1036 results about "Packet processing" patented technology

The invention provides a multi-scene access control dynamic verification method and system based on a permission tree, and relates to the technical field of scene access, and the method comprises the steps: receiving a user resource access request, obtaining a user permission tree, obtaining a mapping rule according to a scene identifier, screening to generate a primary screening permission node set, carrying out the grouping processing through employing a consistent Hash algorithm, and obtaining a primary screening permission node set; and generating a scenarized permission tree through reachability analysis, merging and reconstruction, performing hierarchical verification on identity validity, scene legality and resource access permission on the request, and generating an access control strategy. The method can dynamically adapt to authority requirements of different scenes, and the accuracy and flexibility of resource access control are improved.

The invention relates to the technical field of urban geological survey, in particular to an urban geological survey method based on a big data cloud computing technology, which comprises the following steps: based on urban geological drilling detection data, land subsidence monitoring data and underground pipe network distribution data, grouping the data according to geographic grid units and time points, performing statistical analysis to obtain a geological parameter statistical set; and based on the geological parameter statistical set, setting multiple levels of storage partitions according to a data updating frequency, and establishing a geological data partition storage table. According to the method, urban geological data are grouped according to geographic grid units and time points, a multi-level storage partition mechanism is established, hierarchical storage and compression of the data are realized, the occupied storage space is reduced, and the data access speed is increased; key monitoring areas are screened based on a geological parameter change rate threshold, differential compression storage strategies are adopted for different areas, and the overall storage efficiency is optimized on the basis of guaranteeing important data integrity.

The techniques disclosed herein improve existing systems by receiving a packet to process and determining an associated packet processing graph for the packet. In response to determining that the associated packet processing graph contains an action comprising a set of rules for modifying the packet processing graph, a table to modify in the packet processing graph is accessed based on a table identifier in the action. The accessed table is modified by inserting one or more table rows into the packet processing graph and for each inserted table row, inserting a set of template actions containing prepopulated fields. The modified table is used to process subsequent packets.

The invention provides a distributed storage system based on large model optimization, and relates to the technical field of data processing, and the system comprises a parameter analysis module which is used for obtaining parameter distribution data of a model training task; the parameter grouping module is used for performing grouping processing on the parameter distribution data; the distribution weight calculation module is used for calculating the distribution weight of each storage node in combination with the load information and the hardware performance indexes of the storage nodes; the parameter distribution module is used for distributing the parameter grouped data to different storage nodes; the dynamic monitoring module is used for monitoring access requests and load information of the storage nodes in real time in a model training or reasoning process and generating feedback information; the scheme adjusting module is used for dynamically adjusting the parameter distribution scheme according to the feedback information; the data migration module is used for executing migration operation of parameter data on the target storage node and the source storage node and updating the storage state of the parameters; the system processing capacity and efficiency can be improved.

The invention discloses a malicious traffic message interception and retention method based on threat intelligence, and the method comprises the following steps: S1, importing a threat intelligence data set, generating an intelligence label dictionary, and caching the intelligence label dictionary; s2, receiving a network data packet through a traffic mirroring device or an acquisition probe, and aggregating the network data packet into a traffic aggregation object based on a quintuple; s3, modeling and recording a state transition sequence based on a protocol state machine; s4, detecting a state transition sequence by using the information label dictionary, and identifying potential malicious traffic; s5, extracting data messages corresponding to the key nodes to form an extracted message set; s6, grouping according to the information labels and encrypting by using an improved AES symmetric encryption algorithm to generate an encrypted message file; s7, constructing an index data table containing a quintuple, capture time and an information label, and associating the index data table with the encrypted message file; and S8, storing the encrypted message file and the index data table in a separated storage system, and updating the index data table regularly. The method and the device are suitable for a threat-driven encrypted message processing scene.

Systems and methods are provided for customized grouping of end user devices using a new group identifier tag (GIT) in addition to role-based access (e.g., administrator or guest) and device identifier access (e.g., IP or MAC address). Two components may be implemented at a network access device, including a data plane component and a control plane component. For example, the control plane component may authenticate an end user device, store the MAC and IP addresses for authenticated end user devices, and define access roles for the end user device in the datapath. The data plane component may perform packet processing (e.g., forwarding and policy enforcement) pursuant to previously-defined rules. Whenever a packet arrives at the Network Access Device, the packet is forwarded according to the rules specified by the “role” and GIT present in the entry, allowing for improved processing and scalability of network traffic processing.

The invention relates to the technical field of electronic cigarette cartridge authentication, in particular to an electronic cigarette cartridge anti-counterfeiting authentication system based on an encryption technology, which comprises an authentication parameter capture module, a cigarette rod data transmission module, a contact connection verification module and a key activation control module. According to the invention, through the dynamic data extraction and grouping processing of the identification code and the encryption key, the security and uniqueness of the identification information are improved, the circulation risk of counterfeit products is avoided, the association value of the combination of the dynamic authentication identifier and the identification code is calculated and stored, the dynamic update and traceability of the authentication data are realized, and the reliability and tamper resistance of parameters are enhanced; the unibus protocol realizes efficient transmission and real-time comparison of dynamic data, improves the accuracy and rapidity of comparison, ensures the comprehensiveness of data integrity check, reduces authentication misjudgment, combines key decryption and activation value calculation, strengthens an anti-counterfeiting function, realizes full-link security protection, optimizes resource consumption and improves the security and real-time performance of the system.

The invention relates to the technical field of organic electroluminescence adjustment, and provides a power equipment abnormity early warning system for a mobile terminal, which integrates a real-time monitoring module, an early warning identification module and a data detection module. By monitoring operation data of the power equipment in real time, combining with a random forest model to carry out abnormity early warning, sending early warning information to a mobile terminal in real time and receiving user feedback to optimize an early warning strategy, a data detection module carries out grouping processing on the power equipment based on a time period, so that the data processing efficiency is improved; the system achieves the comprehensive monitoring of the operation state of the power equipment, remarkably improves the early warning accuracy, response speed and user interaction experience, effectively guarantees the safe and stable operation of a power system, promotes the scientific maintenance and management of the power equipment, is suitable for various types of power equipment, and improves the safety and reliability of the power equipment. The method has a wide application prospect and an important practical value, and provides powerful support for intelligent and safe operation of an electric power system.

A method performed by a computer system for use in controlling user plane network traffic in a cloud environment is described. The method includes deploying a temporary container in an executing container group, the executing container group including an application container that executes a packet-processing application, wherein the temporary container includes a network traffic control software that includes a pre-compiled network traffic control program and configuration information, wherein the temporary container, when deployed, executes a client component that is operable to: establish a secure connection to a server component of the packet-processing application and transfer the network traffic control software to the packet¬processing application using the secure connection, wherein the pre-compiled network traffic control program, when executed in the packet-processing application, is operable to control network traffic associated with the packet-processing application.

Techniques are disclosed for providing high performant packets processing capabilities in a virtualized cloud environment that enhance the scalability and high availability of the packets processing infrastructure. In certain embodiments disclosed herein, the VNICs functionality performed by network virtualization devices (NVDs) is offloaded from the NVDs to a fleet of computers, referred to as VNIC-as-a-Service System (or VNICaaS system). VNICaaS system is configured to provide Virtual Network Interface Cards (VNICs)-related functionality or service for multiple compute instances belonging to multiple tenants or customers of the CSPI. The VNICaaS system is capable of hosting multiple VNICs to process and transmit traffic in a distributed virtualized cloud networks environment. A single VNIC executed by the VNICaaS system can be used to process packets received from multiple compute instances.

The embodiment of the invention provides a signal lamp countdown prediction method and device, equipment and a storage medium. The method comprises the following steps: acquiring at least one piece of historical trajectory data of a target intersection; according to the road network data of the target intersection, determining an association relationship between roads corresponding to the historical trajectory data; according to the incidence relation between the roads corresponding to the historical track data, grouping the historical track data to obtain a grouping set; and determining phase information of the target intersection according to the historical trajectory data in each group. The method can improve the prediction accuracy of signal lamp countdown.

The invention relates to the technical field of integrated circuit system-on-chip communication, and relates to a network-on-chip transmission method and device based on a dynamic parallel mechanism, and a medium. The method comprises the following steps: carrying out parallel transmission by adopting a control link and a data link which are separated; the control link and the data link are respectively provided with an independent packing module and an independent unpacking module; different transaction types are adapted through a dynamic message structure; dynamic subpackaging is carried out according to the data size during data link packaging; when the control link is unpacked, parameters are split through the Controldec module and are sent to the parameter receiving module; and when the data link is unpacked, the data link is controlled by a state machine, and the split data is transmitted into a data storage module. The invention aims to effectively reduce congestion, reduce power consumption and improve the transmission efficiency and the overall performance of the network on chip through parallel transmission architecture design, double-link parallel packet processing logic design and a composition structure of a dynamic message.

Systems and methods for bypassing subsequent lookups in packet processing pipelines in which multiple circuit blocks includes pre-processing circuitry that determine keys based on parsed contents of packets, and that retrieve responses from respective look-up tables (LUTs) based on the keys. The LUT of a first one of the blocks may be programmed with keys and / or responses for other ones of the circuit blocks, and the first circuit block may provide the keys and / or responses in metadata of the packets. Alternatively, or additionally, the first circuit block may provide parsed contents of the packets in the metadata of the respective packets. The other circuit blocks may selectively bypass the respective pre-processing circuitry based on the metadata.

Embodiments of the present disclosure provide a data transmission method, a data link layer, a chip interconnection interface, and an electronic device. The data transmission method is applied to the data link layer of the chip interconnection interface, the data link layer communicates with the system bus and the physical layer, the system bus operates in a first clock domain, and the physical layer operates in a second clock domain or in a second clock domain and a third clock domain. The method includes: the data link layer performs packet processing on the first data received from the system bus to obtain second data, and provides the second data to the physical layer; or, the data link layer performs unpacking processing on the third data received from the physical layer to obtain fourth data, and provides the fourth data to the system bus, wherein the data link layer partially operates in the third clock domain, and the first clock domain is different from the second clock domain and the third clock domain, the first clock domain includes a first clock signal, the second clock domain includes a second clock signal, and the third clock domain includes a third clock signal.

The invention belongs to the technical field of cloud computing. The invention provides a method and a system for efficiently processing cloud data. The method comprises the following steps: receiving a first data behavior characteristic of each access end in a first period, predicting to obtain a second data behavior characteristic of the corresponding access end in a second period by using a first prediction model, and pre-estimating to obtain a total data processing load; when the total data processing load is higher than the data processing load threshold of the cloud, determining and grouping the access ends according to the response timeliness demand levels of the access ends; and in the second period, performing data synchronization processing on each access end in each group according to the sequence of the data processing priorities from high to low. According to the invention, grouping processing is carried out on the access end, and different data processing priorities are decided according to the grouping result, so that the condition of cloud crash is avoided, and the risk brought to the access end by different processing sequences can be reduced to the greatest extent.

In one embodiment, a sender node includes packet processing circuitry to associate, at layer 2 or 3 of Open Systems Interconnection (OSI) model, path identifiers and per-path packet sequence numbers with packets, wherein the path identifiers identify paths from the sender node to receiver nodes, and an interface to send the packets with the associated packet sequence numbers and path identifiers to the receiver nodes.

The invention relates to an IPv4 data message processing method and device based on longest prefix matching. The method comprises the following steps: acquiring an IPv4 data message, and extracting a destination IP address in the message; based on a longest prefix matching mode, extracting a preset number of bits from the high order of the destination IP address; generating a search index through the preset number of bits; determining a corresponding table item in a pre-stored FPGA rule matching table according to the lookup index; extracting a message processing rule according to pre-stored information of the table item; and executing a subsequent processing action on the IPv4 data message based on the message processing rule. According to the method and the device, the IPv4 message prefix matching can be carried out through FPGA hardware acceleration, a matching result is generated through single query, linear speed processing under million-level rules is supported, and meanwhile, the longest prefix priority principle is automatically maintained when the rules are changed through a CPU-FPGA collaborative updating mechanism.

This application provides a dial-up packet processing method. The method is applied to a dial-up packet processing system. The system includes a controller, an access gateway, a forwarding plane network element, and a control plane network element that are connected to each other. The method includes: The control plane network element receives a dial-up packet from the access gateway, where the dial-up packet is a dial-up packet sent by user equipment to the access gateway; the control plane network element sends an authentication request to an external server, where the authentication request is generated by the control plane network element based on the dial-up packet; the control plane network element receives dial-up success information sent by the external server; and the control plane network element determines the forwarding plane network element based on the dial-up success information.

A method of operating a network device is provided. The method can include obtaining incoming data packets, conveying the incoming data packets through a parallel data bus, and using a demultiplexer to split the incoming data packets being conveyed through the parallel data bus onto a plurality of separate independent data paths within the network device. The method can further include using a multiplexer to aggregate or merge data packets from the plurality of data paths onto an egress parallel data bus.

The invention discloses a relay chain cross-chain asynchronous consensus method, a readable storage medium and equipment. The relay chain cross-chain asynchronous consensus method comprises the following steps: acquiring a batch transaction packet corresponding to a target cross-chain transaction and transaction broadcast performance of an asynchronous consensus node group; based on the size of the batch transaction packet and the transaction broadcast performance of the asynchronous consensus node group, determining an optimal cross-chain transaction matching scheme which enables the asynchronous consensus node group to process the batch transaction packet at the fastest speed; and according to the optimal cross-chain transaction matching scheme, sending the batch transaction packets to an asynchronous consensus node group for asynchronous consensus processing. According to the method, the optimal cross-chain transaction matching scheme which enables the asynchronous consensus node group to process the batch transaction packets at the fastest speed is determined by using the batch transaction packets corresponding to the target cross-chain transaction and the transaction broadcast performance of the asynchronous consensus node group; and according to the optimal cross-chain transaction matching scheme, the batch transaction packets corresponding to the target cross-chain transaction are sent to the asynchronous consensus node group for asynchronous consensus processing, so that the load of the asynchronous consensus node group is greatly reduced, and the transaction packet processing speed of the asynchronous consensus node is improved.

The invention relates to a quality prediction method based on spatio-temporal dynamic graph convolution and mutual attention selection, and the method comprises the steps: collecting historical observation values of a target variable and a process variable in a chemical process, combining the historical observation values into a one-dimensional vector, carrying out the dimension rising processing of the time dimension of the one-dimensional vector, and carrying out the feature embedding and grouping processing, thereby obtaining a plurality of grouping features; respectively carrying out convolution operation on each grouping feature to obtain a corresponding time feature representation; obtaining a first time-space representation corresponding to the time feature representation based on the adaptive topological structure and a gating mechanism; aggregating each time feature representation through the attention weight to obtain an aggregated feature; carrying out average pooling and convolution operation on the aggregated features in the time dimension and the node feature dimension to obtain global features, time local features and node local features, and then obtaining second space-time representation; and performing residual connection on the second spatio-temporal representation and each first spatio-temporal representation, and outputting a predicted value of the target variable through a full connection layer.

A network device includes a storage device, a processor and a hardware acceleration circuit. The storage device is arranged to store program codes. The processor is arranged to load and execute the program codes to perform the following operation: during a network speed test period, calculating at least one transmission parameter. The hardware acceleration circuit is arranged to provide a function of hardware-accelerated packet processing, wherein during the network speed test period, the hardware acceleration circuit is further arranged to refer to the at least one transmission parameter to self-generate a plurality of packets and send the plurality of packets to another network device for network speed test.

The present application relates to the technical field of communications, and provides a packet processing method, a device, and a medium. The packet processing method comprises: receiving a deterministic service packet, determining a target anomaly processing strategy when it is determined that a target anomaly event occurs in the received deterministic service packet, and then performing a target processing operation on the deterministic service packet on the basis of the target anomaly processing strategy.

The invention provides a flow blocking method based on a distributed DPI system and related equipment, and the method comprises the steps: a main control board receives and analyzes a first blocking rule issued through a northbound interface, and issues a non-quintuple matching rule in the first blocking rule to a message processing unit in a full-quantity manner; the programmable switching chip forwards the network message to a message processing unit; the message processing unit performs matching judgment on the network message according to a non-quintuple matching rule; when identifying that the network message hits the non-quintuple matching rule, reporting the corresponding key feature information to the main control board; the main control board generates a second blocking rule according to the key feature information and issues the second blocking rule to the programmable switching chip; and the programmable switching chip writes the received second blocking rule into an internal configurable rule table, and executes traffic blocking when a subsequent network message hits the second blocking rule. According to the invention, accurate classification, identification and plugging of complex, encrypted or dynamically changed traffic in a network can be realized.

The invention provides a node state detection method and device, equipment and a medium, and the method comprises the steps: carrying out the grouping processing of a plurality of nodes, and obtaining a plurality of client nodes and a plurality of service nodes in a to-be-detected state; pairing the plurality of client nodes and the plurality of service nodes, performing first network detection on a plurality of paired first node combinations, and determining a plurality of target node combinations of which the node states are target states; and when the number of the multiple target nodes of the multiple target node combinations is greater than or equal to a preset number, performing second network detection on multiple second node combinations formed by pairing the multiple target nodes and the multiple first nodes, and determining node states of the multiple first nodes according to a detection result of the second network detection of the multiple second node combinations. The detection frequency of invalid pairing is reduced, the time consumption of network connectivity detection between the nodes is shortened, the node state is accurately determined, and the detection efficiency before deployment of the cloud platform storage cluster and the overall deployment efficiency are improved.

The present disclosure relates to the technical field of computers, and discloses a data packet processing method, apparatus, device, medium and product, the method comprising: obtaining in-band traffic information required for forwarding a data packet in a segmented network, the data packet being forwarded in the segmented network based on a segmented routing protocol, a segment routing header of the segment routing protocol includes an extensible field; filling the in-band flow information into the extensible field to obtain an extended target segment routing protocol; and forwarding the data packet to the next hop device node according to the expanded target segment routing protocol. By implementing the technical scheme of the invention, the in-band flow information is defined in the segment routing header, so that the real-time detection of the INT is realized through the forwarding of the data packet between the equipment nodes, the deployment of the INT detection is simplified, and the real-time detection effect of the INT is ensured.

Example embodiments of the present disclosure relate to methods, devices, and computer storage medium for communication. The method comprises: receiving, at a terminal device from a network device, at least one of the following parameters associated with a protocol data unit (PDU) set: a first parameter indicating whether all PDUs in the PDU set are needed by an application layer; a second parameter indicating whether the PDU set is to be discarded when an additional PDU set associated with the PDU set is lost or discarded; a third parameter indicating a discard timer for the PDU set; or a fourth parameter indicating a reordering timer for the PDU set, and processing the PDU set based on the received at least one of the parameters. In this way, packet processing with PDU set granularity is supported, and PDU-set based handling is also supported. Therefore, communication quality and network performance are improved.

A secure communication system enabling secure transport of information is disclosed. The system comprises a secure network with one or more packet processing units connected by links through an internal communication system. The secure network transports packets of information between credentialed and authenticated agents. Each packet is associated with a visa issued by a visa service. The visa specifies the procedures governing the processing of the packet by the packet processing units as it is transported along a compliant flow, between agents thorough the network, according to a set of policies specified in a network configuration. Packet processing units include docks and forwarders. Adaptors serving the agents communicate with the network through tie-ins to docks. The system also includes and admin service, accessible to one more admins, that facilitates configuration and management of the network.

The invention relates to the technical field of fault detection, and discloses a big data-based machine room equipment fault diagnosis method and system, and the method comprises the steps: collecting load information data streams generated by all equipment in a machine room in real time, and carrying out the filtering, and obtaining a filtered information sequence; performing grouping processing on the filtered information sequence by using a K-means clustering algorithm to obtain a dynamic change mode group, calculating a key statistical index, and obtaining an abnormal feature set; if the abnormal feature set exceeds a preset variance threshold, classifying the abnormal feature set and determining a fault mode to obtain a fault mode category set; matching the fault mode category set with a preset fault mode database to obtain a fault mode matching result, and generating a corresponding risk assessment report to obtain a risk assessment report; and adjusting the operation parameters of the machine room equipment to obtain the equipment operation parameters. According to the method, equipment faults can be diagnosed in time.

The invention discloses a network data packet processing method, system and device based on an XDP and DPDK collaboration mechanism and a storage medium, and the method comprises the steps: carrying out the filtering of network traffic through an XDP program in a network card drive layer of a kernel mode, and redirecting to a DPDK program of a user mode; and performing related operations, such as forwarding, encryption and decryption, NAT and the like, on the redirected data packet through a DPDK program in a user mode according to the heat preservation processing logic of the DPDK configuration file or the set processing logic. According to the method, different XDP programs can be loaded for different network ports, and the method has good function extensibility; and irrelevant or malicious messages are discarded in a kernel mode, so that the occupancy rate of a memory and a CPU (Central Processing Unit) is greatly reduced, and then the data traffic forwarding rate is improved through the DPDK.