1557 results about "Network addressing" patented technology

The invention discloses an optimized registration method and system based on a micro-service architecture. The invention relates to the technical field of Nacos systems. The health monitoring center is started and starts to send a health examination request to a downstream service at regular time; the gateway access layer service receives a client request; obtaining a network address of a target service instance through a Nacos service discovery mechanism according to a service name in the request; then forwarding the request to a target service instance for processing; when the configuration information is changed, the Nacos configuration management center pushes an update notification to all subscribed service instances; the service instance pulls the latest configuration information and updates the local cache; according to the method, a secondary hand waving mechanism is implemented in Nacos cluster node, gateway service and downstream service communication, so that the offline condition of the downstream service can be accurately judged, and the problem of data inconsistency caused by node faults or network partition is avoided.

The invention relates to a fraud website identification early warning method, device and equipment and a storage medium thereof. The method comprises the following steps: firstly, acquiring network address information, then extracting feature data from dimensions such as structure, semantics, behavior and vision, accelerating similarity detection by applying a graphics processor parallel computing technology, and generating a composite feature vector containing a domain name similarity score and a registration feature; constructing fraud features in combination with the composite feature vector, mining a data association relationship through a graph neural network, and forming multi-dimensional risk feature data; and finally, processing the risk feature data by using a deep learning model, generating a risk probability, and when the risk probability exceeds a preset threshold, determining that the network address is a high-risk network address and generating an early warning report. By adopting the method, the comprehensiveness and accuracy of fraud website identification can be improved, complex fraud means such as domain name variation and semantic camouflage can be effectively dealt with, the real-time early warning capability for potential risks is enhanced, and efficient technical support is provided for network security protection.

A distributed data storage system includes clusters of data storage appliances interconnected by an inter-cluster (IC) network having an IC namespace. Storage processing (SP) nodes exchange management traffic using mesh network (MN) addresses of a separate MN namespace. Gateways provide IC tunnels for routing management traffic among the clusters using IC network addresses. Operation includes, in each gateway for traffic from a local SP node destined for a remote SP node of another cluster, (1) performing a routing check based on a routing rule associating an MN destination address with a dummy MN address further associated with a respective IC tunnel, (2) applying a tunnel configuration rule of the IC tunnel associating the MN destination address with the IC network address of a remote gateway for the remote SP, and (3) forwarding the traffic on the respective IC tunnel using the IC network address of the remote gateway.

The invention discloses a multi-communication group fusion holding method and system for an intelligent door lock, and the method comprises the steps: building an independent multicast tree taking a feature vector as an identifier according to a communication group request initiated by each main control door lock; generating a multicast message containing a target communication group feature vector and a digital signature according to a merging request sent by the first master control door lock; according to feature vectors exchanged by the master control door locks of the two parties through a secure channel, a target master control door lock initiates feature interception registration, and negotiates and establishes a boundary feature tag rewriting rule; and according to the established forwarding path and the rewriting rule, the audio and video streams of the communication groups of the two parties are subjected to feature tag rewriting through the network boundary router, and then bidirectional intercommunication is realized. By utilizing the embodiment of the invention, the dynamic security isolation and seamless fusion of multiple communication groups can be realized, the network load and transmission delay are reduced, meanwhile, the terminal door lock can realize audio and video intercommunication without sensing the network address of the opposite end or changing the configuration, and the expansibility, the security and the user experience of the system are improved.

The invention provides a communication method and device, and the method comprises the steps: a label management function network element sends first information to a network warehouse function network element, and the first information comprises the information of an area corresponding to the label management function network element; a first checking request is received, the first checking request carries information of a target area, and the target area belongs to an area corresponding to the label management function network element; determining a first device serving a target reader-writer corresponding to the target area; and sending a second checking request to the first device. Through the technical scheme provided by the invention, network addressing from the requester to the reader-writer can be realized.

Example systems and methods include: receiving, by a computing system, a request to add a block to a blockchain, wherein the block includes an entry that relates to a semantic representation, wherein the semantic representation encodes a state change to a state stored on the blockchain; obtaining, by the computing system, a copy of the semantic representation as provided by a trusted third party, wherein the copy of the semantic representation is digitally signed by the trusted third party or provided by the trusted third party at a network address; validating, by the computing system, the semantic representation; and initiating, by the computing system, procedures to add the block to the blockchain.

The communication method is applied to a bus network, and comprises the following steps: a network management unit sends a request message to bus equipment, the request message is used for requesting to access a first configuration space register of the bus equipment, and the request message comprises a network address of the bus equipment, first indication information and information of the first configuration space register, the network address is an address allocated to the bus device by a network management unit, the first indication information is used for indicating the operation type of the first configuration space register, and the network management unit receives a response message which is from the bus device and responds to the request message. The access of the configuration space register of the bus equipment is realized through the network address of the bus equipment and the information of the configuration space register, and the problem of high time delay requirement caused by a memory address access mode is avoided.

The invention discloses a channel negotiation method and device based on relay proxy and a storage medium, and relates to the technical field of telecommunication, and the method comprises the steps: requesting a relay server to obtain a relay proxy address, packaging the relay proxy address into a candidate address of a session description protocol, and sending the candidate address to a called terminal through the relay server, analyzing a private network address in response information fed back by the called terminal, initiating a binding request to the private network address of the called terminal, and if the binding request does not establish connection with the called terminal, sending a penetration request to a specified port of the relay server, and establishing a bidirectional network address channel with the called terminal through the penetration request forwarded by the relay server and a binding request initiated by the called terminal to the relay proxy address. According to the invention, the channel between the calling end and the called end is established through the relay proxy address of the relay server and the penetration request, so that the flexibility of media stream transmission is improved.

A different network address is assigned to each port of a first device and a second device that are configured to exchange traffic over a multi-path connection of a transport layer protocol. When a timeout is detected by the first device indicating that a packet sent to a first network address assigned to a first port of the second device was not received, the first device can regenerate the packet with a second network address assigned to a second port of the second device, and send the regenerated packet to the second network address of the second device. The first device can send heartbeat packets to the first port in an exponential backoff manner and, upon receiving a heartbeat acknowledgement from the first port, resume sending the packets to the first port.

The invention discloses a data transmission method. The method is applied to a sending device of a first data center and a receiving device of a second data center. And the sending device obtains the data transmission configuration information. The data transmission configuration information comprises a network address of the receiving equipment and address information of the data to be transmitted. And the sending device reads the to-be-transmitted data from the data disk based on the address information, and sends a first data packet to the receiving device based on the network address of the receiving device. And the receiving equipment acquires the first data packet and stores the first data included in the first data packet into a data disk of the receiving equipment. Thus, the sending device reads the to-be-transmitted data based on the data disk, a data storage mode of a bottom layer can be shielded, the number of times of reading the to-be-transmitted data from the data disk is reduced, the time expenditure of data reading is reduced, and the efficiency of data transmission between data centers is improved. In addition, the invention also provides a corresponding device and related equipment.

Various methods and processing systems for the effective management of network traffic and facilitating data forwarding within distributed computing environments. Network components may be configured to amalgamate the Border Gateway Protocol (BGP) with Source Network Address Translation (SNAT) or network address port translation (NAPT) technologies to facilitate dynamic notification of network address accessibility and use port index identifiers to augment the precision and resilience of routing. A distributed SNAT / NAPT virtual network function (VNF) or cloud-native network function (CNF) may collaborate with LEAF switches or server aggregation devices to refine data transmission via adaptable address mapping and forwarding and enhance network scalability and resilience.

The present disclosure relates generally to establishing a connection between a client and an endpoint in a manner that reduces network latency. In an example, a network layer proxy receives a request of a client for an endpoint connection establishment, the request including endpoint information. The network layer proxy sends, to an application layer proxy, the endpoint information, the endpoint information sent using a connection-less protocol. Thereafter, the network layer proxy receives, from the application layer proxy, a network address of an endpoint selected by the application layer proxy based on the endpoint information and application layer information. The network layer proxy sends a response to the client such that a connection is established to the endpoint using a connection-based protocol and such that the connection bypasses the application layer proxy.

Described are methods and devices for communication between local networks and global networks. In some examples, a method comprises storing mapping data for multiple hosts in a global network and in a local network. The method further comprises receiving a first data packet from one of the multiple hosts in the local network. The first data packet comprises a first source address being the local network address of the host in the local network, a first destination address being the local network address of the host in the global network and payload data. The method further comprises determining, based on the mapping data, the global network address of the host in the local network and a global network address of the host in the global network, and sending a second data packet over the global network.

The invention relates to the technical field of security protection, in particular to an API (Application Program Interface) security protection method based on anomaly detection, which comprises the following steps of: based on a received API request, analyzing the API request, extracting a request source network address and a target API calling instruction, and carrying out source authenticity verification and instruction validity judgment. According to the method, the initial security context is established by analyzing the source network address and the interface calling instruction of the API request in combination with the timestamp and the request type, so that the pre-modeling of the environment state of each request is realized, and the basic credibility of the request can be judged immediately before the request is subjected to deep business processing. On the basis, a sequence mode of the request load is combined with a parameter boundary for comparison, the behavior deviation degree is used as a reference item, interface sensitivity information in the context is introduced to complete quantitative judgment on the risk level, and a judgment result has dynamic adaptability and structural relevance.

The invention provides a method and device for deploying a large language model based on computing power of an intelligent computing center, and the method is applied to a VCluster cluster of the intelligent computing center, and comprises the steps: S1, obtaining a preset configuration file which comprises the name of a target large language model and the network address of a private cloud platform; s2, according to the name of the target large language model, obtaining an encapsulation file of the target large language model encapsulated in NVIDIA NIM service, and according to the network address of the private cloud platform, transmitting and storing the encapsulation file to the private cloud platform; and S3, deploying the target large model to the private cloud platform according to the packaging file. The target large model deployment method has high security and high deployment efficiency.

Systems and methods related to a variable self-executing program. A variable self-executing program comprises a self-executing program that is minted with an indication of a non-transferable ownership wallet (e.g., a digital wallet for which the self-executing program is minted), a non-transferable network address that has permissions for updating metadata for the variable self-executing program, and an off-chain profile state based on a specific user corresponding to the digital wallet.

The invention belongs to the technical field of computer application, and discloses an address configuration method and device, a storage medium and a program product, and the method comprises the steps: reading the network configuration of a management controller to obtain a physical address after an application layer of the management controller is started; under the condition that the physical address is determined to be the random physical address, resetting the physical address in the network configuration by using a pre-allocated fixed physical address; and restarting a network service in the management controller, and configuring a fixed network address based on the fixed physical address. The method and the device have the technical effects that after the physical address of the management controller is randomized, the physical address is reconfigured to be the fixed physical address, out-of-band monitoring can be realized through a network based on the fixed network address, address conflicts cannot occur even if large-scale configuration is performed, and the network smoothness can be ensured.

The invention belongs to the technical field of intelligence, and discloses a data link layer analysis method in an industrial field network address conflict environment. Comprising the following steps: deploying a customized acquisition module at a data link layer, capturing an original data frame in real time, and extracting time sequence features and protocol semantics; the time sequence features and the protocol semantics are combined into a high-granularity data set with multi-dimensional features; designing a multi-rule set based on the high-granularity data set of the multi-dimensional features, and performing anomaly detection to obtain an abnormal data frame data set; dividing a conflict domain according to a time window on the basis of the abnormal data frame data set, calculating the proportion of the total flow and the broadcast flow in the conflict domain, judging whether an address conflict problem exists in the conflict domain or not according to the proportion of the total flow and the broadcast flow, and if the address conflict problem exists, performing isolation by using a VLAN (Virtual Local Area Network); in the isolated conflict domain, establishing a communication relation graph in the network to visualize a conflict source; and the stability and the safety of the industrial field network are effectively improved.

The invention provides a communication method and device. According to the method, identification information is introduced to distinguish messages from different cloud platform systems. For example, the first identification information is identification information for identifying a first cloud platform system, and each cloud platform node in the first cloud platform system comprises the first identification information (so that a message sent by each cloud platform node also comprises the first identification information); therefore, which cloud platform system the node sending the message belongs to is distinguished through the identification information in the message. Moreover, the neighbor table entries used for normal communication of the nodes in the cloud platform system are configured as the static routing table, so that even if different cloud platform systems are intercommunicated and network address conflicts occur, the nodes in the same cloud platform system can still communicate normally based on the static routing table; and the problems of wrong data forwarding and service interruption among different cloud platform systems are avoided.

Techniques for associating assets related to events detected in at least one computer network with respective assets in an asset catalog for the at least one computer network. The techniques comprising: obtaining information about an event related to a first asset, the information specifying computer network addressing information for the first asset; generating a signature of the first asset from the computer network addressing information using at least one trained machine learning model, wherein the signature comprises a numeric representation of the first asset; associating the first asset with at least one asset in the asset catalog using the signature and at least one signature of the at least one asset in the asset catalog, wherein the at least one signature was previously determined using the at least one trained machine learning model; and outputting information identifying the at least one asset with which the first asset was associated.

The invention relates to a method for realizing cross-network series connection between a client and a server of a P2P system through a springboard, which is suitable for the conditions that the client and the server of the P2P system are positioned in two network environments, the networks are independent, the routing rule is complicated and the security requirement is strict, and can realize cross-network series connection transmission of data streams between the P2P server and the client by means of the springboard. A client side internal network does not need to be adjusted, a P2P service side network does not need to be adjusted, and server software does not need to be modified or newly deployed. The method is characterized in that service data are not coupled, two networks are connected in series for data transmission by modifying address data of an underlying transmission protocol and maintaining an address mapping relation table of transmission data, and the whole process is similar to the operations of receiving and transmitting data by a router, modifying network address information and maintaining an NAT port table.

The invention discloses a fusion quantum secure communication method of an NAT gateway, and relates to the technical field of communication network information security and quantum information. Comprising the steps of 1, creating a fusion quantum security communication system of an NAT gateway, 2, adopting a quantum hybrid encryption architecture through a quantum security module, and internally arranging a quantum key distribution unit and an anti-quantum computing acceleration chipset, 3, expanding a quintuple mapping structure of NAT through a dynamic address mapping and quantum encryption module, newly adding a quantum security dimension field QSV, and carrying out quantum encryption on the quantum key distribution unit and the anti-quantum computing acceleration chipset. And 4, developing a protocol non-inductive conversion engine through a hybrid protocol stack cooperation module, supporting an IPv4 / IPv6 dual-stack quantum tunnel and a quantum key inheritance protocol to realize cross-protocol family encryption parameter migration, dynamically adjusting a quantum encapsulation mode in an address conversion process, and dynamically associating an internal network address port with a quantum key parameter and a channel fingerprint feature. And 5, constructing a quantum perception type session state machine through an anti-quantum attack session management module, and performing a joint decision-making mechanism through quantum entanglement state monitoring and classical traffic feature analysis.

Apparatuses, systems, and techniques to perform dynamic mapping between one or more Open Radio Access Network (O-RAN) radio units (RUs) and one or more O-RAN distributed units (DUs). For example, processors or computing systems to perform switching of mappings between open radio unit (O-RU) and open distributed unit (O-DU) in an open radio access network (O-RAN). In at least one embodiment, a processor including circuitry performs a program to cause reassigning of mappings between radio unit (RUs) and distributed unit (DUs) without the need of restarting or reconfiguration of RUs and / or DUs in an O-RAN network.

A method for supporting virtual machine (VM) mobility between network devices connected to a network includes: selecting a first type of route for interconnecting VMs that are connected to the network devices; and adding a feature of a second type of route to the first type of route to enable the network devices to execute proxy address resolution protocol (ARP) for transmitting network traffic between the VMs without requiring each of the network devices to store a physical address of each of the VMs in respective ones of a network address table.

Some embodiments provide a novel method for forwarding data messages between first and second host computers. To send, to a first machine executing on the first host computer, a flow from a second machine executing on the second host computer, the method identifies a destination network address of the flow. The method uses the identified destination network address to identify a particular tunnel endpoint group (TEPG) including a particular set of one or more tunnel endpoints (TEPs) associated with a particular non-uniform memory access (NUMA) node of a set of NUMA nodes of the first host computer. The particular NUMA node executes the first machine. The method selects, from the particular TEPG, a particular TEP as a destination TEP of the flow. The method sends the flow to the particular TEP of the particular NUMA node of the first host computer to send the flow to the first machine.

A honeypot network operation method and apparatus, a device and a storage medium are provided. An implementation of the method comprises: obtaining attack traffic for a service machine; forwarding the attack traffic to a honeypot container corresponding to the service machine, where a container address of the honeypot container is the same as a service address of the service machine, the service address is a network address of the service machine, and the container address is a network address of the honeypot container; and returning virtual data generated by the honeypot container, where the virtual data is data requested by the attack traffic, and the virtual data comprises the container address.

A host system is configured to upload data files to a cloud system and provide another layer of security to the access controls provided by the cloud system. The host system includes a communication interface for communicating with a storage device and a network interface for communicating with a the cloud system. The host system includes a processors configured to obtain a 2D barcode based on an identifier of the storage device and a network address of an authorizing device associated with an owner of the storage device. The processor is further configured to, responsive to a request to upload a data file to the cloud system, embed the 2D barcode into the data file (the 2D barcode configured to cause a client device attempting to access the data file to send an access request to the authorizing device) and transmit the data file to the cloud system.

Persistent storage may contain a list of discovery commands, the discovery commands respectively associated with lists of network addresses. A discovery validation application, when executed by one or more processors, may be configured to: read, from the persistent storage, the list of discovery commands and the lists of network addresses; for each discovery command in the list of discovery commands, transmit, by way of one or more proxy servers deployed external to the system, the discovery command to each network address in the respectively associated list of network addresses; receive, by way of the one or more proxy servers, discovery results respectively corresponding to each of the discovery commands that were transmitted, wherein the discovery results either indicate success or failure of the discovery commands; and write, to the persistent storage, the discovery results.

The present application discloses a method and device for uploading files. The method comprises: when detecting that an object to be uploaded is input in a file upload tag, calling a target plug-in to determine the type of the object to be uploaded; when the object to be uploaded is a network address, calling a target plug-in to obtain a network file stored in the network address, wherein the target plug-in includes a preloaded first dynamic scripting language program, and the first dynamic scripting language program is used to obtain a network file stored in the network address; uploading the network file to a database in a backend server. The present application solves the technical problem that the file upload function provided by a web page in the related art is difficult to meet user needs.

The invention provides an efficient task scheduling strategy recommendation method and system for a distributed network surveying and mapping scene, and relates to the crossing field of network space surveying and mapping, network security, distributed scheduling and intelligent optimization recommendation algorithms. Analyzing the task request to extract a task type, a task target network address set, a regional distribution feature, a task execution timeliness requirement and calculation and bandwidth resources required by estimation, and forming a task feature vector; and performing state acquisition and capability evaluation on the distributed surveying and mapping nodes based on task resource requirements defined by the task feature vectors, and performing normalization processing to form node capability vectors. Through multi-source information vectorization and closed-loop optimization, adaptive matching of task scheduling and resource dynamics is realized.