283 results about "IPv6 address" patented technology

Aspects of the subject disclosure may include, for example, establishing a Layer 2 multipoint virtual private network (VPN) among a plurality of sites connected via a switched, shared or dedicated ethernet provided by a service provider, where the plurality of sites correspond to multiple locations of a target enterprise, determining a count of the plurality of sites that requires a connection to one or more cloud service providers over a common backbone network of the service provider, generating a VLAN that conforms to a Border Gateway Protocol (BGP), assigning a block of IP addresses to a network of the target enterprise, based on the determined count, assigning two or more subnets having IP addresses of both IPv4 and IPV6 address families with respect to the VLAN, and connecting the plurality of sites to the one or more cloud service providers. Other embodiments are disclosed.

The invention discloses an efficient IPv6 address detection method based on a neural network model, and belongs to the technical field of IPv6 address detection. The method comprises the following steps: step 1, collecting an IPv6 seed address, and preprocessing the IPv6 seed address to obtain a plurality of IPv6 seed address data sets; 2, constructing a neural network model, and training the neural network model by using the plurality of IPv6 seed address data sets; using the trained neural network model to generate a candidate IPv6 address; and step 3, active address detection is carried out on the generated candidate IPv6 addresses, and an active target IPv6 address is obtained. According to the method, an IPv6 address is regarded as a text, a seed address is used for training a network in a self-supervision mode, and the hit rate is higher.

The invention relates to an IPv6 address generation method and device based on few-seed image coding, and belongs to the technical field of network security. The method comprises the following steps: preprocessing: extracting an active IPv6 address set of a few-seed area from collected active IPv6 addresses, and respectively constructing a graph structure and a coding vector for the set; extracting features; the method comprises the steps of active address generation, image generation, address generation and distributed detection, alias prefix detection and active IPv6 address detection are carried out through distributed detection, a result obtained through detection is subjected to preprocessing and feature extraction and then is sent to an image generation sub-module for fine adjustment, and after the operation is repeated for multiple times, the target of conversion rate is completed. According to the invention, a complex seed address configuration rule can be effectively learned, and the problem of low detection efficiency caused by sampling deviation is solved.

The invention relates to an IPv6 network space active address and port detection method and device, and belongs to the technical field of network detection. The method comprises the following steps: (1) retrieving network resources; (2) active address detection is divided into a non-seed address scene, a few-seed address scene and a multi-seed address scene, a non-seed address scene generation model, a few-seed address scene generation model and a multi-seed address scene generation model are provided, and candidate addresses are generated respectively; (3) respectively carrying out alias prefix detection and alias removal on active addresses found in a non-seed address scene, a few-seed address scene and a multi-seed address scene, and adding newly found addresses after alias removal into an active IPv6 address library; and (4) predicting active ports of the active IPv6 addresses by using a decision model based on a naive Bayes classifier and utilizing all input features, and completing dynamic feedback scanning through a distributed active detection facility to realize accumulation of the active addresses and ports from nothing to existence and from few to many.

The invention provides a large-scale-oriented IPv6 target address generation method and a large-scale-oriented IPv6 target address generation system. The method comprises the following steps: constructing an IPv6 seed address set based on an IPv6 capacity expansion strategy of sampling distribution and an IPv6 classification strategy based on an address structure; clustering the IPv6 seed address set to construct an IPv6 address space tree so as to generate a low-dimension IPv6 address mode set and a high-dimension IPv6 address mode set; generating an IPv6 target address set in the low-dimension IPv6 address mode space, and removing IPv6 alias addresses in the IPv6 target address set to obtain a non-alias target address set; a non-alias target address set in a low-dimension IPv6 address mode space is detected, an active high-dimension IPv6 address mode is screened out from a high-dimension IPv6 address mode set according to the detected IPv6 active address, an IPv6 target address set is generated in a corresponding space of the active high-dimension IPv6 address mode, IPv6 alias addresses are removed, and the IPv6 address mode is obtained. After a non-alias target address set is obtained, detecting the non-alias target address set and collecting responded IPv6 active addresses; and combining the IPv6 active addresses detected in all the seed address sets to form a final IPv6 active address set.

The invention provides a device networking method and system based on an IPv6 protocol, and the method comprises the steps: reading a sequence number in a unique identifier of a device when the device is registered, combining the sequence number with bytes generated by a random number generator to generate a network card identifier and a local link address, triggering a multicast neighbor request, splicing the multicast neighbor request with a router IPv6 network address prefix to form a device IPv6 address, and transmitting the IPv6 address to the device; registering identifier information to the system, and setting the object to complete registration; during IPv6 network address change monitoring of the equipment, an ICMP6 protocol routing announcement is intercepted, and when a router network prefix is changed, a new prefix and a network card identifier are used for regenerating and re-registering an IPv6 address; in the aspect of system functions, registration information is received, related contents are registered, parameters are set remotely, user and equipment management is carried out, and equipment management covers multiple functions such as software remote online upgrading; address management can be simplified, the use threshold and cost are reduced, the equipment management function is enhanced, the dynamic address processing efficiency is improved, and the defects in the prior art are overcome.

The present application discloses an IPv6 application service address identification method and apparatus, a device, and a medium. The method comprises: acquiring associated information of IPv6 addresses, wherein the associated information of the IPv6 addresses comprises at least one of the following: a domain name resolution log of a DNS, semantic information corresponding to a plurality of ASs in an RIR, and a plurality of IPv6 active addresses; acquiring the total number of a plurality of routing prefixes included in each AS among the plurality of ASs; on the basis of the associated information of the IPv6 addresses, determining a first mapping table corresponding to the associated information of the IPv6 addresses, wherein the first mapping table comprises a correspondence among IPv6 application service addresses among a plurality of reference IPv6 addresses in the associated information of the IPv6 addresses, the routing prefixes, and the ASs; and for each AS, if the ratio of the number of the routing prefixes corresponding to the AS in the first mapping table to the total number of the plurality of routing prefixes included in the AS is greater than a preset ratio threshold, determining that all the IPv6 addresses included in the AS are application service addresses.

The invention discloses a message transmission method and device, and belongs to the technical field of security. The method is applied to a security module of a server, the server is used for providing a target service for a client, and the client is a registered user of the target service. The method comprises the following steps: receiving a target service message which is sent by a client and is used for accessing a target service, wherein a destination address of the target service message comprises a verification field; verifying the destination address of the target service message according to the verification field to determine that the destination address of the target service message is a pre-configured address; and sending the target service message to the server. Wherein the pre-configured address is an IPv6 address configured for the client and used for accessing the target service. According to the method, an access address is allocated to a server providing a target service by using a huge address space of IPv6, so that an attack source cannot directly perform DDOS segment scanning attack on the target service.

The invention discloses an IPv6 address detection method and system based on a large language model, and relates to the technical field of IPv6 address detection, and the method comprises the steps: obtaining a plurality of active IPv6 addresses as seed addresses, and constructing an IPv6 seed data set; pre-classifying each sub-address, and then constructing a large language model IPv6 fine tuning data set; performing fine tuning on the large language model by utilizing the fine tuning data set and adopting a LoRA method, then adopting a vLLM acceleration reasoning framework, generating a plurality of IPv6 addresses, and constructing an IPv6 address candidate set; and performing multi-dimensional evaluation on the IPv6 address candidate set, extracting active IPv6 addresses in the IPv6 address candidate set, merging the active IPv6 addresses into the original seed data set, and performing continuous circulation to complete IPv6 address detection. According to the invention, effective IPv6 address generation with better effect and higher efficiency can be realized, and multi-dimensional comprehensive automatic evaluation of the generated IPv6 address is realized.

An address setting method and device, a storage medium, and an electronic device are provided. The address setting method includes: adding, by an encapsulation node, an Internet Protocol Version 6 (IPv6) routing header to a Segment Routing with IPv6 data plane (SRv6) packet including compressed Segment Identifiers (uSIDs); and setting a first IPv6 address of the IPv6 routing header to be an IPv6 address of a last endpoint node corresponding to the SRv6 packet, so as to determine a basis for checksum calculation. By means of the technical solution, the problem in the related art that when an SRv6 packet uses an encapsulation method of using an IPv6 destination address to carry multiple compressed SIDs, a basis for checksum calculation of the SRv6 packet cannot be determined is solved.

The invention discloses a corresponding management method for IPV4 and IPV6 addresses of the same user of network dual stacks, and relates to the technical field of network address management, network system nodes are divided into a main control node, a replica synchronization node and an edge cache node, a layered management architecture is constructed, hotspot users with frequent write-in are identified, a flow partitioning and path arbitration strategy is adopted, and the IPV4 and IPV6 addresses of the same user of the network dual stacks are correspondingly managed. The method comprises the following steps of: dynamically allocating an auxiliary book group, constructing a state deviation evaluation function, judging the consistency degree according to a version and hash information, selecting a corresponding synchronization strategy, fusing various mechanisms to form an execution layer consistency maintenance closed loop, and performing IPV4 and IPV6 address mapping relation management in a distributed environment. According to the management method, the stability, the accuracy and the reliability of the dual-stack user address mapping management system in a multi-source asynchronous operation environment are effectively enhanced by constructing a layered execution architecture which takes a main control node as a core, a copy synchronization node as a distribution guarantee and an edge cache node as a response terminal.

Techniques for structuring IP version 6 (IPv6) addresses into bit fields to embed language localization and services information (e.g., and / or other attributes / information) are disclosed. In some embodiments, a system / process / computer program product for structuring IPv6 addresses into bit fields to embed language localization and services information includes allocating a configurable portion of an IP version 6 (IPv6) address for a subnet, wherein the subnet includes information that is associated with a geographical location (geolocation); and determining an attribute for a new session based on the subnet.

The invention belongs to the technical field of IPv6 situation awareness, and relates to an IPv6 address network space situation awareness method based on data collection, which comprises the following steps: acquiring active IP address and service information, domain name registration information and geographic position data by collecting network data; then the data are preprocessed, the preprocessed data are processed based on a Spark big data analysis tool, and abnormal traffic behaviors are identified from the preprocessed data; on the basis, behaviors of the IPv6 address are classified by using a support vector machine (SVM) model, and potential threats are identified. And further analyzing the spatial and temporal distribution condition of the network event in combination with the geographic position and the timestamp data. And finally, based on the identified abnormal traffic behavior, the potential threat and the spatial-temporal distribution thereof, constructing a dynamic situation awareness chart by using an Echarts visualization tool, and visually displaying the overall security situation of the IPv6 network. According to the method, through multi-level data processing and analysis, the security monitoring and response capability of the IPv6 network is comprehensively improved.

The invention discloses an IPv6 network topology detection method and system based on address prefix prediction, and the method comprises the steps: obtaining an IPv6 address prefix and a survival IPv6 address from a public data source, and carrying out the matching of the survival IPv6 address with the corresponding address prefix based on the longest prefix matching; dividing the IPv6 address prefixes into two types, namely an IPv6 address prefix containing a survival / 64 subnet prefix and an IPv6 address prefix not containing the survival / 64 subnet prefix; an IPv6 network topology detection technology based on a split hierarchical clustering algorithm is adopted for an IPv6 address prefix containing survival / 64 subnet prefixes; and an IPv6 network topology detection technology based on reinforcement learning is adopted for an IPv6 address prefix which does not comprise a survival / 64 subnet prefix. The IPv6 address hit rate, the IPv6 address discovery rate and the IPv6 address coverage of the IPv6 network topology detection method are superior to those of the current mainstream IPv6 network topology detection technology.

In this monitoring system (1), a collection unit (21) of an xFlow proxy (2) collects, in an IPv6 network, flow information including the relevant IPv6 address information for communication between IPv4 addresses via the IPv6 network. A detection unit (31) of a flow collector (3) detects information on attack traffic from within the collected flow information. When notified of a targeted address of the detected attack traffic, an extraction unit (41) of an IPv6 network controller (4) extracts the information of an IPv6 address from the information of the targeted address.

The invention provides a network authority control method and device based on an IPv6 technology, equipment and a medium, and the method comprises the steps: obtaining an IPv6 address of a user in response to an access request of the user for an authority network; identifying identity information of the user based on the IPv6 address; distributing corresponding role information to the user based on the identity information, and obtaining permission information of the user according to the role information; and performing dynamic verification on the identity information and the role information of the user through a pre-trained zero-trust model, and performing permission control on the user passing the verification according to the permission information.

The invention provides a configuration method of an IPv6 address stored in a DNS (Domain Name Server) corresponding to power grid equipment and related equipment. The method comprises the following steps: acquiring geographical location information and identification information corresponding to the power grid equipment; based on the geographical location information, determining a routable prefix of an IPv6 address corresponding to the power grid equipment; determining a settable suffix of an IPv6 address corresponding to the power grid equipment based on the geographical location information and the identification information; and combining the routable prefix and the settable suffix to obtain the IPv6 address of the power grid equipment, thereby solving the technical problem that each power grid enterprise lacks a unified configuration rule for configuring the IPv6 address of the power grid equipment in the prior art, and improving the configuration efficiency of the IPv6 address of the power grid equipment.

The invention relates to the technical field of network space security, in particular to an IPv6 address prediction method and system based on a double-space tree, and the method comprises the steps: dividing an address seed set into seed address subsets of different BGP prefix spaces according to an open-source BGP prefix list; generating a double-address space tree by taking the seed address subset of each BPG prefix space as a unit; extracting leaf nodes in the prefix space tree and the suffix space tree and splicing the leaf nodes in the prefix space tree and the suffix space tree to generate a candidate address mode; and according to the number of the seed addresses in the BGP prefix space, carrying out descending sort on the BGP prefixes and setting address generation priorities, so as to carry out address generation in the corresponding BGP prefix space according to the sequence of the address generation priorities, and obtaining a candidate address set in the corresponding BGP prefix space through address alias deletion. According to the method, active addresses and more / 64 active address prefixes can be found more efficiently, scanning of a large number of possibly inactive addresses in a BGP prefix space is avoided, and the efficiency of an IPv6 address prediction process is improved.

The invention discloses a service configuration method of an IPv6 network, electronic equipment and a readable storage medium, and belongs to the technical field of communication. The method comprises the following steps: receiving an IPv6 address request message from terminal equipment, wherein the IPv6 address request message comprises service type information; determining WAN connection information corresponding to the service type information according to the service type information, and obtaining target IPv6 address information; establishing a first mapping relationship between the target IPv6 address information and the WAN connection information, and sending the target IPv6 address information to the terminal device; and according to the first mapping relationship, determining the WAN connection information mapped by the target IPv6 address information to forward the service message, so that the method and the device can dynamically identify the service requirements of the terminal to perform adaptive service configuration, thereby enabling the terminals with different service requirements to access the Internet safely and efficiently.

The present application belongs to the technical field of security, and discloses a message transmission method and apparatus. The method is applied to a security module of a server, the server being used to provide a target service for a client, and the client being a registered user of the target service. The method comprises: receiving a target service message which is sent by a client and used to access a target service, the destination address of the target service message comprising a verification field; on the basis of the verification field, verifying the destination address of the target service message, so as to determine that the destination address of the target service message is a pre-configured address; and sending the target service message to the server. The pre-configured address is an IPv6 address which is configured for the client and is used to access the target service. The described method uses a huge IPv6 address space to allocate an access address to the server providing the target service, so that an attack source cannot directly carry out a DDoS scanning attack on the target service.

The embodiment of the invention provides an address prefix conflict detection method and device, and relates to the technical field of communication, the method is applied to a first device, and the method comprises the following steps: multicast sending a first neighbor request message, the first neighbor request message comprising a first address prefix, sending a neighbor notification message by a second device holding an address prefix conflicting with the first address prefix; within a preset waiting response duration, a first neighbor notification message is received, and the first neighbor notification message comprises a second address prefix; and if the first address prefix conflicts with the second address prefix, marking the first address prefix as an unavailable state. According to the scheme, the problem that different terminals generate the same IPv6 address according to conflicting address prefixes from different first devices, and address conflicts are generated can be solved, and the stability of network connection is improved.

The present invention is directed to methods and systems for enforcing at least one rule within a geofence. The rule is enforced by a fencing agent on an Unmanned Aerial Vehicle (UAV). The geofence is defined by a plurality of geographic designators, with the plurality of geographic designators each being associated with an Internet Protocol (IP) address, preferably an IPv6 address.

The invention discloses a route notification method and device and a message transmission method and device. Taking a route notification method as an example, a first node receives a first route from a second node, the first route comprises a first IPv6 address prefix of a first interface of the second node, and the second node accesses a third-party underlay network through the first interface and communicates with the first node through the third-party underlay network; the first node obtains the SRv6SID of the second node according to the first route, and the SRv6SID comprises the first IPv6 address prefix. Therefore, in the SRv6 environment, the IPv6 address prefix accessed to the third-party underlay network is published through the route, and the SRv6SID obtained based on the IPv6 address prefix can be iterated to the SRv6 tunnel in the third-party underlay network, so that the scheme of traversing the third-party underlay network is simplified, and the encapsulation overhead is reduced.

The invention relates to a random NAT (Network Address Translation) mechanism implementation method based on IPv6 (Internet Protocol Version 6) addresses, terminal equipment and a storage medium. The method comprises the following steps: S1, presetting an IPv6 secondary throwing pool with multiple groups of IPv6 addresses; s2, when an extranet access request sent by an enterprise internal client is obtained, an NAT source address is randomly selected from the IPv6 secondary throwing pool, and the extranet access request comprises a real IPv6 address of the enterprise internal client; s3, replacing the real IPv6 address of the enterprise internal client with the NAT source address randomly selected in the step S2 to generate a new extranet access request to communicate with the extranet; and S4, when a network data packet returned by the extranet is obtained, forwarding the network data packet to the corresponding enterprise internal client according to the internal mapping relationship, and by the method, when the enterprise internal client initiates extranet access, the concealment and security when the intranet terminal accesses the extranet can be improved.

The invention discloses an IPv6 address space construction method, an IPv6 address space updating method, an IPv6 address space detection method and an IPv6 address space detection system, and belongs to the technical field of network detection. The method comprises the following steps: firstly, performing primary classification on a historical IPv6 seed address set based on address attribute characteristics to obtain an initial classification space; then, secondary classification is carried out on the initial classification space based on the suffix value quantitative features, and an IPv6 address space is obtained; wherein the suffix value quantitative feature can accurately describe the value condition of the IPv6 address suffix; according to the method, the suffix value quantitative characteristics are combined on the basis of the address attribute characteristics, the historical IPv6 seed address set is subjected to two-stage classification, the value characteristics of each part of the IPv6 address can be fully utilized, subdivision of the IPv6 seed address is realized, and the problems that in the prior art, the allocation of detection resources is very easy to mislead, the resources are easy to waste, and the efficiency is high are solved. And the subsequent IPv6 address space detection efficiency is relatively low.

The present invention discloses a temporary IPv6 address terminal identification method, system, medium and equipment, wherein the system includes a data acquisition unit, a data processing unit, a user ID identification generation unit, a binding unit, an address binding pool, an IPv6 address PING unit, a summing-up and discrimination unit, an IPv6 address discrimination unit and a live detection unit, the data acquisition unit is connected in communication with the data processing unit, the data processing unit is connected in communication with the user ID identification generation unit and the binding unit respectively, the binding unit is connected in communication with the address binding pool, and the address binding pool is connected in communication with the IPv6 address PING detection unit, the summing-up and discrimination unit and the IPv6 address discrimination unit respectively. The present invention thoroughly solves the problem that temporary addresses are difficult to track and trace through an innovative, terminal-oriented IPv6 address identification mechanism, and provides a solid foundation for the refined management, security and reliability of IPv6 networks.

A disclosed method facilitates bidirectional traffic flows between a multi-tenant service and endpoints with private customer internet protocol (IP) addresses. The method provides for receiving a data packet having a data packet header identifying a first IPv6 address as a destination. The first IPv6 address embeds a first IPv4 address and a virtual network (VNet) identifier uniquely identifying a VNet of a cloud compute platform. The method further provides for routing the data packet to a host node within the cloud compute platform that hosts a virtual machine (VM) within the VNet identified by the VNet identifier and assigned to the first IPv4 address.

The application relates to a unified IPv4 / IPv6 address management method in an IPv6 evolution environment, which comprises the following steps: arranging all IPv4 and IPv6 address segments, planning IPv4 and IPv6 communication scenarios, allocating IPv4 and IPv6 mapping address segments, defining IPv4 and IPv6 address translation rules according to the IPv4 and IPv6 mapping address segments, generating an IPv4 and IPv6 address translation rule set, and generating corresponding mapping addresses for each real IPv4 / IPv6 address according to the IPv4 and IPv6 address translation rule set. In the process of IPv6 evolution, the real IPv4 / IPv6 address, the mapping IPv4 / IPv6 address and the IPv4 / IPv6 address translation rule involved in the IPv4 / IPv6 coexistence and communication scenario can be effectively managed.

The disclosed technology addresses the need in the art for systems and methods of dynamic but stateless NAT encryption and decryption. The disclosed technology provides a robust encryption / decryption algorithm for concurrently obfuscating source and destination IPv6 addresses for SNAP deployments with 100% reversal and zero collisions, thereby providing protection to both the source and destination IPv6 simultaneously.

This invention relates to a dual-stack network asset discovery method based on multi-protocol collaborative detection and intelligent fingerprint analysis; it includes the following steps: multi-source parallel acquisition: collecting network layer information of various terminal devices in the intranet through command line interface or application programming interface; data cleaning and standardization: after acquisition, cleaning and standardizing the raw data; target device identification and detection strategy generation: based on the cleaned address list and combined with device information, identifying the target device type and automatically generating corresponding detection parameters; multi-protocol asset detection packet sending: sending detection packets to target IPv4 and IPv6 addresses according to configuration parameters; response data parsing and fingerprint recognition: performing structured parsing and multi-dimensional recognition on the received response data; dual-stack network data fusion and statistical analysis: after fingerprint recognition, fusing and analyzing the IPv4 and IPv6 detection results and constructing a unified asset database.