1396 results about "Network address" patented technology

The invention discloses an optimized registration method and system based on a micro-service architecture. The invention relates to the technical field of Nacos systems. The health monitoring center is started and starts to send a health examination request to a downstream service at regular time; the gateway access layer service receives a client request; obtaining a network address of a target service instance through a Nacos service discovery mechanism according to a service name in the request; then forwarding the request to a target service instance for processing; when the configuration information is changed, the Nacos configuration management center pushes an update notification to all subscribed service instances; the service instance pulls the latest configuration information and updates the local cache; according to the method, a secondary hand waving mechanism is implemented in Nacos cluster node, gateway service and downstream service communication, so that the offline condition of the downstream service can be accurately judged, and the problem of data inconsistency caused by node faults or network partition is avoided.

The invention relates to a fraud website identification early warning method, device and equipment and a storage medium thereof. The method comprises the following steps: firstly, acquiring network address information, then extracting feature data from dimensions such as structure, semantics, behavior and vision, accelerating similarity detection by applying a graphics processor parallel computing technology, and generating a composite feature vector containing a domain name similarity score and a registration feature; constructing fraud features in combination with the composite feature vector, mining a data association relationship through a graph neural network, and forming multi-dimensional risk feature data; and finally, processing the risk feature data by using a deep learning model, generating a risk probability, and when the risk probability exceeds a preset threshold, determining that the network address is a high-risk network address and generating an early warning report. By adopting the method, the comprehensiveness and accuracy of fraud website identification can be improved, complex fraud means such as domain name variation and semantic camouflage can be effectively dealt with, the real-time early warning capability for potential risks is enhanced, and efficient technical support is provided for network security protection.

The invention discloses a multi-communication group fusion holding method and system for an intelligent door lock, and the method comprises the steps: building an independent multicast tree taking a feature vector as an identifier according to a communication group request initiated by each main control door lock; generating a multicast message containing a target communication group feature vector and a digital signature according to a merging request sent by the first master control door lock; according to feature vectors exchanged by the master control door locks of the two parties through a secure channel, a target master control door lock initiates feature interception registration, and negotiates and establishes a boundary feature tag rewriting rule; and according to the established forwarding path and the rewriting rule, the audio and video streams of the communication groups of the two parties are subjected to feature tag rewriting through the network boundary router, and then bidirectional intercommunication is realized. By utilizing the embodiment of the invention, the dynamic security isolation and seamless fusion of multiple communication groups can be realized, the network load and transmission delay are reduced, meanwhile, the terminal door lock can realize audio and video intercommunication without sensing the network address of the opposite end or changing the configuration, and the expansibility, the security and the user experience of the system are improved.

The invention provides a communication method and device, and the method comprises the steps: a label management function network element sends first information to a network warehouse function network element, and the first information comprises the information of an area corresponding to the label management function network element; a first checking request is received, the first checking request carries information of a target area, and the target area belongs to an area corresponding to the label management function network element; determining a first device serving a target reader-writer corresponding to the target area; and sending a second checking request to the first device. Through the technical scheme provided by the invention, network addressing from the requester to the reader-writer can be realized.

Example systems and methods include: receiving, by a computing system, a request to add a block to a blockchain, wherein the block includes an entry that relates to a semantic representation, wherein the semantic representation encodes a state change to a state stored on the blockchain; obtaining, by the computing system, a copy of the semantic representation as provided by a trusted third party, wherein the copy of the semantic representation is digitally signed by the trusted third party or provided by the trusted third party at a network address; validating, by the computing system, the semantic representation; and initiating, by the computing system, procedures to add the block to the blockchain.

The communication method is applied to a bus network, and comprises the following steps: a network management unit sends a request message to bus equipment, the request message is used for requesting to access a first configuration space register of the bus equipment, and the request message comprises a network address of the bus equipment, first indication information and information of the first configuration space register, the network address is an address allocated to the bus device by a network management unit, the first indication information is used for indicating the operation type of the first configuration space register, and the network management unit receives a response message which is from the bus device and responds to the request message. The access of the configuration space register of the bus equipment is realized through the network address of the bus equipment and the information of the configuration space register, and the problem of high time delay requirement caused by a memory address access mode is avoided.

The invention discloses a channel negotiation method and device based on relay proxy and a storage medium, and relates to the technical field of telecommunication, and the method comprises the steps: requesting a relay server to obtain a relay proxy address, packaging the relay proxy address into a candidate address of a session description protocol, and sending the candidate address to a called terminal through the relay server, analyzing a private network address in response information fed back by the called terminal, initiating a binding request to the private network address of the called terminal, and if the binding request does not establish connection with the called terminal, sending a penetration request to a specified port of the relay server, and establishing a bidirectional network address channel with the called terminal through the penetration request forwarded by the relay server and a binding request initiated by the called terminal to the relay proxy address. According to the invention, the channel between the calling end and the called end is established through the relay proxy address of the relay server and the penetration request, so that the flexibility of media stream transmission is improved.

A different network address is assigned to each port of a first device and a second device that are configured to exchange traffic over a multi-path connection of a transport layer protocol. When a timeout is detected by the first device indicating that a packet sent to a first network address assigned to a first port of the second device was not received, the first device can regenerate the packet with a second network address assigned to a second port of the second device, and send the regenerated packet to the second network address of the second device. The first device can send heartbeat packets to the first port in an exponential backoff manner and, upon receiving a heartbeat acknowledgement from the first port, resume sending the packets to the first port.

The invention discloses a data transmission method. The method is applied to a sending device of a first data center and a receiving device of a second data center. And the sending device obtains the data transmission configuration information. The data transmission configuration information comprises a network address of the receiving equipment and address information of the data to be transmitted. And the sending device reads the to-be-transmitted data from the data disk based on the address information, and sends a first data packet to the receiving device based on the network address of the receiving device. And the receiving equipment acquires the first data packet and stores the first data included in the first data packet into a data disk of the receiving equipment. Thus, the sending device reads the to-be-transmitted data based on the data disk, a data storage mode of a bottom layer can be shielded, the number of times of reading the to-be-transmitted data from the data disk is reduced, the time expenditure of data reading is reduced, and the efficiency of data transmission between data centers is improved. In addition, the invention also provides a corresponding device and related equipment.

Various methods and processing systems for the effective management of network traffic and facilitating data forwarding within distributed computing environments. Network components may be configured to amalgamate the Border Gateway Protocol (BGP) with Source Network Address Translation (SNAT) or network address port translation (NAPT) technologies to facilitate dynamic notification of network address accessibility and use port index identifiers to augment the precision and resilience of routing. A distributed SNAT / NAPT virtual network function (VNF) or cloud-native network function (CNF) may collaborate with LEAF switches or server aggregation devices to refine data transmission via adaptable address mapping and forwarding and enhance network scalability and resilience.

The present disclosure relates generally to establishing a connection between a client and an endpoint in a manner that reduces network latency. In an example, a network layer proxy receives a request of a client for an endpoint connection establishment, the request including endpoint information. The network layer proxy sends, to an application layer proxy, the endpoint information, the endpoint information sent using a connection-less protocol. Thereafter, the network layer proxy receives, from the application layer proxy, a network address of an endpoint selected by the application layer proxy based on the endpoint information and application layer information. The network layer proxy sends a response to the client such that a connection is established to the endpoint using a connection-based protocol and such that the connection bypasses the application layer proxy.

An electronic device identifier mapping and resolution system are disclosed which may be used to analyze various device identifiers associated with an online event initiated by a particular device in applying a matching algorithm to determine a unique device identifier and / or device profile for the device. Device identifiers provided from disparate sources (such as web browser cookies, network IP addresses, device-specific identifiers, application-specific identifiers, custom identifiers, probabilistic identifiers, etc.), including both deterministic and / or probabilistic identifiers, may be analyzed according to the matching algorithm to determine a device identifier associated with the device. Matching algorithms may be customized and configured to a high degree of complexity for respective entities, such as to analyze disparate device identifiers according to a variety of identifier comparison functions and matching tiers. Matching algorithms may include conditional requirements that streamline execution of such algorithms, e.g., which may reduce processor load and increase execution time, such as conditional requirements that bypass portions of the matching algorithm based on particular identifiers associated with the online event that are initially analyzed.

The invention relates to the technical field of security protection, in particular to an API (Application Program Interface) security protection method based on anomaly detection, which comprises the following steps of: based on a received API request, analyzing the API request, extracting a request source network address and a target API calling instruction, and carrying out source authenticity verification and instruction validity judgment. According to the method, the initial security context is established by analyzing the source network address and the interface calling instruction of the API request in combination with the timestamp and the request type, so that the pre-modeling of the environment state of each request is realized, and the basic credibility of the request can be judged immediately before the request is subjected to deep business processing. On the basis, a sequence mode of the request load is combined with a parameter boundary for comparison, the behavior deviation degree is used as a reference item, interface sensitivity information in the context is introduced to complete quantitative judgment on the risk level, and a judgment result has dynamic adaptability and structural relevance.

The disclosure provides an approach for processing inter-network communications. Embodiments include configuring, by a management component of a data center, a first virtual private network (VPN) session between a first endpoint outside of the data center and a first gateway of the data center. Embodiments include configuring, by the management component, a second VPN session between a second endpoint outside of the data center and a second gateway of the data center. Embodiments include programming, by the management component, one or more network address translation (NAT) tables of the data center such that, for the first VPN session and the second VPN session, a single public network address of the data center is exposed to the first endpoint and the second endpoint.

Embodiments of this application provide a multicast communication method and related apparatus. The multicast communication method is implemented by a user equipment and includes receiving UE route selection policy (URSP) information transmitted by a policy control function entity, the URSP information including a URSP rule supporting a multicast service; querying the URSP rule supporting the multicast service according to a multicast network address corresponding to a multicast service context that needs to be activated, to obtain network slice information and data network name information; and activating Multicast and Broadcast Service (MBS) context information of the user equipment based on the network slice information and the data network name information, adding the user equipment to a multicast group corresponding to the multicast network address for multicast communication.

Systems and methods related to a variable self-executing program. A variable self-executing program comprises a self-executing program that is minted with an indication of a non-transferable ownership wallet (e.g., a digital wallet for which the self-executing program is minted), a non-transferable network address that has permissions for updating metadata for the variable self-executing program, and an off-chain profile state based on a specific user corresponding to the digital wallet.

The invention belongs to the technical field of intelligence, and discloses a data link layer analysis method in an industrial field network address conflict environment. Comprising the following steps: deploying a customized acquisition module at a data link layer, capturing an original data frame in real time, and extracting time sequence features and protocol semantics; the time sequence features and the protocol semantics are combined into a high-granularity data set with multi-dimensional features; designing a multi-rule set based on the high-granularity data set of the multi-dimensional features, and performing anomaly detection to obtain an abnormal data frame data set; dividing a conflict domain according to a time window on the basis of the abnormal data frame data set, calculating the proportion of the total flow and the broadcast flow in the conflict domain, judging whether an address conflict problem exists in the conflict domain or not according to the proportion of the total flow and the broadcast flow, and if the address conflict problem exists, performing isolation by using a VLAN (Virtual Local Area Network); in the isolated conflict domain, establishing a communication relation graph in the network to visualize a conflict source; and the stability and the safety of the industrial field network are effectively improved.

The invention provides a communication method and device. According to the method, identification information is introduced to distinguish messages from different cloud platform systems. For example, the first identification information is identification information for identifying a first cloud platform system, and each cloud platform node in the first cloud platform system comprises the first identification information (so that a message sent by each cloud platform node also comprises the first identification information); therefore, which cloud platform system the node sending the message belongs to is distinguished through the identification information in the message. Moreover, the neighbor table entries used for normal communication of the nodes in the cloud platform system are configured as the static routing table, so that even if different cloud platform systems are intercommunicated and network address conflicts occur, the nodes in the same cloud platform system can still communicate normally based on the static routing table; and the problems of wrong data forwarding and service interruption among different cloud platform systems are avoided.

The invention discloses a fusion quantum secure communication method of an NAT gateway, and relates to the technical field of communication network information security and quantum information. Comprising the steps of 1, creating a fusion quantum security communication system of an NAT gateway, 2, adopting a quantum hybrid encryption architecture through a quantum security module, and internally arranging a quantum key distribution unit and an anti-quantum computing acceleration chipset, 3, expanding a quintuple mapping structure of NAT through a dynamic address mapping and quantum encryption module, newly adding a quantum security dimension field QSV, and carrying out quantum encryption on the quantum key distribution unit and the anti-quantum computing acceleration chipset. And 4, developing a protocol non-inductive conversion engine through a hybrid protocol stack cooperation module, supporting an IPv4 / IPv6 dual-stack quantum tunnel and a quantum key inheritance protocol to realize cross-protocol family encryption parameter migration, dynamically adjusting a quantum encapsulation mode in an address conversion process, and dynamically associating an internal network address port with a quantum key parameter and a channel fingerprint feature. And 5, constructing a quantum perception type session state machine through an anti-quantum attack session management module, and performing a joint decision-making mechanism through quantum entanglement state monitoring and classical traffic feature analysis.

Apparatuses, systems, and techniques to perform dynamic mapping between one or more Open Radio Access Network (O-RAN) radio units (RUs) and one or more O-RAN distributed units (DUs). For example, processors or computing systems to perform switching of mappings between open radio unit (O-RU) and open distributed unit (O-DU) in an open radio access network (O-RAN). In at least one embodiment, a processor including circuitry performs a program to cause reassigning of mappings between radio unit (RUs) and distributed unit (DUs) without the need of restarting or reconfiguration of RUs and / or DUs in an O-RAN network.

The invention discloses a connection establishment method and device, a storage medium and electronic equipment. The method comprises the following steps: receiving a data request message sent by terminal equipment, establishing relay connection between the terminal equipment and target equipment in response to the data request message, and obtaining network address translation types corresponding to the terminal equipment and the target equipment, and based on whether the network address translation types corresponding to the terminal device and the target device are symmetric, point-to-point connection between the terminal device and the target device is established through address exchange, and relay connection is interrupted. According to the method and the device, the technical problems that the influence of resource consumption on code stream transmission in the NAT penetration process is too large, and the equipment resource overhead is relatively high are solved.

A method for supporting virtual machine (VM) mobility between network devices connected to a network includes: selecting a first type of route for interconnecting VMs that are connected to the network devices; and adding a feature of a second type of route to the first type of route to enable the network devices to execute proxy address resolution protocol (ARP) for transmitting network traffic between the VMs without requiring each of the network devices to store a physical address of each of the VMs in respective ones of a network address table.

Some embodiments provide a novel method for forwarding data messages between first and second host computers. To send, to a first machine executing on the first host computer, a flow from a second machine executing on the second host computer, the method identifies a destination network address of the flow. The method uses the identified destination network address to identify a particular tunnel endpoint group (TEPG) including a particular set of one or more tunnel endpoints (TEPs) associated with a particular non-uniform memory access (NUMA) node of a set of NUMA nodes of the first host computer. The particular NUMA node executes the first machine. The method selects, from the particular TEPG, a particular TEP as a destination TEP of the flow. The method sends the flow to the particular TEP of the particular NUMA node of the first host computer to send the flow to the first machine.

The invention provides an attack link restoration method and system based on a large language model and a traditional AI model, and effectively solves the problem that attack link restoration is incomplete and inaccurate when a current attack link restoration scheme faces complex factors such as network address translation. The method comprises the following steps: acquiring an attack semantic knowledge base containing an attack context knowledge matrix, wherein the knowledge base is generated by processing an attack framework, a security log and a traceability report by a generative large model; obtaining an asset access relation graph generated by analyzing the metadata of the target network infrastructure by the large model and reasoning in combination with an attack semantic knowledge base; regularly acquiring security alarm logs in a first time window and scoring, and acquiring context logs if the security alarm logs exceed a threshold value; based on a time sequence diagram attention network model, determining the confidence degree that edges in an asset access relation graph corresponding to logs containing access pairs in the alarm logs and the context logs belong to attack links; and performing sub-graph extraction in the atlas to obtain candidate sub-graphs, and then determining a target attack link.

Persistent storage may contain a list of discovery commands, the discovery commands respectively associated with lists of network addresses. A discovery validation application, when executed by one or more processors, may be configured to: read, from the persistent storage, the list of discovery commands and the lists of network addresses; for each discovery command in the list of discovery commands, transmit, by way of one or more proxy servers deployed external to the system, the discovery command to each network address in the respectively associated list of network addresses; receive, by way of the one or more proxy servers, discovery results respectively corresponding to each of the discovery commands that were transmitted, wherein the discovery results either indicate success or failure of the discovery commands; and write, to the persistent storage, the discovery results.

The invention provides an efficient task scheduling strategy recommendation method and system for a distributed network surveying and mapping scene, and relates to the crossing field of network space surveying and mapping, network security, distributed scheduling and intelligent optimization recommendation algorithms. Analyzing the task request to extract a task type, a task target network address set, a regional distribution feature, a task execution timeliness requirement and calculation and bandwidth resources required by estimation, and forming a task feature vector; and performing state acquisition and capability evaluation on the distributed surveying and mapping nodes based on task resource requirements defined by the task feature vectors, and performing normalization processing to form node capability vectors. Through multi-source information vectorization and closed-loop optimization, adaptive matching of task scheduling and resource dynamics is realized.

The invention provides a network layer multi-path forwarding method, and relates to a sending end, a receiving end and a network node. The method for processing the message by the network node comprises the following steps of: after receiving the message, determining whether the message has a multi-path forwarding requirement; obtaining a group of logic network topologies meeting application requirements, and determining a candidate logic topology set by combining the topology condition of the receiving end or the network node connected with the receiving end; determining a multi-path forwarding strategy according to the transmission intention field of the message header; selecting one topology from the candidate logic network topology set or still using the original topology based on a multi-path forwarding strategy; and when the logic network topology is selected, taking the network address of the receiving end as a transmission destination address, calculating through a routing algorithm to obtain a next forwarding node network address of the message, rewriting the destination address of the head of the message as the next forwarding node network address, and forwarding the data message. The method has the advantages that network resources are fully utilized, and diversified transmission requirements of users can be met.

The invention provides an open platform management method and system based on dynamic reflection calling in the technical field of distributed micro-services and gateways. The method comprises the following steps: S1, forwarding an access request to an authentication center; s2, the authentication center executes identity authentication and issues an access token, and the client sends a request message to the open platform based on the access token; s3, the open platform carries out authentication, decryption and signature verification on the request message to obtain message content containing request parameters and a target service subsystem; s4, searching interface metadata and a network address of the target service subsystem; and S5, through a dynamic reflection calling engine, generating a proxy instance based on the interface metadata, mapping the request parameter into a target parameter, and through the proxy instance and the network address, calling the target service subsystem to execute the target parameter. The method has the advantages that the safe, uniform and non-intrusive open service capability is realized, and the maintainability, the safety and the evolution capability of the platform are greatly improved.

In response to receiving a reservation request at a provider network, metadata indicating that a group of network addresses of a subnet is reserved for operations of a particular category is stored. A first request for an operation, requiring assignment of an address of the reserved group is rejected if the operation does not belong to the particular category, even if the address is not in use. In response to a second request for an operation which does belong to the particular category, an address of the reserved group is assigned.

The invention provides a server configuration method and device, electronic equipment, a storage medium and a product, and the method comprises the steps: determining whether a to-be-configured server is in communication connection with an execution server or not based on an operation command set, and the execution server is used for configuring a processor of the to-be-configured server; when the to-be-configured server is in communication connection with the execution server, acquiring a preset attachment file in the first file path; and based on the preset attachment file, configuring a processor of the to-be-configured server. According to the method, the attachment file is preset, so that the execution server can obtain the corresponding relation between the configuration mode and the configuration option and the BMC network address of the to-be-configured server, and the execution server can configure the to-be-configured server according to the corresponding relation between the configuration mode and the configuration option; therefore, manual configuration operation and verification on each to-be-configured server are not needed, the configuration efficiency of the to-be-configured servers is improved, and the delivery time of the servers is shortened.