72 results about "Packet matching" patented technology

The invention discloses a data distribution method and device, electronic equipment and a storage medium, the data distribution method is applied to a distribution server deployed at a network side, and comprises the following steps: obtaining distribution characteristic statistical data of a target data packet to be sent by terminal equipment; inputting the distribution characteristic statistical data of the target data packet into a first data distribution decision network to obtain a first distribution confidence coefficient of the target data packet matched with each transmission path; inputting the distribution characteristic statistical data of the target data packet into a second data distribution decision network to obtain a second distribution confidence coefficient of the target data packet matched with each transmission path; and matching the first distribution confidence coefficient and the second distribution confidence coefficient of each transmission path based on the target data packet, and determining a target distribution strategy of the target data packet. By applying the technical scheme provided by the invention, the distribution strategy of the uplink data packet of the terminal equipment can be accurately and effectively determined, and the data transmission efficiency is improved.

A threat intelligence gateway (TIG) may protect TCP / IP networks from network (e.g., Internet) threats by enforcing certain policies on in-transit packets that are crossing network boundaries. The policies may be composed of packet filtering rules with packet-matching criteria derived from cyber threat intelligence (CTI) associated with Internet threats. These CTI-derived packet-filtering rules may be created offline by policy creation and management servers, which may distribute the policies to subscribing TIGs that subsequently enforce the policies on in-transit packets. Each packet filtering rule may specify a disposition that may be applied to a matching in-transit packet, such as deny / block / drop the in-transit packet or pass / allow / forward the in-transit packet, and also may specify directives that may be applied to a matching in-transit packet, such as log, capture, spoof-tcp-rst, etc. Often, however, the selection of a rule's disposition and directives that best protect the associated network may not be optimally determined before a matching in-transit packet is observed by the associated TIG. In such cases, threat context information that may only be available (e.g., computable) at in-transit packet observation and / or filtering time, such as current time-of-day, current TIG / network location, current TIG / network administrator, the in-transit packet being determined to be part of an active attack on the network, etc., may be helpful to determine the disposition and directives that may best protect the network from the threat associated with the in-transit packet. The present disclosure describes examples of methods, systems, and apparatuses that may be used for efficiently determining (e.g., accessing and / or computing), in response to the in-transit packet, threat context information associated with an in-transit packet. The threat context information may be used to efficiently determine the disposition and / or one or more directives to apply to the in-transit packet. This may result in dispositions and / or directives being applied to in-transit packets that better protect the network as compared with solely using dispositions and directives that were predetermined prior to receiving the in-transit packet.

Various embodiments include methods of managing mixed data flow types in communications in a network apparatus. The network apparatus may determine data flow priority levels of a plurality of data flows, identify high-priority data flows associated with a particular LAN interface, and assign a designated public IP address range or a designated public port range for the high-priority data. Upon receiving an uplink, the apparatus may select a source port number from the previously reserved range dedicated for high-priority data flows in response to the received packet matching one or more prioritized data flow packet filters, modify the received uplink packet, and forward the modified uplink packet to the next hop in the path towards the destination IP address in response to determining that the packet is enqueued successfully.

The invention provides a phenotype Internet of Things program upgrading method, device and equipment. The method comprises the following steps: after the phenotype Internet of Things equipment is powered on and started, reading a starting address of a target application program needing to run from a parameter storage area by utilizing a bootstrap program, and calling and running the target application program through the starting address; receiving a to-be-upgraded firmware data packet sent by the Internet of Things cloud platform; when the to-be-upgraded firmware data packet conforms to the upgrading rule, after a starting address of a new application program corresponding to the to-be-upgraded firmware data packet is determined, the to-be-upgraded firmware data packet is downloaded, and the downloaded to-be-upgraded firmware data packet is written in according to the starting address of the new application program; the starting address of the new application program is added into the application program address index variable, and initial upgrading is completed; after restarting, authentication information of the new application program is sent to the Internet of Things cloud platform, and after the Internet of Things cloud platform determines that the authentication information is matched with the sent firmware data packet to be upgraded, it is determined that upgrading succeeds.

The present application provides a communication method applicable to a dual connectivity (DC) scenario. The method is applied to a master node MN. The method comprises: receiving QoS parameters of a PDU set, and sending first indication information to a core network, wherein the first indication information is used for indicating the PDU set processing capability of a QoS flow of the master node MN and / or a secondary node SN. The master node MN can acquire the PDU set processing capability of the secondary node SN by means of an Xn interface interaction process. In the DC scenario, the method can ensure that an access network device receives a data packet matching the device capability of the access network device, thereby improving the service experience of users.

The invention discloses an efficient network monitoring-oriented hardware switch matching action table cascading method, which comprises the following steps of: constructing a'guidance table-execution table 'cascading matching action table mechanism in a hardware switch based on an efficient network monitoring system P4InfoSen-INT; for each data packet, the guidance table obtains guidance information of the data packet through matching according to the stream number of the data packet and the telemetering data value, and the execution table matches the data packet to a corresponding action by taking the guidance information as a matching domain and executes the action; the method comprises the following steps: dynamically updating guidance information of a guidance table constructed in a hardware switch during p4runtime operation, and downloading table entries in real time, thereby realizing adjustment and optimization of network monitoring. According to the method, table items can be effectively reused, and distribution matching and telemetry data matching can be distinguished, so that the resource overhead is remarkably reduced, and the flow expansibility of the P4InfoSen-INT is enhanced.

A method and system provide a BKAS addressing scheme. The scheme enables the encoding of disjoint intervals in each addressing block of an IPv6 / IPv4 address. This scheme permits a better flexibility in IP packet matching and an improved implementation of security policies by highly compressing the number of rules and offering much more expressivity in their semantics. This simplifies the configuration of security and network devices while significantly reducing the configuration anomalies. Furthermore, an efficient matching algorithm and a set of transitional methods are also provided. A BKAS design strategy for network subnetting is also provided, allowing for the elimination of all overlaps in the configuration rules of network and security devices while avoiding a combinatorial explosion of the number of configuration rules. The BKAS addressing scheme can be included in any hardware and software program.

A cell site gateway, located at a cell site of an access network, receives: one or more first packets from a network gateway, via a first interface of the cell site gateway; one or more second packets, from a cellular base station, via a second interface of the cell site gateway; and control information, from a control server, via a third interface of the cell site gateway, wherein the control information is for a forwarding layer of the cell site gateway and comprises a first flow entry comprising a first match field and a second flow entry comprising a second match field. The cellular site gateway transmits, to the cellular base station via the first interface, first packets based on the first packets matching the first match field, and to the network gateway via the second interface, second packets based on the second packets matching the second match field.

The application discloses a multi-pack efficient matching fusion method based on a connected graph, and belongs to the field of map data processing. The method comprises the following steps: in K low-precision single-pack maps passing through a same center point, two subgraphs corresponding to a same center point in each two adjacent low-precision single-pack maps are automatically matched, and the same center point in the K low-precision single-pack maps is sequentially connected, so that a matching score corresponding to different data elements between each two subgraphs in a complete connected graph is obtained, and an object corresponding to a most confident matching meeting geometric consistency is determined according to the matching score; and the two subgraphs passing through a same center point in each low-precision single-pack map and another low-precision single-pack map with the largest overlapping area are automatically matched, so that an object corresponding to a most confident matching meeting geometric consistency is determined. The application saves the equipment cost, reduces the complexity of calculation, guarantees the stability of matching, and does not depend on the uniqueness of map elements.

The invention relates to the technical field of communication, in particular to an accurate matching table storage and query system and method. The system comprises a flow table preprocessing software module and a flow table query hardware module, and the flow table preprocessing software module is used for calculating the relative storage position of a flow table item by using a uckoo hash algorithm and storing the flow table item into one sub-table of an accurate matching table based on the relative storage position; flow table item data including the flow table items and the relative storage positions of the flow table items are sent to a flow table query hardware module; and the flow table query hardware module is used for performing matching by utilizing a uckoo hash algorithm to obtain a relative storage position of a flow table item and implementing accurate matching. According to the invention, the flow table preprocessing software module determines the storage position of the flow table item in advance, so that the storage workload of the flow table query hardware module is reduced, and the resources of the flow table query hardware module are saved. Meanwhile, during query, the relative storage position of the matched flow table item is directly obtained through the hash function, and the data packet matching and searching speed is increased.

The embodiment of the invention provides a traffic redirection method and device, electronic equipment, a computer storage medium and a computer program product. The method comprises the following steps: acquiring a data packet from a target data packet queue; the target data packet queue comprises a data packet queue corresponding to a network card supporting a data plane development kit; obtaining a newly generated redirection rule table, and matching the data packet with the redirection rule table to obtain a matching result; the redirection rule table comprises a plurality of redirection rules and behaviors corresponding to each redirection rule; and under the condition that the matching result represents that the first redirection rule matched with the data packet exists in the redirection rule table, executing a behavior corresponding to the first redirection rule.

The invention discloses a task cooperation management method and system based on an offline application, and relates to the technical field of offline data management, and the method comprises the steps: determining a task cooperation type, and obtaining a cooperation task resource package; generating a task collaboration system environment based on the collaboration task resource bundle; receiving collaborative data, predicting the modification probability of the collaborative data through a pre-trained prediction model in the collaborative task resource packet, and performing early warning and verification on the collaborative data with a high risk prediction result; and compressing and packaging the collaborative data according to the collaborative task type, and uploading the packaged collaborative data through a priority scheduling mechanism when network connection is recovered. Through the fusion technical scheme of intelligent resource packet matching, generation of a system environment with edge calculation, pre-training model early warning verification and priority scheduling uploading, the resource packet mismatching and parameter error rate are effectively reduced, meanwhile, the uploading delay is reduced, and the offline cooperation efficiency and the data reliability are improved.

Various embodiments include methods of managing mixed data flow types in communications in a network apparatus. The network apparatus may determine data flow priority levels of a plurality of data flows, identify high-priority data flows associated with a particular LAN interface, and assign a designated public IP address range or a designated public port range for the high-priority data. Upon receiving an uplink, the apparatus may select a source port number from the previously reserved range dedicated for high-priority data flows in response to the received packet matching one or more prioritized data flow packet filters, modify the received uplink packet, and forward the modified uplink packet to the next hop in the path towards the destination IP address in response to determining that the packet is enqueued successfully.

The invention discloses a communication data transmission control system and method, and the method comprises the steps: analyzing a data transmission mode matched with a user request, matching a node for the user request according to the data transmission mode, analyzing and processing the load of the node, deploying the user request, and analyzing the load of a transmission link and a transmission node. The method further analyzes the influence of target data corresponding to a user request on a transmission link and a transmission node, evaluates the performance score of a transmission path constructed by the transmission link and the transmission node, matches the transmission path for a data packet, and can accurately analyze the performance of the transmission node and the transmission link by analyzing the load condition, resource margin and the like of the transmission path. Therefore, the optimal transmission path can be selected to transmit the data packet, the congestion in the data transmission process is avoided, the time delay of data transmission is greatly reduced, and the method has the characteristics of improving the resource utilization rate and reducing the time delay.

The present application discloses a honeypot attack source tracing method, device, equipment, and storage medium, which relates to the field of network security technology, including: when monitoring that a terminal with a pseudo-service installed receives attack traffic sent by an attacker, capturing the attacker's MAC information; judging whether the terminal has a honeypot service; if the terminal does not have a honeypot service, generating alarm data and disconnecting the connection with the attacker; if the terminal has a honeypot service, forwarding the attack traffic to the corresponding honeypot service port based on the correspondence between the honeypot service port and the local service port, so that the honeypot service port sends part of the attacker information including the attacker's IP information to the honeypot center platform, and integrates the MAC information with part of the attacker information to generate complete attacker information. Use terminal pseudo-service to trigger the honeypot alarm, thereby increasing the probability of honeypot alarm; capture the MAC address by packet capture matching, and match and trace it back to the real attacker.

The application provides an elevator module power-off alarm method and device, electronic equipment and storage medium. The method comprises the following steps: collecting the main power supply voltage of the elevator module, and monitoring the voltage change rate of the standby energy storage unit; determining the power-off confidence according to the main power supply voltage and the voltage change rate; activating the hierarchical hibernation sequence according to the power-off confidence; based on the hierarchical hibernation sequence, calling the pre-stored elevator position code and elevator identity code, and establishing a communication link with the cloud through the 4G module; combining the elevator operation state log to generate a diagnostic code containing fault cause probability analysis; encapsulating the elevator identity code, the diagnostic code and the timestamp into a digitally signed data packet, and uploading it to the cloud through the communication link; analyzing the data packet, matching the geographic location database, generating an elevator location alarm map with fault confidence and pushing it to the operation and maintenance terminal. The application can intelligently diagnose the power-off cause, accurately locate the fault position and timely notify the operation and maintenance personnel, thereby improving the safety and operation and maintenance efficiency of the elevator system.

The invention provides an ACL rule processing method and device, a product, equipment and a medium. The method comprises the following steps: generating a source code based on a pre-configured ACL rule according to a preset conversion rule; compiling the source code to generate a dynamic link library; a dynamic link library is loaded, a target function is obtained from the loaded dynamic link library, the message matching logic is used for determining whether the data message conforms to an ACL rule or not, and the action execution logic is used for determining a message processing instruction corresponding to the ACL rule; and for the data message to be processed, executing the message matching logic to obtain a matching result, and executing the action execution logic corresponding to the matching result, so that the real-time analysis or compiling overhead of the ACL rule can be saved, the compiled message matching logic and action execution logic can be directly executed, any field in the message structure is flexibly quoted as the matching content, and the matching efficiency is improved. The support range of the message matching logic is expanded by using the self-defined matching function, so that the message processing efficiency and expandability are improved.

The invention discloses a data packet processing method and device, equipment and a medium. A switch receives a to-be-processed first data packet; a first path table item set is stored in the switch; the switch matches the first data packet through the first path table item set, and forwards the first data packet to a processing unit if a target table item matched with the first data packet does not exist in the first path table item set; a second path table item set is stored in the processing unit; and the processing unit carries out matching on the first data packet through the second path table item set, if a target table item matched with the first data packet exists in the second path table item set, the target table item is added to the first path table item set, and the switch carries out forwarding processing on the first data packet. According to the embodiment of the invention, the stability and the processing efficiency of data packet processing can be improved, and the efficient and massive table item aging requirements can be met. The method can be widely applied to various scenes such as cloud technology, big data, artificial intelligence, intelligent traffic and auxiliary driving.

The invention provides a network configuration method, electronic equipment and a network configuration system. The network configuration method can be applied to systems of mobile terminals and printers such as mobile phones and tablet personal computers. When the mobile terminal finds the printer, the product identifier of the printer can be obtained. The mobile terminal can determine the protocol type of the printer through the product identifier, further obtains a protocol packet matched with the printer, and then sends the configuration information of the current local area network to the printer through the protocol packet to control the printer to be accessed to the local area network where the mobile terminal is located. Thus, a user does not need to manually download a specific application program, the network is simply and rapidly configured for the printer, and then the printing service provided by the printer is rapidly experienced.

The application discloses a data storage method, device, equipment and storage medium. The method comprises the following steps: obtaining a plurality of data packets of an SWC; determining a data block matched with each data packet based on a preset rule; wherein each data block is used for storing a plurality of data packets; storing each data packet into the data block matched with the data packet; determining a to-be-stored data block based on a plurality of data blocks; and storing the to-be-stored data block into an NVM module. The technical scheme of the application stores several data packets into one data block, reduces the number of data blocks in the data storage unit, shortens the length of the to-be-stored queue, and then greatly shortens the queue polling time when the NVM main function is polled to process the to-be-stored queue, thereby improving the efficiency of storing the data packets in the SWC into the NVM module.

The invention discloses a data transmission control method and electronic equipment. The method comprises the following steps: acquiring first information on first equipment; the first information comprises target content matched with the second information; the second information is historical information sent to second equipment by the first equipment before the first information; the first information is sent to the second equipment; the target content is used for the second equipment to send a target data packet matched with the target content to the first equipment under the condition that the second information is not received.

Methods and apparatus for a programmable IO device interface are provided. The apparatus may include: a first memory unit on which a plurality of programs are stored, the plurality of programs being associated with a plurality of actions including updating a memory-based data structure, inserting a DMA command, or initiating an event; and a second memory unit for receiving and storing table results, and the table results are provided by a table engine configured to perform a packet matching operation on (i) a packet header vector included in a header portion and (ii) data stored in a programmable match table; and circuitry for executing a program selected from the plurality of programs in response to the table results and an address received by the apparatus, the program being executed until completion and the program being associated with the programmable match table.

The invention discloses a yacht industry full life cycle management system and method based on an intelligent platform, and relates to the field of platform data management. Yacht life cycle data packets in a database of the intelligent platform are constructed to obtain life cycle stage classification data packets, and service information characteristics of new enterprises are combined to obtain yacht life cycle stage classification data packets; and substituting the new enterprise service type proportion deviation value, the comprehensive service performance index and the service stage matching degree index into logistic regression calculation to obtain a matching evaluation coefficient, comparing the matching evaluation coefficient with a preset matching threshold value, obtaining a probability of integrating new enterprise data into a new data packet according to the strong association data packet and the matching data packet, and obtaining a new enterprise data packet matching result according to the probability of integrating the new enterprise data into the new data packet. According to the enterprise cooperation times and the enterprise service content repetition degree in the classified data packets in the life cycle stage, fuzzy logic is substituted for fuzzy reasoning, a new data packet integration result is obtained, all stages of the yacht industry are covered, data communication is achieved, meanwhile, the data size of the data packets is prevented from being too large, and the system jamming probability is reduced.

The invention discloses an application updating method and device, equipment and a storage medium, and relates to the technical field of financial science and technology. The application updating method comprises the following steps: predicting an idle time period of a client according to user historical behavior data sent by the client, and sending the idle time period to the client; in response to an application updating request sent by the client for the to-be-updated application in the idle period, obtaining a current application version of the to-be-updated application in the application updating request; and determining a target differential package matched with the current application version, and feeding back the target differential package to the client for indicating the client to perform incremental updating on the to-be-updated application according to the target differential package. According to the technical scheme provided by the embodiment of the invention, incremental updating can be quickly carried out on the application in the idle time period of the client, so that non-perceptual updating of a user is realized, and normal use of the user is not influenced.

Embodiments of the present application provide a vehicle cooperative positioning method and device in a vehicle fleet, a storage medium and an electronic device, wherein each vehicle in the vehicle fleet is configured with a preset synchronization word, and a data packet of each vehicle includes the preset synchronization word and a data frame for carrying positioning data, and the data frame in the data packet of each vehicle is a CRSF telemetry frame; the method comprises: extracting the synchronization word in a first data packet of a target vehicle; in response to the synchronization word in the first data packet matching the preset synchronization word, analyzing a first data frame in the first data packet to obtain a vehicle identifier of the target vehicle and positioning data of the target vehicle; in a case where the vehicle identifier of the target vehicle and the positioning data of the target vehicle are obtained, updating the positioning data of the target vehicle to a cooperative database locally of the vehicle based on the vehicle identifier of the target vehicle; and based on the cooperative database, rendering a position point of each identified vehicle on a regional map preloaded in the vehicle.

This application discloses a packet processing method, apparatus, and smart network interface card (NIC) based on FPGA, applied in the field of communication technology. By configuring different first and second rule templates in a first dual-port RAM (different dual-port RAMs can be configured with different rule templates), the method simultaneously performs rule matching on the packets to be processed through the first and second ports of the first dual-port RAM to obtain the first and second matching results corresponding to each first dual-port RAM, thereby determining the forwarding strategy for the packets to be processed. This application can provide multiple types of matching rules based on the limited system resources of FPGA and can improve packet matching efficiency.

In one embodiment, a switch in a software-defined network receives a packet sent by an endpoint device via the SDN. The switch makes a copy of the packet based on one or more header fields of the packet matching one or more flow table entries of the switch. The switch forms telemetry data for reporting to a traffic analysis service by applying a metadata filter to the copy of the packet. The metadata filter prevents at least a portion of the copy of the packet from inclusion in the telemetry data. The switch sends the formed telemetry data to the traffic analysis service.

The present application provides a method, device and equipment for upgrading a phenotypic Internet of Things program. The method includes: after the phenotypic Internet of Things device is powered on and started, the boot program is used to read the startup address of the target application to be run from the parameter storage area, and the target application is called and run through the startup address; a firmware data packet to be upgraded is received from the Internet of Things cloud platform; when the firmware data packet to be upgraded meets the upgrade rules and the startup address of the new application corresponding to the firmware data packet to be upgraded is determined, the firmware data packet to be upgraded is downloaded, and the downloaded firmware data packet to be upgraded is written according to the startup address of the new application; the startup address of the new application is added to the application address index variable, and the initial upgrade is completed; after restarting, the authentication information of the new application is sent to the Internet of Things cloud platform, and the Internet of Things cloud platform determines that the upgrade is successful after the authentication information matches the sent firmware data packet to be upgraded.

The invention relates to a network flow application identification method and system based on a dynamic rule, and the method comprises the steps: responding to a received message, analyzing the message, and checking the flow information of the message; if the flow information contains the APPID, applying the APPID to the message and the flow information and ending; if not, identifying the message through a preset message matching rule, acquiring the APPID and applying the APPID to the message and the flow information; if the identification of the message matching rule fails, extracting message feature information based on a preset feature extraction rule, identifying the feature information through the preset feature matching rule, obtaining APPID and applying the APPID to the message and flow information; and if feature extraction or feature matching fails, identifying the message through a preset dynamic rule, obtaining the APPID and applying the APPID to the message and the flow information. The identification rule is automatically generated through a small number of rules, and the maintenance cost is reduced. APPID is returned in advance by using a flow table and packet counting, so that the performance is improved. The dynamic rule adopts IP + PORT or IP identification, and the identification result APPID is updated to message and flow information.