1072 results about "Network addressing" patented technology

The invention discloses an optimized registration method and system based on a micro-service architecture. The invention relates to the technical field of Nacos systems. The health monitoring center is started and starts to send a health examination request to a downstream service at regular time; the gateway access layer service receives a client request; obtaining a network address of a target service instance through a Nacos service discovery mechanism according to a service name in the request; then forwarding the request to a target service instance for processing; when the configuration information is changed, the Nacos configuration management center pushes an update notification to all subscribed service instances; the service instance pulls the latest configuration information and updates the local cache; according to the method, a secondary hand waving mechanism is implemented in Nacos cluster node, gateway service and downstream service communication, so that the offline condition of the downstream service can be accurately judged, and the problem of data inconsistency caused by node faults or network partition is avoided.

The invention relates to a fraud website identification early warning method, device and equipment and a storage medium thereof. The method comprises the following steps: firstly, acquiring network address information, then extracting feature data from dimensions such as structure, semantics, behavior and vision, accelerating similarity detection by applying a graphics processor parallel computing technology, and generating a composite feature vector containing a domain name similarity score and a registration feature; constructing fraud features in combination with the composite feature vector, mining a data association relationship through a graph neural network, and forming multi-dimensional risk feature data; and finally, processing the risk feature data by using a deep learning model, generating a risk probability, and when the risk probability exceeds a preset threshold, determining that the network address is a high-risk network address and generating an early warning report. By adopting the method, the comprehensiveness and accuracy of fraud website identification can be improved, complex fraud means such as domain name variation and semantic camouflage can be effectively dealt with, the real-time early warning capability for potential risks is enhanced, and efficient technical support is provided for network security protection.

The invention discloses a multi-communication group fusion holding method and system for an intelligent door lock, and the method comprises the steps: building an independent multicast tree taking a feature vector as an identifier according to a communication group request initiated by each main control door lock; generating a multicast message containing a target communication group feature vector and a digital signature according to a merging request sent by the first master control door lock; according to feature vectors exchanged by the master control door locks of the two parties through a secure channel, a target master control door lock initiates feature interception registration, and negotiates and establishes a boundary feature tag rewriting rule; and according to the established forwarding path and the rewriting rule, the audio and video streams of the communication groups of the two parties are subjected to feature tag rewriting through the network boundary router, and then bidirectional intercommunication is realized. By utilizing the embodiment of the invention, the dynamic security isolation and seamless fusion of multiple communication groups can be realized, the network load and transmission delay are reduced, meanwhile, the terminal door lock can realize audio and video intercommunication without sensing the network address of the opposite end or changing the configuration, and the expansibility, the security and the user experience of the system are improved.

The invention provides a communication method and device, and the method comprises the steps: a label management function network element sends first information to a network warehouse function network element, and the first information comprises the information of an area corresponding to the label management function network element; a first checking request is received, the first checking request carries information of a target area, and the target area belongs to an area corresponding to the label management function network element; determining a first device serving a target reader-writer corresponding to the target area; and sending a second checking request to the first device. Through the technical scheme provided by the invention, network addressing from the requester to the reader-writer can be realized.

Example systems and methods include: receiving, by a computing system, a request to add a block to a blockchain, wherein the block includes an entry that relates to a semantic representation, wherein the semantic representation encodes a state change to a state stored on the blockchain; obtaining, by the computing system, a copy of the semantic representation as provided by a trusted third party, wherein the copy of the semantic representation is digitally signed by the trusted third party or provided by the trusted third party at a network address; validating, by the computing system, the semantic representation; and initiating, by the computing system, procedures to add the block to the blockchain.

The invention discloses a channel negotiation method and device based on relay proxy and a storage medium, and relates to the technical field of telecommunication, and the method comprises the steps: requesting a relay server to obtain a relay proxy address, packaging the relay proxy address into a candidate address of a session description protocol, and sending the candidate address to a called terminal through the relay server, analyzing a private network address in response information fed back by the called terminal, initiating a binding request to the private network address of the called terminal, and if the binding request does not establish connection with the called terminal, sending a penetration request to a specified port of the relay server, and establishing a bidirectional network address channel with the called terminal through the penetration request forwarded by the relay server and a binding request initiated by the called terminal to the relay proxy address. According to the invention, the channel between the calling end and the called end is established through the relay proxy address of the relay server and the penetration request, so that the flexibility of media stream transmission is improved.

A different network address is assigned to each port of a first device and a second device that are configured to exchange traffic over a multi-path connection of a transport layer protocol. When a timeout is detected by the first device indicating that a packet sent to a first network address assigned to a first port of the second device was not received, the first device can regenerate the packet with a second network address assigned to a second port of the second device, and send the regenerated packet to the second network address of the second device. The first device can send heartbeat packets to the first port in an exponential backoff manner and, upon receiving a heartbeat acknowledgement from the first port, resume sending the packets to the first port.

The invention discloses a data transmission method. The method is applied to a sending device of a first data center and a receiving device of a second data center. And the sending device obtains the data transmission configuration information. The data transmission configuration information comprises a network address of the receiving equipment and address information of the data to be transmitted. And the sending device reads the to-be-transmitted data from the data disk based on the address information, and sends a first data packet to the receiving device based on the network address of the receiving device. And the receiving equipment acquires the first data packet and stores the first data included in the first data packet into a data disk of the receiving equipment. Thus, the sending device reads the to-be-transmitted data based on the data disk, a data storage mode of a bottom layer can be shielded, the number of times of reading the to-be-transmitted data from the data disk is reduced, the time expenditure of data reading is reduced, and the efficiency of data transmission between data centers is improved. In addition, the invention also provides a corresponding device and related equipment.

Various methods and processing systems for the effective management of network traffic and facilitating data forwarding within distributed computing environments. Network components may be configured to amalgamate the Border Gateway Protocol (BGP) with Source Network Address Translation (SNAT) or network address port translation (NAPT) technologies to facilitate dynamic notification of network address accessibility and use port index identifiers to augment the precision and resilience of routing. A distributed SNAT / NAPT virtual network function (VNF) or cloud-native network function (CNF) may collaborate with LEAF switches or server aggregation devices to refine data transmission via adaptable address mapping and forwarding and enhance network scalability and resilience.

The present disclosure relates generally to establishing a connection between a client and an endpoint in a manner that reduces network latency. In an example, a network layer proxy receives a request of a client for an endpoint connection establishment, the request including endpoint information. The network layer proxy sends, to an application layer proxy, the endpoint information, the endpoint information sent using a connection-less protocol. Thereafter, the network layer proxy receives, from the application layer proxy, a network address of an endpoint selected by the application layer proxy based on the endpoint information and application layer information. The network layer proxy sends a response to the client such that a connection is established to the endpoint using a connection-based protocol and such that the connection bypasses the application layer proxy.

The invention relates to the technical field of security protection, in particular to an API (Application Program Interface) security protection method based on anomaly detection, which comprises the following steps of: based on a received API request, analyzing the API request, extracting a request source network address and a target API calling instruction, and carrying out source authenticity verification and instruction validity judgment. According to the method, the initial security context is established by analyzing the source network address and the interface calling instruction of the API request in combination with the timestamp and the request type, so that the pre-modeling of the environment state of each request is realized, and the basic credibility of the request can be judged immediately before the request is subjected to deep business processing. On the basis, a sequence mode of the request load is combined with a parameter boundary for comparison, the behavior deviation degree is used as a reference item, interface sensitivity information in the context is introduced to complete quantitative judgment on the risk level, and a judgment result has dynamic adaptability and structural relevance.

Systems and methods related to a variable self-executing program. A variable self-executing program comprises a self-executing program that is minted with an indication of a non-transferable ownership wallet (e.g., a digital wallet for which the self-executing program is minted), a non-transferable network address that has permissions for updating metadata for the variable self-executing program, and an off-chain profile state based on a specific user corresponding to the digital wallet.

The invention belongs to the technical field of intelligence, and discloses a data link layer analysis method in an industrial field network address conflict environment. Comprising the following steps: deploying a customized acquisition module at a data link layer, capturing an original data frame in real time, and extracting time sequence features and protocol semantics; the time sequence features and the protocol semantics are combined into a high-granularity data set with multi-dimensional features; designing a multi-rule set based on the high-granularity data set of the multi-dimensional features, and performing anomaly detection to obtain an abnormal data frame data set; dividing a conflict domain according to a time window on the basis of the abnormal data frame data set, calculating the proportion of the total flow and the broadcast flow in the conflict domain, judging whether an address conflict problem exists in the conflict domain or not according to the proportion of the total flow and the broadcast flow, and if the address conflict problem exists, performing isolation by using a VLAN (Virtual Local Area Network); in the isolated conflict domain, establishing a communication relation graph in the network to visualize a conflict source; and the stability and the safety of the industrial field network are effectively improved.

The invention provides a communication method and device. According to the method, identification information is introduced to distinguish messages from different cloud platform systems. For example, the first identification information is identification information for identifying a first cloud platform system, and each cloud platform node in the first cloud platform system comprises the first identification information (so that a message sent by each cloud platform node also comprises the first identification information); therefore, which cloud platform system the node sending the message belongs to is distinguished through the identification information in the message. Moreover, the neighbor table entries used for normal communication of the nodes in the cloud platform system are configured as the static routing table, so that even if different cloud platform systems are intercommunicated and network address conflicts occur, the nodes in the same cloud platform system can still communicate normally based on the static routing table; and the problems of wrong data forwarding and service interruption among different cloud platform systems are avoided.

The invention discloses a fusion quantum secure communication method of an NAT gateway, and relates to the technical field of communication network information security and quantum information. Comprising the steps of 1, creating a fusion quantum security communication system of an NAT gateway, 2, adopting a quantum hybrid encryption architecture through a quantum security module, and internally arranging a quantum key distribution unit and an anti-quantum computing acceleration chipset, 3, expanding a quintuple mapping structure of NAT through a dynamic address mapping and quantum encryption module, newly adding a quantum security dimension field QSV, and carrying out quantum encryption on the quantum key distribution unit and the anti-quantum computing acceleration chipset. And 4, developing a protocol non-inductive conversion engine through a hybrid protocol stack cooperation module, supporting an IPv4 / IPv6 dual-stack quantum tunnel and a quantum key inheritance protocol to realize cross-protocol family encryption parameter migration, dynamically adjusting a quantum encapsulation mode in an address conversion process, and dynamically associating an internal network address port with a quantum key parameter and a channel fingerprint feature. And 5, constructing a quantum perception type session state machine through an anti-quantum attack session management module, and performing a joint decision-making mechanism through quantum entanglement state monitoring and classical traffic feature analysis.

Apparatuses, systems, and techniques to perform dynamic mapping between one or more Open Radio Access Network (O-RAN) radio units (RUs) and one or more O-RAN distributed units (DUs). For example, processors or computing systems to perform switching of mappings between open radio unit (O-RU) and open distributed unit (O-DU) in an open radio access network (O-RAN). In at least one embodiment, a processor including circuitry performs a program to cause reassigning of mappings between radio unit (RUs) and distributed unit (DUs) without the need of restarting or reconfiguration of RUs and / or DUs in an O-RAN network.

A method for supporting virtual machine (VM) mobility between network devices connected to a network includes: selecting a first type of route for interconnecting VMs that are connected to the network devices; and adding a feature of a second type of route to the first type of route to enable the network devices to execute proxy address resolution protocol (ARP) for transmitting network traffic between the VMs without requiring each of the network devices to store a physical address of each of the VMs in respective ones of a network address table.

Some embodiments provide a novel method for forwarding data messages between first and second host computers. To send, to a first machine executing on the first host computer, a flow from a second machine executing on the second host computer, the method identifies a destination network address of the flow. The method uses the identified destination network address to identify a particular tunnel endpoint group (TEPG) including a particular set of one or more tunnel endpoints (TEPs) associated with a particular non-uniform memory access (NUMA) node of a set of NUMA nodes of the first host computer. The particular NUMA node executes the first machine. The method selects, from the particular TEPG, a particular TEP as a destination TEP of the flow. The method sends the flow to the particular TEP of the particular NUMA node of the first host computer to send the flow to the first machine.

The invention provides an efficient task scheduling strategy recommendation method and system for a distributed network surveying and mapping scene, and relates to the crossing field of network space surveying and mapping, network security, distributed scheduling and intelligent optimization recommendation algorithms. Analyzing the task request to extract a task type, a task target network address set, a regional distribution feature, a task execution timeliness requirement and calculation and bandwidth resources required by estimation, and forming a task feature vector; and performing state acquisition and capability evaluation on the distributed surveying and mapping nodes based on task resource requirements defined by the task feature vectors, and performing normalization processing to form node capability vectors. Through multi-source information vectorization and closed-loop optimization, adaptive matching of task scheduling and resource dynamics is realized.

The invention provides a network layer multi-path forwarding method, and relates to a sending end, a receiving end and a network node. The method for processing the message by the network node comprises the following steps of: after receiving the message, determining whether the message has a multi-path forwarding requirement; obtaining a group of logic network topologies meeting application requirements, and determining a candidate logic topology set by combining the topology condition of the receiving end or the network node connected with the receiving end; determining a multi-path forwarding strategy according to the transmission intention field of the message header; selecting one topology from the candidate logic network topology set or still using the original topology based on a multi-path forwarding strategy; and when the logic network topology is selected, taking the network address of the receiving end as a transmission destination address, calculating through a routing algorithm to obtain a next forwarding node network address of the message, rewriting the destination address of the head of the message as the next forwarding node network address, and forwarding the data message. The method has the advantages that network resources are fully utilized, and diversified transmission requirements of users can be met.

The invention provides an open platform management method and system based on dynamic reflection calling in the technical field of distributed micro-services and gateways. The method comprises the following steps: S1, forwarding an access request to an authentication center; s2, the authentication center executes identity authentication and issues an access token, and the client sends a request message to the open platform based on the access token; s3, the open platform carries out authentication, decryption and signature verification on the request message to obtain message content containing request parameters and a target service subsystem; s4, searching interface metadata and a network address of the target service subsystem; and S5, through a dynamic reflection calling engine, generating a proxy instance based on the interface metadata, mapping the request parameter into a target parameter, and through the proxy instance and the network address, calling the target service subsystem to execute the target parameter. The method has the advantages that the safe, uniform and non-intrusive open service capability is realized, and the maintainability, the safety and the evolution capability of the platform are greatly improved.

In response to receiving a reservation request at a provider network, metadata indicating that a group of network addresses of a subnet is reserved for operations of a particular category is stored. A first request for an operation, requiring assignment of an address of the reserved group is rejected if the operation does not belong to the particular category, even if the address is not in use. In response to a second request for an operation which does belong to the particular category, an address of the reserved group is assigned.

The invention provides a server configuration method and device, electronic equipment, a storage medium and a product, and the method comprises the steps: determining whether a to-be-configured server is in communication connection with an execution server or not based on an operation command set, and the execution server is used for configuring a processor of the to-be-configured server; when the to-be-configured server is in communication connection with the execution server, acquiring a preset attachment file in the first file path; and based on the preset attachment file, configuring a processor of the to-be-configured server. According to the method, the attachment file is preset, so that the execution server can obtain the corresponding relation between the configuration mode and the configuration option and the BMC network address of the to-be-configured server, and the execution server can configure the to-be-configured server according to the corresponding relation between the configuration mode and the configuration option; therefore, manual configuration operation and verification on each to-be-configured server are not needed, the configuration efficiency of the to-be-configured servers is improved, and the delivery time of the servers is shortened.

The present application discloses a message forwarding method supporting packet retransmission between network nodes, aiming to support packet loss detection and fast retransmission between network nodes during message forwarding. The message forwarding method comprises: 1) an upstream node uniformly numbers messages in the same flow, fills in message sequence numbers, a flow identifier, an upstream node network address and a retransmitted packet flag field, sequentially writes the messages into a send buffer on the basis of the sequence numbers, copies the messages from the buffer and sends the messages according to the current sending rate; 2) a downstream node performs packet loss detection on the basis of the message sequence numbers, constructs feedback information and sends same to the upstream node; and 3) the upstream node determines lost messages on the basis of the received feedback information, reassigns sequence numbers and retransmits the messages. The method of the present application can carry out packet loss detection and fast retransmission between network nodes, effectively reducing the packet loss rate in a network and enhancing the transmission reliability of data packets in the network.

An edge gateway deployed within an overlay network interconnecting a first public cloud network with an on-premises network is described. Coupled to a controller, the edge gateway is configured to receive a configuration file and attestation data from a controller, analyze the configuration file to obtain at least a first network address being used as an interface for secure communications with the controller, establish a secure interconnect with the controller based on the attestation data, and conduct a provisioning operation to initiate a request to the controller for edge gateway software thereby automated provisioning the edge gateway without human intervention. The edge gateway experiences automated provisioning based on a configuration file and attestation data upload.

In communication with components of a cloud platform, namely a software-defined network constructed to overlay at least one public cloud network, a controller features a virtual processor and a data store. The data store includes network address translation (NAT) processing logic configured to determine whether a control plane message from tenant resources is associated with a network address overlapping condition, which represents a first network address included in the control plane message overlaps a network address range relied upon by either (a) at least one of the components of the cloud platform or (b) a component associated with other tenant resources. The NAT processing logic is further configured to alter routing data stores that maintain routing information for each of the components of the cloud platform to substitute the first network address with a first virtual network address for subsequent data message routing.

A communication method and apparatus. The method comprises: a label management function network element sending first information to a network repository function network element, wherein the first information comprises information of an area corresponding to the label management function network element; receiving a first inventory request, wherein the first inventory request carries information of a target area, the target area belonging to the area corresponding to the label management function network element; determining a first device which serves a target reader corresponding to the target area; and sending a second inventory request to the first device. By means of the technical solution provided in the present application, network addressing from a requester to a reader can be realized.

Apparatuses, methods, and systems are disclosed for supporting edge data network discovery. One apparatus receives a first request from a function in a mobile communication network, the first request including a UE ID and a UE network address. The apparatus may determine whether the UE is located in a first service area based at least in part on a UE location and forward a DNS request to a first DNS server associated with the first service area based at least in part on a determination that the UE is located in the first service area. The apparatus may further receive a DNS reply and transmit a second request to a policy function in the mobile communication network based at least in part on a determination that the DNS reply includes a first IP address.

Systems, devices, and methods for aircraft in-flight entertainment (IFE) devices installation verification are disclosed herein. In some implementations, a verification system includes a computing device that can operably connect to multiple IFE devices and a reader device. Each IFE device can report its own stored identity to the computing device, and the computing device can determine the position of each IFE device based on a network topology-based network address assigned to each IFE device. The reader device can obtain and communicate, to the computing device, actual identities and expected installation positions of the IFE devices. The verification system can then compare, for each position, the actual identity, which indicates which IFE device should be installed in that position, against the reported stored identity, which indicates which IFE device has been installed in that position. The verification system can display, on a graphical user interface, the comparison.

The invention discloses a corresponding management method for IPV4 and IPV6 addresses of the same user of network dual stacks, and relates to the technical field of network address management, network system nodes are divided into a main control node, a replica synchronization node and an edge cache node, a layered management architecture is constructed, hotspot users with frequent write-in are identified, a flow partitioning and path arbitration strategy is adopted, and the IPV4 and IPV6 addresses of the same user of the network dual stacks are correspondingly managed. The method comprises the following steps of: dynamically allocating an auxiliary book group, constructing a state deviation evaluation function, judging the consistency degree according to a version and hash information, selecting a corresponding synchronization strategy, fusing various mechanisms to form an execution layer consistency maintenance closed loop, and performing IPV4 and IPV6 address mapping relation management in a distributed environment. According to the management method, the stability, the accuracy and the reliability of the dual-stack user address mapping management system in a multi-source asynchronous operation environment are effectively enhanced by constructing a layered execution architecture which takes a main control node as a core, a copy synchronization node as a distribution guarantee and an edge cache node as a response terminal.