1821 results about "MAC address" patented technology

The invention relates to the technical field of network security, in particular to an equipment identity verification system based on an MAC (Media Access Control) address, which comprises a hardware feature acquisition module, a binding MAC address generation module, an authentication code encryption module, an authentication server communication module, an equipment behavior monitoring module and a security response module, wherein the hardware feature acquisition module is used for generating a unique equipment hardware fingerprint; the binding MAC address generation module is used for mapping the equipment hardware fingerprint into a binding MAC address uniquely corresponding to the equipment; the authentication code encryption module is used for generating an equipment authentication code; the authentication server communication module is used for sending the equipment authentication code to an authentication server for verification; and the equipment behavior monitoring module is used for identifying potential abnormal behaviors. According to the invention, through combination of hardware feature binding of the MAC address and multi-dimensional behavior monitoring, uniqueness, security and active protection capability of equipment identity verification are realized, and the security protection level of the system is significantly improved.

The invention proposes to generate a new MAC address for a non-AP station while being associated with an AP station, for use when associating again with the same AP station. For privacy reason, the same new MAC address is generated locally at both the non-AP station and the AP station using a shared function. This is done in a synchronized manned, preferably at the end of the association, e.g. when disassociating. The non-AP station disassociates with the AP station, and at any time in the future, it may associate again with the same AP station using this new MAC address. The AP station is therefore able to recognize the non-AP station, while outside observers only see a new MAC address and thus see a new non-AP station associating with the AP station. User privacy is therefore reinforced over time as the non-AP station associates multiple times to the same AP.

The invention relates to the technical field of data processing, and provides a network device discovery method, which can perform iterative retrieval under a target network according to an ARP table, provides a more comprehensive view, and is beneficial to monitoring the health condition and the network load condition of the target network. Legality detection of an IP address is carried out based on a rule base; legality detection of an MAC address is carried out based on a multi-level detection mechanism; uniqueness detection is carried out based on a device fingerprint; subnet suitability detection is carried out based on a subnet mask matching algorithm; a self-adaptive network equipment discovery algorithm combined with multi-dimensional data analysis can reduce redundant data, eliminate invalid information and improve the accuracy and management efficiency of equipment discovery; information generation is carried out based on the initial network equipment data to obtain the network equipment view, so that more accurate network equipment discovery is carried out.

The present disclosure provides systems and methods for asset identification and consolidation in a network. In some implementations, the methods involve receiving data including a plurality of media access control (MAC) addresses from at least one source, analyzing the received MAC addresses to determine one or more MAC addresses that are repeated in the received data, and labeling the repeated MAC addresses as weak identifiers for asset identification. Some implementations herein enable improved accuracy in identifying and consolidating network assets by distinguishing between reliable and unreliable identifiers, thereby enhancing network security and management capabilities.

The present invention relates to method for changing the value of one or more privacy parameters, such as a MAC address, of target stations within a BSS, at both an AP station and a non-AP station associated with the AP station. The two stations share a pseudo-random function to generate the new values of the privacy parameters from a shared key and a shared parameter whose value varies over time. The methods comprise for each station: obtaining the shared key and parameter value; communicating, with the other station, a request for changing the values of the privacy parameters at a target time; calculating the new values by using the shared key and the current value of the shared parameter as inputs of the shared function; and replacing, in a registry, the current values of the privacy parameters of the target station by the calculated new values at the target time.

The invention provides a communication method, device and system, electronic equipment and a storage medium, and relates to the technical field of communication. The method comprises the following steps: receiving an Ethernet data frame sent by a first host connected with a first network device, wherein the Ethernet data frame comprises a source MAC address and a destination MAC address; determining a virtual Ethernet identifier and a target site mapping prefix corresponding to the target MAC address according to a preset address mapping relationship; generating an IPv6 message header according to the virtual Ethernet identifier, the target site mapping prefix and the target MAC address, and packaging the Ethernet data frame according to the IPv6 message header to obtain an IPv6 message; and sending the IPv6 message to a second network device, decapsulating the IPv6 message by the second network device to obtain an Ethernet data frame, and sending the Ethernet data frame to a second host connected to the second network device. The present disclosure can reduce overhead and improve system security.

The invention relates to the field of intelligent power grids, and discloses a self-adaptive topology model construction method based on Ethernet frames, which comprises the following steps of: S1, carrying out initialization operation on a device, acquiring interval identification codes of all line switch intervals of the device, including opposite side identification codes and local side identification codes, and according to an I generation rule of an adjacent switch device, generating an I generation rule; calculating the IP address of the adjacent switching device of the line switch; s2, triggering an ARP (Address Resolution Protocol) broadcast packet, obtaining an MAC (Media Access Control) address of the IP address in the local area network through the ARP, and associating the interval identification code, the IP address and the MAC address of the adjacent switch to generate an association table; and S3, establishing communication of the adjacent power distribution terminals through the association table of the interval identification codes, and then determining interval switches of the adjacent power distribution terminals according to the interval serial numbers in the interval identification codes so as to establish the FA topology. The topology establishment of the intelligent distributed FA is realized through the identification code parameters, and the debugging work and the subsequent operation and maintenance work of the intelligent distributed FA are simplified.

A relay node may detect conflicts regarding media access control (MAC) addresses. A target node may receive a request from the relay node. The request may comprise a request to establish communications with the target node. The target node may send, to the relay node, an indication of the MAC address of the target node. The target may receive a link release message from the relay node. The link release message may comprise an indication of conflict associated with the MAC address of the target node.

The present invention discloses an IP generation method, device, equipment and medium, and relates to the technical field of EOPS printing system, so as to solve the technical problem of low reliability and stability of network environment in existing EOPS printing scenarios. The method includes obtaining basic data of node devices for which IP addresses are to be generated; generating hash seeds according to unique identification numbers and network port MAC addresses; performing hash calculations based on hash seeds to obtain hash values; mapping hash values ​​to preset IP address ranges to obtain initial IP addresses; performing IP address conflict detection on the initial IP addresses based on the ARP protocol; when there is a conflict in the initial IP address, increasing the generation data of the hash seeds by preset values ​​in sequence, and generating new IP addresses based on the hash seeds with the increased preset values, until the new IP addresses do not conflict with the IP addresses of other node devices, and obtaining the target IP address. The IP generation method provided by the present invention is used to avoid conflicts between the generated IP addresses and other devices, and improve the reliability and stability of the network.

This disclosure describes systems, methods, and devices related to security for multi-link operation. A device may determine a multi-link communication with a first multi-link device comprising two or more links associated with two or more station devices (STAs) included in the first multi-link device. The device may determine a first medium access control (MAC) address associated with a first link of the two or more links. The device may determine a second MAC address associated with a second link of the two or more links. The device may generate one or more pairwise security keys to be used in the multi-link communication on the two or more links. The device may cause to send a frame to the first multi-link device using at least one combination of the one or more pairwise security keys.

The technical solutions are directed to MAC address protection for frame integrity verification. A sender device can compute, using a temporal key (TK) programmed in hardware, a first key for a body of a frame and a second key for a header of the frame, different from the first key. The sender can encrypt the body of the frame at a machine access control (MAC) layer using the first key and the header of the frame at the MAC layer using the second key. The sender can compute a first MIC of the encrypted frame using the first key and a second MIC of a content of the header at the MAC layer using the second key. The sender can transmit the frame with the first MIC and the second MIC to a receiver configured to determine integrity of the header of the frame based on the second MIC.

Techniques and architecture are described for L2 service insertion in a network. More particularly, the techniques and architecture provide for monitoring a L2 service, e.g., firewall, MAC address (instead of learning the MAC address) and registering / de-registering the service node (e.g., fabric border or edge or LISP service_etr) to the service control plane (e.g., LISP MSMR) based on this. This not only load-balances the traffic (per L2 flow) but also tracks it for node's liveliness. The techniques and architecture also provide L2 service insertion connected to a service border to allow for dynamic SGT based service, e.g., firewall, insertion for both software defined access (SDA) fabric and non-fabric deployments.

Systems and methods are provided for customized grouping of end user devices using a new group identifier tag (GIT) in addition to role-based access (e.g., administrator or guest) and device identifier access (e.g., IP or MAC address). Two components may be implemented at a network access device, including a data plane component and a control plane component. For example, the control plane component may authenticate an end user device, store the MAC and IP addresses for authenticated end user devices, and define access roles for the end user device in the datapath. The data plane component may perform packet processing (e.g., forwarding and policy enforcement) pursuant to previously-defined rules. Whenever a packet arrives at the Network Access Device, the packet is forwarded according to the rules specified by the “role” and GIT present in the entry, allowing for improved processing and scalability of network traffic processing.

A system for optimizing network traffic management is provided. The system includes a plurality of data processing units (DPUs), each assigned an identifier and configured to process network traffic for associated virtual network interface cards (vNICs). The system also includes a vNIC placement handler configured to receive media access control (MAC) address information from the plurality of DPUs and execute a relocation of at least two vNICs to be directly associated with one of the plurality of DPUs without through an inter-DPU physical network based on mapping the MAC address information to the identifier. The system further includes a communication framework integrated with the vNIC placement handler to enable transmission of MAC address information from the plurality of DPUs to the vNIC placement handler and offload network traffic from the vNICs to corresponding one or more of the plurality of DPUs.

A method is provided that is performed in a wireless network to detect a rogue wireless device. The method comprises detecting a suspect wireless device in the wireless network based on messages transmitted by the suspect wireless device using a first Media Access Control (MAC) address that is also used by a valid wireless device in the wireless network. When a suspect wireless device is detected, the method next includes sending to the valid wireless device in the wireless network a request configured to cause the valid wireless device to change its MAC address. After the valid wireless device has changed its MAC address, the method involves observing messages transmitted by the suspect wireless device in the wireless network. The method then includes determining that the suspect wireless device is a rogue device when the suspect wireless device continues to transmit messages using the first MAC address.

Devices, networks, systems, methods, and processes for packet forwarding and routing are described herein. A leaf switch can be in communication with a host device. The leaf switch may configure a subnet comprising the host device. The leaf switch can assign a next hop interface as a system port of the leaf switch and generate subnet information indicative of the assignment. The leaf switch may distribute the subnet information to one or more network devices through one or more internal Border Gateway Protocol sessions. A data packet destined to the host device can be transmitted to the system port of the leaf switch when a host Media Access Control (MAC) address of the host device is not resolved. The leaf switch can resolve the host MAC address and transmit the data packet to the host device based on the host MAC address.

Presented herein are techniques for extending Target Wake Time (TWT) to provide for randomizing and changing media access control (MAC) address (RCM) signaling. According to certain embodiments, a client device operating in a wireless network determines a TWT for the client device. Next, the client device determines that it will change from using a first MAC address to a using second MAC address. Finally, the client device generates, for transmission to an access point device that serves wireless communication in the wireless network, a TWT signaling message. The TWT signaling message indicates the TWT for the client device and the second MAC address.

Disclosed are a method and an apparatus for service fast switchover. The present disclosure may be applied in a spine-leaf architecture, wherein the method may be applied to a backbone spine node. The backbone spine node may loop back a data packet sent through a port connected to a faulty member path from Equal Cost Multi Paths (ECMPs) to which the faulty member path belongs, select one fast switchover member path from the ECMPs prior to routes in a network with the ECMPs converging, determine an access node connected to the fast switchover member path as a next hop, perform layer 3 forwarding on the data packet and encapsulate a specified Media Access Control, MAC, address as a destination MAC address, and send the data packet, with the specified MAC address as the destination MAC address, to the next hop through the fast switchover member path.

The present invention provides a wireless communication method and system for the Internet of Things based on the Star Flash protocol. The method comprises the following steps: deploying a plurality of wireless communication nodes in a wide area or a long-distance path to ensure that the distribution distance between any two of the wireless communication nodes does not exceed 200 meters in the absence of obstacles; selecting the wireless communication nodes as gateway nodes, which have the ability to communicate with any other wireless communication nodes; assigning a unique identification code to each of the wireless communication nodes, grouping them by the identification code, so that the wireless communication nodes with the same identification code can automatically construct a tree network structure under the guidance of the designated gateway node; using the wireless communication nodes to connect to the opposite end according to the signal strength and the current network topology structure, and after the connection is established, using the MAC address to access and control data, thereby reducing costs and improving communication reliability and stability.

Methods and systems are provided for detecting vehicle controller spoofing. The vehicle includes a plurality of vehicle controllers, a vehicle network switch, and a content addressable memory (CAM). The plurality of vehicle controllers includes first and second vehicle controllers. A first port of the vehicle network switch is designated to only receive data frames from a first vehicle controller. The first vehicle controller is associated with a first media access control (MAC) address. The CAM is configured to store an association between the first port and the first MAC address, receive a first data frame including a source MAC address at the first port, determine whether the source MAC address matches the first MAC address, and generate an anomaly event based on the determination. A generated anomaly event indicates that the first vehicle controller is masquerading as the second vehicle controller using an invalid source MAC address.

A switch in a first network is provided. During operation, the switch can learn a media access control (MAC) address of a packet from a second network via a first port. The MAC address can be learned in association with an aggregate virtual local area network (VLAN) configured on the first network for traffic from the second network. The switch can inspect the packet to determine an external VLAN configured on the second network. The switch can send, via the first port a packet on the external VLAN. The source and detector addresses can be a local address. The destination address can be a multi-destination address. The switch can identify the local address as the detector address in a packet received from a second port coupling the second network, identify a loop in the second network in association with the external VLAN, and disable transmission via the second port.

The invention relates to a medical image secure transmission method based on multi-modal biological characteristics, and belongs to the technical field of image security protection. According to the method, firstly, a medical image is segmented into lesion pixels and non-lesion pixels through a deep neural network, and then the lesion pixels are embedded into the non-lesion pixels by adopting a timestamp and least significant bit replacement method. Further, according to the method, the marked non-lesion part and the lesion part are combined to generate a marked image. Secondly, multi-modal biological features of a user are extracted through a deep neural network, and a user-defined secret key and features obtained after device MAC address coding extraction are adopted as secret keys; and finally, the marked image is encrypted by using the coded secret key and the chaotic system, so that the safety protection level of the medical image data is enhanced.

The invention provides a DPU-based k8s cluster deployment method, apparatus and device, and a storage medium, and the method comprises the steps: a k8s receives a container instance deployed by a user, and determines two virtual function ports; acquiring an identifier of a corresponding device, and calling a network container interface; adding the virtual function port into the logic binding virtual function port according to the identifier, and adding the logic binding virtual function port into the kernel namespace of the container; allocating an IP address and an MAC address to the container network interface through a controller plug-in of the software defined network; adding two corresponding virtual function representative ports as sub-interfaces to the logic binding virtual function representative port, and setting the working mode of the logic binding virtual function representative port as a master-slave mode; establishing a logic binding uplink interface, adding an uplink interface, and setting the working mode of the uplink interface to be a master-slave mode; the representative interface and the uplink interface are added to the OVS network bridge; and the flow table and the configuration information related to the container are issued to the OVS instance, so that the reliability of network communication of the container instance in the cloud native cluster can be improved.

The invention discloses a License verification method and a License verification device for private deployment of a k8s or docker environment. When the method is applied to a client, the method comprises the following steps: firstly, creating a target container by using k8s or Docker, and running target application software; then, obtaining the MAC address of the physical machine; then, according to the token information of the user, the current unique identification code of the container and the MAC address, generating a license application request, and encrypting the license application request; then, the encrypted license application request is sent to a server side to generate an authorization certificate, and the authorization certificate is encrypted; and the client receives the encrypted authorization certificate returned by the server and decrypts the encrypted authorization certificate to obtain the decrypted authorization certificate. And finally, the system verifies the authorization information in the decrypted authorization certificate, and loads a corresponding application software function module in the operation environment of the target container according to a verification result. According to the method, the security and reliability of license verification are remarkably improved, and legal use of software is ensured.

The invention, which belongs to the field of the constellation bid identification technology, discloses a big data processing-based constellation bid behavior identification method and system, the system comprises an address acquisition module, a comparison module, a processing module, a similarity analysis module, a calculation module, a weighted calculation evaluation module and an early warning module, the address acquisition module, the comparison module, the processing module, the similarity analysis module, the calculation module, the weighted calculation evaluation module and the early warning module; and the module is used for acquiring IP address information and MAC address information of all bidding parties, copying and storing all the address information to the address database, and the module can be automatically or manually started to acquire equipment address information when bidding files submitted by all the parties participating in bidding are submitted through the network interface. According to the method and the device, the accuracy of identifying bidding behaviors is improved by comprehensively analyzing the address information of the bidders, the similarity of the bidding file contents, the bidding behaviors and other data in multiple dimensions, a large amount of bidding data can be quickly processed by utilizing a big data processing technology, the detection period is shortened, and the working efficiency is improved.

The invention discloses an IP address allocation conflict detection method based on multi-protocol ARP data acquisition, and the method comprises the steps: obtaining ARP table information from a core device in a network through a plurality of protocols when a DHCP service is started; the ARP table records the corresponding relation between the MAC addresses of the network equipment and the IP addresses allocated to the network equipment, and the MAC addresses and the IP addresses are summarized to form an MAC-IP mapping table which is stored in the system. When the terminal equipment requests to distribute the IP address to the DHCP server, checking whether the MAC address of the equipment is in the MAC-IP mapping table, and if so, directly distributing the IP address; and if not, allocating a new IP address from the IP pool. Before the IP address is allocated, the corresponding relation between the existing MAC address and the requested IP address in the network is compared, whether a conflict possibly occurs or not is judged, ARP table information is regularly pulled from network equipment, a local MAC-IP mapping table is updated, it is ensured that the MAC-IP mapping relation in the network is always kept newest, and the IP address allocation efficiency is improved. And the IP address conflict caused by equipment change or lease synchronization delay is effectively avoided.

The invention provides a method and system for realizing reverse vehicle searching in a parking lot without relying on a parking space camera, and relates to the technical field of parking lot management, and the method comprises the steps: recognizing the MAC addresses and license plate numbers of at least two Bluetooth devices corresponding to a current vehicle, and storing the MAC addresses and license plate numbers in a license plate number database; secondary evidence obtaining is carried out, and all scanning results in a first preset duration are uploaded to a license plate number database; when the MAC addresses are the same as the MAC addresses of at least two Bluetooth devices in the license plate number database, the parking space is determined to be an undetermined parking space, and when the MAC address of any Bluetooth device is reduced and the duration in which the electronic tag cannot read exceeds a second preset duration, the undetermined parking space is determined to be a target parking space; and storing the license plate number and the target parking space to a preset vehicle searching system so as to realize parking lot reverse vehicle searching without depending on a parking space camera. According to the invention, wireless signals corresponding to passing vehicles, pedestrians and drivers can be screened by using increase and decrease of device numbers, so that the vehicle searching precision is improved, and the vehicle searching service investment is reduced.

The invention relates to the technical field of anti-counterfeiting verification, in particular to an embedded equipment anti-counterfeiting verification method based on hardware fingerprints and double encryption, which comprises the following steps of: analyzing a CPU unique identification number generated by starting for the first time, adjusting a sequence and splicing a software version, judging ciphertext content and synchronizing the ciphertext content to an activation end and an EEPROM (Electrically Erasable Programmable Read-Only Memory), and decrypting a comparison data field. And decrypting the verification parameter group, the timestamp and the MAC address to obtain an authorization parameter verification result. According to the method, hardware fingerprint deep processing and multi-factor data encryption are fused, in the identity feature generation and storage process, the multi-dimensional identification degree of identity information is remarkably improved by adopting multi-data-source dynamic combination and ciphertext verification, hierarchical dynamic authorization is achieved through joint limitation of the period, the number of times and the limit, and the authentication efficiency is improved. The equipment environment and activation behavior are traced back by the whole link, the parameter state and affiliation are verified item by item after the authorization certificate is decrypted, and abnormal operations such as equipment illegal activation, authority border crossing and certificate false use are effectively prevented and controlled.

A method includes initiating, by a first system-on-chip (SoC) of an access device, a first modem software stack (MSS) operable to communicate with a registration server and operable to communicate with a first local area network (LAN) port of the access device. The method includes initiating, by a second SoC of the access device, a second MSS operable to communicate with the registration server and operable to communicate with a second LAN port of the access device. The method includes registering and provisioning the first MSS as a first modem with the registration server using a first media access control (MAC) address. The method includes registering and provisioning the second MSS as a second modem with the registration server using a second MAC address.