221 results about "IPv6 address" patented technology

The invention discloses an efficient IPv6 address detection method based on a neural network model, and belongs to the technical field of IPv6 address detection. The method comprises the following steps: step 1, collecting an IPv6 seed address, and preprocessing the IPv6 seed address to obtain a plurality of IPv6 seed address data sets; 2, constructing a neural network model, and training the neural network model by using the plurality of IPv6 seed address data sets; using the trained neural network model to generate a candidate IPv6 address; and step 3, active address detection is carried out on the generated candidate IPv6 addresses, and an active target IPv6 address is obtained. According to the method, an IPv6 address is regarded as a text, a seed address is used for training a network in a self-supervision mode, and the hit rate is higher.

The invention provides a large-scale-oriented IPv6 target address generation method and a large-scale-oriented IPv6 target address generation system. The method comprises the following steps: constructing an IPv6 seed address set based on an IPv6 capacity expansion strategy of sampling distribution and an IPv6 classification strategy based on an address structure; clustering the IPv6 seed address set to construct an IPv6 address space tree so as to generate a low-dimension IPv6 address mode set and a high-dimension IPv6 address mode set; generating an IPv6 target address set in the low-dimension IPv6 address mode space, and removing IPv6 alias addresses in the IPv6 target address set to obtain a non-alias target address set; a non-alias target address set in a low-dimension IPv6 address mode space is detected, an active high-dimension IPv6 address mode is screened out from a high-dimension IPv6 address mode set according to the detected IPv6 active address, an IPv6 target address set is generated in a corresponding space of the active high-dimension IPv6 address mode, IPv6 alias addresses are removed, and the IPv6 address mode is obtained. After a non-alias target address set is obtained, detecting the non-alias target address set and collecting responded IPv6 active addresses; and combining the IPv6 active addresses detected in all the seed address sets to form a final IPv6 active address set.

The present application discloses an IPv6 application service address identification method and apparatus, a device, and a medium. The method comprises: acquiring associated information of IPv6 addresses, wherein the associated information of the IPv6 addresses comprises at least one of the following: a domain name resolution log of a DNS, semantic information corresponding to a plurality of ASs in an RIR, and a plurality of IPv6 active addresses; acquiring the total number of a plurality of routing prefixes included in each AS among the plurality of ASs; on the basis of the associated information of the IPv6 addresses, determining a first mapping table corresponding to the associated information of the IPv6 addresses, wherein the first mapping table comprises a correspondence among IPv6 application service addresses among a plurality of reference IPv6 addresses in the associated information of the IPv6 addresses, the routing prefixes, and the ASs; and for each AS, if the ratio of the number of the routing prefixes corresponding to the AS in the first mapping table to the total number of the plurality of routing prefixes included in the AS is greater than a preset ratio threshold, determining that all the IPv6 addresses included in the AS are application service addresses.

The invention discloses a message transmission method and device, and belongs to the technical field of security. The method is applied to a security module of a server, the server is used for providing a target service for a client, and the client is a registered user of the target service. The method comprises the following steps: receiving a target service message which is sent by a client and is used for accessing a target service, wherein a destination address of the target service message comprises a verification field; verifying the destination address of the target service message according to the verification field to determine that the destination address of the target service message is a pre-configured address; and sending the target service message to the server. Wherein the pre-configured address is an IPv6 address configured for the client and used for accessing the target service. According to the method, an access address is allocated to a server providing a target service by using a huge address space of IPv6, so that an attack source cannot directly perform DDOS segment scanning attack on the target service.

The invention discloses a corresponding management method for IPV4 and IPV6 addresses of the same user of network dual stacks, and relates to the technical field of network address management, network system nodes are divided into a main control node, a replica synchronization node and an edge cache node, a layered management architecture is constructed, hotspot users with frequent write-in are identified, a flow partitioning and path arbitration strategy is adopted, and the IPV4 and IPV6 addresses of the same user of the network dual stacks are correspondingly managed. The method comprises the following steps of: dynamically allocating an auxiliary book group, constructing a state deviation evaluation function, judging the consistency degree according to a version and hash information, selecting a corresponding synchronization strategy, fusing various mechanisms to form an execution layer consistency maintenance closed loop, and performing IPV4 and IPV6 address mapping relation management in a distributed environment. According to the management method, the stability, the accuracy and the reliability of the dual-stack user address mapping management system in a multi-source asynchronous operation environment are effectively enhanced by constructing a layered execution architecture which takes a main control node as a core, a copy synchronization node as a distribution guarantee and an edge cache node as a response terminal.

Techniques for structuring IP version 6 (IPv6) addresses into bit fields to embed language localization and services information (e.g., and / or other attributes / information) are disclosed. In some embodiments, a system / process / computer program product for structuring IPv6 addresses into bit fields to embed language localization and services information includes allocating a configurable portion of an IP version 6 (IPv6) address for a subnet, wherein the subnet includes information that is associated with a geographical location (geolocation); and determining an attribute for a new session based on the subnet.

The invention belongs to the technical field of IPv6 situation awareness, and relates to an IPv6 address network space situation awareness method based on data collection, which comprises the following steps: acquiring active IP address and service information, domain name registration information and geographic position data by collecting network data; then the data are preprocessed, the preprocessed data are processed based on a Spark big data analysis tool, and abnormal traffic behaviors are identified from the preprocessed data; on the basis, behaviors of the IPv6 address are classified by using a support vector machine (SVM) model, and potential threats are identified. And further analyzing the spatial and temporal distribution condition of the network event in combination with the geographic position and the timestamp data. And finally, based on the identified abnormal traffic behavior, the potential threat and the spatial-temporal distribution thereof, constructing a dynamic situation awareness chart by using an Echarts visualization tool, and visually displaying the overall security situation of the IPv6 network. According to the method, through multi-level data processing and analysis, the security monitoring and response capability of the IPv6 network is comprehensively improved.

The invention discloses an IPv6 network topology detection method and system based on address prefix prediction, and the method comprises the steps: obtaining an IPv6 address prefix and a survival IPv6 address from a public data source, and carrying out the matching of the survival IPv6 address with the corresponding address prefix based on the longest prefix matching; dividing the IPv6 address prefixes into two types, namely an IPv6 address prefix containing a survival / 64 subnet prefix and an IPv6 address prefix not containing the survival / 64 subnet prefix; an IPv6 network topology detection technology based on a split hierarchical clustering algorithm is adopted for an IPv6 address prefix containing survival / 64 subnet prefixes; and an IPv6 network topology detection technology based on reinforcement learning is adopted for an IPv6 address prefix which does not comprise a survival / 64 subnet prefix. The IPv6 address hit rate, the IPv6 address discovery rate and the IPv6 address coverage of the IPv6 network topology detection method are superior to those of the current mainstream IPv6 network topology detection technology.

The invention provides a configuration method of an IPv6 address stored in a DNS (Domain Name Server) corresponding to power grid equipment and related equipment. The method comprises the following steps: acquiring geographical location information and identification information corresponding to the power grid equipment; based on the geographical location information, determining a routable prefix of an IPv6 address corresponding to the power grid equipment; determining a settable suffix of an IPv6 address corresponding to the power grid equipment based on the geographical location information and the identification information; and combining the routable prefix and the settable suffix to obtain the IPv6 address of the power grid equipment, thereby solving the technical problem that each power grid enterprise lacks a unified configuration rule for configuring the IPv6 address of the power grid equipment in the prior art, and improving the configuration efficiency of the IPv6 address of the power grid equipment.

The invention discloses a service configuration method of an IPv6 network, electronic equipment and a readable storage medium, and belongs to the technical field of communication. The method comprises the following steps: receiving an IPv6 address request message from terminal equipment, wherein the IPv6 address request message comprises service type information; determining WAN connection information corresponding to the service type information according to the service type information, and obtaining target IPv6 address information; establishing a first mapping relationship between the target IPv6 address information and the WAN connection information, and sending the target IPv6 address information to the terminal device; and according to the first mapping relationship, determining the WAN connection information mapped by the target IPv6 address information to forward the service message, so that the method and the device can dynamically identify the service requirements of the terminal to perform adaptive service configuration, thereby enabling the terminals with different service requirements to access the Internet safely and efficiently.

The present application belongs to the technical field of security, and discloses a message transmission method and apparatus. The method is applied to a security module of a server, the server being used to provide a target service for a client, and the client being a registered user of the target service. The method comprises: receiving a target service message which is sent by a client and used to access a target service, the destination address of the target service message comprising a verification field; on the basis of the verification field, verifying the destination address of the target service message, so as to determine that the destination address of the target service message is a pre-configured address; and sending the target service message to the server. The pre-configured address is an IPv6 address which is configured for the client and is used to access the target service. The described method uses a huge IPv6 address space to allocate an access address to the server providing the target service, so that an attack source cannot directly carry out a DDoS scanning attack on the target service.

The embodiment of the invention provides an address prefix conflict detection method and device, and relates to the technical field of communication, the method is applied to a first device, and the method comprises the following steps: multicast sending a first neighbor request message, the first neighbor request message comprising a first address prefix, sending a neighbor notification message by a second device holding an address prefix conflicting with the first address prefix; within a preset waiting response duration, a first neighbor notification message is received, and the first neighbor notification message comprises a second address prefix; and if the first address prefix conflicts with the second address prefix, marking the first address prefix as an unavailable state. According to the scheme, the problem that different terminals generate the same IPv6 address according to conflicting address prefixes from different first devices, and address conflicts are generated can be solved, and the stability of network connection is improved.

The present invention is directed to methods and systems for enforcing at least one rule within a geofence. The rule is enforced by a fencing agent on an Unmanned Aerial Vehicle (UAV). The geofence is defined by a plurality of geographic designators, with the plurality of geographic designators each being associated with an Internet Protocol (IP) address, preferably an IPv6 address.

The invention discloses an IPv6 address space construction method, an IPv6 address space updating method, an IPv6 address space detection method and an IPv6 address space detection system, and belongs to the technical field of network detection. The method comprises the following steps: firstly, performing primary classification on a historical IPv6 seed address set based on address attribute characteristics to obtain an initial classification space; then, secondary classification is carried out on the initial classification space based on the suffix value quantitative features, and an IPv6 address space is obtained; wherein the suffix value quantitative feature can accurately describe the value condition of the IPv6 address suffix; according to the method, the suffix value quantitative characteristics are combined on the basis of the address attribute characteristics, the historical IPv6 seed address set is subjected to two-stage classification, the value characteristics of each part of the IPv6 address can be fully utilized, subdivision of the IPv6 seed address is realized, and the problems that in the prior art, the allocation of detection resources is very easy to mislead, the resources are easy to waste, and the efficiency is high are solved. And the subsequent IPv6 address space detection efficiency is relatively low.

A disclosed method facilitates bidirectional traffic flows between a multi-tenant service and endpoints with private customer internet protocol (IP) addresses. The method provides for receiving a data packet having a data packet header identifying a first IPv6 address as a destination. The first IPv6 address embeds a first IPv4 address and a virtual network (VNet) identifier uniquely identifying a VNet of a cloud compute platform. The method further provides for routing the data packet to a host node within the cloud compute platform that hosts a virtual machine (VM) within the VNet identified by the VNet identifier and assigned to the first IPv4 address.

The application relates to a unified IPv4 / IPv6 address management method in an IPv6 evolution environment, which comprises the following steps: arranging all IPv4 and IPv6 address segments, planning IPv4 and IPv6 communication scenarios, allocating IPv4 and IPv6 mapping address segments, defining IPv4 and IPv6 address translation rules according to the IPv4 and IPv6 mapping address segments, generating an IPv4 and IPv6 address translation rule set, and generating corresponding mapping addresses for each real IPv4 / IPv6 address according to the IPv4 and IPv6 address translation rule set. In the process of IPv6 evolution, the real IPv4 / IPv6 address, the mapping IPv4 / IPv6 address and the IPv4 / IPv6 address translation rule involved in the IPv4 / IPv6 coexistence and communication scenario can be effectively managed.

The disclosed technology addresses the need in the art for systems and methods of dynamic but stateless NAT encryption and decryption. The disclosed technology provides a robust encryption / decryption algorithm for concurrently obfuscating source and destination IPv6 addresses for SNAP deployments with 100% reversal and zero collisions, thereby providing protection to both the source and destination IPv6 simultaneously.

This invention relates to a dual-stack network asset discovery method based on multi-protocol collaborative detection and intelligent fingerprint analysis; it includes the following steps: multi-source parallel acquisition: collecting network layer information of various terminal devices in the intranet through command line interface or application programming interface; data cleaning and standardization: after acquisition, cleaning and standardizing the raw data; target device identification and detection strategy generation: based on the cleaned address list and combined with device information, identifying the target device type and automatically generating corresponding detection parameters; multi-protocol asset detection packet sending: sending detection packets to target IPv4 and IPv6 addresses according to configuration parameters; response data parsing and fingerprint recognition: performing structured parsing and multi-dimensional recognition on the received response data; dual-stack network data fusion and statistical analysis: after fingerprint recognition, fusing and analyzing the IPv4 and IPv6 detection results and constructing a unified asset database.

Systems and methods are disclosed for enforcing at least one rule associated with a geofence. At least one device is constructed and configured in network communication with a server platform and a database. The server platform defines at least one geofence for a region of interest and specifies at least one rule associated with the at least one geofence, thereby creating a rule-space model for the region of interest. The at least one geofence comprises a multiplicity of geographic designators with each geographic designator assigned with a unique IPv6 address. The at least one device receives at least one notification signal regarding the at least one rule from the at least one server platform and implements the at least one rule when the at least one device is within a predetermined distance from the at least one geofence for the region of interest.

The present disclosure refers to methods and systems to reduce delays in VoWI-FI handover and packet switching registration. The method includes triggering a Router Solicitation Router Advertisement (RSRA) procedure to establish a Transmission Control Protocol / Internet Protocol (TCP / IP) interface based on a determination that the VoWi-Fi handover of a user equipment (UE) is to be performed, determining if a router advertisement (RA) is received within a first time interval, and obtaining a full Internet Protocol version 6 (IPv6) address previously used by the UE in response to determining that the RA is not received within the first time interval, the full IPv6 address being for establishing the TCP / IP interface with a network.

A user plane function (UPF) of a telecommunications network configured to prioritize IPv6 addresses over IPv4 addresses for transmitting content over the telecommunications network from a content server to a user device. The UPF can receive a content request at including a uniform resource locator (URL) pointing to a resource on a host server. The UPF can also receive DNS queries including an AAAA and A record request. The UPF can forward the AAAA record and A record to a DNS server and receive an IPv6 and IPv4 address in response. The UPF can either delay A record transmission to the user device or transmit an x-header to the user device to facilitate an IPv6 client-server connection. The UPF can generate a data packet with the resource from the host server and transmit it to the user device using the IPv6 client-server connection.

The present invention relates to an IPv6 address generation method and device based on few-seed image encoding, belonging to the field of network security technology. The method includes preprocessing, extracting a set of active IPv6 addresses in a few-seed area from the collected active IPv6 addresses, and constructing a graph structure and encoding vector for each of the sets; feature extraction; active address generation, image generation, address generation, and distributed detection, using distributed detection to perform alias prefix detection and active IPv6 address detection. The detection results are then sent to the image generation submodule for fine-tuning after the preprocessing and feature extraction process. After repeated multiple times, the conversion rate target is achieved. The present invention can effectively learn complex seed address configuration rules and solve the problem of low detection efficiency caused by sampling bias.

The application discloses an IPv6 subnet prefix announcement implementation method and device, equipment and a storage medium, relates to the technical field of communication, and is used for improving the efficiency of virtual machines in acquiring IPv6 addresses and related information and in configuration. The method comprises the following steps: adding an IPv6 subnet prefix announcer in a controller of a server; acquiring a plurality of subnet information corresponding to a plurality of virtual machine ports in the server, and adding the plurality of subnet information to a subnet cache list, one virtual machine port corresponding to one subnet information; when a target registration event is listened to through the IPv6 subnet prefix announcer, receiving a route request RS sent by a target virtual machine; determining a route response RA corresponding to the route request RS based on the subnet cache list, and sending the route response RA to the target virtual machine through the controller of the server, the route response RA being used for the target virtual machine to acquire an IPv6 address. The application is applied to the scene of virtual machines acquiring IPv6 addresses and related information and being configured.

The invention provides an IPv6 conversion processing method and device, equipment, a medium and a product, and the method comprises the steps: obtaining an original access request sent by a user, parsing a source station domain name requested to be accessed by the original access request into an IPv6 address, and obtaining a target access request after the parsing; sending the target access request to a proxy server matched with the user through an intelligent load balancing server, so that the proxy server forwards the target access request to an IPv4 address of a source station; and obtaining response content fed back by the source station, and forwarding the response content to the user.

The application discloses a networking method and system based on dynamic IPv6 addresses, wherein the system comprises terminal equipment and a VPN gateway, and the terminal equipment accesses a network through the VPN gateway. The dynamic change of the IPv6 address of the VPN gateway (if the public IPv4 address is sufficient, the method is also applicable) can effectively alleviate the network asset exposure surface and reduce the possibility of being attacked by taking advantage of the unlimited nature of the IPv6 address.

The present disclosure provides an IPv6 conversion processing method, device, equipment, medium and product, wherein the method comprises: obtaining an original access request sent by a user, and resolving a source station domain name requested by the original access request into an IPv6 address to obtain a target access request after resolution; sending the target access request to a proxy server matched with the user through an intelligent load balancing server, so that the proxy server forwards the target access request to an IPv4 address of a source station; and obtaining response content fed back by the source station, and forwarding the response content to the user.

The application provides a network device interconnection address allocation and conflict detection method, system and product, and relates to the field of device interconnection configuration.The method comprises the following steps: generating an initial IPv6 address corresponding to a device identification feature of each network device according to a preset address generation rule; mapping the corresponding identification feature sequence to an identification tree topology structure, and extracting a target branch set starting from a longest common prefix node; determining a conflict detection order of each sequence segment and performing conflict identification according to a historical occupation saturation degree of each feature level in the remaining identification sequence of the initial IPv6 address; and after detecting a target IPv6 address identical to the initial IPv6 address, modifying a sequence segment with the lowest historical occupation saturation degree in the initial IPv6 address according to a nonlinear discrete step length, and obtaining an interconnection IPv6 address corresponding to each network device respectively. The method can improve the allocation efficiency of the interconnection address by reducing the workload of the duplicate checking comparison.

The invention relates to a dual-stack network asset discovery method based on multi-protocol cooperative detection and intelligent fingerprint analysis. Comprising the following steps: multi-source parallel acquisition: acquiring network layer information of each terminal device in an intranet through a command line interface or an application programming interface; data cleaning and standardization: after acquisition is completed, cleaning and standardization operation is performed on the original data; target equipment identification and detection strategy generation: according to the cleaned address list, in combination with equipment information, identifying the type of target equipment, and automatically generating corresponding detection parameters; sending a multi-protocol asset detection message: sending the detection message to the target IPv4 and IPv6 addresses according to the configuration parameters; response data analysis and fingerprint identification: carrying out structured analysis and multi-dimensional identification on the received response data; and dual-stack network data fusion and statistical analysis: after fingerprint identification is completed, carrying out fusion analysis on IPv4 and IPv6 detection results, and constructing a unified asset database.

The embodiment of the invention provides a message transmission method and device, electronic equipment and a medium. In the embodiment of the invention, the universal Service SID can be matched with the target IPv6 addresses of the outer layer IPv6 headers of the plurality of SRv6 messages, the de-encapsulation of different SRv6 messages can be realized only by setting one universal Service SID, and the isolated transmission of the plurality of SRv6 messages can be realized only by setting one routing table. Therefore, the problem of resource waste caused by the fact that a plurality of VRFs respectively set respective Service SID and respective routing tables in the prior art can be effectively solved, and optimal utilization of routing resources can be effectively realized.

The present invention relates to a computer-implemented communication method. The method includes a mechanism for service provisioning from a service provider to one or more devices within a plurality of devices controlled by or associated with a device controller. In an exemplary embodiment, the service provider assigns a set of IPv6 addresses to the device controller. The device controller then assigns or communicates one or more of the set of IPv6 addresses to at least one of the devices. The device then includes the one or more IPv6 addresses received from the device controller in an access request to the service provider. After verifying that the requesting device is authorized by the device controller, the service provider provides service to the one or more addresses included in the access request.