1242 results about "MAC address" patented technology

The invention proposes to generate a new MAC address for a non-AP station while being associated with an AP station, for use when associating again with the same AP station. For privacy reason, the same new MAC address is generated locally at both the non-AP station and the AP station using a shared function. This is done in a synchronized manned, preferably at the end of the association, e.g. when disassociating. The non-AP station disassociates with the AP station, and at any time in the future, it may associate again with the same AP station using this new MAC address. The AP station is therefore able to recognize the non-AP station, while outside observers only see a new MAC address and thus see a new non-AP station associating with the AP station. User privacy is therefore reinforced over time as the non-AP station associates multiple times to the same AP.

The present disclosure provides systems and methods for asset identification and consolidation in a network. In some implementations, the methods involve receiving data including a plurality of media access control (MAC) addresses from at least one source, analyzing the received MAC addresses to determine one or more MAC addresses that are repeated in the received data, and labeling the repeated MAC addresses as weak identifiers for asset identification. Some implementations herein enable improved accuracy in identifying and consolidating network assets by distinguishing between reliable and unreliable identifiers, thereby enhancing network security and management capabilities.

The present invention discloses an IP generation method, device, equipment and medium, and relates to the technical field of EOPS printing system, so as to solve the technical problem of low reliability and stability of network environment in existing EOPS printing scenarios. The method includes obtaining basic data of node devices for which IP addresses are to be generated; generating hash seeds according to unique identification numbers and network port MAC addresses; performing hash calculations based on hash seeds to obtain hash values; mapping hash values ​​to preset IP address ranges to obtain initial IP addresses; performing IP address conflict detection on the initial IP addresses based on the ARP protocol; when there is a conflict in the initial IP address, increasing the generation data of the hash seeds by preset values ​​in sequence, and generating new IP addresses based on the hash seeds with the increased preset values, until the new IP addresses do not conflict with the IP addresses of other node devices, and obtaining the target IP address. The IP generation method provided by the present invention is used to avoid conflicts between the generated IP addresses and other devices, and improve the reliability and stability of the network.

The technical solutions are directed to MAC address protection for frame integrity verification. A sender device can compute, using a temporal key (TK) programmed in hardware, a first key for a body of a frame and a second key for a header of the frame, different from the first key. The sender can encrypt the body of the frame at a machine access control (MAC) layer using the first key and the header of the frame at the MAC layer using the second key. The sender can compute a first MIC of the encrypted frame using the first key and a second MIC of a content of the header at the MAC layer using the second key. The sender can transmit the frame with the first MIC and the second MIC to a receiver configured to determine integrity of the header of the frame based on the second MIC.

Techniques and architecture are described for L2 service insertion in a network. More particularly, the techniques and architecture provide for monitoring a L2 service, e.g., firewall, MAC address (instead of learning the MAC address) and registering / de-registering the service node (e.g., fabric border or edge or LISP service_etr) to the service control plane (e.g., LISP MSMR) based on this. This not only load-balances the traffic (per L2 flow) but also tracks it for node's liveliness. The techniques and architecture also provide L2 service insertion connected to a service border to allow for dynamic SGT based service, e.g., firewall, insertion for both software defined access (SDA) fabric and non-fabric deployments.

Systems and methods are provided for customized grouping of end user devices using a new group identifier tag (GIT) in addition to role-based access (e.g., administrator or guest) and device identifier access (e.g., IP or MAC address). Two components may be implemented at a network access device, including a data plane component and a control plane component. For example, the control plane component may authenticate an end user device, store the MAC and IP addresses for authenticated end user devices, and define access roles for the end user device in the datapath. The data plane component may perform packet processing (e.g., forwarding and policy enforcement) pursuant to previously-defined rules. Whenever a packet arrives at the Network Access Device, the packet is forwarded according to the rules specified by the “role” and GIT present in the entry, allowing for improved processing and scalability of network traffic processing.

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A leaf switch can be in communication with a host device. The leaf switch may configure a subnet comprising the host device. The leaf switch can assign a next hop interface as a system port of the leaf switch and generate subnet information indicative of the assignment. The leaf switch may distribute the subnet information to one or more network devices through one or more internal Border Gateway Protocol sessions. A data packet destined to the host device can be transmitted to the system port of the leaf switch when a host Media Access Control (MAC) address of the host device is not resolved. The leaf switch can resolve the host MAC address and transmit the data packet to the host device based on the host MAC address.

Presented herein are techniques for extending Target Wake Time (TWT) to provide for randomizing and changing media access control (MAC) address (RCM) signaling. According to certain embodiments, a client device operating in a wireless network determines a TWT for the client device. Next, the client device determines that it will change from using a first MAC address to a using second MAC address. Finally, the client device generates, for transmission to an access point device that serves wireless communication in the wireless network, a TWT signaling message. The TWT signaling message indicates the TWT for the client device and the second MAC address.

Disclosed are a method and an apparatus for service fast switchover. The present disclosure may be applied in a spine-leaf architecture, wherein the method may be applied to a backbone spine node. The backbone spine node may loop back a data packet sent through a port connected to a faulty member path from Equal Cost Multi Paths (ECMPs) to which the faulty member path belongs, select one fast switchover member path from the ECMPs prior to routes in a network with the ECMPs converging, determine an access node connected to the fast switchover member path as a next hop, perform layer 3 forwarding on the data packet and encapsulate a specified Media Access Control, MAC, address as a destination MAC address, and send the data packet, with the specified MAC address as the destination MAC address, to the next hop through the fast switchover member path.

The present invention provides a wireless communication method and system for the Internet of Things based on the Star Flash protocol. The method comprises the following steps: deploying a plurality of wireless communication nodes in a wide area or a long-distance path to ensure that the distribution distance between any two of the wireless communication nodes does not exceed 200 meters in the absence of obstacles; selecting the wireless communication nodes as gateway nodes, which have the ability to communicate with any other wireless communication nodes; assigning a unique identification code to each of the wireless communication nodes, grouping them by the identification code, so that the wireless communication nodes with the same identification code can automatically construct a tree network structure under the guidance of the designated gateway node; using the wireless communication nodes to connect to the opposite end according to the signal strength and the current network topology structure, and after the connection is established, using the MAC address to access and control data, thereby reducing costs and improving communication reliability and stability.

A switch in a first network is provided. During operation, the switch can learn a media access control (MAC) address of a packet from a second network via a first port. The MAC address can be learned in association with an aggregate virtual local area network (VLAN) configured on the first network for traffic from the second network. The switch can inspect the packet to determine an external VLAN configured on the second network. The switch can send, via the first port a packet on the external VLAN. The source and detector addresses can be a local address. The destination address can be a multi-destination address. The switch can identify the local address as the detector address in a packet received from a second port coupling the second network, identify a loop in the second network in association with the external VLAN, and disable transmission via the second port.

The invention discloses a License verification method and a License verification device for private deployment of a k8s or docker environment. When the method is applied to a client, the method comprises the following steps: firstly, creating a target container by using k8s or Docker, and running target application software; then, obtaining the MAC address of the physical machine; then, according to the token information of the user, the current unique identification code of the container and the MAC address, generating a license application request, and encrypting the license application request; then, the encrypted license application request is sent to a server side to generate an authorization certificate, and the authorization certificate is encrypted; and the client receives the encrypted authorization certificate returned by the server and decrypts the encrypted authorization certificate to obtain the decrypted authorization certificate. And finally, the system verifies the authorization information in the decrypted authorization certificate, and loads a corresponding application software function module in the operation environment of the target container according to a verification result. According to the method, the security and reliability of license verification are remarkably improved, and legal use of software is ensured.

The invention relates to the technical field of anti-counterfeiting verification, in particular to an embedded equipment anti-counterfeiting verification method based on hardware fingerprints and double encryption, which comprises the following steps of: analyzing a CPU unique identification number generated by starting for the first time, adjusting a sequence and splicing a software version, judging ciphertext content and synchronizing the ciphertext content to an activation end and an EEPROM (Electrically Erasable Programmable Read-Only Memory), and decrypting a comparison data field. And decrypting the verification parameter group, the timestamp and the MAC address to obtain an authorization parameter verification result. According to the method, hardware fingerprint deep processing and multi-factor data encryption are fused, in the identity feature generation and storage process, the multi-dimensional identification degree of identity information is remarkably improved by adopting multi-data-source dynamic combination and ciphertext verification, hierarchical dynamic authorization is achieved through joint limitation of the period, the number of times and the limit, and the authentication efficiency is improved. The equipment environment and activation behavior are traced back by the whole link, the parameter state and affiliation are verified item by item after the authorization certificate is decrypted, and abnormal operations such as equipment illegal activation, authority border crossing and certificate false use are effectively prevented and controlled.

A method includes initiating, by a first system-on-chip (SoC) of an access device, a first modem software stack (MSS) operable to communicate with a registration server and operable to communicate with a first local area network (LAN) port of the access device. The method includes initiating, by a second SoC of the access device, a second MSS operable to communicate with the registration server and operable to communicate with a second LAN port of the access device. The method includes registering and provisioning the first MSS as a first modem with the registration server using a first media access control (MAC) address. The method includes registering and provisioning the second MSS as a second modem with the registration server using a second MAC address.

The invention discloses a virtual machine network connectivity test method and device, a medium and a product, relates to the technical field of cloud computing, and is applied to a detection service, the detection service is configured with a single preset detection network card, the preset detection network card is connected with a plurality of l2gateway ports, each l2gateway port corresponds to a virtual router, the IP address and the MAC address of each l2gateway port are the same, and the IP address and the MAC address of each virtual router are the same. Comprising the following steps: determining a target network label corresponding to a to-be-tested target virtual machine from a preset mapping relation table; packaging based on the target network label to obtain a detection message, and sending the detection message to a target l2gateway port matched with the label by using a preset detection network card; and determining a target virtual router matched with the target l2gateway port, so that the target l2gateway port forwards the detection message to a target virtual machine in the target virtual router to perform a network connectivity test.

The invention provides a ground satellite signal distributed cooperative processing method and system, and relates to the technical field of communication, and the method comprises the steps: extracting a user MAC address hash value, an emergency priority code and a spectrum occupancy matrix from a synchronous network, and generating a triple feature vector; transmitting the triple feature vectors through a double-layer Mesh network, selecting two reference target points with fixed geographic coordinates on the ground of the disaster area, obtaining three-dimensional coordinates of the reference target points, and constructing a space reference straight line; according to the real-time position data of each node, calculating a vertical projection distance from each node to the space reference straight line, and generating a node offset parameter; and dynamically generating a refraction correction coefficient of the signal propagation path based on a comparison result of the node offset parameter and a preset threshold value, and when the offset exceeds the threshold value, increasing a correction weight by adopting a piecewise linear interpolation method. According to the invention, high-reliability and low-delay emergency communication coverage can be realized.

Systems and methods for WLAN multi-link TDLS key derivation. An aspect of the disclosure provides a method for WLAN multi-link communication. Such a method includes sending, by a first station to a second station, a discovery request comprising a link identifier indicating a non-access point (AP) multi-link device (MLD), wherein the first station and the second station are associated with an AP MLD. Such a method further includes receiving, by the first station from the second station, a discovery response. In some embodiments, the method further includes receiving, by the first station from an AP affiliated with the AP MLD, a message indicating a MAC address of the second station. In some embodiments, the discovery request is sent via an AP affiliated with the AP MLD and a non-AP station affiliated with the second station.

A network device, a method for the network device, and a network system comprising one or more such network devices is provided. The method for the network device involves receiving a connection request from a client device, the connection request including a MAC address and being generated using a PSK. A database is accessed to determine if a record associating the MAC address with a PSK exists. If such a record does exist, then authentication is attempted using the PSK identified using the record. If such a record does not exist, then a process for generating a new record for the database is performed. A non-transitory computer-readable storage medium comprising instructions for implementing the method is also provided.

The invention discloses a software and hardware collaborative RDMA network card SR-IOV parameterization configuration method, which can reduce redundant calculation steps through the collaboration of FPGA hardware acceleration and driving parameterization configuration, greatly improves the power consumption compared with a traditional pure software design scheme, and enables the VF performance of a network card to be close to the level of a physical network card. According to the method, the QP number, the MAC address and the RDMA enabling mark of the VF are dynamically adjusted through parameterization of the configuration file, and the operation and maintenance management efficiency can be effectively improved without manual item-by-item configuration; forwarding and isolation of CF traffic are achieved through the FPGA hardware layer, traffic sniffing between virtual machines is prevented, and safety is enhanced; the realized VF supports standard Ethernet communication and RDMA at the same time, the resource utilization rate is improved, and the requirements of hybrid scenes such as high performance computing (HPC) and cloud computing are met.

This disclosure provides systems, methods, and apparatuses for wireless communication performed by a wireless communication device. An example wireless communication device includes an access point (AP) multi-link device (MLD). The AP MLD transmits a beacon frame to a wireless station (STA) MLD, the beacon frame including a plurality of AP medium access control (MAC) addresses of respective APs belonging to the AP MLD. The AP MLD receives an association request from the STA MLD, the association request including a plurality of STA MAC addresses of respective STAs belonging to the STA MLD. The AP MLD generates, during a handshake operation with the STA MLD, one or more encryption keys configured to encrypt communications between the AP MLD and the STA MLD. The AP MLD verifies the plurality of STA MAC addresses based at least in part on the one or more encryption keys.

The invention discloses an IPv6 stateless address dynamic planning method and system based on an elastic prefix, particularly relates to the field of network communication, is used for solving the problems of prefix rigidity and service semantic deficiency in IPv6 stateless address configuration of a railway network, and is implemented by extracting basic prefix information and compressing a service level identifier to generate an elastic sub-prefix bit string. The prefix is ensured to be flexibly embedded into multi-level semantics; fusing the MAC address of the host to construct a temporary interface ID, and enabling the address to have deep association between equipment and service; splicing candidate addresses and broadcasting verification information to collect conflict feedback to realize real-time conflict detection; based on feedback calculation correlation strength and a variation rate index, driving a bit flipping optimization prefix and an interface ID through a support vector machine decision, and forming an iterative adjustment closed loop; and finally, repeatedly verifying and confirming a final address and feeding back the final address to the semantic pool, or rolling back and expanding the prefix so as to solve stubborn conflicts, thereby overcoming the prefix rigidity and semantic deficiency of the traditional mechanism.

The invention discloses a cryptographic algorithm and protocol test system, the system is configured into two deployment modes: a transparent mode and a man-in-the-middle mode, the transparent mode can hide an IP or MAC address of a device, and certificate and algorithm information in a cryptographic protocol is identified and analyzed through a passive traffic analysis mode; the man-in-the-middle mode provides a dynamic packet changing function, realizes a dynamic interaction function with a server in an agent mode, can be used for application scenarios such as identity authentication, data encryption and decryption, protocol vulnerability analysis and performance test, can effectively improve the evaluation integrity and accuracy of a cryptographic algorithm and a cryptographic protocol, forms a complete and accurate test evaluation evidence chain, and improves the evaluation efficiency of the cryptographic algorithm and the cryptographic protocol. And the detection evaluation result is effectively supported. The system can be accessed to a production network to capture, identify and analyze network traffic, so that an international / national cryptographic algorithm and protocol security analysis function is realized, and verification and analysis on compliance, correctness, effectiveness and the like of password application in an important network and information system can be realized.

The invention provides a liquefied gas steel cylinder positioning abnormity early warning method and device, can solve the problem that a traditional static threshold cannot adapt to complex scenes (such as traffic jam and population density change), and improves the early warning precision by dynamically adjusting a safety distance and a time threshold. Multi-dimensional anomaly recognition is carried out, for example, through fusion of positioning data, environment sensing data and distribution path verification, omnibearing monitoring from position offset to environment risk can be realized; graded early warning and intelligent response are carried out, for example, the alarm intensity can be adaptively adjusted according to day and night time periods and human traffic density, a standardized emergency process is automatically pushed to related departments, and the emergency efficiency is improved. Meanwhile, the system has an anti-resident-disturbing design, reduces the sound-light alarm intensity in a high-density area, avoids the accidental touch of a public safety event, plans an evacuation route through MAC address distribution, and improves the safety.

The invention discloses a reliable recognition method and system for door lock cooperation, and the method comprises the steps: building a binding relation between a mobile phone MAC address and a face feature vector according to a door opening event of the first face recognition of a resident, and constructing a directional multicast network based on the MAC address; according to the movement of the resident on the home returning path, a recognition request is sent to a directional multicast network through a door lock by collecting an MAC list and capturing a human face, and a resident identity recognition result is obtained; according to an identification request that a subsequent door lock encounters face shielding, a data complementation mechanism of a previous door lock is triggered, and service takeover is realized through an IGMP leaving message, so that a complete identity identification result is obtained; and according to the resident leaving trigger event, a leaving message is transmitted through a directional multicast network, the identity of a leaving person is confirmed through a passing door lock, and an in-home duration statistical result is obtained. According to the embodiment of the invention, the identity recognition is high in reliability, the single-point fault can be complemented, and the value-added service is precise.

Multi-link operations can provide higher network throughput and improved network flexibility compared to traditional techniques for wireless communication. Embodiments of the present invention provide techniques for simultaneously transmitting frames of an A-MSDU over multiple links in a multi-link operation between wireless devices (e.g., a wireless STA and a wireless AP). The A-MSDU can be aggregated to satisfy capability requirements of the transmitting device and / or the receiving device. Moreover, the A-MSDU can be fragmented, for example, to satisfy an MPDU length requirement of the transmitting device and / or the receiving device. Some embodiments disclosed herein use a virtual mac address of an LLC sublayer interface to define parameters values of an A-MSDU sub-frame header (e.g., SA and DA) for routing the respective frame to the LLC sublayer interface of the receiving device.

A system comprises an EV with an infotainment unit, a driver App, an electric mobility service provider (eMSP) cloud and a user charging profile database to identify a Bluetooth® and time / location-based driver charging profile for its automatic selection in a charging session. The driver App is configured to communicate with the infotainment unit via a Bluetooth® interface such that a Bluetooth® MAC address being assigned to each device connected to a network is used to identify a vehicle ID and a mobile device location is used as a proxy for a vehicle location. The eMSP cloud is configured to receive the vehicle ID and the vehicle location. The user charging profile database including user charging profiles. The driver App includes a Bluetooth® plus time-based profile automatic selector for a charging session to automatically select a proper user charging profile based on the MAC address plus a day / time / location-based pre-configuration.

A system and method for authenticating user access to a wireless network in which the wireless network is configured to support the use of individual pre-shared keys (PSKs) for verification even when operating under the Wi-Fi Protected Access Version 3 (WPA3) security protocol. Using the Wi-Fi Protected Access Version 2 (WPA2) security standard, the wireless network is designed to compile a lookup table linking the Media Access Control (MAC) address of a wireless device with a user-provided PSK. Subsequently, the network is able to authenticate the device under the WPA3 standard by extracting the user PSK from the lookup table using its MAC address and, in turn, performing the Simultaneous Authentication of Equals (SAE) secure key exchange protocol. Accordingly, wireless devices previously authorized for access under the WPA2 standard using a PSK can be efficiently transitioned for connection to the same network using the same PSK under the WPA3 standard.

The invention discloses a low-delay and high-reliability wireless communication method and system, a medium and a product, and relates to the field of industrial information and data processing.The method comprises the steps that when an industrial control data packet with a priority processing identifier is received, MAC address table look-up operation is executed on the industrial control data packet, and a priority data packet containing a target address identifier is generated; constructing a data transmission path forwarding by bypassing the network bridge according to the target address identifier of the priority data packet; transmitting the priority data packet to a Wi-Fi driving layer through the data transmission path, so as to write the priority data packet to a hardware sending queue, and generating a sending data packet containing a time sequence identifier; determining a periodic transmission time window synchronized with the industrial control period according to the time sequence identifier of the sent data packet; and detecting a channel state index in the transmission time window, generating a retransmission control parameter according to the channel state index, and executing a data packet transmission operation according to the retransmission control parameter. According to the invention, the processing time delay of wireless communication can be reduced.