the first request data packet using the gateway of a first autonomous system, resulting in a second request data packet. The path location information and computing power information corresponding to the first autonomous system are encrypted to obtain encrypted information. The encrypted information is stored in the second request data packet. This enables the second autonomous system to verify the second request data packet, reducing the probability of the second request data packet being tampered with and improving the security of the computing power network. Attached Figure Description

[0039] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the embodiments of the present invention will be briefly introduced below. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0040] Figure 1 This is a flowchart illustrating a method for requesting data processing provided in an embodiment of this disclosure;

[0041] Figure 2 This is a schematic diagram of a request data packet provided in an embodiment of this disclosure;

[0042] Figure 3 This is a flowchart illustrating a method for sending path information and computing power information to a computing power information processing terminal according to an embodiment of this disclosure;

[0043] Figure 4 This is a flowchart illustrating a method for sending a data request packet according to an embodiment of this disclosure;

[0044] Figure 5 This is a schematic diagram of a request data packet header provided in an embodiment of this disclosure;

[0045] Figure 6 This is a flowchart illustrating a method for receiving request data packets provided in an embodiment of this disclosure;

[0046] Figure 7 This is a flowchart illustrating another method for receiving request data packets provided in an embodiment of this disclosure;

[0047] Figure 8 This is a schematic diagram of the structure of a request data processing apparatus provided in an embodiment of this disclosure;

[0048] Figure 9 This is a schematic diagram of the structure of a request data processing device provided in an embodiment of this disclosure. Detailed Implementation

[0049] The features and exemplary embodiments of various aspects of the present invention will now be described in detail. To make the objectives, technical solutions, and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are merely intended to explain the present invention and not to limit the present invention. For those skilled in the art, the present invention can be practiced without some of these specific details. The following description of the embodiments is merely to provide a better understanding of the present invention by illustrating examples of the invention.

[0050] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising..." does not exclude the presence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0051] Before describing the technical solutions provided by the embodiments of this disclosure, in order to facilitate understanding of the embodiments of this disclosure, this disclosure will specifically explain the problems existing in the related technologies:

[0052] Currently, the core construction technology of traditional computing power networks relies on the integrated application of the BGP and SRV6 protocols. Based on this, computing power awareness and transmission are achieved through the dynamic routing mechanism of ISIS using the underlying BGP protocol, and then computing power control is performed using the SRv6 protocol.

[0053] However, due to the inherent characteristics of the BGP protocol, data packets are easily hijacked and tampered with during routing and forwarding, thereby reducing the security of computing networks.

[0054] This disclosure provides a method, apparatus, device, computer storage medium, and computer program product for requesting data processing, which can solve the aforementioned technical problems existing in related technologies.

[0055] This embodiment of the disclosure obtains a first request data packet. A data packet header carrying target information is added to the first request data packet using the gateway of the first autonomous system, resulting in a second request data packet. The path location information and computing power information corresponding to the first autonomous system are encrypted to obtain encrypted information. The encrypted information is stored in the second request data packet. This enables the second autonomous system to verify the second request data packet, reducing the probability of the second request data packet being tampered with and improving the security of the computing power network.

[0056] The method for processing request data provided in the embodiments of this disclosure is described below.

[0057] Figure 1 A flowchart illustrating a method for processing request data according to an embodiment of this disclosure is shown. Figure 1 As shown, the method may include the following steps S110-S150.

[0058] S110: Obtain the first request data packet.

[0059] The first autonomous system uses a component to obtain the first request data packet.

[0060] The first autonomous system is located in a computing network that uses the SCION protocol, and the first request data packet is sent to the first autonomous system through the user terminal.

[0061] S120: Use the gateway of the first autonomous system to add the header of the data packet carrying the target information to the first request data packet to obtain the second request data packet.

[0062] After obtaining the first request data packet, the second request data packet is obtained by adding a data packet header carrying the target information to the first request data packet by the gateway of the first autonomous system.

[0063] A gateway is a gateway that can add headers to data packets, such as the SCION gateway. Data packets can be request packets.

[0064] The target information is obtained through a computing power information processing terminal. This target information includes target path information, which comprises path information between the first autonomous system and the second autonomous system. In one example, a schematic diagram of a request data packet with an added header is shown below. Figure 2 As shown, the request data packet includes path information, IP information, and data information.

[0065] In this embodiment of the disclosure, by adding target information to the first request data packet, the first request data packet can be routed and forwarded based on the path of the target information, which enables the first request data packet to be transmitted in the computing power network based on the SCION protocol, and avoids determining the forwarding path of the data packet from a large number of routing entries of the router, thereby saving the physical resources of the router.

[0066] S130: Encrypt the path location information and computing power information corresponding to the first autonomous system to obtain encrypted information.

[0067] Obtain the path location information and computing power information corresponding to the first autonomous system, and use encryption tools to encrypt the path location information and computing power information corresponding to the first autonomous system to obtain encrypted information.

[0068] The encrypted information is used for decryption and verification by the second autonomous system.

[0069] This embodiment of the disclosure encrypts the path location information and computing power information corresponding to the first autonomous system to obtain encrypted information, which facilitates subsequent verification based on the encrypted information and improves the security of data packets.

[0070] S140: Store the encrypted information in the second request data packet.

[0071] After obtaining the encrypted information, the encrypted information is stored in the second request data packet.

[0072] In this embodiment of the disclosure, by storing the encrypted information in the second request data packet, it is convenient for the autonomous system to verify the encrypted information when it receives the second request data packet.

[0073] S150: Send a second request data packet to the second autonomous system based on the target path information.

[0074] If the encrypted information is successfully stored in the second request data packet, then the second request data packet is sent to the second autonomous system through the target path information in the target information.

[0075] This embodiment of the disclosure obtains a first request data packet. A data packet header carrying target information is added to the first request data packet using the gateway of the first autonomous system, resulting in a second request data packet. The path location information and computing power information corresponding to the first autonomous system are encrypted to obtain encrypted information. The encrypted information is stored in the second request data packet. This enables the second autonomous system to verify the second request data packet, reducing the probability of the second request data packet being tampered with and improving the security of the computing power network.

[0076] In one embodiment, before adding a header carrying the target information to the first request packet using the gateway of the first autonomous system, such as Figure 3 As shown, the method for requesting data processing also includes steps S210-S250.

[0077] S210: Obtain the third request data packet.

[0078] The autonomous system uses components to obtain third-party request data packets.

[0079] The third request data packet is sent to the autonomous system through the user terminal.

[0080] S220: Use the gateway of the third autonomous system to add a header to the third request data packet to obtain the fourth request data packet.

[0081] After obtaining the third request data packet, the fourth request data packet is obtained by adding a data packet header to the third request data packet by the gateway of the third autonomous system.

[0082] The third autonomous system may include the core autonomous system.

[0083] In this embodiment of the disclosure, by adding a data packet header to the third request data packet, the third request data packet can be transmitted in a computing power network based on the SCION protocol, and the forwarding path of the data packet can be determined from a large number of routing entries of the router, thereby saving the physical resources of the router.

[0084] S230: Upon detecting a fourth request data packet, the third autonomous system sends detection information to multiple autonomous systems within a preset range, and obtains path information of multiple autonomous systems and computing power information corresponding to each autonomous system based on the detection information.

[0085] Upon detecting the fourth request data packet, the third autonomous system sends detection information to multiple autonomous systems within a preset range, and obtains path information of the multiple autonomous systems and computing power information corresponding to each autonomous system based on the detection information.

[0086] The autonomous systems within the preset scope may include non-core autonomous systems located in the same independent system region as the third autonomous system, or core autonomous systems located in different independent system regions than the third autonomous system.

[0087] S240: Send the path information of multiple autonomous systems and the computing power information corresponding to each autonomous system to the computing power information processing terminal.

[0088] After obtaining the path information and computing power information corresponding to multiple autonomous systems within a preset range, the third autonomous system sends the path information and computing power information corresponding to the multiple autonomous systems to the computing power information processing terminal.

[0089] In one example, the sending of detection information by a third autonomous system to multiple autonomous systems within a preset range can be regarded as a beacon detection process, that is, the core autonomous system in an independent system region sends a beacon containing path segment information to the next-level non-core neighboring autonomous system or the core autonomous system in another independent system region.

[0090] In one embodiment, the autonomous systems within a preset range include an upstream autonomous system and a downstream autonomous system. The distance between the upstream autonomous system and the third autonomous system is less than a preset threshold, and the distance between the downstream autonomous system and the third autonomous system is greater than or equal to the preset threshold. The upstream autonomous system is used to add the path information and computing power information corresponding to the upstream autonomous system to the detection information and send it to the downstream autonomous system. The downstream autonomous system is used to send detection response information to the third autonomous system. The detection response information includes the path information and computing power information corresponding to the downstream autonomous system and the path information and computing power information corresponding to the upstream autonomous system.

[0091] S250: Obtain target information sent by the computing power information processing terminal.

[0092] The receiving component is used to obtain the target information sent by the computing power information processing terminal.

[0093] Among them, the target information corresponds to the path information composed of multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems.

[0094] This embodiment of the disclosure obtains corresponding path information and computing power information from multiple autonomous systems through a third autonomous system and sends them to the computing power information processing terminal. This facilitates the subsequent addition of matching target information to the packet header of the data packet based on the path information and computing power information of the autonomous system, so that the data packet can be forwarded according to the path information in the target information.

[0095] In one embodiment, upon detecting a fourth request data packet, detection information is sent from a third autonomous system to multiple autonomous systems within a preset range. This process obtains path information comprising the multiple autonomous systems and computing power information corresponding to each autonomous system. Figure 4 As shown, the method for requesting data processing also includes steps S260-S280.

[0096] S260: Encrypt the path information composed of multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems to obtain the target encrypted information.

[0097] After obtaining the path information of multiple autonomous systems and the computing power information corresponding to each autonomous system, the path information of multiple autonomous systems and the computing power information corresponding to each autonomous system are encrypted using encryption tools to obtain the target encrypted information.

[0098] S270: Add the path information of multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems to the header of the fourth request data packet; store the target encrypted information in the fourth request data packet.

[0099] The gateway in the autonomous system adds the path information of multiple autonomous systems and the computing power information corresponding to each autonomous system to the header of the fourth request data packet; the encrypted target information is stored in the fourth request data packet.

[0100] S280: Send a fourth request data packet to the fourth autonomous system according to the path information composed of multiple autonomous systems.

[0101] Based on the path information consisting of multiple autonomous systems in the header of the fourth request data packet, the fourth request data packet is sent from the third autonomous system to the fourth autonomous system.

[0102] In this embodiment, target encrypted information is obtained by encrypting the path location information and computing power information corresponding to multiple autonomous systems. This target encrypted information is then stored in a fourth request data packet. This enables the fourth autonomous system to verify the fourth request data packet, reducing the probability of the fourth request data packet being tampered with and improving the security of the computing power network.

[0103] In one embodiment, a schematic diagram of the header of a request data packet carrying path information and computing power information is shown below. Figure 5 As shown, the path information field of autonomous system A is immediately followed by its computing power field. Similarly, the path field of autonomous system B is immediately followed by its computing power field. The computing power field can consist of 4 bytes, including a 2-bit type identifier, a 6-bit length identifier, and a 24-bit computing power value identifier.

[0104] In one embodiment, after sending a fourth request data packet to the fourth autonomous system according to the path information composed of multiple autonomous systems, such as Figure 6 As shown, the method for requesting data processing further includes steps S310 and S320.

[0105] S310: Use the fourth autonomous system to decrypt the target encrypted information of the fourth request data packet to obtain the target decryption result.

[0106] After obtaining the fourth request data packet, the fourth autonomous system uses a decryption tool to decrypt the target encrypted information in the fourth request data packet and obtain the target decryption result.

[0107] S320: If the target decryption result is consistent with the corresponding path information and computing power information in the header of the fourth request data packet, send the fourth request data packet to the fifth autonomous system according to the path information composed of multiple autonomous systems.

[0108] After obtaining the target decryption result, the consistency between the target decryption result and the corresponding path information and computing power information in the header of the fourth request data packet is compared. If the comparison results are consistent, the fourth request data packet is sent to the fifth autonomous system according to the corresponding path information in the header of the fourth request data packet.

[0109] After obtaining the fourth request data packet, the fourth autonomous system in this embodiment decrypts the encrypted information in the fourth request data packet and compares it with the corresponding path information and computing power information in the data packet header of the fourth request data packet. This reduces the probability of the fourth request data packet being tampered with, thereby improving the security of the computing power network.

[0110] In one embodiment, after sending a second request data packet to the second autonomous system based on the target path information, such as Figure 7 As shown, the method for requesting data processing further includes steps S160 and S170.

[0111] S160: Use the second autonomous system to decrypt the encrypted information of the second request data packet to obtain the decryption result.

[0112] After obtaining the second request data packet, the second autonomous system uses a decryption tool to decrypt the encrypted information in the second request data packet and obtain the decryption result.

[0113] S170: If the decryption result matches the corresponding path information and computing power information in the header of the second request data packet, send the second request data packet to the sixth autonomous system according to the target path information.

[0114] After obtaining the decryption result, the consistency between the decryption result and the corresponding path information and computing power information in the header of the second request data packet is compared. If the comparison results are consistent, the second request data packet is sent to the sixth autonomous system according to the corresponding path information in the header of the second request data packet.

[0115] After obtaining the second request data packet, the second autonomous system in this embodiment decrypts the encrypted information in the second request data packet and compares the consistency with the corresponding path information and computing power information in the data packet header of the second request data packet. This reduces the probability of the second request data packet being tampered with, thereby improving the security of the computing power network.

[0116] like Figure 8 As shown in the embodiments of this disclosure, a data request processing apparatus 800 is also provided, which includes:

[0117] Module 801 is used to acquire the first request data packet;

[0118] Add module 802 is used to add a data packet header carrying target information to the first request data packet using the gateway of the first autonomous system to obtain the second request data packet. The target information is obtained through the computing power information processing terminal. The target information includes target path information, which includes path information composed of the first autonomous system and the second autonomous system.

[0119] The encryption module 803 is used to encrypt the path location information and computing power information corresponding to the first autonomous system to obtain encrypted information, which is used for decryption and verification by the second autonomous system.

[0120] Storage module 804 is used to store encrypted information into the second request data packet;

[0121] The sending module 805 is used to send a second request data packet to the second autonomous system based on the target path information.

[0122] In some embodiments, the acquisition module 801 is specifically used for:

[0123] Obtain the third request data packet;

[0124] By using the gateway of the third autonomous system to add a header to the third request data packet, a fourth request data packet is obtained;

[0125] Upon detecting a fourth request data packet, the third autonomous system sends detection information to multiple autonomous systems within a preset range, and obtains path information composed of multiple autonomous systems and computing power information corresponding to each of the multiple autonomous systems based on the detection information;

[0126] The path information consisting of multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems are sent to the computing power information processing terminal.

[0127] The target information sent by the computing power information processing terminal is obtained. The target information corresponds to the path information composed of multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems.

[0128] In some embodiments, the autonomous systems within a preset range include an upstream autonomous system and a downstream autonomous system. The distance between the upstream autonomous system and the third autonomous system is less than a preset threshold, and the distance between the downstream autonomous system and the third autonomous system is greater than or equal to the preset threshold. The upstream autonomous system is used to add the path information and computing power information corresponding to the upstream autonomous system to the detection information and send it to the downstream autonomous system. The downstream autonomous system is used to send detection response information to the third autonomous system. The detection response information includes the path information and computing power information corresponding to the downstream autonomous system and the path information and computing power information corresponding to the upstream autonomous system.

[0129] In some embodiments, the encryption module 803 is specifically used for:

[0130] The path information composed of multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems are encrypted to obtain the target encrypted information;

[0131] Add the path information of multiple autonomous systems and the computing power information corresponding to each autonomous system to the header of the fourth request data packet; store the target encrypted information in the fourth request data packet;

[0132] The fourth request data packet is sent to the fourth autonomous system based on the path information composed of multiple autonomous systems.

[0133] In some embodiments, the request data processing apparatus 800 further includes a decryption module, which is used to decrypt the target encrypted information of the fourth request data packet using a fourth autonomous system to obtain a target decryption result;

[0134] If the target decryption result matches the corresponding path information and computing power information in the header of the fourth request data packet, the fourth request data packet is sent to the fifth autonomous system according to the path information composed of multiple autonomous systems.

[0135] In some embodiments, the request data processing apparatus 800 further includes a decryption module, which is used to decrypt the encrypted information of the second request data packet using the second autonomous system to obtain a decryption result;

[0136] If the decryption result matches the corresponding path information and computing power information in the header of the second request data packet, the second request data packet is sent to the sixth autonomous system according to the target path information.

[0137] Figure 8 Each module / unit in the illustrated device has the ability to implement Figure 1 , Figure 3 , Figure 4 , Figure 6 and Figure 7The functions of each step performed by the application system and the corresponding technical effects it achieves are described briefly and will not be elaborated here.

[0138] Figure 9 A schematic diagram of the hardware structure for request data processing provided in an embodiment of this disclosure is shown.

[0139] The device requesting data processing may include a processor 901 and a memory 902 storing computer program instructions.

[0140] Specifically, the processor 901 may include a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits that can be configured to implement the embodiments of this application.

[0141] Memory 902 may include mass storage for data or instructions. For example, and not limitingly, memory 902 may include a hard disk drive (HDD), floppy disk drive, flash memory, optical disk, magneto-optical disk, magnetic tape, or Universal Serial Bus (USB) drive, or a combination of two or more of these. Where appropriate, memory 902 may include removable or non-removable (or fixed) media. Where appropriate, memory 902 may be internal or external to the integrated gateway disaster recovery device. In a particular embodiment, memory 902 is non-volatile solid-state memory.

[0142] Memory 902 may include read-only memory (ROM), random access memory (RAM), disk storage media devices, optical storage media devices, flash memory devices, and electrical, optical, or other physical / tangible memory storage devices. Therefore, typically, memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., memory devices) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to one aspect of this disclosure.

[0143] The processor 901 implements any of the request data processing methods in the above embodiments by reading and executing computer program instructions stored in the memory 902.

[0144] In one example, the device requesting data processing may further include a communication interface 903 and a bus 904. Wherein, for example... Figure 9As shown, the processor 901, memory 902, and communication interface 903 are connected through bus 904 and complete communication with each other.

[0145] The communication interface 903 is mainly used to realize communication between various modules, devices, units and / or equipment in the embodiments of this application.

[0146] Bus 904 includes hardware, software, or both, that couples components of an online data flow metering device together. For example, and not limitingly, the bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Extended Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hyper Transport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an Infinite Bandwidth Interconnect, a Low Pin Count (LPC) bus, a memory bus, a Microchannel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a Video Electronics Standards Association Local (VLB) bus, or other suitable buses, or combinations of two or more of these. Where appropriate, bus 904 may include one or more buses. Although specific buses are described and illustrated in embodiments of the invention, the invention contemplates any suitable bus or interconnect. Additionally, in conjunction with the method of requesting data processing in the above embodiments, embodiments of this application also provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when executed by a processor, the computer program instructions implement any of the request data processing methods in the above embodiments.

[0147] This application also provides a computer program product, including a computer program that, when executed by a processor, implements any of the request data processing methods described in the above embodiments.

[0148] It should be clarified that the present invention is not limited to the specific configurations and processes described above and shown in the figures. For the sake of brevity, detailed descriptions of known methods are omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present invention is not limited to the specific steps described and shown. Those skilled in the art can make various changes, modifications, and additions, or change the order of steps, after understanding the spirit of the present invention.

[0149] The functional blocks shown in the above block diagram can be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, they can be, for example, electronic circuits, application-specific integrated circuits (ASICs), appropriate firmware, plug-ins, function cards, etc. When implemented in software, the elements of this invention are programs or code segments used to perform the required tasks. Programs or code segments can be stored on a machine-readable medium or transmitted over a transmission medium or communication link via data signals carried on a carrier wave. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, read-only memory (ROM), flash memory, erasable read-only memory (EROM), floppy disks, compact disc read-only memory (CD-ROM), optical disks, hard disks, fiber optic media, radio frequency (RF) links, etc. Code segments can be downloaded via computer networks such as the Internet, intranets, etc.

[0150] It should also be noted that the exemplary embodiments mentioned in this invention describe methods or systems based on a series of steps or apparatus. However, this invention is not limited to the order of the steps described above; that is, the steps can be performed in the order mentioned in the embodiments, or in a different order, or several steps can be performed simultaneously.

[0151] The aspects of this disclosure have been described above with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this disclosure. It should be understood that each block in the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus to produce a machine such that these instructions, executable via the processor of the computer or other programmable data processing apparatus, enable the implementation of the functions / actions specified in one or more blocks of the flowchart illustrations and / or block diagrams. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field-programmable logic circuit. It is also understood that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can also be implemented by special-purpose hardware performing the specified functions or actions, or can be implemented by a combination of special-purpose hardware and computer instructions.

[0152] The above are merely specific embodiments of the present invention. Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, modules, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here. It should be understood that the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in the present invention, and these modifications or substitutions should all be covered within the protection scope of the present invention.

Claims

1. A method for requesting data processing, characterized in that, Applied to a first autonomous system AS, the method includes: Obtain the first request data packet; The gateway of the first autonomous system adds a data packet header carrying target information to the first request data packet to obtain a second request data packet. The target information is obtained through a computing power information processing terminal. The target information includes target path information, which includes path information composed of the first autonomous system and the second autonomous system. The path location information and computing power information corresponding to the first autonomous system are encrypted to obtain encrypted information, which is used for decryption and verification by the second autonomous system. Store the encrypted information in the second request data packet; A second request data packet is sent to the second autonomous system based on the target path information.

2. The method according to claim 1, characterized in that, Before the gateway of the first autonomous system adds a header carrying target information to the first request packet, the method further includes: Obtain the third request data packet; The third request data packet is obtained by adding a header to the third request data packet using the gateway of the third autonomous system; Upon detecting the fourth request data packet, detection information is sent to multiple autonomous systems within a preset range through the third autonomous system, and path information of the multiple autonomous systems and computing power information corresponding to each of the multiple autonomous systems are obtained based on the detection information. The path information of the multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems are sent to the computing power information processing terminal. The target information sent by the computing power information processing terminal is obtained, and the target information corresponds to the path information composed of the multiple autonomous systems and the computing power information corresponding to the multiple autonomous systems respectively.

3. The method according to claim 2, characterized in that, The autonomous systems within the preset range include upstream autonomous systems and downstream autonomous systems. The distance between the upstream autonomous system and the third autonomous system is less than a preset threshold, and the distance between the downstream autonomous system and the third autonomous system is greater than or equal to the preset threshold. The upstream autonomous system is used to add the path information and computing power information corresponding to the upstream autonomous system to the detection information and send it to the downstream autonomous system. The downstream autonomous system is used to send detection response information to the third autonomous system. The detection response information includes the path information and computing power information corresponding to the downstream autonomous system and the path information and computing power information corresponding to the upstream autonomous system.

4. The method according to claim 2, characterized in that, After detecting the fourth request data packet, and sending detection information to multiple autonomous systems within a preset range via a third autonomous system to obtain path information of the multiple autonomous systems and computing power information corresponding to each of the multiple autonomous systems, the method further includes: The path information composed of the multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems are encrypted to obtain the target encrypted information; The path information of the multiple autonomous systems and the computing power information corresponding to each of the multiple autonomous systems are added to the header of the fourth request data packet; the target encrypted information is stored in the fourth request data packet; The fourth request data packet is sent to the fourth autonomous system according to the path information composed of the multiple autonomous systems.

5. The method according to claim 4, characterized in that, After sending the fourth request data packet to the fourth autonomous system according to the path information composed of the multiple autonomous systems, the method further includes: The target encrypted information of the fourth request data packet is decrypted using the fourth autonomous system to obtain the target decryption result; If the target decryption result matches the corresponding path information and computing power information in the header of the fourth request data packet, the fourth request data packet is sent to the fifth autonomous system according to the path information composed of the multiple autonomous systems.

6. The method according to claim 1, characterized in that, After sending the second request data packet to the second autonomous system based on the target path information, the method further includes: The encrypted information of the second request data packet is decrypted using the second autonomous system to obtain the decryption result; If the decryption result matches the corresponding path information and computing power information in the header of the second request data packet, the second request data packet is sent to the sixth autonomous system according to the target path information.

7. An apparatus for requesting data processing, characterized in that, Applied to a first autonomous system, the device includes: The acquisition module is used to acquire the first request data packet; An adding module is used to add a data packet header carrying target information to the first request data packet using the gateway of the first autonomous system to obtain a second request data packet. The target information is obtained through a computing power information processing terminal and includes target path information, which includes path information composed of the first autonomous system and the second autonomous system. An encryption module is used to encrypt the path location information and computing power information corresponding to the first autonomous system to obtain encrypted information, which is used for decryption and verification by the second autonomous system. A storage module is configured to store the encrypted information in the second request data packet; The sending module is used to send a second request data packet to the second autonomous system based on the target path information.

8. A gateway device, characterized in that, The gateway device includes the gateway according to any one of claims 1-6; the gateway device is used to add a data packet header to a data packet, the data packet including a request data packet.

9. A device for requesting data processing, characterized in that, The device includes: a processor and a memory storing computer program instructions; the processor reads and executes the computer program instructions to implement the request data processing method as described in any one of claims 1-6.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer program instructions that, when executed by a processor, implement the request data processing method as described in any one of claims 1-6.

11. A computer program product, characterized in that, Includes a computer program, which, when executed by a processor, implements the method for requesting data processing as described in any one of claims 1-6.

Images