341 results about "Physical network" patented technology

The invention discloses a distribution-micro collaborative operation simulation optimization method, which belongs to the technical field of simulation optimization, and comprises the steps of preprocessing grid-connected point voltage data, tie line power data and communication time delay data, constructing a power distribution network power flow physical network following a Kirchhoff's law, outputting a source load power prediction curve by using a long short-term memory network algorithm, and calculating the distribution-micro collaborative operation according to the source load power prediction curve. And a distribution-micro collaborative simulation optimization model is obtained based on residual error rolling correction tie line impedance parameters, a delay penalty term is set in a target function in combination with the preprocessed communication delay data, a power regulation instruction is obtained by using a particle swarm optimization algorithm, and a dynamic simulation video stream is generated. According to the invention, through rolling correction of the tie line impedance parameters and setting of the delay penalty term positively correlated with the time delay, the problem of control failure caused by physical deviation caused by model parameter solidification and communication time delay accumulation is solved, and the defects of voltage deviation calculation distortion and inaccurate network loss evaluation are eliminated. And the simulation precision and the operation stability of distribution-micro cooperation are improved.

The invention discloses a dynamic resource optimal configuration method for an electric power communication network, and belongs to the technical field of electric power system communication. The problems of low communication resource utilization rate and poor real-time response in the existing electric power communication are solved, the communication resources of physical network equipment are acquired through a network management system, and network operation state data and traffic flow characteristics are acquired in real time by utilizing a network probe or NETCONF / YANG; the method comprises the following steps: identifying service flows flowing into a communication network by adopting a deep packet inspection technology, classifying the service flows according to security partitions of power services, and mapping different types of service flows to different service levels; a quantitative QoS demand template is established for each type of services; and on the basis of the network operation state data, the service flow characteristics and the QoS demand template, constructing a multi-objective optimization model which takes guarantee of the service quality of key services as a highest priority objective, and solving by adopting an optimization algorithm to obtain an optimal resource allocation strategy. The method is suitable for optimal configuration of dynamic resources of the power communication network.

The invention discloses an intelligent self-healing operation and maintenance method and system for a power communication network based on digital twinning, and relates to the technical field of power communication. The method comprises the following steps: constructing an electric power communication twinborn space on a three-dimensional simulation platform based on a digital twinborn technology; predicting a communication fault risk coefficient of each sub-region in a future time period in combination with historical operation data; dynamically correcting the monitoring depth according to the risk coefficient and formulating a differential monitoring mechanism; and data monitoring is carried out according to a set mechanism in a target time period, and fault sensing, positioning and self-healing repair are completed in a twin space. According to the method, virtual mapping of a physical network is realized through a digital twinning technology, a mode of combining intelligent prediction and dynamic monitoring is adopted, an operation and maintenance mode is converted into active prevention from passive response, the utilization efficiency of operation and maintenance resources is effectively improved, and the intelligent operation and maintenance level and the system reliability of a power communication network are enhanced.

The invention discloses a network interface card with autonomous access authentication, and provides an integrated hardware authentication mechanism. The EAP-TLS client protocol stack is integrated on the bottom layer of the network card, so that the defect that an authentication module depends on a host system, manual intervention and the like in the existing scheme is overcome, TLS handshake and certificate verification are independently completed on the network card side, and authentication interaction is automatically initiated. The network interface card serves as a unique identity certificate of an access network, a client certificate and a corresponding private key are embedded in the network interface card and are stored in a protected nonvolatile area, and data confidentiality is effectively enhanced. The network card is used as an identity certificate and network access equipment at the same time, and the integrated design reduces the dependence on the service capability of management personnel. A traditional physical network card and an automatic authentication protocol are fused, and the method is suitable for application environments with high requirements for access control and authentication safety, such as an enterprise intranet and a government affair private network.

The invention relates to a debugging method for an automatic system of an intelligent substation, and relates to the technical field of intelligent substations, and the method comprises the steps: analyzing a substation system configuration description file; obtaining physical network topology configuration information; mapping the virtual terminal connection relation to physical network topology configuration information; calculating a congestion delay parameter of each physical link based on the association table and a set fault scene; generating a test excitation sequence according to the to-be-tested protection logic, and distributing a transmission delay offset for a test message in the test excitation sequence according to the congestion delay parameter; sending a test excitation sequence carrying the transmission delay offset to the tested electronic equipment and monitoring an action message fed back by the tested electronic equipment; calculating a theoretical effective time window of the action message; and judging a debugging result according to whether the timestamp of the monitored action message falls into a theoretical effective time window or not. The method has the effect of improving the comprehensiveness of debugging of the automatic system of the intelligent substation.

The invention relates to a dynamic reconstruction method and system for a digital twin optical switching network, and relates to the technical field of optical communication network intellectualization, in particular to a dynamic reconstruction system applied to an optical switching network, comprising the following steps: in a digital twin, establishing a topological graph capable of being dynamically updated in real time by adopting multi-dimensional real-time topology perception, and combining key parameter data to obtain a topological graph; and high-precision twinning synchronization is established for the digital twinning body and the physical network state. And service intention analysis is performed on service requests or fault triggering reconstruction through an intention driving control layer, different services are constrained and mapped, and a constraint set is quantified. And combining the constraint set with source and destination nodes, and analyzing on a topological graph to generate a candidate strategy. And performing simulation verification by the digital twin through a simulation engine and pre-verification, selecting an optimal strategy, and outputting an instruction. In a physical network layer, physical processing such as port switching and light emitting of an optical module is executed according to an instruction, and performance deviation is corrected through closed-loop feedback. According to the invention, high-reliability and high-efficiency dynamic optical path reconstruction is realized.

The invention provides a graph data communication intensity mapping method and system based on optical transport network topology. According to the method, an adjacent matrix is established by extracting graph data structure information, vertex centrality and a clustering coefficient are calculated, and a graph data communication feature matrix is generated; oTN network equipment information and optical link topology are collected, link parameters and wavelength resource states are measured, and an OTN physical network feature matrix is obtained; establishing a double-layer mapping relation matrix through a resource mapping algorithm; integrating the communication frequency, the time delay sensitivity, the bandwidth requirement, the wavelength resource and the topological matching degree, and calculating a communication strength weight matrix; generating a candidate layout scheme, performing multi-dimensional evaluation, and determining an optimized data layout scheme; and dynamically adjusting the mapping relation by adopting an incremental updating algorithm. According to the invention, the efficient collaboration of the graph computing task and the optical transport network resource is realized, and the performance and resource utilization efficiency of the distributed graph computing system are obviously improved.

The application discloses a kind of power industrial control terminal network isolation method and system based on process security label binding;Belong to the technical field of power system network security, its operating steps include: decoupling physical network resources into independent partitions and mapping to independent user-mode network protocol stack instances;Through the bottom flow direction rule, the in-bound traffic is accurately delivered to the corresponding partition;Identify process security label at the application layer, establish the forced mapping of process and specific protocol stack instance and link;Through the controlled shared memory channel, realize the safe data interaction between partitions.The application realizes strong logical isolation on unified hardware, through the forced binding of process identity and network link, reduces the privilege promotion and horizontal penetration risk caused by traditional protocol stack sharing, while limiting the scope of failure impact, without relying on external physical isolation equipment, significantly improves the endogenous security protection capability of industrial control system network boundary.

This invention relates to the field of electronic digital data processing and digital information transmission technology, specifically to a cloud-based intelligent data processing system for multiple nodes. The system includes a data preprocessing unit, a topology-aware scheduling engine, a graph neural network device, and a task execution unit. The data preprocessing unit extracts the temporal dependencies and logical associations of the input data stream to generate a directed acyclic graph (DAG). The topology-aware scheduling engine maps the graph to the physical network topology and calculates link bandwidth margin and congestion status. The graph neural network device jointly encodes node computational load and edge link status to output a task allocation strategy. The task execution unit schedules strongly dependent tasks to adjacent nodes with sufficient link margin and idle computing power according to the strategy, and dynamically migrates tasks to alternative path nodes based on link packet loss rate during execution. This invention reduces data transmission latency across switches in multi-node cascading and avoids node computing power idleness caused by local link congestion.

The present disclosure provides an information transmission method and apparatus, and a storage medium. The method is applied to a digital twin network which includes a physical network entity and a twin network entity of the physical network entity, wherein the physical network entity includes a first controller, and network element devices of a first user plane communicatively connection to the first controller, both of which are based on a software-defined network architecture; and the twin network entity includes a second controller, and network element devices of a second user plane communicatively connected to the second controller, both of which are based on a software-defined network architecture; the second controller is used to obtain user plane information from the first controller and send the user plane information to a corresponding network element device of the second user plane, the user plane information is obtained by the first controller from a network element device in the first user plane, and transmission of the user plane information of the physical network entity to a network element device of a user plane of the twin network entity is achieved.

To provide systems and methods for virtual Layer 2 networks.SOLUTION: The method comprises providing a virtual Layer 3 network within a virtualized cloud environment of a virtualized cloud network (VCN) 602. The virtual Layer 3 network may be hosted by the underlying physical network. The method also includes providing a virtual Layer 2 network deployed in the virtualized cloud environment and hosted by the underlying physical network of the cloud service provider infrastructure (CSPI) 601. The virtual Layer 2 network may be hosted by the underlying physical network.SELECTED DRAWING: Figure 6

The application discloses an SSL VPN tunnel transmission method for an IP layer, and relates to the technical field of network communication.The method constructs an IP virtual tunnel outside an SSL session, and directly encapsulates and transmits complete IP messages, thereby completely breaking through the limitation that a traditional SSL VPN only supports a Web proxy, and transparently passing through the tunnel for TCP services, UDP streaming media, ICMP network diagnostic messages, and the like, so that the method realizes remote access of the IP layer in a true sense, and a server adopts a south-north decoupling design, a virtual network port is used as a southward interface to communicate with a client tunnel, and the northward directly interacts with an intranet physical network card through a system routing table, without analyzing transport layer content, without maintaining a TCP connection state, and only performing IP layer transparent forwarding, so that the processing cost is greatly reduced, and the throughput performance is obviously improved.

The application relates to the field of 5G communication technology, and discloses a 5G network slice security isolation method and system.The 5G physical network is divided into multiple independent slices, each slice contains an access node, a core node and an output node, the access node is used for security authentication, the terminal matching index is dynamically calculated based on terminal state parameters and authentication matching times; the core node is used for a security management module, the flow security index is obtained based on the weighted comparison of the current flow and a reference value and historical flow; the output node is used for security evaluation, the output security index is obtained by the weighted comparison of the current communication times and a reference value and historical times; the access, flow and output indexes are compared with corresponding threshold values; if any one is abnormal, the current slice is directly isolated; the deviation of each security index and the threshold value is weighted calculated and compared with the threshold value; if greater than or equal to the corresponding threshold value, the current slice is isolated, multi-dimensional security isolation of the 5G network slice is realized, and the balance between precision and calculation efficiency is achieved.

The invention relates to the technical field of digital twinning technology and network communication optimization, in particular to a method and a system of a digital twinning network simulation driven NAT (Network Address Translation) optimization engine, comprising the following steps: constructing a virtualization mapping model of a physical network; simulating an NAT (Network Address Translation) process in a digital twin environment through a real-time simulation engine; dynamically adjusting an NAT (Network Address Translation) rule and a load balancing strategy of a physical network based on a simulation result; executing safety protection operation in combination with a machine learning algorithm; the method has the beneficial effects that a digital twinning technology and NAT optimization are deeply fused, and a visual and visual management platform is provided for network management personnel. Management personnel can monitor the network state and the NAT performance in real time through the platform and deeply analyze the network problem root by means of a simulation result, and complex field troubleshooting and manual strategy adjustment do not need to be carried out. Therefore, the difficulty and the cost of network management are reduced, the accuracy and the timeliness of management are improved, and the network management is promoted to develop towards the intelligentization and automation directions.

The invention provides an unmanned aerial vehicle multi-hop network intelligent resource allocation method based on deep reinforcement learning, and the method comprises the steps: abstracting task input into a virtual network, abstracting an unmanned aerial vehicle cluster into a physical network, and regarding a resource allocation process as embedding from the virtual network to the physical network. And processing a single node in the virtual network every time by taking the network state information as input, and updating the physical network resource information according to an output result. And a return value is obtained by counting the embedding success rate, evaluating the resource cost-effectiveness ratio and the network QoS (Quality of Service) performance. And calculating a dominant function expectation corresponding to the action by using the intelligent resource allocation network, and updating the strategy under constraint based on a strategy gradient optimization method until the network converges. Finally, task input is converted into a virtual network request, the virtual network request is input into the trained resource allocation network, an optimal embedding strategy is obtained, and efficient allocation of resources is achieved.

The application provides a digital twin architecture of a network, a network session processing method and device, the method comprising: a data acquisition and control entity configured to acquire characteristic data of a physical network corresponding to a virtual network; a core entity connected to the data acquisition and control entity, configured to construct a network-related model corresponding to the physical network according to the characteristic data acquired by the data acquisition and control entity, the network-related model being configured to perform convergent processing on a network session event; and a user entity connected to the core entity, configured to visually display the network based on the network-related model. In the embodiment of the application, the digital twin architecture comprehensively uses perception, calculation, modeling, simulation and other technologies, realizes virtual-real mapping and interaction, can fully train and efficiently simulate more intelligent applications with high error cost, reduces the risk generated when a new technology is verified in a physical space, and reduces the possibility of errors occurring when the new technology is deployed in a real environment.

The application relates to a secure transmission scheme selection method and device, computer equipment and a storage medium. The method comprises the following steps: performing transmission rate calculation according to transmission state information of a transmission node, relay state information of a relay node and reception state information of a reception node, and obtaining a transmission rate; performing model training on a to-be-trained multi-agent model according to the transmission rate, and obtaining a target multi-agent model; and determining a target secure transmission scheme according to agent state information of a transmission process and the target multi-agent model. The method can realize strong connectivity of data transmission between a physical network and an information network, and improve the security of data transmission.

The application particularly relates to a spatiotemporal delivery risk modeling method, which can deeply fuse information of original delivery data in three dimensions of physics, network and social-semantics by constructing a unique ternary space knowledge graph, compared with prior art, forms a more comprehensive and profound risk correlation network, thereby being beneficial to discovering hidden risk paths across dimensions. On the basis of the ternary space knowledge graph, by configuring a core entity set corresponding to a new delivery event and the ternary space knowledge graph as inputs of a dynamic encoder, evolution of a graph topology structure and time dependence of node attributes can be captured in real time, and the entity can be encoded with the aid of rich global correlation information of the knowledge graph, thereby greatly improving the breadth and depth of risk identification and improving the precision performance of a risk prediction result.

The invention relates to a method for realizing non-real-time instruction communication of upper and lower computer modules of CNC (Computer Numerical Control) based on a virtual network card. The method comprises the following steps of: respectively accessing the upper computer module and the lower computer module into a virtual network interface card; the upper computer module initiates non-real-time instruction communication; encapsulating the communication data; the packaged data packet is submitted to a PCIe bus through a virtual network card drive of the upper computer module, and the data is directly transmitted to the lower computer module; and the virtual network card driver of the lower computer module receives the data transmitted through the PCIe, de-encapsulates the data, and sends the original instruction data to the lower computer module. The method, the system, the device, the processor and the computer readable storage medium for realizing the non-real-time instruction communication of the CNC upper and lower computer modules based on the virtual network card have the advantages of high performance, low delay, high reliability, strong isolation and more stable and reliable communication; development is convenient, compatibility is high, the resource utilization rate is high, physical network cards and external network ports do not need to be occupied, and hardware resources are saved.

The embodiment of the application provides a network system, a communication method, a network node and a storage medium. The network system comprises: a plurality of network nodes, each network node comprising one or more virtualization nodes; an RDMA signaling packet between two virtualization nodes is used to establish an RDMA connection between the two virtualization nodes, the encapsulation of the RDMA signaling packet comprises an RDMA protocol header, a virtual network IP protocol header, a virtualization protocol header and a physical network IP protocol header, the virtualization protocol header of the RDMA signaling packet comprises a virtualization identifier of a virtualization node sending the RDMA signaling packet, and different virtualization identifiers are used to identify different virtual networks; an RDMA data packet between the two virtualization nodes is used for data transmission after the RDMA connection is established, the encapsulation of the RDMA data packet comprises an RDMA protocol header and a physical network IP protocol header, and the physical network IP protocol header of the RDMA data packet comprises a virtualization identifier of a virtualization node sending the RDMA data packet, thereby reducing data transmission overhead.

The invention discloses a high-risk attack identification and dynamic defense method for an electric power information physical system, and relates to the field of safety of the electric power information physical system. The method comprises the following steps: firstly, constructing a weight coloring Petri network seven-tuple model, and describing the cross-domain propagation time sequence characteristics of the continuous load redistribution attack in an information-physical network by introducing a time delay parameter; then optimizing the attack triggering and migration probability based on mixed strategy Nash equilibrium; a top-k sequence mining algorithm is adopted to identify a high-risk attack mode from the attack event sequence, and a vulnerability index is defined to quantify the threat degree of the attack; and finally, modeling defense resource allocation as a combined dobby machine problem, and realizing self-adaptive adjustment of a defense strategy through a weight updating mechanism and sliding window optimization. According to the method, an active defense system of'accurate perception-intelligent decision-closed loop optimization 'can be formed, so that the defense capability of an electric power information physical system facing continuous load redistribution attacks is improved.

The invention belongs to the technical field of communication, and relates to a network traffic configuration method and device, electronic equipment and a computer readable storage medium. The network traffic configuration method at least comprises the following steps: acquiring a virtual network traffic configuration request, wherein a virtual network comprises a plurality of virtual links; acquiring information of a physical network, wherein the physical network comprises a plurality of physical links; obtaining a bandwidth demand of a virtual link and a bandwidth capacity limit of a physical link; mapping each virtual link to a plurality of actual mapping paths on a physical network by adopting a path divisible mapping algorithm; each actual mapping path comprises a plurality of physical links which are connected in sequence, and the actual mapping paths can meet the bandwidth requirements of the virtual links and the bandwidth capacity limitation of the physical links at the same time; packaging the information containing the actual mapping path in a data packet; and the data packet can be transmitted along the actual mapping path. According to the network flow configuration method, the newly added virtual link can be conveniently embedded into the physical network.

The application discloses an OTN digital twin network generation method and system based on longitudinal federal learning, exchanges data after homomorphic encryption of data of each single-domain physical network through longitudinal federal learning, constructs a single-domain training set according to a fault root cause label and related alarm information corresponding to the fault root cause label, trains a cross-domain fault root cause identification model through the single-domain training set, judges convergence according to a public model parameter and a model parameter update amount in the training process, and thus generates an OTN digital twin network according to the trained cross-domain fault root cause identification model and topology information of each single-domain physical network. The embodiment of the application meets the privacy protection demand of related data such as alarm information, user service data and the like of each single domain in a multi-domain network, and in the case that a multi-domain orchestration system is an edge server, the method of the embodiment of the application can also utilize the computing capacity of the edge device for parallel training, and improve the model training efficiency.

The invention relates to a container state detection method and device, computer equipment and a storage medium. The method comprises the following steps: deploying an isolation environment in each container of a physical network, and setting a detection tool for detecting the state of the container and a detection script of the detection tool in the isolation environment; when the information of the to-be-detected container is obtained, sending the information to a proxy probe service pre-deployed in a physical network so as to match the to-be-detected container from the physical network; and controlling the detection tool to execute the detection script in the isolation environment of the to-be-detected container through the proxy probe service, and outputting state information of the to-be-detected container determined after the detection script is executed. When the method is used for detecting the state of the container, network isolation can be maintained, and potential safety hazards are avoided.

According to the method for network communication in the Kubernetes cluster, a first POD, a first network bridge and a first network card are deployed in a first node in the cluster, and the first network card belongs to a first physical network; the first network bridge is connected with a first POD network card corresponding to the first POD and a first virtual network card, and the first virtual network card is generated based on the first network card and has an MAC address different from that of the first network card; the first POD network card and the first network card belong to the same subnet. The method comprises the following steps: a first network bridge receives a first ARP response sent by a first POD network card, and modifies an initiator MAC of the first ARP response into an MAC address of a first virtual network card; the first ARP response corresponds to a first ARP request sent by the first requester. And the first network bridge receives a first request sent by the first request direction to the first POD through the first virtual network card. And the first network bridge modifies the receiver MAC of the first request into the MAC address of the first POD network card.

This application discloses a method, system, and apparatus for fault location across IB and RoCE networks. The method includes: acquiring original indicators of IB and RoCE network classes in the IB and RoCE network environments; determining unified physical network category information based on fault location analysis requirements and the target scenario; mapping the standardized original indicators of IB and RoCE network classes to the unified category information to obtain IB-dimensional and RoCE-dimensional indicator mapping information; filtering out unsatisfactory original indicators using preset conditions and determining static fault sources for the indicator items using the IB / RoCE-dimensional mapping; analyzing indicators within a preset period to identify trend-based abnormal indicator information and determine the corresponding dynamic fault sources for the indicator items; and combining static and dynamic fault sources to finally determine the comprehensive fault source for the indicator items. This method enables comprehensive and accurate fault location across IB and RoCE networks.

The application discloses an intelligent network card, a cloud server and a traffic forwarding method. The intelligent network card comprises a network virtualization component and a physical network card, a symmetric hash module and a plurality of groups of data flow forwarding queues connected with the symmetric hash module; a plurality of software CPUs are arranged on the network virtualization component; the data flow forwarding queues are arranged to correspond to unique software CPUs; the symmetric hash module is used for being connected with the physical network card and a virtual machine in communication respectively, performing symmetric hash operation on five-tuple information of a forward data flow sent by the virtual machine and five-tuple information of a reverse data flow sent by the physical network card respectively, sending the forward and reverse data flows belonging to a same session to data flow forwarding queues corresponding to operation results, and enabling the forward and reverse data flows belonging to the same session to be forwarded by software CPUs corresponding to the data flow forwarding queues. The application removes session cross-CPU lock overhead and core-to-core communication overhead, and greatly improves new connection performance.

This invention discloses a multi-regional power system defense method based on a virtual network, specifically comprising: constructing a physical network of the power system; dividing the entire physical network of the power system into multiple mutually coupled regions; calculating the comprehensive key index of the i-th region; determining key regions based on the comprehensive key index; constructing a virtual network based on the existing physical topology of the power system, and allocating resources to key regions during the construction of the virtual network; then introducing a coupling matrix between the physical network and the virtual network to connect the virtual network and the physical network; optimizing the constructed virtual network; and using the optimized virtual network to absorb and disperse attack signals. This invention improves the collaborative defense capability and operational resilience of the smart grid when subjected to false data injection attacks, while also taking into account cost control and system feasibility.

This invention relates to a method, system, device, and storage medium for creating Virtual Machines (VFs). It monitors the throughput data of physical network interface cards (NICs) in a network interface card (NIC) resource pool. The throughput data includes the number of bytes received, bytes sent, and cumulative time. The network utilization of each physical NIC in the resource pool is calculated using the throughput data and the physical NIC interface speed. The number of VFs that can currently be created for each physical NIC in the resource pool is determined. The physical NIC with the largest product of its network utilization and the number of VFs it can currently create is selected to create the VF. This method automatically selects the physical NICs for VF creation based on both network utilization and the number of VFs that can be created, eliminating the need for manual intervention and balancing the number of VFs configured across different physical NICs, thus facilitating the balancing of traffic load across physical NICs.

The application provides an entity network modeling method and device based on an agent system, including a first agent and a second agent in communication with each other, the first agent is used for constructing a data relationship graph of the entity network, and the second agent is used for generating a data model of the entity network according to the data relationship graph. In the application, the problems that a traditional data modeling method needs to master a large amount of business field and data statistical knowledge, has poor generalization ability, and is not timely, etc. are solved, the global data is automatically and timely preprocessed, relationship is recognized, and data modeling is performed through the agent and the prompt word, obvious advantages are obtained in operability, automation, construction cost, generalization, and real-time performance, and the bidirectional mapping, dynamic interaction, and real-time connection of the 6G physical network and the digital twin network can be effectively supported.