617 results about "Network address" patented technology

The invention discloses a multi-communication group fusion holding method and system for an intelligent door lock, and the method comprises the steps: building an independent multicast tree taking a feature vector as an identifier according to a communication group request initiated by each main control door lock; generating a multicast message containing a target communication group feature vector and a digital signature according to a merging request sent by the first master control door lock; according to feature vectors exchanged by the master control door locks of the two parties through a secure channel, a target master control door lock initiates feature interception registration, and negotiates and establishes a boundary feature tag rewriting rule; and according to the established forwarding path and the rewriting rule, the audio and video streams of the communication groups of the two parties are subjected to feature tag rewriting through the network boundary router, and then bidirectional intercommunication is realized. By utilizing the embodiment of the invention, the dynamic security isolation and seamless fusion of multiple communication groups can be realized, the network load and transmission delay are reduced, meanwhile, the terminal door lock can realize audio and video intercommunication without sensing the network address of the opposite end or changing the configuration, and the expansibility, the security and the user experience of the system are improved.

The invention provides an attack link restoration method and system based on a large language model and a traditional AI model, and effectively solves the problem that attack link restoration is incomplete and inaccurate when a current attack link restoration scheme faces complex factors such as network address translation. The method comprises the following steps: acquiring an attack semantic knowledge base containing an attack context knowledge matrix, wherein the knowledge base is generated by processing an attack framework, a security log and a traceability report by a generative large model; obtaining an asset access relation graph generated by analyzing the metadata of the target network infrastructure by the large model and reasoning in combination with an attack semantic knowledge base; regularly acquiring security alarm logs in a first time window and scoring, and acquiring context logs if the security alarm logs exceed a threshold value; based on a time sequence diagram attention network model, determining the confidence degree that edges in an asset access relation graph corresponding to logs containing access pairs in the alarm logs and the context logs belong to attack links; and performing sub-graph extraction in the atlas to obtain candidate sub-graphs, and then determining a target attack link.

The invention provides an efficient task scheduling strategy recommendation method and system for a distributed network surveying and mapping scene, and relates to the crossing field of network space surveying and mapping, network security, distributed scheduling and intelligent optimization recommendation algorithms. Analyzing the task request to extract a task type, a task target network address set, a regional distribution feature, a task execution timeliness requirement and calculation and bandwidth resources required by estimation, and forming a task feature vector; and performing state acquisition and capability evaluation on the distributed surveying and mapping nodes based on task resource requirements defined by the task feature vectors, and performing normalization processing to form node capability vectors. Through multi-source information vectorization and closed-loop optimization, adaptive matching of task scheduling and resource dynamics is realized.

The invention provides an open platform management method and system based on dynamic reflection calling in the technical field of distributed micro-services and gateways. The method comprises the following steps: S1, forwarding an access request to an authentication center; s2, the authentication center executes identity authentication and issues an access token, and the client sends a request message to the open platform based on the access token; s3, the open platform carries out authentication, decryption and signature verification on the request message to obtain message content containing request parameters and a target service subsystem; s4, searching interface metadata and a network address of the target service subsystem; and S5, through a dynamic reflection calling engine, generating a proxy instance based on the interface metadata, mapping the request parameter into a target parameter, and through the proxy instance and the network address, calling the target service subsystem to execute the target parameter. The method has the advantages that the safe, uniform and non-intrusive open service capability is realized, and the maintainability, the safety and the evolution capability of the platform are greatly improved.

The present disclosure provides a method of traffic scheduling implementation, including: receiving a domain name resolution request sent by a first business application on a first terminal device, and performing domain name resolution on the domain name resolution request to determine a to-be-resolved domain name; if the to-be-resolved domain name is a target domain name, determining, from a preset network segment, a first virtual network address corresponding to the to-be-resolved domain name, and using the first virtual network address as a first traffic destination address corresponding to the to-be-resolved domain name, where the preset network segment includes a plurality of virtual network addresses; and sending the first traffic destination address to the first business application on the first terminal device, to cause the first business application to perform data transmission based on the first traffic destination address.

The invention discloses a railway driver driving behavior monitoring method based on artificial intelligence. An artificial intelligence processing unit completes hardware interface initialization; the integrated wireless equipment of the railway locomotive sends a network IP address and equipment identification information of the main control end to a host process of the artificial intelligence processing unit; a host process of the artificial intelligence processing unit initiates a video stream pulling request to a digital camera at a corresponding end through an RTSP protocol; the main process of the artificial intelligence processing unit receives the RTSP code stream and then decodes the RTSP code stream into a picture in a JPEG format, the image is cut and zoomed, and complete metadata information is added for each picture; three reasoning processes of the artificial intelligence processing unit run in parallel, and each process performs targeted reasoning detection on the decoded JPEG picture and metadata based on a self-loaded model: a main process receives a reasoning detection result, performs comprehensive judgment in combination with a preset threshold value and an abnormal state duration, and sends the result to the main process; triple alarms of local reminding, driver informing and remote monitoring are realized, and the driving behavior of the driver is standardized.

Systems, devices, and methods for aircraft in-flight entertainment (IFE) devices installation verification are disclosed herein. In some implementations, a verification system includes a computing device that can operably connect to multiple IFE devices and a reader device. Each IFE device can report its own stored identity to the computing device, and the computing device can determine the position of each IFE device based on a network topology-based network address assigned to each IFE device. The reader device can obtain and communicate, to the computing device, actual identities and expected installation positions of the IFE devices. The verification system can then compare, for each position, the actual identity, which indicates which IFE device should be installed in that position, against the reported stored identity, which indicates which IFE device has been installed in that position. The verification system can display, on a graphical user interface, the comparison.

A kind of railway driver driving behavior monitoring method based on artificial intelligence, artificial intelligence processing unit completes hardware interface initialization;Railway locomotive comprehensive wireless device sends the network IP address of main control end, device identification information to the main process of artificial intelligence processing unit;Artificial intelligence processing unit main process initiates video stream pull request to the digital camera of corresponding end by RTSP protocol;Artificial intelligence processing unit main process decodes into JPEG format picture after receiving RTSP code stream, trims zoom image, adds complete metadata information to each picture;Three inference processes of artificial intelligence processing unit run in parallel, each process is based on the model loaded by itself to decode the JPEG picture and metadata for targeted inference detection:Main process receives inference detection result, carries out comprehensive judgment in conjunction with preset threshold and abnormal state duration, realizes local reminder, driver notification, remote monitoring triple alarm, standardizes driver driving behavior.

The invention provides a service debugging method and device, electronic equipment and a computer readable storage medium, and relates to the technical field of service debugging. Initiating a debugging request for a target service instance based on a local agent, and obtaining a short-term security credential by the local agent; wherein the short-term security credential comprises the target service instance identifier; establishing, by the local agent, an encrypted communication channel with a remote agent using the short-term security credential; the remote agent extracts the target service instance identifier from the short-term security credential and obtains a real-time network address of the target service instance; and sending, by the remote agent, the received debugging traffic to the real-time network address of the target service instance. Identity authentication and authorization are realized through a short-term security certificate, and security and credibility of a debugging request are ensured; the security risk in the debugging process is reduced, and the flexibility and efficiency of cross-network environment debugging are enhanced.

A system featuring a controller and a plurality of nodes operating as a Kubernetes cluster. The plurality of nodes includes a master node communicatively coupled to the controller, and an ingress node being configured to (i) access the master node to obtain at least a first attribute associated with a data flow received by the ingress node based on a network address associated with a source of the data flow, (ii) determine one or more network policies applicable to the data flow based on at least the first attribute, and (iii) determine a classification identifier based on the one or more network policies. The classification identifier provides context associated with the data flow and a reliable association between an application and the data flow associated with the application during propagation of the data flow over a cloud network.

The present application discloses a method, system, and computer system for providing intelligent DNS load balancing using a combination of a dynamic DNAT pool and application providing in a connector-based solution for private application access. The method includes: (a) performing a DNS re-resolution for resolving an application Fully Qualified Domain Name (FQDN) to obtain a plurality of IP addresses for a plurality of application servers, (b) performing periodic application server probing, and (c) dynamically updating a destination network address translation (DNAT) to provide DNS load balancing for application traffic. The DNAT is updated based at least in part on one or more of the DNS re-resolution and the application server probing.

Two electronic devices attempt to communicate and exchange Internet Protocol (IP) packets over a cellular communication network, and at least one of the two devices is behind a symmetric Network Address Translation (NAT) service. At least one of the two devices executes a Session Traversal Utilities for NAT (STUN) protocol, which provides to that device a pair of external IP address and port of that device; which that device then informs to a Message Broker Unit that is accessible to both devices via the public Internet. The Message Broker Unit provides the external IP address and port of that device, to the other device; which then connects to a Virtual Private Network (VPN) server and sends to the first device one or more User Datagram Protocol (UDP) packets that penetrate or puncture the NAT service in an application-agnostic manner.

Systems and methods are disclosed for generating an adaptive bitrate ladder for a content item based on the actual quality of the content item. A broadcaster determines a quality score of a content item and multiplexes a message indicating the quality score with data packets of the content item to a headend. The headend uses the quality score to determine an ABR ladder with a set of bitrates for the content item. The headend then transcodes the content item into the set of bitrates. The headend then transmits a plurality of network addresses, each corresponding to a stream at a particular bitrate, to a user gateway to enable the user gateway to make the streams available.

The invention discloses a firmware upgrading system and method and electronic equipment, and relates to the technical field of computers, a target interface in a firmware upgrading end is configured as virtual network equipment, so that a host end identifies the target interface as network equipment such as a network card, and the host end upgrades the firmware according to a network address of the virtual network equipment. A target communication interface is loaded and configured locally, the target communication interface is connected with a virtual network device through a direct connection communication link, and then a firmware upgrading file is sent to the virtual network device through the target communication interface and the direct connection communication link. The transmission of the firmware upgrading file between the host end and the firmware upgrading end does not need to be forwarded by other nodes, so that the reliability of the transmission process is ensured, and the maintainability of the server is improved.

A system and method of controlling access to a webpage is provided. A plurality of webpages are crawled respectively at a plurality of network addresses on a network. A plurality of images of the plurality of webpages are captured. A plurality of identifiers are determined based on the plurality of images and the plurality of network addresses. A particular webpage at a particular network address is detected, and it is determined that the particular webpage includes a mechanism for user data extraction. A particular image of the particular webpage is captured responsive to the determining that the particular webpage includes the mechanism for user data extraction. A particular identifier is determined based on the particular image and the particular network address. The particular identifier is compared to the plurality of identifiers, and access by a particular computing device to the particular webpage is controlled based on the comparing.

A method of assigning addresses to devices on a network is presented. The method includes causing a master control unit to assert a first address signal on a first address line; causing a first device to transmit a first response to the master control unit via at least one data bus responsive to asserting the first address signal on the first address line; causing the master control unit to transmit a first network address via the at least one data bus to the first device responsive to receiving the first response; causing the master control unit and first device to complete a first communication test responsive to transmitting the first network address; and causing the master control unit to cease asserting the first address signal responsive to completing the first communication test.

Systems and methods herein are for one or more processing units that can communicate in a network using a subnet manager (SM) that includes a mapping of one virtual network address to two or more physical ports, where the one virtual network address may be associated with different switches of different data planes, and where data may be communicated concurrently and separately using the one virtual network address and using the two or more physical ports.

A first network device may generate a neighbor solicitation packet that includes a first address and a first priority associated with the first network device. The first network device may provide the neighbor solicitation packet to a second network device associated with a second address and a second priority, wherein the second address is the same as the first address. The first network device may receive, from the second network device and when the first priority is greater than the second priority, a neighbor acknowledgement packet that acknowledges that the first address is to be utilized. Alternatively, the first network device may receive, from the second network device and when the first priority is less than the second priority, another neighbor solicitation packet that includes the second address and the second priority. When the second network device has a higher priority, the first network device may disable its own address.

The embodiment of the invention discloses a data processing method and device, electronic equipment and a storage medium, and the method comprises the steps: obtaining a network address translation type, a power consumption level and network topology information of network equipment when a registration request of the network equipment is received, and carrying out the registration of the network equipment according to the network address translation type, the power consumption level and the network topology information, generating equipment associated information; when a connection request of a client is received, analyzing a target device identifier in the connection request, and determining a target network device corresponding to the target device identifier and pre-stored device association information; and determining an adaptive point-to-point transmission strategy according to the equipment association information, and establishing point-to-point direct connection between the target network equipment and the client based on the determined point-to-point transmission strategy and an interactive enhanced session description protocol between the target network equipment and the client, and the scheme can provide a hole digging success rate.

The embodiment of the invention provides a communication method and device, a storage medium and a program product, relates to the technical field of communication, and can improve the reliability of ARP proxy. The method is applied to user plane equipment and comprises the following steps: acquiring an ARP request message; the target IP address of the ARP request message is matched with a first ARP table, the first ARP table comprises at least one network address aggregation entry, the network address aggregation entry is obtained by aggregating a plurality of continuous network addresses in a second ARP table, and the second ARP table comprises a plurality of network addresses passing authentication. And responding to the ARP request message under the condition that the target IP address is matched in the first ARP table.

A method for providing stream control transmission protocol (SCTP) multihoming between a Kubernetes environment and a non-Kubernetes environment includes receiving, at an SCTP multihoming router (SMR) deployed as a pod within the Kubernetes environment and from a client in the non-Kubernetes environment, an SCTP INIT message for establishing a multi-homed SCTP association between first and second Internet protocol (IP) addresses of the client and first and second local IP addresses of the SMR. The first and second local IP addresses of the SMR are added to an SCTP header of the SCTP INIT message. Source and destination network address translations (NATs) are performed to change a source IP address and a destination IP address in an IP header of an IP datagram carrying the SCTP INIT message to a third local IP address of the SMR and a service IP address of a service in the Kubernetes environment, respectively.

The invention relates to the technical field of vehicles, and provides a vehicle-mounted terminal network equipment post-replacement management method and device, and the method comprises the steps: carrying out the network access verification of old piece equipment based on a preset first white list and a logic network address carried in a request under the condition that a network connection request of the old piece equipment is received, the first white list stores logic network addresses of offline old pieces; and under the condition that the network verification result indicates that the old piece equipment is allowed to access the in-vehicle domain network, vehicle binding relationship verification is performed on the old piece equipment based on a preset second white list, the equipment identification code of the old piece equipment and the change condition of the vehicle identification code bound with the old piece equipment, and the equipment identification code of the offline old piece is stored in the second white list. According to the method and the device provided by the invention, a traditional mode which completely depends on manual recording, judgment and operation is replaced, so that human errors are reduced, and accurate and automatic management of the life cycle state of the equipment is realized.

The invention discloses a credible exchange method and system for enterprise data on a supply chain, and relates to the technical field of enterprise data exchange, a credible interaction verification module is arranged on a data terminal of each enterprise on the supply chain, and a plurality of credible interaction verification modules are numbered; and a data relay server is arranged. A trusted interaction verification module executes a data trusted exchange multi-party verification mechanism to verify the legality and security of a data interaction request; at least three-party cross verification is adopted, a credible interaction verification module corresponding to a number verifies the legality and security of a data interaction request enterprise server based on network address communication and interaction ciphertext of a data interaction request, and the risk of data leakage caused by directional communication cheating specially set based on a target enterprise is avoided; after a credible exchange multi-party verification mechanism is passed, a safer enterprise data credible exchange method on the supply chain is constructed, and safe interaction of supply chain data is ensured.

At a security gateway residing within a trusted computer network, a service request is obtained from an external client and is authenticated. In response, one instance of a plurality of available application instances is identified. The instances are hosted on a plurality of hosts having a plurality of firewalls, and the firewalls and the hosts reside within the network. The firewalls have been initially defaulted to block external access to all instances. A corresponding one of the hosts, within the trusted computer network, and corresponding to the identified one of the plurality of available application instances, is instructed to open a corresponding one of the firewalls to a network address corresponding to the external client. The external client is advised of a destination identifier and port corresponding to the opening of the firewall, to facilitate the external client communicating with the corresponding one of the hosts.

The invention discloses a train communication address allocation method, electronic equipment and a storage medium, and the method comprises the steps: carrying out the detection interaction between train-level backbone network modules of each train to determine a subnet segment corresponding to each train, and receiving an address request of local target equipment based on an Ethernet train composition module of each train, the unique network address is allocated based on the subnet segment, so that the technical problems of low efficiency, easy conflict and incapability of adapting to flexible marshalling requirements caused by manual configuration of the communication address during marshalling adjustment of the existing train are solved, automatic allocation of the train communication address is realized, the marshalling adjustment time is greatly shortened, address conflict is avoided, and the marshalling adjustment efficiency is improved. And meanwhile, different marshalling switching is adapted to meet diversified operation requirements.

The invention relates to the technical field of computers, and discloses a routing query method and device, electronic equipment, a storage medium and a program product, and the method comprises the steps: obtaining a first network address; querying a target routing interval matched with the first network address in the first routing tree; wherein the first routing tree is obtained by hierarchically dividing a first routing interval corresponding to the routing entry in the first routing table based on a preset storage space size; the size of the preset storage space is related to a memory for searching the routing table; leaf nodes of the first routing tree correspond to routing entries in the first routing table; and determining a target routing entry based on the target routing interval and a mapping relationship between the first routing interval and the routing entry in the first routing table. The problem that a memory for routing table lookup is difficult to support large-scale routing table lookup can be solved.

This specification provides an object detection method and a data storage unit detection method. The object detection method includes: performing anomaly detection on multiple network addresses to determine abnormal network addresses, wherein any one of the multiple network addresses exists in at least two network address sets corresponding to target objects, and each target object corresponds to a network address set; determining an abnormal network address set based on the abnormal network addresses and the association between the multiple network addresses and the network address sets, and identifying the target objects corresponding to the abnormal network address sets as abnormal objects; thereby accurately and quickly locating abnormal objects that have suffered network attacks, avoiding the problem of not being able to accurately identify abnormal objects that have suffered network attacks.

The invention provides a route selection method and device for a computing power network of an intelligent computing center cloud platform based on a predefined rule, and relates to the technical field of intelligent computing centers, intelligent computing centers and computing power infrastructures. Obtaining a destination address carried in the computing power operation data packet, wherein the destination address is a network address of the target computing power application; s2, the gateway queries a computing power network routing table based on the network address of the target computing power application, and obtains a plurality of candidate next-hop routing addresses corresponding to the network address of the target computing power application and a routing priority of each candidate next-hop routing address; s3, the gateway selects an optimal next-hop routing address from a plurality of candidate next-hop routing addresses corresponding to the network address of the target computing power application based on a predefined rule; and S4, the gateway sends the computing power operation data packet to the optimal next-hop routing address.

A method includes resolving a plurality of network addresses for a plurality of systems connected to a network, discovering a plurality of application programming interfaces operated by the plurality of systems, inspecting the plurality of application programming interfaces to determine a plurality of invokable elements of the plurality of application programming interfaces, and creating a plurality of connectors executable by a development platform to invoke the plurality of invokable elements. Each network address of the plurality of network addresses corresponds to a system of the plurality of systems, the development platform includes one or more graphically-represented programming functions, and the plurality of connectors is configured to allow the one or more graphically-represented programming functions of the development platform to invoke one or more of the plurality of invokable elements.

This application provides a data transmission method and apparatus, to help implement smooth data transmission and improve data transmission efficiency when a UPF cannot identify an IP address of a terminal device. The method includes: A first UPF receives a first data packet from a first terminal device, where the first data packet carries identification information of a second UPF and a network address of a second terminal device; and the first UPF sends a second data packet to the second UPF based on the identification information of the second UPF, where the second UPF is a UPF serving the second terminal device, and the second data packet carries identification information of the first UPF and the network address of the second terminal device.