31 results about "Ip layer" patented technology

The invention discloses a satellite network SRv6 header compression conversion method, relates to the field of space-ground convergence network communication, and aims to solve the problem of seamless compatible intercommunication between a satellite network based on satellite label routing switching and a ground standard SRv6 network. According to the scheme, end-to-end SRv6 path arrangement between a satellite network and a ground SRv6 network can be realized, the transmission overhead of a standard SRv6 packet in the satellite network is reduced, an SRH head sinks below a network layer, the safety protection of a whole IP layer is realized, the scheme can be continuously compatible with a standard SRv6 technology, and the scheme is particularly suitable for a satellite network system with high safety requirement and limited bandwidth.

The invention relates to a harmful website interception method and device, a storage medium and electronic equipment, and relates to the technical field of network security, and the method comprises the following steps: monitoring a website access request initiated by a user in real time; in response to the website access request, performing multi-level detection on a target website requested to be accessed on a DNS layer, an IP layer, a URL layer and a content layer in sequence; according to a detection result of the multi-level detection, carrying out comprehensive assessment on the risk of the target website to obtain a comprehensive risk level of the target website; and in response to the comprehensive risk level, selecting and executing a corresponding target website interception operation from a plurality of preset interception strategies to prevent the user from accessing the harmful website, and updating the intercepted harmful website information to a multi-level hierarchical knowledge base in real time. Through the scheme of the invention, the intelligent analysis capability of webpage contents can be improved, harmful websites can be identified more accurately, the interception effect of the harmful websites is improved, and the high-standard requirements of families, schools and society on network security are met.

The application discloses an SSL VPN tunnel transmission method for an IP layer, and relates to the technical field of network communication.The method constructs an IP virtual tunnel outside an SSL session, and directly encapsulates and transmits complete IP messages, thereby completely breaking through the limitation that a traditional SSL VPN only supports a Web proxy, and transparently passing through the tunnel for TCP services, UDP streaming media, ICMP network diagnostic messages, and the like, so that the method realizes remote access of the IP layer in a true sense, and a server adopts a south-north decoupling design, a virtual network port is used as a southward interface to communicate with a client tunnel, and the northward directly interacts with an intranet physical network card through a system routing table, without analyzing transport layer content, without maintaining a TCP connection state, and only performing IP layer transparent forwarding, so that the processing cost is greatly reduced, and the throughput performance is obviously improved.

The application provides a 5G private network environment N3 interface session management method and management system, the management method comprises the following steps: adopting a soft shunting mode to access a network card flow; analyzing the accessed network card flow, which comprises the following steps: performing packet protocol analysis on the accessed network card flow to obtain packet quintuple information; performing GTP protocol analysis; performing IP layer and transport layer analysis on the GTP protocol load to obtain the load quintuple information, and replacing the packet quintuple information with the load quintuple information; calculating a flow identifier ID according to the load quintuple information, and distributing the packet to the corresponding flow processing engine according to the flow identifier ID. The application can process N3 flow with high concurrency, help the security device to process 5G private network flow at high speed, and improve the security protection capability.

A reception method for receiving a broadcast signal is disclosed. The reception method according to embodiments may comprise the steps of: receiving a broadcast signal; physical layer processing the broadcast signal to obtain link layer packets; link layer processing the link layer packets to obtain UDP / IP packets; UDP / IP layer processing the UDP / IP packets to obtain first data packets based on a first delivery protocol or second data packets based on a second delivery protocol; and processing the first data packets or the second data packets to obtain service data for a first service or service data for a second service.

In one aspect, a method for packet orchestration to provide data encryption at the internet protocol (IP) layer, includes the step of providing a quantum secure pre-shared key derivation scheme for a data link layer bulk encryption algorithm, meaning the ability to setup a separate communication channel, via the SSH protocol, and leverage ECDH over said channel to share pre-shared keys. The method includes the step of providing a set of software-based network bridges. The method includes the step of assigning a set of network ports to specific bridges, wherein the set of network ports implement segmentation and isolation based on an organizational policy.

The application relates to a data transmission method and device based on a vehicle-mounted Ethernet protocol and a storage medium, and belongs to the technical field of intelligent automobile controller software development. The method comprises the following steps: receiving target data sent by a service end through a vehicle-mounted Ethernet protocol; the protocol type of the vehicle-mounted Ethernet protocol is determined based on the length of the target data; based on the protocol type, frame loss detection and integrity check are performed on the target data; in the case that frame loss or integrity check failure occurs, abnormal data frames are determined; and the service end is requested to resend the abnormal data frames. The data transmission method based on the vehicle-mounted Ethernet protocol can adopt two transmission mechanisms of single packet and multiple packets, can cover transmission of different data sizes, avoids IP layer fragmentation, reduces transmission delay, and establishes a frame loss resending mechanism when data frame loss or check failure occurs, thereby improving transmission reliability.

The invention relates to the technical field of communication, and discloses a multi-domain agile communication method and device, electronic equipment and a storage medium. The method comprises the following steps: periodically sending a first neighbor beacon to each neighbor node, and periodically receiving a second neighbor beacon sent by the neighbor node; wherein the first neighbor beacon comprises node information of each first node, and the first nodes at least comprise neighbor nodes; wherein the second neighbor beacon comprises node information of each second node; according to the second neighbor beacon, updating a neighbor table stored in the second neighbor beacon; and establishing a network route with each third node in sequence by using the neighbor node. Therefore, medium-independent network networking and path addressing functions under the centerless condition are realized. And the problem of low communication efficiency caused by an IP layer routing process is avoided. The service compatibility is good, the large networking scale is supported, and the low network overhead is kept.

The invention relates to the technical field of communication, in particular to a communication method and device and a readable storage medium, and the method comprises the steps that under the condition that UE does not need to establish an IPsec tunnel, connection with a UPF is established for multi-path transmission, and a network can instruct the UE and / or the UPF to use double IP layers for data transmission in a non-3GPP path; or, the network can update the rule, the rule carries the IP address allocated to the UE by the access node of the non-3GPP path, and the rule is issued to the UE and / or the UPF. Therefore, after the UE directly establishes the connection with the UPF, the multi-path transmission of the service data can be normally carried out through the multi-path session under the guidance of the rule.

The application discloses a kind of photoelectricity collaborative resource allocation method and device based on spectrum state perception, after the method receives dynamic service request, IP layer service traffic is converted into optical layer frequency slot;K-SP algorithm is filtered K alternative paths, the idle frequency slot proportion of each path link, concentration and fragment matching degree are calculated, and then the spectrum efficiency adaptation degree is obtained, the path corresponding to the maximum value is selected as working path;From the remaining path, the alternative path that meets the reservation bandwidth requirement is filtered, and the optimal protection path is selected after calculating the failure rate;When working path meets spectrum constraint, resource is distributed, and when fault, it is switched to protection path and is connected transmission.The application optimizes path selection by spectrum state accurate perception, effectively reduces spectrum fragment, improves spectrum utilization, reduces service blocking rate, enhances network reliability and dynamic adaptation ability.

This invention discloses a method, apparatus, electronic device, and storage medium for processing routing protocol messages. The method is applied to the IP layer of a network protocol stack and includes: receiving routing protocol messages; when a routing protocol message is detected to meet fragmentation processing conditions, fragmenting and reconstructing the routing protocol message to obtain multiple target routing protocol messages; and generating IP packets based on the multiple target routing protocol messages. This method can fragment routing protocol messages, enabling them to meet transmission requirements and ensuring normal network communication.

The present application relates to a communication method and device. The method comprises: a terminal device receiving downlink data, wherein the downlink data carries a reverse mapping identifier; and on the basis of first-protocol-layer header information and second-protocol-layer header information of the downlink data, the terminal device generating a QoS rule for uplink data, wherein a first protocol layer comprises at least one of an IP layer, a TCP layer, and a UDP layer. The embodiments of the present application can improve the accuracy of performing QoS control over data streams.

Embodiments of the present application disclose a device network configuration method and system, a storage medium and related devices, and are applied to the technical field of communication. In a master device mode of a first wireless network, a to-be-configured device receives a dynamic host configuration protocol message sent by a slave device. If specific information options of the dynamic host configuration protocol message include network configuration information of a second wireless network, the to-be-configured device switches to a slave device mode of the second wireless network after processing the dynamic host configuration protocol message, and performs network configuration of the second wireless network according to the network configuration information. In the process of obtaining the network configuration information, the to-be-configured device does not need to actively listen to a broadcast packet, but passively obtains the network configuration information by receiving the dynamic host configuration protocol message sent by the slave device, only needs to involve a WiFi drive layer and an IP layer, and does not need to involve an application layer, so that consumption of the to-be-configured device during network configuration is reduced, and network configuration time is reduced.

The invention relates to a collaborative scheduling method, system and device for a cross-layer IP and an optical network, and a medium. The method comprises the following steps of: atomizing and analyzing an I P layer resource of a data network and an optical layer resource of a transmission network into a network resource atomic power unit which can be independently scheduled; combining the service priority, the bandwidth utilization rate of the network resources, the average delay and the service type which are monitored in real time to perform multi-layer service model combination to generate a cross-layer collaborative arrangement strategy; and generating a cross-layer optimal service path through a comprehensive cost function in combination with data network path planning data, transmission network optical channel resources and service demand information, thereby realizing collaborative scheduling of end-to-end resources of the data network and the transmission network, and finishing cross-layer resource allocation and service end-to-end automatic opening. By adopting the method, the management barrier between the IP layer and the optical layer can be broken, the utilization efficiency of network resources and the agility of service deployment are effectively improved, and the requirements of high reliability and high efficiency of a modern communication network are met.

The invention relates to the technical field of computer networks, in particular to a two-layer network bridge equipment management system and method based on an ICMP protocol. According to the technical scheme, the two-layer network bridge equipment management system based on the ICMP protocol comprises an ICMP message interception and preprocessing module, an instruction analysis and safety control module, a lightweight instruction execution and state acquisition module and a response packaging and priority sending module; according to the invention, an independent management plane which is logically decoupled with a two-layer forwarding plane and runs in parallel with the two-layer forwarding plane is constructed, and a bypass interception mechanism is implanted into an IP layer of a network protocol stack, so that all inflowing IP data packets are monitored and screened in real time before being submitted to an upper-layer protocol stack or a forwarding engine; the response message does not pass through the conventional bridging query and forwarding logic, and the whole data path from the receiving of the management request to the final response is ensured, so that the operation and maintenance personnel can still carry out remote command and information transmission under the condition that the bridging function is completely paralyzed.

The management and reporting of congestion in hybrid networks subject to congestion at MAC level requires adaptation of the L4S mechanism. Regarding uplink traffic, an AP receives a MAC frame marked with MAC congestion indication, reports to IP layer, the indication and the IP packet of the received frame, and responsive to the reporting, marks the packet with a CE codepoint. To speed up congestion reporting, a communication device detects congestion in a local transmit MAC queue storing MAC frames of a first flow of data traffic, and responsive to the detection, reports, to IP layer, a MAC congestion indication using a MAC service primitive. In particular, a communication device has a MAC service configured to communicate with an upper layer using a primitive that includes an ECN codepoint to report congestion and / or a MA-UNITDATA-STATUS.indication primitive that includes an ECE bit to report congestion.

The invention relates to a method and system for improving FSDM network resource utilization efficiency, and the method comprises the steps: S1, constructing an IP-over-FSDM network architecture which comprises an IP layer and an FSDM optical layer; s2, a mixed traffic grooming mechanism is constructed based on the IP-over-FSDM network architecture, and the mixed traffic grooming mechanism comprises a single-hop path service grooming mechanism and a multi-hop path service grooming mechanism; and S3, optimizing the operation process of the mixed traffic grooming mechanism in the IP-over-FSDM network architecture through an integer linear programming model. According to the invention, utilization of FSDM network resources can be effectively realized.

The present application relates to the technical field of communications, and in particular to a communication method and apparatus and a readable storage medium. The method comprises: without the need to establish an IPsec tunnel, a UE establishing a connection with a UPF for multi-path transmission, and a network instructing the UE and / or the UPF to use dual IP layers on a non-3GPP path to perform data transmission; or the network updating a rule to carry an IP address allocated to the UE by an access node of the non-3GPP path, and issuing the rule to the UE and / or the UPF, such that after the UE establishes a direct connection with the UPF, multi-path transmission of service data can be normally performed over a multi-path session under the guidance of the rule.

The invention provides a malicious traffic detection method based on neighborhood optimization and double-view contrast learning. Comprising the following steps: step 1, carrying out preprocessing and feature extraction on network traffic data, respectively generating node features in an IP layer and a traffic layer, and constructing a corresponding edge set based on an IP index and traffic similarity; step 2, weighting IP node features based on causal weights, and performing neighborhood aggregation and attention coefficient calculation through a multi-head graph attention network to obtain discriminative node representation fused with causal information; and step 3, fusing the IP layer causal weighted traffic features, the causal feature vectors and the traffic features updated by the graph attention network, mapping the fused features to a category space for classification, calculating the contrast loss of the IP layer and the traffic layer under a multi-view contrast learning framework, and fusing the contrast loss with the cross entropy loss to form total loss. And carrying out malicious traffic detection through back propagation and iterative training optimization model.

Data transmission methods and apparatuses, a device, and a storage medium, relating to the technical field of communications. A method is executed by a first device, and the method comprises: controlling a first protocol stack to transmit or retransmit to a first network device the first type of data packets, an upper-layer protocol stack of the first protocol stack being an RRC layer or an SDAP layer or an IP layer, a lower-layer protocol stack of the first protocol stack being an MAC layer, and the first network device being a network device of a target cell where a terminal device camps after performing a cell handover (310). Thus, a new protocol stack structure is provided, and the terminal device uses the first protocol stack to transmit or retransmit data packets, the lower-layer protocol stack of the first protocol stack being an MAC layer, and the upper-layer protocol stack of the first protocol stack being an SDAP layer or an RRC layer or an IP layer. Only one data layer in the first protocol stack is used to process data to be transmitted, thus function repetition among multiple protocol stacks is prevented, thereby helping to reduce the complexity of data processing for terminal devices.

Systems and methods include receiving a list of prioritized optical restoration paths for each of a plurality of failures in a multi-layer network, wherein each list of prioritized optical restoration paths for a corresponding failure of the plurality of failures is determined based on modeling impact of a given failure on a higher layer, relative to an optical layer; and, responsive to a failure of the plurality of failures, utilizing a corresponding list of prioritized optical restoration paths for the failure to restore services in the optical layer. The modeling impact can include determining new routes and link utilization in the higher layer, prioritizing links in the higher layer, and utilizing the prioritized links to determine the list of prioritized optical restoration paths, for the given failure. The higher layer can be an Internet Protocol (IP) layer.

The invention provides an information transmission method and device, and the method comprises the steps: an MAC layer of a first device sends a first message to an MAC layer of a second device, the first message comprises first information obtained by the MAC layer of the first device from an IP layer of the first device, and the first message is used for indicating the MAC layer of the second device to send the first information to the IP layer of the second device; the first message is transmitted through the SRI interface. Therefore, the protocol function of the SRI interface can be defined, the first information of the IP layer of the SRI interface of the first equipment can be quickly transmitted to the IP layer of the SRI interface of the second equipment, and quick interaction between the IP layer of the SRI interface of the first equipment and the IP layer of the SRI interface of the second equipment is realized.

The application provides a data transmission method, device, equipment and storage medium. The method comprises: creating M PDU sessions; N PDU sessions are used for transmitting target service data, and Q PDU sessions are used for transmitting test data; M is an integer greater than or equal to 1, N and Q are integers greater than or equal to 1 and less than or equal to M, and the sum of N and Q is equal to M; if an air interface between a terminal device and a network device is not in a congestion state, obtaining a target rate detected by the terminal device; the target rate is a data transmission rate of the M PDU sessions at a MAC layer obtained by the terminal device transmitting the test data in the Q PDU sessions through a preset peak rate; for the M PDU sessions, if a data transmission rate at an IP layer is less than a first data transmission rate, increasing a data transmission rate of the N PDU sessions on the target service data; the first data transmission rate is equal to a product of the MAC layer data transmission rate and a first rate factor.

The invention relates to a collaborative analysis method, system and device based on cross-layer IP and optical network resources and a medium. The method comprises the following steps: collecting multi-dimensional data of an IP network and optical network equipment in real time, wherein the multi-dimensional data covers key information such as performance, topology, alarm and resources; respectively carrying out feature extraction and resource modeling on the data of the IP network and the optical network to generate respective single-layer models; the IP network single-layer model and the optical network single-layer model are associated and fused, and a cross-layer resource model is constructed; and analyzing the performance indexes according to the performance indexes in the cross-layer resource model and a preset threshold value to obtain a cross-layer performance collaborative analysis result which covers the time delay of the IP layer, the packet loss rate, the optical power of the optical layer and the like and is used for evaluating the health state, the resource utilization efficiency and the service bearing capacity of the combined operation of the IP network and the optical network. By adopting the method, the problems of difficulty in cross-layer fault positioning and insufficient resource and performance linkage can be solved, cross-layer network resource visualization and collaborative management are realized, and the fault processing efficiency is improved.

This invention discloses a message processing method, apparatus, device, storage medium, and computer program product. The message processing method includes: mounting a forwarding rule learning module in a gateway to the IP layer, so that the forwarding rule learning module mirrors data link layer messages according to mirroring rules, and uploads the mirrored messages to the gateway DPI application. This invention can achieve filtering and mirroring of specific service TCP / IP messages at the data link layer of a gateway device in bridging mode without affecting the accelerated forwarding of normal service messages through message forwarding hardware.

The application relates to the technical field of communication, and discloses a multi-domain agile communication method and device, electronic equipment and a storage medium. In the application, a first neighbor beacon is periodically sent to each neighbor node, and a second neighbor beacon sent by the neighbor node is periodically received; the first neighbor beacon contains node information of each first node, and the first node at least contains the neighbor node; the second neighbor beacon contains node information of each second node; a neighbor table stored in the self is updated according to the second neighbor beacon; and network routing is established with each third node in turn by using the neighbor node. Therefore, the medium-independent network networking and path addressing functions under the condition of no center are realized. The communication efficiency reduction problem caused by the IP layer routing process is avoided. The service compatibility is good, a larger networking scale is supported, and a lower network overhead is maintained.

The invention relates to the technical field of optical networks, and discloses a network resource allocation method applied to an IP over data center elastic optical network, which comprises the following steps: initializing the IP over data center elastic optical network and a connection request set; for each connection request, if the residual computing power resources of the source node and the destination node of the connection request, the computing power resources required by the source node and the computing power resources required by the destination node which meet the connection request, establishing a corresponding flow grooming auxiliary graph for the connection request based on an IP over data center elastic optical network; and if the traffic grooming auxiliary graph of the connection request is successfully established, acquiring the shortest path between the source node and the destination node of the connection request based on the traffic grooming auxiliary graph, and establishing the connection request through the traffic grooming of the combination of the optical layer and the IP layer.

The present application relates to the technical field of communications, and in particular to a communication method and apparatus and a readable storage medium. The method comprises: without the need to establish an IPsec tunnel, a UE establishing a connection with a UPF for multi-path transmission, and a network instructing the UE and / or the UPF to use dual IP layers on a non-3GPP path to perform data transmission; or the network updating a rule to carry an IP address allocated to the UE by an access node of the non-3GPP path, and issuing the rule to the UE and / or the UPF, such that after the UE establishes a direct connection with the UPF, multi-path transmission of service data can be normally performed over a multi-path session under the guidance of the rule.

Provided in the present disclosure are an information transmission method and apparatus. The method comprises: a MAC layer of a first device sending a first message to a MAC layer of a second device, wherein the first message comprises first information obtained by the MAC layer of the first device from an IP layer of the first device, the first message is used for instructing the MAC layer of the second device to send the first information to an IP layer of the second device, and the first message is transmitted by means of an SRI. Therefore, an SRI protocol function can be defined, such that first information from an IP layer of an SRI of a first device can be quickly transmitted to an IP layer of an SRI of a second device, thereby implementing quick exchange between the IP layer of the SRI of the first device and the IP layer of the SRI of the second device.

The invention belongs to a network access method, and provides a wide-narrow integrated wireless sensor network access method and a related device aiming at the technical problems that the resource utilization rate is not high, the management is complicated and the requirements of diversified and flexible access of services are difficult to meet due to independent networking of the current wide-narrow wireless network. A general link layer is added between an IP layer and an MAC layer of a network, the general link layer comprises a control plane and a data plane which are modularly decoupled, the network is divided into a plurality of logic sub-networks, network detection data packets are sent to the logic sub-networks respectively, virtual sub-networks are constructed according to real-time monitoring results of network performance indexes, and the virtual sub-networks are used for monitoring the network performance indexes. And determining the type of a service to be accessed, formulating a corresponding access strategy according to different service types, and after access according to the access strategy, continuously monitoring the network performance index in real time and dynamically adjusting the virtual subnet. The access scheme is dynamically adjusted according to the real-time state data of the wireless sensor network, and the flexibility and fault tolerance of the structure of the wireless sensor network are improved.