359 results about "IPv6" patented technology

Systems and techniques are provided for path tracing. For example, a process can include establishing a path tracing session associated with path tracing (PT) probe packets from a PT source node of an IPv6 network fabric. A PT probe packet can be received with a first IPv6 Destination Options Header with Path Tracing Option (DOH-PT) header that encodes path tracing information of the PT source node and indicates respective path tracing information for each PT midpoint node along a path from the PT source node to a PT sink node of the IPv6 network fabric. The received PT probe packet can be updated to include a second DOH-PT header that encodes path tracing information of the PT sink node. An updated PT probe packet includes the first and second DOH-PT headers and can be encapsulated with an additional IPv6 header corresponding to forwarding information of a collector node.

The invention discloses a big data driven dynamic resource scheduling method for an IPv6 edge computing node, and relates to the technical field of edge computing, and the scheduling method comprises the following specific steps: S100, resource data collection and integration: deploying monitoring equipment at the IPv6 edge computing node, collecting computing, network, storage and energy resource data, and transmitting the data to a server; through multi-dimensional resource data acquisition and storage, comprehensive monitoring and quantitative integration of calculation, network, storage and energy resource data are realized, the resource scheduling is more accurate and efficient through the comprehensive data acquisition mode, and through construction of the energy consumption performance model, the performance value can be accurately calculated, and the energy consumption performance is improved. And the model is trained and optimized by using big data, so that the balance of energy consumption and performance in the resource scheduling process is realized, the resource utilization efficiency is improved, the energy consumption cost is reduced, and powerful support is provided for green and sustainable development of edge computing nodes.

Systems and methods for facilitating traffic steering via an SRv6 network by SD-WAN CE nodes without requiring the SD-WAN CE nodes to have SRv6 routing capabilities is provided. According to one embodiment, an end-to-end SRv6 tunnel is established through the SRv6 network between a source SD-WAN CE node associated with a first LAN and a destination SD-WAN CE node associated with a second LAN. LAN-side traffic originated by the first LAN and destined for the second LAN is received by the source SD-WAN CE node. Based on the LAN-side traffic, the source SD-WAN CE node, may encapsulate the LAN-side traffic as payload of an IPv6 packet, including incorporating path information within an IPv6 SRH to instruct PE / P nodes of the SRv6 network how to steer the IPv6 packet through the SRv6 network. Forwarding the encapsulated LAN-side traffic by the SD-WAN CE node through the SRv6 network via the SRv6 tunnel.

The invention provides a communication method, device and system, electronic equipment and a storage medium, and relates to the technical field of communication. The method comprises the following steps: receiving an Ethernet data frame sent by a first host connected with a first network device, wherein the Ethernet data frame comprises a source MAC address and a destination MAC address; determining a virtual Ethernet identifier and a target site mapping prefix corresponding to the target MAC address according to a preset address mapping relationship; generating an IPv6 message header according to the virtual Ethernet identifier, the target site mapping prefix and the target MAC address, and packaging the Ethernet data frame according to the IPv6 message header to obtain an IPv6 message; and sending the IPv6 message to a second network device, decapsulating the IPv6 message by the second network device to obtain an Ethernet data frame, and sending the Ethernet data frame to a second host connected to the second network device. The present disclosure can reduce overhead and improve system security.

The invention resides in a computer-implemented communication method. The method comprises a mechanism for distributing blockchain and / or cryptocurrency-related communications such as alerts, notifications and updates across an electronic network to one or more recipients as efficiently and swiftly as possible. Embodiments may use IPv6 multicast to perform such improved communications. A communication can comprise a code, flag or filter which enables the communication to be targeted at particular recipient(s) and allow multicast group members that have no interest or authorised access to the contents of the communication to ignore it. Thus, improvements are provided in respect of processing resources and time. In some examples, the disclosure can be advantageous for the implementation of a blockchain-related alert key or system which can aid in network responses to emergencies or threats, thus improving the security of the blockchain network.

A QUIC packet transmission method comprises setting a QUIC header in a next header of an IPV6 extension header, or setting the QUIC header inside an IPV6 extension header, so that the QUIC packet carries the QUIC header without carrying a UDP header.

The invention relates to the technical field of IPv6 self-configuration, in particular to an IPv6 network mode self-adaptive configuration method and system based on an RA message. In the method, a finite-state machine establishes a state transition path according to the combination relation of M and O flag bits in an RA message cache set and prefix field content, converts a network mode recognition process into a quantifiable state judgment sequence, and sends the state judgment sequence to the RA message cache set; configuration ambiguity caused by flag bit fluctuation in traditional static judgment is eliminated, pattern recognition under network environment changes has continuity and self-consistency, the classification regression tree constructs a branch judgment path with the duration, the advertisement interval and the prefix consistency of an RA source as characteristic variables, an optimal node is selected through a hierarchical splitting algorithm, and the judgment accuracy is improved. The dynamic mapping of stateful and stateless configuration paths is realized, the misjudgment rate of configuration branches is reduced, and the address allocation delay is optimized, so that the IPv6 self-configuration has a structured decision-making capability and a parameter mapping self-optimization characteristic, and the connection reliability, the address generation speed and the configuration accuracy are improved.

A system and a method to detect an attack on an IoT network is disclosed. The IoT network includes interconnection of multiple IoT devices. The method includes receiving, by a network connection device, multiple ICMPv6 network packets from IoT devices and outputting multiple output packets; and matching, by a routing device, a network traffic pattern to attack signatures structured as a taxonomy according to which part of a packet is misused. The taxonomy includes a branch to a data plane attack and a control plane attack, respectively. When an IPv6 RPL packet is detected, the method includes checking for generating, modifying, and replaying attacks by an attacker. When a non-RPL packet is detected, the method includes checking for dropping and leaking packet attacks by the attacker. When the attack is detected, the method includes invoking a solution to the attack. The solution includes mitigation of the attack by the attacker.

Embodiments of the disclosure relate to a mesh network. The mesh network includes a plurality of drones and a border router. The plurality of drones is configured to communicate with each other and with the border router over a first protocol. The first protocol uses IPV6 mesh connectivity at a first bandwidth. At least one drone of the plurality of drones operates as a router, and at least one drone of the plurality of drones operates as an end device. The router is configured to communicate with the border router and with the end device, and the end device is configured to communicate only with the router. The border router can be configured to communicate with an external network over a second protocol using a second bandwidth, and the second bandwidth can be greater than the first bandwidth.

The present disclosure provides a threat intelligence detection method, device, equipment and medium based on honeypot trapping, which relates to the field of network security technology and aims to improve the threat detection and response capabilities of network security. The method includes: obtaining network topology data of an IPv6 network; generating an undirected graph based on the network topology data, wherein the nodes of the undirected graph represent devices in the IPv6 network, and the edges of the undirected graph represent the connection relationship between the devices; based on the undirected graph, determining the target node based on the first parameter and the second parameter of each node, wherein the first parameter represents the importance characteristics of the node, and the second parameter represents the vulnerability characteristics of the node; based on the target node, deploying a honeypot trapping strategy, wherein the honeypot trapping strategy is used to simulate the vulnerabilities of the real system to attract attackers to actively attack; detecting threat intelligence according to the honeypot trapping strategy.

The invention discloses an IPv6 stateless address dynamic planning method and system based on an elastic prefix, particularly relates to the field of network communication, is used for solving the problems of prefix rigidity and service semantic deficiency in IPv6 stateless address configuration of a railway network, and is implemented by extracting basic prefix information and compressing a service level identifier to generate an elastic sub-prefix bit string. The prefix is ensured to be flexibly embedded into multi-level semantics; fusing the MAC address of the host to construct a temporary interface ID, and enabling the address to have deep association between equipment and service; splicing candidate addresses and broadcasting verification information to collect conflict feedback to realize real-time conflict detection; based on feedback calculation correlation strength and a variation rate index, driving a bit flipping optimization prefix and an interface ID through a support vector machine decision, and forming an iterative adjustment closed loop; and finally, repeatedly verifying and confirming a final address and feeding back the final address to the semantic pool, or rolling back and expanding the prefix so as to solve stubborn conflicts, thereby overcoming the prefix rigidity and semantic deficiency of the traditional mechanism.

The invention relates to a multi-level management IPv6 flow multifunctional monitoring platform which comprises a data acquisition layer, a region monitoring layer, a core analysis layer, a control and arrangement layer and a feedback optimization layer. The data acquisition layer is located at the edge of a network and is responsible for acquiring real-time traffic data and completing preliminary traffic classification and anomaly detection; the area monitoring layer is distributed in each area, constructs an area flow characteristic database by aggregating edge data, and processes local flow abnormity and executes a response strategy at the same time; a core calculation unit of a centralized platform is arranged in the core analysis layer, a global AI model is optimized through federal learning, meanwhile, a double-flow neural network is introduced to fuse global features and personalized features, and cross-regional cooperative monitoring and global optimization are provided; the control and arrangement layer provides dynamic resource allocation and strategy adjustment, and coordinates the operation of global and regional nodes; and the feedback optimization layer continuously optimizes the traffic scheduling and protection strategy in combination with digital twinning and reinforcement learning.

The present invention discloses a method for in-flow detection in a spatial network, belonging to the field of communication technologies. The method first receives packets and extracts the Flow Label field in the IPv6 protocol header; then performs node type judgment and sampled packet identification; and then conducts in-flow detection processes for encapsulation nodes, transmission nodes, and decapsulation nodes according to the node types. In the method of the present invention, the compression of in-flow detection data separately compresses the in-band operation, administration, and maintenance option headers and metadata to obtain in-flow detection option headers and metadata, which saves more memory resources; the present invention judges the node types and identifies sampled packets through the Flow Label field in the IPv6 protocol header, which is accurate, efficient, and resource-saving; in addition, a sampling template method is adopted to indicate each node to collect in-flow detection metadata; the in-flow detection option header is added between the UDP / TCP protocol header and the payload of the original packet for transmission to avoid affecting the original packet protocol header.

The invention discloses a method for identifying an interface address of an IPv6 router, and belongs to the technical field of network measurement. The method comprises the following steps: acquiring an IPv6 prefix list, and initializing experience information; selecting a current target IPv6 prefix according to the IPv6 prefix list, randomly generating a specific detection target in the current target IPv6 prefix, evaluating the effectiveness of the specific detection target by using experience information, and retaining the effective specific detection target; repeating the operation until the number of specific detection targets reaches a set value; performing stateless online detection according to each specific detection target to obtain a detection result; and updating the experience information, iterating the detection operation until the total quantity of the sent data packets reaches the total detection budget, obtaining the reachable interface address and relative position of the local address based on the detection result in each round of iteration, and completing the interface address identification. According to the invention, the problem that the existing method cannot adaptively allocate detection resources and minimize unnecessary detection is solved.

The invention belongs to the technical field of IPv6 situation awareness, and relates to a power industry structured text generation method based on an NLP technology, and the method comprises the steps: collecting sensor data, equipment logs, user reports and other multi-source data from a power system, and carrying out the preprocessing; next, key features are extracted by adopting primary feature extraction and PCA dimension reduction technologies, standardized processing is carried out on the key features, feature data are labeled by utilizing power expert knowledge, the labeled data are classified and sorted through a classification algorithm, training is carried out by adopting a BERT model, and labeled key feature data and text data are input; the method comprises the following steps: generating a text meeting the requirements of the power industry by using supervised learning, generating a structured text by iteratively optimizing a feature extraction and classification strategy for multiple times and combining a pre-designed rule and a template, checking the text by using a verification rule, carrying out quality evaluation on the text through a ROUGE evaluation index, further optimizing a model and generating the rule, and carrying out quality evaluation on the text. Therefore, the target of efficient and accurate power industry text generation is achieved.

The invention relates to the technical field of network security, in particular to an IPv6 fragment bypassing threat detection method and system based on eBPF and XDP, a data packet observation point is arranged on a network driver layer, and the data packet observation point is used for mounting an eBPF program on a data packet processing path by using a fast data path XDP technology; for data packets received on a network driver layer, an eBPF program on an XDP network hook is called by using a data packet observation point, and data packets with potential threats are identified and filtered by using a feature matching strategy through the eBPF program. The feature matching strategy is used for extracting key features of the data packet, matching the extracted key features of the data packet with target threat features and judging whether an upper header of the data packet is complete or not. According to the method, the specific threat efficient detection is realized by combining the eBPF dynamic programmability and the XDP high-performance data packet processing capability, the IPv6 network security threat high-performance solution task requirements are met, and the influence on the system stability is small even under serious threats.

The invention relates to the technical field of traffic prediction, and discloses an IPv6 traffic prediction system based on machine learning, and the system comprises a traffic collection module which is used for capturing the original traffic data of an IPv6 network interface and carrying out the protocol analysis and traffic classification preprocessing, and obtaining the preprocessed IPv6 traffic data; the multi-dimensional feature extraction module is used for performing multi-modal feature extraction on the preprocessed IPv6 flow data to generate a fusion feature vector; the real-time prediction module is used for inputting the fusion feature vector into a dynamic prediction model to obtain an IPv6 traffic prediction value of a future preset duration; and the dynamic scheduling module is used for pushing the IPv6 traffic prediction value of the future preset duration to a traffic scheduling controller so as to realize dynamic scheduling of network resources. According to the method, the network traffic prediction accuracy and real-time performance are improved, the adaptive capacity to IPv6 traffic mode change is enhanced, and reasonable distribution and efficient utilization of network resources are effectively promoted.

The invention relates to a cross-network exchange service flow strategy control method, which comprises the following steps of: S1, constructing a strategy controller and limiting identities of two communication parties; s2, the strategy controller maintains a resource pool based on analysis and prediction; s3, after the transmitting end initiates the transmission service actively, the strategy controller dynamically adjusts the flow control strategy; s4, the cross-network switching processing system processes the transmission service according to a strategy; wherein the strategy controller comprises a strategy management module, a name address directory module, a behavior analysis module and a resource management module. According to the invention, through design oriented to future IPv6, transmission services of corresponding levels are provided for users, services and applications, and the problem of flow control strategies in cross-network transmission is solved.

The invention discloses an IPv6 (Internet Protocol Version 6) test method capable of supporting multiple network interfaces of an Internet of Things terminal. The method comprises the following steps: configuring a test environment to simulate various IPv6 network connection scenes and pushing a preset data packet flow to the Internet of Things terminal through the test environment; performing network function verification after different network interfaces of the Internet of Things terminal receive the data packet flow, wherein the network function verification comprises monitoring network behaviors of the Internet of Things terminal on each interface based on preset performance parameters; data collected from the Internet of Things terminal is recorded and analyzed to assess its compatibility and stability under network transitions, intermittent connections, and load changes. According to the invention, the problem of how to test the compatibility and stability of multiple network interfaces of the Internet of Things terminal in the IPv6 environment can be solved.

The embodiment of the invention provides a data forwarding method and device, network equipment and an SRv6 data forwarding system, and relates to the technical field of IPv6 forwarding. The method comprises the following steps: a network device receives a shared key generated and issued by a controller based on network topology information of the SRv6 data forwarding system, encrypts a preset header field of an original message based on the shared key when the shared key is used as a source node of data forwarding, and forwards the encrypted message; when serving as an intermediate node for data forwarding, verifying and re-encrypting a preset header field of the received message based on the shared key, and forwarding; and when the received message is used as a destination node for data forwarding, the preset header field of the received message is verified and decrypted based on the shared key to obtain the original message, so that an attacker is prevented from obtaining path information through a plaintext, and network topology exposure is avoided.

The invention discloses an Internet of Vehicles security certification and data encryption transmission system integrated with an IPv6 (Internet Protocol Version 6) technology. According to the invention, the key strategy can be automatically optimized according to the dynamic environment in the actual operation of the Internet of Vehicles, and the dynamic balance between the security protection and the communication efficiency is realized. The system can intelligently judge the cracking risk faced by a current key by combining real-time data such as a vehicle driving state and network environment characteristics, so as to flexibly adjust the key length and the updating frequency: when the network environment is safe and the vehicle is in a low-risk area, the key service cycle is properly prolonged, and the basic key length is maintained to reduce the communication overhead; when a potential threat is detected or a vehicle enters a complex road section, the secret key security level is automatically improved, and the rotation period is shortened to enhance the protection capability. The system burden cannot be increased due to excessive encryption, potential safety hazards cannot be left due to insufficient protection, and key management better meets the actual requirements of high-speed movement of vehicles and rapid change of scenes in the Internet of Vehicles.

A system and method for authenticating and authorizing access of an IPv6 connection to the Internet over a Wireless Access Vehicle Environment (WAVE) service channel and charging bandwidth consumption of a client device over the IPv6 connection using an Authentication, Authorization and Charging (AAA) server is disclosed. The AAA server authenticates and authorizes the client device to access the WAVE service channel and charges bandwidth consumption of the client device that accesses the Internet using the WAVE service channel. The AAA server enables the RSU infrastructure operator to quantify the wireless bandwidth consumption of the in-vehicle device using the WAVE service channel on a per-device basis.

The invention discloses a power data network wide area synchronous transmission system based on APN6 intelligent slicing, and relates to the technical field of power system communication, the service type of current transmission data is obtained through an identification embedding module, and a structured APN6 identifier is embedded in a Hop-by-Hop option header of an IPv6 extension header; the slice creation module judges whether retransmission is carried out or not according to CRC verification, dynamically creates multi-level slices according to time delay levels, and calculates an optical fiber refraction compensation value according to topological path coding; when the phase compensation module monitors that a line fault or a node is overloaded, different strategies are executed for slices of different levels, and transmission phases of slices around a fault area are adjusted through the signal modulation module; and when the slice capacity expansion module detects that the new energy cluster oscillates, bandwidth directional capacity expansion is executed according to the slice resource elastic scheduling framework. According to the method and the device, the data identification accuracy and the slice resource adaptability are improved.

This application provides a method, device, and system for forwarding BIER packets. The method includes: a first network device receiving a BIER packet sent by a second network device. The BIER packet includes an IPv6 header, a BIER header, and a multicast packet. The destination address in the IPv6 header or a first field in the BIER header carries a service identifier, which is used to identify a Virtual Private Network (VPN) instance. The first network device determines a Virtual Private Network (VRF) table based on the service identifier and a first correspondence, whereby the first correspondence includes the correspondence between the service identifier and the VRF table. The first network device then sends a multicast packet to a first User Edge (CE) device listed in the VRF table. The technical solution provided by this application is relatively simple to implement when the egress edge device identifies a VPN instance.

The invention relates to a computer-implemented communication method. The method includes a mechanism for distributing blockchain-related communications and / or cryptocurrency-related communications, such as alarms, notifications and updates, to one or more recipients over an electronic network as efficiently and quickly as possible. Embodiments may perform such improved communications using IPv6 multicast. Communications may include code, flags, or filters that enable the communications to be targeted for particular recipients and that enable multicast group members that are not interested in or unauthorized to access communication content to ignore the communication content. As a result, improvements are made in processing resources and time. In some examples, the disclosure may facilitate implementation of a blockchain-related alert key or system that may assist a network in coping with an emergency or threat, thereby improving the security of a blockchain network.

In one aspect, a method includes setting, at a source node of an SRv6 network, one or more bits of a packet to indicate an ingress service identifier associated with an ingress service, where the ingress service is behind a source node; transmitting, by the source node, the packet towards a destination device of the SRv6 network; accessing, at the source node and from a network device in communication with the source node, an Internet Control Message Protocol error message that includes a portion of the packet indicating the ingress service identifier; and identifying, based on the ingress service identifier indicated by the Internet Control Message Protocol error message for the packet, the ingress service associated with the packet.

The invention provides a method and equipment for realizing IPv6 segment routing network slice forwarding. The method comprises the following steps: setting a strict mode in a first SRv6 data message descriptor matched with a strict mode mark table item of a directional access control table; associating the first SRv6 data message matched with the network slice channel mapping table item of the direction access table to the network slice channel of the network slice instance; searching a real next hop out interface in the longest route matching table based on the outer layer destination IP address of the first SRv6 data message; caching the first SRv6 data message in a cache space corresponding to the network slice instance in an outbound buffer; and scheduling the first SRv6 data message to a port queue bound with the network slice channel in the real next hop-out interface.

The invention discloses a dynamic distributed scanning method and system based on an IPv6 geographic tag, and relates to the technical field of the Internet, and the method comprises the steps: carrying out the region division of an IPv6 seed address through combining with geographic information, obtaining the IPv6 seed addresses of a plurality of geographic regions, constructing an address space tree of each geographic region, determining the change dimension of the address space tree, and carrying out the calculation of the change dimension of the address space tree; generating candidate sub-modes based on the change dimension, and selecting a sub-mode from the candidate sub-modes; generating an address according to the sub-mode, and further obtaining a target address; performing comprehensive evaluation on each sub-mode region based on the seed address density and the network development condition to obtain an initial score, and scanning a target address in each sub-mode region according to the initial score; in the scanning process, the initial score is updated by adopting a score updating mechanism, and scanning is continued based on the updated score. Geographic positions and mechanisms based on IPv6 seed addresses are fused, so that the number of real active addresses is hit to the maximum extent under a limited scanning budget, and the detection efficiency is improved.

The invention provides a network testing method and device, equipment and a storage medium. The method comprises the following steps: acquiring network traffic data of an application program; determining a network protocol corresponding to the application program based on the network flow data; in response to determining that the network protocol is an IPv6 protocol, performing a function test on the application program in an IPv6 network, and recording a test result of the function test; and generating a test report according to the test result. According to the method, automatic function testing is carried out on the IPv6 support degree of the application program, so that the labor cost is reduced, and the testing efficiency and accuracy are improved.

The invention relates to an IPv6 side equipment router alias information detection method, device and equipment. According to the method, a public IPv6 router alias address data set is taken as a target, Tracroute detection is carried out on a target address, TCP, UDP and ICMP message packets are sent, a detection host analyzes Tracroute path records of seed alias, the paths which have wide structural similarity but are different only in a single IP hop address in the paths are identified, the paths are marked as candidate alias pairs, and the candidate alias pairs are marked as candidate alias pairs. Meanwhile, a feature set is established for training, so that an alias classification model is established, and whether the target router pair is an alias pair or not is determined. Compared with the prior art, the method has the advantages that the address of the IPv6 router is detected within the Internet range, alias information of the network router is correctly and efficiently classified, and effective technical and data support is provided for network surveying and mapping and network security research.