1504 results about "Packet processing" patented technology

Apparatus for data communication includes a network interface for connection to a packet data network and a host interface for connection to a host computer, which includes a central processing unit (CPU) and a host memory. Packet processing circuitry receives, via the host interface, from a kernel running on the CPU, associations between multiple remote direct memory access (RDMA) sessions and multiple different User Datagram Protocol (UDP) 5-tuple, which are assigned respectively to the RDMA sessions, and receives from an application running on the CPU a request to send an RDMA message, using a selected group of one or more of the RDMA sessions, to a peer application over the packet data network, and in response to the request, transmits, via the network interface, one or more data packets using a UDP 5-tuple that is assigned to one of the RDMA sessions in the selected group.

The invention provides a rolling bearing fault diagnosis system and method based on a multi-source fusion residual network, and relates to the technical field of bearing fault diagnos.The rolling bearing fault diagnosis system and method adopt a one-dimensional convolution kernel and a residual block feature extraction module, the one-dimensional convolution kernel ensures that data of different sensors are not mixed in the feature extraction process, and the residual block feature extraction module is used for extracting the data of different sensors; the effectiveness of unique features of each type of signals is guaranteed, the gradient disappearance problem in a deep network is relieved through residual connection, a feature fusion module of a grouping cross attention mechanism is further adopted, sensor signals are grouped according to types, each group is weighted independently, and the sensor signals are subjected to clustering processing according to types. And local and global multi-scale features are further extracted by using multi-scale convolution, so that the uniqueness of different sensor signals is ensured, the expression ability of fusion features is improved, and the accuracy and robustness of rolling bearing fault diagnosis are improved.

The invention provides a multi-scene access control dynamic verification method and system based on a permission tree, and relates to the technical field of scene access, and the method comprises the steps: receiving a user resource access request, obtaining a user permission tree, obtaining a mapping rule according to a scene identifier, screening to generate a primary screening permission node set, carrying out the grouping processing through employing a consistent Hash algorithm, and obtaining a primary screening permission node set; and generating a scenarized permission tree through reachability analysis, merging and reconstruction, performing hierarchical verification on identity validity, scene legality and resource access permission on the request, and generating an access control strategy. The method can dynamically adapt to authority requirements of different scenes, and the accuracy and flexibility of resource access control are improved.

According to the priority asynchronous processing method and system for network security, multiple data sources are integrated, the threat level of each data packet is evaluated in real time, and the processing priority of each data packet is dynamically adjusted according to the threat level. Different from a traditional static method, the method provided by the invention utilizes an advanced machine learning algorithm, can perform dynamic evaluation in multiple dimensions, and timely identifies and preferentially processes high-risk data packets. The mechanism obviously improves the response capability of the system to novel and complex attacks. Meanwhile, a multi-node cooperative attack response mechanism is introduced, when a certain node detects abnormal traffic, other nodes can be automatically notified, threat situation information can be shared, and therefore rapid cooperative reaction is achieved. The integrated innovation not only enhances the overall security of the network, but also optimizes the data packet processing efficiency, effectively solves the main defects in the traditional network security system, and provides a new thought for constructing a safer and more flexible network environment.

The invention relates to the technical field of urban geological survey, in particular to an urban geological survey method based on a big data cloud computing technology, which comprises the following steps: based on urban geological drilling detection data, land subsidence monitoring data and underground pipe network distribution data, grouping the data according to geographic grid units and time points, performing statistical analysis to obtain a geological parameter statistical set; and based on the geological parameter statistical set, setting multiple levels of storage partitions according to a data updating frequency, and establishing a geological data partition storage table. According to the method, urban geological data are grouped according to geographic grid units and time points, a multi-level storage partition mechanism is established, hierarchical storage and compression of the data are realized, the occupied storage space is reduced, and the data access speed is increased; key monitoring areas are screened based on a geological parameter change rate threshold, differential compression storage strategies are adopted for different areas, and the overall storage efficiency is optimized on the basis of guaranteeing important data integrity.

The techniques disclosed herein improve existing systems by receiving a packet to process and determining an associated packet processing graph for the packet. In response to determining that the associated packet processing graph contains an action comprising a set of rules for modifying the packet processing graph, a table to modify in the packet processing graph is accessed based on a table identifier in the action. The accessed table is modified by inserting one or more table rows into the packet processing graph and for each inserted table row, inserting a set of template actions containing prepopulated fields. The modified table is used to process subsequent packets.

The invention provides a distributed storage system based on large model optimization, and relates to the technical field of data processing, and the system comprises a parameter analysis module which is used for obtaining parameter distribution data of a model training task; the parameter grouping module is used for performing grouping processing on the parameter distribution data; the distribution weight calculation module is used for calculating the distribution weight of each storage node in combination with the load information and the hardware performance indexes of the storage nodes; the parameter distribution module is used for distributing the parameter grouped data to different storage nodes; the dynamic monitoring module is used for monitoring access requests and load information of the storage nodes in real time in a model training or reasoning process and generating feedback information; the scheme adjusting module is used for dynamically adjusting the parameter distribution scheme according to the feedback information; the data migration module is used for executing migration operation of parameter data on the target storage node and the source storage node and updating the storage state of the parameters; the system processing capacity and efficiency can be improved.

The invention relates to an anti-Traceroute network topology confusion system based on a P4 (Point 4). The system comprises a node selector, a topology forgger, a configuration generator and confusion nodes, the node selector is used for identifying key nodes in a target network by utilizing a plurality of evaluation indexes and calculating a node upgrading strategy of confusion nodes under the condition of meeting cost constraints; the topology forgger is used for constructing a false topology according to the target network topology and the node upgrading strategy of the confusion node; the configuration generator is used for converting the false topology into configuration information of data packet processing logic of the confusion node by using a P4 program and issuing the configuration information to the confusion node so as to deploy the false topology on a data plane; and the confusion node is used for executing customized topology confusion data packet processing logic on the data plane to present false topology information for malicious detection data packets and respond to normal detection data packets with real topology information. By adopting the system, the network security can be improved.

The invention discloses a malicious traffic message interception and retention method based on threat intelligence, and the method comprises the following steps: S1, importing a threat intelligence data set, generating an intelligence label dictionary, and caching the intelligence label dictionary; s2, receiving a network data packet through a traffic mirroring device or an acquisition probe, and aggregating the network data packet into a traffic aggregation object based on a quintuple; s3, modeling and recording a state transition sequence based on a protocol state machine; s4, detecting a state transition sequence by using the information label dictionary, and identifying potential malicious traffic; s5, extracting data messages corresponding to the key nodes to form an extracted message set; s6, grouping according to the information labels and encrypting by using an improved AES symmetric encryption algorithm to generate an encrypted message file; s7, constructing an index data table containing a quintuple, capture time and an information label, and associating the index data table with the encrypted message file; and S8, storing the encrypted message file and the index data table in a separated storage system, and updating the index data table regularly. The method and the device are suitable for a threat-driven encrypted message processing scene.

The present disclosure provides packet processing and relates to the technical field of communication. The solution of the present disclosure includes: receiving a first packet; forwarding a second packet, the second packet comprises a first segment routing header SRH and the first packet, and the first SRH comprises marking information, and the marking information indicates encapsulation basis of the first SRH. In this way, the intermediate node can accurately acquire the original packet.

Systems and methods are provided for customized grouping of end user devices using a new group identifier tag (GIT) in addition to role-based access (e.g., administrator or guest) and device identifier access (e.g., IP or MAC address). Two components may be implemented at a network access device, including a data plane component and a control plane component. For example, the control plane component may authenticate an end user device, store the MAC and IP addresses for authenticated end user devices, and define access roles for the end user device in the datapath. The data plane component may perform packet processing (e.g., forwarding and policy enforcement) pursuant to previously-defined rules. Whenever a packet arrives at the Network Access Device, the packet is forwarded according to the rules specified by the “role” and GIT present in the entry, allowing for improved processing and scalability of network traffic processing.

Provided is a device including: computing hardware including one or more central processing units (CPUs); and an operating system (OS) implemented on the computing hardware and comprising a kernel. The device is configured to perform packet processing according to New API (NAPI) polling model in the kernel of the OS.

This application provides a communication method and a communication apparatus. In this method, a session management function network element obtains routing information corresponding to a second data network access identifier, obtains an address of an edge application server corresponding to a service accessed by a terminal device; determines the second data network access identifier based on the address of the edge application server; determines, based on the routing information corresponding to the second data network access identifier, a packet processing rule corresponding to the server, and sends the packet processing rule to a user plane function network element.

The invention relates to the technical field of electronic cigarette cartridge authentication, in particular to an electronic cigarette cartridge anti-counterfeiting authentication system based on an encryption technology, which comprises an authentication parameter capture module, a cigarette rod data transmission module, a contact connection verification module and a key activation control module. According to the invention, through the dynamic data extraction and grouping processing of the identification code and the encryption key, the security and uniqueness of the identification information are improved, the circulation risk of counterfeit products is avoided, the association value of the combination of the dynamic authentication identifier and the identification code is calculated and stored, the dynamic update and traceability of the authentication data are realized, and the reliability and tamper resistance of parameters are enhanced; the unibus protocol realizes efficient transmission and real-time comparison of dynamic data, improves the accuracy and rapidity of comparison, ensures the comprehensiveness of data integrity check, reduces authentication misjudgment, combines key decryption and activation value calculation, strengthens an anti-counterfeiting function, realizes full-link security protection, optimizes resource consumption and improves the security and real-time performance of the system.

The invention relates to the technical field of organic electroluminescence adjustment, and provides a power equipment abnormity early warning system for a mobile terminal, which integrates a real-time monitoring module, an early warning identification module and a data detection module. By monitoring operation data of the power equipment in real time, combining with a random forest model to carry out abnormity early warning, sending early warning information to a mobile terminal in real time and receiving user feedback to optimize an early warning strategy, a data detection module carries out grouping processing on the power equipment based on a time period, so that the data processing efficiency is improved; the system achieves the comprehensive monitoring of the operation state of the power equipment, remarkably improves the early warning accuracy, response speed and user interaction experience, effectively guarantees the safe and stable operation of a power system, promotes the scientific maintenance and management of the power equipment, is suitable for various types of power equipment, and improves the safety and reliability of the power equipment. The method has a wide application prospect and an important practical value, and provides powerful support for intelligent and safe operation of an electric power system.

A method performed by a computer system for use in controlling user plane network traffic in a cloud environment is described. The method includes deploying a temporary container in an executing container group, the executing container group including an application container that executes a packet-processing application, wherein the temporary container includes a network traffic control software that includes a pre-compiled network traffic control program and configuration information, wherein the temporary container, when deployed, executes a client component that is operable to: establish a secure connection to a server component of the packet-processing application and transfer the network traffic control software to the packet¬processing application using the secure connection, wherein the pre-compiled network traffic control program, when executed in the packet-processing application, is operable to control network traffic associated with the packet-processing application.

Techniques are disclosed for providing high performant packets processing capabilities in a virtualized cloud environment that enhance the scalability and high availability of the packets processing infrastructure. In certain embodiments disclosed herein, the VNICs functionality performed by network virtualization devices (NVDs) is offloaded from the NVDs to a fleet of computers, referred to as VNIC-as-a-Service System (or VNICaaS system). VNICaaS system is configured to provide Virtual Network Interface Cards (VNICs)-related functionality or service for multiple compute instances belonging to multiple tenants or customers of the CSPI. The VNICaaS system is capable of hosting multiple VNICs to process and transmit traffic in a distributed virtualized cloud networks environment. A single VNIC executed by the VNICaaS system can be used to process packets received from multiple compute instances.

The embodiment of the invention provides a signal lamp countdown prediction method and device, equipment and a storage medium. The method comprises the following steps: acquiring at least one piece of historical trajectory data of a target intersection; according to the road network data of the target intersection, determining an association relationship between roads corresponding to the historical trajectory data; according to the incidence relation between the roads corresponding to the historical track data, grouping the historical track data to obtain a grouping set; and determining phase information of the target intersection according to the historical trajectory data in each group. The method can improve the prediction accuracy of signal lamp countdown.

The invention relates to the technical field of integrated circuit system-on-chip communication, and relates to a network-on-chip transmission method and device based on a dynamic parallel mechanism, and a medium. The method comprises the following steps: carrying out parallel transmission by adopting a control link and a data link which are separated; the control link and the data link are respectively provided with an independent packing module and an independent unpacking module; different transaction types are adapted through a dynamic message structure; dynamic subpackaging is carried out according to the data size during data link packaging; when the control link is unpacked, parameters are split through the Controldec module and are sent to the parameter receiving module; and when the data link is unpacked, the data link is controlled by a state machine, and the split data is transmitted into a data storage module. The invention aims to effectively reduce congestion, reduce power consumption and improve the transmission efficiency and the overall performance of the network on chip through parallel transmission architecture design, double-link parallel packet processing logic design and a composition structure of a dynamic message.

Systems and methods for bypassing subsequent lookups in packet processing pipelines in which multiple circuit blocks includes pre-processing circuitry that determine keys based on parsed contents of packets, and that retrieve responses from respective look-up tables (LUTs) based on the keys. The LUT of a first one of the blocks may be programmed with keys and / or responses for other ones of the circuit blocks, and the first circuit block may provide the keys and / or responses in metadata of the packets. Alternatively, or additionally, the first circuit block may provide parsed contents of the packets in the metadata of the respective packets. The other circuit blocks may selectively bypass the respective pre-processing circuitry based on the metadata.

Embodiments of the present disclosure provide a data transmission method, a data link layer, a chip interconnection interface, and an electronic device. The data transmission method is applied to the data link layer of the chip interconnection interface, the data link layer communicates with the system bus and the physical layer, the system bus operates in a first clock domain, and the physical layer operates in a second clock domain or in a second clock domain and a third clock domain. The method includes: the data link layer performs packet processing on the first data received from the system bus to obtain second data, and provides the second data to the physical layer; or, the data link layer performs unpacking processing on the third data received from the physical layer to obtain fourth data, and provides the fourth data to the system bus, wherein the data link layer partially operates in the third clock domain, and the first clock domain is different from the second clock domain and the third clock domain, the first clock domain includes a first clock signal, the second clock domain includes a second clock signal, and the third clock domain includes a third clock signal.

The invention belongs to the technical field of cloud computing. The invention provides a method and a system for efficiently processing cloud data. The method comprises the following steps: receiving a first data behavior characteristic of each access end in a first period, predicting to obtain a second data behavior characteristic of the corresponding access end in a second period by using a first prediction model, and pre-estimating to obtain a total data processing load; when the total data processing load is higher than the data processing load threshold of the cloud, determining and grouping the access ends according to the response timeliness demand levels of the access ends; and in the second period, performing data synchronization processing on each access end in each group according to the sequence of the data processing priorities from high to low. According to the invention, grouping processing is carried out on the access end, and different data processing priorities are decided according to the grouping result, so that the condition of cloud crash is avoided, and the risk brought to the access end by different processing sequences can be reduced to the greatest extent.

In one embodiment, a sender node includes packet processing circuitry to associate, at layer 2 or 3 of Open Systems Interconnection (OSI) model, path identifiers and per-path packet sequence numbers with packets, wherein the path identifiers identify paths from the sender node to receiver nodes, and an interface to send the packets with the associated packet sequence numbers and path identifiers to the receiver nodes.

A data packet processing method includes performing, by a first communication device, a target operation, the target operation including at least one of the following determining an importance level of a target data packet, data flow description information corresponding to a data packet, and / or a tunnel mapped by the data packet; determining, based on the importance level of the target data packet, a buffer status report for distinguishing between importance levels, where data packets with different importance levels correspond to buffer status reports with different importance levels; sending the buffer status report for distinguishing between importance levels; determining a range of a first target data packet; or stopping a first operation and / or performing a second operation, or performing the first operation.

A network adapter including a host interface, a network interface, packet processing circuitry, and Translation-as-a-Service (TaaS) circuitry. The host interface is to communicate with a host over a peripheral bus. The network interface is to send and receive packets to and from a network for the host. The packet processing circuitry is to process the packets. The TaaS circuitry is integrated in the network adapter and is to (i) receive from a requesting device a request to translate an input address into a requested address in a requested address space, (ii) translate the input address into the one or more requested addresses, and (iii) return the one or more requested addresses to the requesting device.

The invention relates to an IPv4 data message processing method and device based on longest prefix matching. The method comprises the following steps: acquiring an IPv4 data message, and extracting a destination IP address in the message; based on a longest prefix matching mode, extracting a preset number of bits from the high order of the destination IP address; generating a search index through the preset number of bits; determining a corresponding table item in a pre-stored FPGA rule matching table according to the lookup index; extracting a message processing rule according to pre-stored information of the table item; and executing a subsequent processing action on the IPv4 data message based on the message processing rule. According to the method and the device, the IPv4 message prefix matching can be carried out through FPGA hardware acceleration, a matching result is generated through single query, linear speed processing under million-level rules is supported, and meanwhile, the longest prefix priority principle is automatically maintained when the rules are changed through a CPU-FPGA collaborative updating mechanism.

This application provides a dial-up packet processing method. The method is applied to a dial-up packet processing system. The system includes a controller, an access gateway, a forwarding plane network element, and a control plane network element that are connected to each other. The method includes: The control plane network element receives a dial-up packet from the access gateway, where the dial-up packet is a dial-up packet sent by user equipment to the access gateway; the control plane network element sends an authentication request to an external server, where the authentication request is generated by the control plane network element based on the dial-up packet; the control plane network element receives dial-up success information sent by the external server; and the control plane network element determines the forwarding plane network element based on the dial-up success information.

A method of operating a network device is provided. The method can include obtaining incoming data packets, conveying the incoming data packets through a parallel data bus, and using a demultiplexer to split the incoming data packets being conveyed through the parallel data bus onto a plurality of separate independent data paths within the network device. The method can further include using a multiplexer to aggregate or merge data packets from the plurality of data paths onto an egress parallel data bus.

The invention discloses an automatic code vectorization optimization method and device and a medium, belongs to the technical field of high-performance computing, and aims at solving the problems that existing automatic code vectorization is inconvenient, the manual operation proportion is large, vectorization of irregular codes or codes with a load dependency relationship is difficult to support, and the vectorization efficiency is high. And improvement of calculation performance and reduction of energy consumption are not facilitated. The method comprises the steps of obtaining a scalar instruction diagram of a calculation task according to a calculation kernel of parallel calculation; performing protocol conversion processing on the scalar instruction diagram to obtain a protocol instruction diagram; according to the high-level organization structure of the instruction, grouping processing related to mapping vectors is carried out on the protocol instruction graph, and a grouping graph is obtained; based on the limited vector length of hardware, performing splitting matching processing on instruction vectors in the grouping graph to obtain a vector matching grouping graph; and executing configuration on each group of elements in the vector matching grouping graph to obtain a vector operation graph.

The invention discloses a relay chain cross-chain asynchronous consensus method, a readable storage medium and equipment. The relay chain cross-chain asynchronous consensus method comprises the following steps: acquiring a batch transaction packet corresponding to a target cross-chain transaction and transaction broadcast performance of an asynchronous consensus node group; based on the size of the batch transaction packet and the transaction broadcast performance of the asynchronous consensus node group, determining an optimal cross-chain transaction matching scheme which enables the asynchronous consensus node group to process the batch transaction packet at the fastest speed; and according to the optimal cross-chain transaction matching scheme, sending the batch transaction packets to an asynchronous consensus node group for asynchronous consensus processing. According to the method, the optimal cross-chain transaction matching scheme which enables the asynchronous consensus node group to process the batch transaction packets at the fastest speed is determined by using the batch transaction packets corresponding to the target cross-chain transaction and the transaction broadcast performance of the asynchronous consensus node group; and according to the optimal cross-chain transaction matching scheme, the batch transaction packets corresponding to the target cross-chain transaction are sent to the asynchronous consensus node group for asynchronous consensus processing, so that the load of the asynchronous consensus node group is greatly reduced, and the transaction packet processing speed of the asynchronous consensus node is improved.