53 results about "Gateway address" patented technology

The invention discloses a 2.4 G-based RSSI (Received Signal Strength Indicator) positioning data relay transmission device and method, and belongs to the technical field of wireless communication. The device comprises a positioning label, a positioning gateway, a relay gateway and a public network gateway. The positioning tag broadcasts a 2.4 G signal containing the ID of the positioning tag; the positioning gateway scans the 2.4 G signal, and generates and broadcasts a data packet in which a positioning gateway address, a data packet number, a relay level and aggregated data are packaged; a relay gateway is switched to a low-power-consumption mode after initialization through a monitoring-learning-synchronization mechanism, wakes up and receives data in a broadcast time window of an upstream gateway of the relay gateway, updates a relay level and forwards the data to a downstream gateway, and therefore multi-hop relay transmission of the data is achieved. And the public network gateway finally uploads the data to a cloud platform or an upper computer. According to the invention, through data aggregation and time synchronization dormancy, the system power consumption is greatly reduced, and long-distance and long-endurance positioning data transmission of battery power supply in a complex environment is realized.

This application provides a packet forwarding method and device. The method involves: determining whether to perform Layer 3 forwarding based on the destination MAC address of the Ethernet packet (which is the gateway MAC address); searching the link layer address mapping table based on the destination IP address of the inner IP packet of the Ethernet packet; obtaining a new destination MAC address from the matching link layer address mapping table entry when a matching entry for the destination IP address is found; searching the MAC address table based on the new destination MAC address; obtaining the outgoing port and outgoing VLAN from the matching entry when a matching entry for the new destination MAC address is found; modifying the destination MAC address, source MAC address, and incoming VLAN of the Ethernet packet to the new MAC address, gateway MAC address, and outgoing VLAN, respectively; and sending the modified Ethernet packet through the outgoing port.

The application discloses a networking method and system based on dynamic IPv6 addresses, wherein the system comprises terminal equipment and a VPN gateway, and the terminal equipment accesses a network through the VPN gateway. The dynamic change of the IPv6 address of the VPN gateway (if the public IPv4 address is sufficient, the method is also applicable) can effectively alleviate the network asset exposure surface and reduce the possibility of being attacked by taking advantage of the unlimited nature of the IPv6 address.

The invention discloses a method for accessing a home intranet, an edge access gateway, a system, a medium and a product. The method comprises the following steps: acquiring information of a home terminal obtained by finishing Ethernet point-to-point protocol dialing; an access message sent by the cloud core network equipment is received, and when it is judged that the access message meets a preset condition according to an inner-layer message source IP address in the access message, an inner-layer destination MAC address and a destination IP address in the access message are analyzed to serve as a WAN MAC address and a terminal IP address of a corresponding broadband user; and querying a pre-stored uplink flow forwarding table according to the WAN MAC address and the terminal IP address to obtain a corresponding gateway MAC address and a corresponding terminal MAC address, respectively replacing the source and target MAC addresses of the access message with the gateway MAC address and the terminal MAC address, and then sending the access message to the home terminal. According to the embodiment of the invention, low-cost and high-speed private network accompanying communication can be realized.

The embodiment of the invention discloses a non-intrusive signature encryption video playing method based on a secure decoding library. A specific embodiment of the method comprises the steps of configuring a decoding library supporting a security function in response to a situation that a target video monitoring platform does not support a preset protocol; initializing a decoding library, and transmitting the security gateway address and the target front-end equipment identifier to the decoding library; sending a video playing request to the target video monitoring platform through a transmission protocol of the target video monitoring platform, and receiving a signature encrypted video code stream from the target video monitoring platform; transmitting the signature encrypted video code stream to a decoding library; and based on the decoding library, carrying out adaptive security processing on the signature encrypted video code stream to obtain decoded video data, receiving the decoded video data from the decoding library, and playing the decoded video data. According to the embodiment, for a video monitoring platform of a non-GB35114 standard, the technical effects of reducing video playing delay and gateway load and meeting data security requirements are achieved.

This invention provides a mirroring traffic control method and apparatus. The method is applied to gateway devices in a gateway cluster, where the gateway cluster includes multiple gateway devices, each storing a mirroring configuration. The method includes: if the mirroring configuration contains the gateway address of a gateway device, then sending service traffic to a mirroring service node. The mirroring configuration is used to control some gateway devices in the gateway cluster to perform mirroring services. This allows service traffic to be mirrored to a test environment through mirroring configuration without changing the existing network architecture, thus achieving control over the traffic mirroring service.

This invention relates to the field of Internet of Things (IoT) communication technology, and more particularly to a dynamic allocation method, system, device, and medium for IoT gateways. The method includes: constructing a global state information database; when a sensor node needs to connect to an edge computer, the edge computer, based on the global state information database, filters all communication gateways according to a preset candidate set filtering strategy to obtain a set of candidate communication gateways; performing a weighted comprehensive calculation on each communication gateway in the candidate set to obtain an adaptation score for each communication gateway; obtaining a target communication gateway based on the adaptation score of each communication gateway combined with a preset switching mechanism; and the edge computer issuing an instruction containing the address code of the target communication gateway to the sensor node, thereby establishing a connection between the sensor node and the target communication gateway and transmitting data. This invention improves the system's concurrency limit, ensures the quality of data transmission, realizes the transformation from "local optimum" to "global optimum," and exhibits good adaptability.

The application provides a multi-gateway scheduling processing method, device, system, server and storage medium, and relates to the technical field of communication. The method comprises the following steps: acquiring an access request of a client to a capability gateway cluster; if the access mode is a software development kit access, acquiring gateway subscription information of the client, determining a capability gateway address to be connected and permission information according to the application identifier, the capability identifier and the gateway subscription information, sending the capability gateway address to be connected and the permission information to the client, so that the client sends an authentication request to the capability gateway cluster corresponding to the capability gateway address to be connected, and completes the authentication according to the received authentication request response result. The method of the application avoids that all requests pass through a gateway access proxy server to distribute capability gateway addresses and permission information, thereby reducing the connection pressure of the gateway access proxy server and reducing the possibility of collapse of the gateway access proxy server in a high-concurrency scenario.

The application discloses a data transmission method and system, and relates to the technical field of computer networks. In the data transmission method, a server sets a default gateway address of a client when the client performs data transmission. When the client performs data transmission, the user does not need to manually configure the default gateway address, and only needs to configure an internet protocol address and a subnet mask, so that the efficiency of manually configuring network information is improved. The server determines a target default gateway address according to the default gateway address of a router and the data flow received by the default gateway address. Since the data flow received by the default gateway address is dynamically changed, the determined target default gateway address is dynamically changeable, the load is prevented from being concentrated on a static gateway address, the network information configuration is more reasonable, the problem of data transmission blockage is reduced, and the transmission efficiency of the network is improved.

The invention discloses a privacy computing network authorization and state management and control method and system based on a node contract, relates to the field of privacy computing, and aims to solve the problems that a decentralized privacy computing collaborative network depends on centralized nodes, state synchronization is inconsistent and authorization management and control are extensive. Through point-to-point interaction of intercommunication gateways of an initiator node and a partner node, node cooperation application and data set authorization configuration are completed, and real-time synchronization and authorization full-life-cycle management of a data set and node information are realized; an initiator node and a partner node locally maintain a cooperative gateway address list based on an interworking gateway, automatic synchronization is achieved through cooperation application, a centralized registration center is not needed, network decentralization, state consistency and authorization refinement are ensured, and the method is suitable for a cross-mechanism privacy computing cooperation scene.

Methods and systems provide secure, real-time software updates over a public network to an isolated security system. A method includes the steps of setting up a network address translation (NAT) data structure for allowing outbound connections only through a first firewall between the isolated security system and the public network, and configuring the isolated security system to identify an internet web gateway address to get a software update from a security system update manager over a predetermined protocol and port. A further step involves configuring a proxy setting in the isolated security system to identify an internet web gateway address of a proxy server in a NAT subnet.

The embodiment of the invention provides an access method, a network access method, a related device, equipment, a medium and a product. The access method is applied to a gateway, and comprises the following steps: writing a preset authentication passing identifier into a gateway MAC address based on a preset rewriting rule under the condition that terminal identity authentication passes, and obtaining a rewritten gateway MAC address; the rewritten gateway MAC address is sent to the terminal, so that the terminal sends an access request to a target network by taking the rewritten gateway MAC address as a target MAC address; and in response to an access request of the terminal to the target network, analyzing the target MAC address carried by the access request according to a preset rewriting rule, and accessing the terminal to the target network under the condition that the preset authentication passing identifier is obtained through analysis. According to the admission method, admission control is carried out based on the target MAC address, only whether the target MAC address contains the preset authentication passing identifier or not needs to be identified, searching and matching of the source MAC address do not need to be carried out, memory is saved, the admission control efficiency is improved, and management and maintenance are simplified.

The embodiment of the application provides a gateway address allocation method, a core network, a user terminal, a medium and a product. The method comprises the following steps: when a protocol data unit session is established by the user terminal, the core network acquires the information of a network segment of a hanging device associated with the user terminal and an Internet protocol address of the user terminal, encapsulates the information of the network segment of the hanging device into a protocol configuration option field, and constructs a protocol data unit session establishment response message according to the protocol configuration option field and the Internet protocol address of the user terminal, wherein the protocol data unit session establishment response message comprises the protocol configuration option field and the Internet protocol address of the user terminal. Then, the protocol data unit session establishment response message is sent to the user terminal, and the user terminal is used for allocating the Internet protocol address of the gateway used by the hanging device according to the protocol data unit session establishment response message. The application does not need a user to manually configure the network segment information to the user terminal, and the intelligent degree and the accuracy of address allocation are improved.

The application discloses a data resource positioning method and system based on identification analysis, relates to the technical field of data communication and resource management, and comprises the following steps: receiving a data resource positioning request, separating a global unique identification in the data resource positioning request into a prefix part and a suffix part; performing main domain analysis according to the prefix part; performing resource analysis according to the suffix part; the resource analysis sends the suffix part to a digital object warehouse gateway address; a gateway corresponding to the digital object warehouse gateway address searches and returns a target data resource from a corresponding digital object warehouse according to the suffix part, and verifies access authority at the same time. Through the hierarchical processing mechanism of the main domain analysis and the resource analysis, the application solves the technical problem of accurate positioning of massive heterogeneous data resources, adopts the technical means of prefix hierarchical query and suffix accurate matching, realizes unified management and efficient access of data resources, improves data sharing and exchange efficiency, and guarantees the safety of data access.

The invention relates to a deployment method of a gateway system and related equipment. The method comprises the following steps: in response to starting of a server based on a PXE mode, acquiring an authorization token, a gateway address and a filling control center IP address from an approval center according to server equipment information; wherein the authorization token is generated when the approval center approves the downloading authority of the server according to the server equipment information and the approval is passed; when the approval is passed, the approval center is also used for generating an equipment key and synchronizing the equipment key to the filling control center; establishing a cross-network segment route according to the gateway address, and obtaining an equipment key and a system mirror image file from a filling control center through the cross-network segment route according to the authorization token; and decrypting the verification information ciphertext according to the device key, verifying the boot mirror image according to a verification strategy and a verification value obtained by decryption, and installing the boot mirror image under the condition that the verification is passed. According to the embodiment of the method, automatic deployment of the gateway system is realized, and the security of the gateway system is improved.

The application discloses a kind of based on node contract's privacy computing network authorization and state management method and system, it is related to privacy computing field, it aims at solving the problem of relying on centralization node, state synchronization inconsistency and extensive authorization management in the decentralized privacy computing collaborative network. Through the point-to-point interaction of the intercommunication gateway of initiator node and partner node, node cooperation application, data set authorization configuration are completed, and the real-time synchronization of data set and node information and the authorization full life cycle management are realized;Initiator node and partner node maintain the cooperation gateway address list based on intercommunication gateway locally, automatically synchronized through cooperation application, without centralized registration center, ensure network decentralization, state consistency and authorization refinement, suitable for cross-institution privacy computing collaborative scene.

The invention discloses an ARP (Address Resolution Protocol) table item synchronization method and an MLAP-Lite test system. The method applied to auxiliary test equipment of the MLAP-Lite test system comprises the following steps: receiving an ARP message notified by the test equipment in a VLAN (Virtual Local Area Network); the gateway address of the ARP message is an IP (Internet Protocol) address of the same VLAN (Virtual Local Area Network) interface configured by the two MLAP-Lite gateways; packaging an LLDP message according to the ARP message; and the LLDP message is sent to the two MLAP-Lite gateways through a link aggregation port in the VLAN. According to the method, the ARP table item is not stored on the auxiliary testing equipment, so that the overall configuration complexity is reduced, and the performance requirement on the auxiliary testing equipment is reduced; and the two MLAGE-Lite gateways can synchronously receive the latest ARP table item information in real time, so that the problem of traffic abnormality caused by inconsistency of table items on two sides after the ARP changes in a waiting period in the prior art is solved.

The invention discloses a privacy disclosure prevention traceable code scanning method and system based on a trusted execution environment, and belongs to the technical field of mobile internet security. The method comprises the steps that a special two-dimensional code is generated and published, a security gateway address and a scene identifier are encoded in the two-dimensional code, after user equipment scans the code, encryption feature information is extracted in a local trusted execution environment through a client security module, an encryption channel is established, the encryption feature information and the scene identifier are sent to a security gateway through the encryption channel, and the security gateway address and the scene identifier are encrypted. The cloud trusted execution environment service module receives the information, performs decryption and business processing in a secure enclave, generates a traceability evidence, automatically triggers an intelligent contract, writes the traceability evidence and a data use event into a block chain, and returns a business processing result to a merchant system, and a user performs traceability query through user equipment. According to the invention, based on TEE and block chain technologies, privacy zero leakage in a code scanning process is realized, data is credibly traced by using a full link, and security compliance is improved.

The invention provides a data processing method, device and equipment, which can be applied to the technical field of networks. The data processing method comprises the steps that port detection messages are sent to a plurality of to-be-detected servers according to a preset time interval, the port detection messages are used for detecting the communication states of ports in the to-be-detected servers, and the source addresses of the port detection messages are gateway addresses; under the condition that a plurality of reply messages from the to-be-detected server are received within a first preset time period, a message queue of the reply messages is determined, the message queue comprises a key value, and the key value indicates an identifier of the to-be-detected server and a port number of the to-be-detected server used for sending the reply messages; and determining a port detection result of the to-be-detected server according to the message queue.

The invention relates to a communication method and device, electronic equipment and a storage medium. The method comprises the following steps: in response to a communication request based on a first communication card, establishing a target data channel through a second communication card; the first communication card is a non-data card, the second communication card is a data card, and the target data channel is used for enabling the electronic equipment to be connected with the Internet; acquiring a target gateway address of the first communication card based on the target data channel; and based on the target gateway address, connecting a target server corresponding to the first communication card, so that the electronic equipment performs a call based on the first communication card. According to the method, the target number of channels are established through the second call card to assist the first call card in call, voice call and short message service can be realized without being in a WiFi coverage range, the limitation of needing to be in the WiFi coverage range is avoided, and the communication flexibility is improved.

Embodiments of the present application provide a bare metal server online system, method and device, in which the system comprises: a cloud platform management device, configured to perform network configuration of a physical switch accessed by a bare metal server in a business network when detecting that the bare metal server is switched from a provision network to the business network; acquire a gateway address of a gateway device corresponding to the business network; create a first DHCP port of the business network by multiplexing the gateway address; a DHCP server, configured to create a first DHCP service and run the first DHCP service through the gateway address; and respond to a first DHCP request through the first DHCP service to allocate an IP address in the business network to the bare metal server. The first DHCP port is created and the first DHCP service is run by multiplexing the gateway address of the gateway device of the business network, so that the bare metal server is successfully online.

The invention relates to the field of direct connection detection, and provides a terminal direct connection behavior detection and blocking method and system. The method comprises the following steps: when a network card insertion action is detected, starting ARP scanning, sending an RTMGETADDR message to a kernel by utilizing Netlink, extracting an IP address bound with a network card, a subnet mask and a gateway address so as to calculate an IP address range and a host number in the same local area network, circularly sending ARP message detection to all IP addresses, and recording an ARP cache table; the MAC addresses in the ARP cache table are read, and invalid MAC addresses are filtered out; if there is only one valid MAC in the ARP table of the network card after filtering and multiple times of ARP scanning, it is determined that the network cable is directly connected; after detecting that the network cable is directly connected, checking an MAC address manufacturer prefix according to an MAC database and an equipment fingerprint database which are input in advance, and excluding disguise attacks of intermediate equipment; and judging the risk level of the equipment directly connected with the network cable, and blocking, alarming or releasing according to different risk levels.

The invention relates to the technical field of computer networks, in particular to an ONU gateway IPv6 address allocation method and device of a PON network, equipment and a medium. In addition, the ONU problem solution obtaining method of the PON network can also be applied to a fiber to room (FTTR), an enterprise-level fiber to room (FTTR-B) and a broadband fusion terminal product, and the ONU problem solution obtaining method of the PON network can also be applied to the FTTR, the enterprise-level FTTR-B and the broadband fusion terminal product. The ONU gateway obtains an association mapping table, and records a multi-WAN link PD prefix and a binding relationship between the multi-WAN link PD prefix and an LAN bridging group comprising at least one LAN port; expanding a router announcement function based on the table, and directionally distributing an announcement message containing a matched PD prefix to an LAN port access terminal; and meanwhile, a DHCPv6 function is expanded, a terminal request message is received, an interface identifier is extracted, a PD prefix is matched in combination with the corresponding relationship between the bridging group and the port, and the two are combined to generate a complete IPv6 address and returned through a response message. According to the invention, the problem that the LAN port and the IPv6 address under the multi-WAN link cannot be accurately bound and allocated in the prior art is solved.

This invention discloses a URL address obfuscation method, comprising: obtaining an original URL address to be processed, the original URL address including a protocol part, a HOST part, a port part, and a path part; digitally encoding the protocol part, digitally converting the HOST part, and formatting the port part to generate a first numeric string; obfuscating and mapping the first numeric string based on a predefined numeric password table to obtain a second numeric string; and sequentially concatenating the second numeric string and the path part after the gateway address to generate a proxy URL address for forwarding to downstream services. This invention implements a library-free design scheme that converts domain names or IP ports into pure numbers with the shortest possible length and without requiring persistent storage for mapping, while considering the security, universality, and maintainability of the obfuscation result.

The present application relates to the technical field of edge communication, and particularly relates to a method, device, equipment and system for communication based on an edge gateway, which unifies a large number of edge devices to access a network using one IP address through address conversion, so as to reduce the demand for IP addresses in a public network / bearer network, save a large number of IP address resources in the bearer network, realize intensive use of IP address resources, reduce the demand for special network devices, and reduce hardware investment costs; the real address of an internal network object is hidden behind a gateway address through dynamic address conversion operation, so as to reduce the security risks of internal network topology exposure; the session state of each request is accurately recorded, a reliable link matching basis is provided for reverse dynamic address conversion, link confusion and conversion errors are reduced, the transparency of bidirectional communication between a request end and an object is realized, the request end does not need to perceive the internal network structure, and the object also does not need to expose the real address, so that the bidirectional communication efficiency and security are greatly improved.

The invention discloses a network communication method, device, system and equipment of an automatic driving domain controller and a computer program product, and the method comprises the steps: determining whether current equipment in a network communication system meets a preset network configuration condition or not in an initialization stage; if yes, creating, configuring and starting a virtual gateway interface based on the current equipment; configuring network information of a communication network according to the network information of the current equipment and the virtual gateway interface; and configuring a forwarding rule between the virtual gateway interface and the communication network according to the virtual gateway interface and the network information of the communication network, and starting a network service of the communication network. The virtual gateway interface is created and the network information of the virtual gateway interface is configured, so that the problem of gateway address conflict in the original architecture is effectively solved. By configuring the network information and the forwarding rule of the communication network, the automatic distribution of the IP address and the free forwarding of the data packet between the virtual gateway interface and the communication network are realized, and the flexibility and the expandability of the network configuration are improved.

Provided are a method, system, and computer program product for managing network issues in a hypervisor configuration, in which a hypervisor passively monitors a plurality of data points to detect an anomaly and trigger a recovery. The hypervisor determines which media access control (MAC) addresses are gateway addresses, and passively monitors inbound and outbound packets to validate that packets from a gateway are being passed. Responsive to determining, by the hypervisor, that an outbound packet does not have a corresponding inbound packet, the hypervisor triggers a network failure event.

The invention provides a server BGP access method and device, electronic equipment and a readable storage medium, and the method comprises the steps: detecting whether a destination address of a data packet is a switch gateway address or not according to the destination address of the data packet sent by a server; if the destination address of the data packet is the gateway address of the switch, detecting whether the current physical network card is a physical network card transferred to the switch corresponding to the gateway address of the switch based on the destination address through an eBPF program mounted on the current physical network card; and if the current physical network card is not transferred to the physical network card of the switch corresponding to the switch gateway address, redirecting and forwarding the data packet to a target physical network card of the switch corresponding to the switch gateway address, and forwarding the data packet to the corresponding switch through the target physical network card. Therefore, the configuration complexity of accessing the server to the switch is reduced, and the reliability and the access efficiency of accessing the server to the switch are improved.

The application provides a database cluster management method and device and network equipment, and relates to the technical field of databases.The method comprises the following steps: acquiring first information corresponding to a current master node of a database cluster; wherein the first information comprises at least one of the following: a server name, an Internet Protocol (IP) address and a gateway address; and performing a management operation on a node in the database cluster according to resource configuration information of the database cluster and the first information corresponding to the current master node; wherein the resource configuration information comprises the first information corresponding to a preconfigured master node, and the preconfigured master node is a master node configured for the database cluster.The scheme of the application solves the problem that the brain split emergency handling scheme in the prior art has a high cost and cannot meet the brain split emergency handling requirements of a database cluster deployed on a virtual machine or in the cloud.