510 results about "Physical network" patented technology

The invention relates to the technical field of industrial distributed control system architecture, and discloses a dual-redundancy design method for a virtual controller VDPU, which comprises the following steps of: deployment of a four-network-port redundant network architecture: dividing four physical network ports into two groups of independent channels, and simultaneously configuring a network link automatic switching mechanism, the working states of the four network ports are monitored in real time, then double isolation of a physical layer and a protocol layer is achieved, and an independent heartbeat transmission channel is established; main / standby heartbeat monitoring and switching control: the main / standby controller periodically interacts state information packets through a special heartbeat channel, and establishes a three-level fault determination mechanism at the same time to perform seamless main / standby switching; a multi-mode data synchronization mechanism is implemented, namely initialization synchronization, increment synchronization during operation and exception recovery synchronization are started, separation of heartbeat signals and data synchronization can be realized through two groups of independent channels, and the fault-tolerant capability and the switching efficiency of the system are improved, so that the operation stability of the system is guaranteed.

The invention discloses a substation dispatching data network security communication method based on quantum tunnel encryption, relates to the technical field of large-scale power grid security assurance, and aims to solve the problems of endpoint security loss, boundary solidification, weak quantum threat resistance and inflexible deployment of a dispatching data network. According to the method, the establishment of a secure session and the encapsulation, encryption and restoration of data are realized by integrating quantum key distribution and a post quantum cryptographic operation module through quantum secure communication terminals deployed in a dispatching master station and a transformer substation. According to the method, application layer encryption and signature are carried out on telecontrol protocol data, a double-layer encryption tunnel is constructed, and transmission of various physical network media is supported. By means of the scheme, end-to-end protection is achieved, quantum attacks are effectively resisted, double encryption is provided, and networking flexibility and smooth evolution are improved.

The invention discloses a distribution-micro collaborative operation simulation optimization method, which belongs to the technical field of simulation optimization, and comprises the steps of preprocessing grid-connected point voltage data, tie line power data and communication time delay data, constructing a power distribution network power flow physical network following a Kirchhoff's law, outputting a source load power prediction curve by using a long short-term memory network algorithm, and calculating the distribution-micro collaborative operation according to the source load power prediction curve. And a distribution-micro collaborative simulation optimization model is obtained based on residual error rolling correction tie line impedance parameters, a delay penalty term is set in a target function in combination with the preprocessed communication delay data, a power regulation instruction is obtained by using a particle swarm optimization algorithm, and a dynamic simulation video stream is generated. According to the invention, through rolling correction of the tie line impedance parameters and setting of the delay penalty term positively correlated with the time delay, the problem of control failure caused by physical deviation caused by model parameter solidification and communication time delay accumulation is solved, and the defects of voltage deviation calculation distortion and inaccurate network loss evaluation are eliminated. And the simulation precision and the operation stability of distribution-micro cooperation are improved.

The invention relates to a ship network security digital twinning full life cycle maintenance and monitoring method, which comprises the following steps: step 1, constructing a digital twinning 3D virtual model of a ship network, the 3D virtual model is based on an actual network topology structure of a ship, and comprises all network nodes including a switch, a router, a sensor and a control system; and real-time rendering is carried out on local equipment or a cloud platform. According to the method, the real-time mapping of the high-fidelity 3D virtual model and the physical network is constructed, the three-dimensional and visual monitoring of the ship network state is realized, the cognitive efficiency of operation and maintenance personnel on the complex network topology is greatly improved, the cloud-side collaborative intelligent analysis architecture is adopted, and the real-time monitoring of the ship network state is realized. According to the method, the local real-time threat detection capability in an unstable network environment is ensured, the defense level of the system is continuously improved through cloud deep learning and model optimization, multi-source heterogeneous data acquisition and intelligent analysis are combined, and hidden attacks and abnormal behaviors which are difficult to find by a traditional method can be accurately recognized.

Optimizing traffic routing operations in a two-box WLAN setup including a gateway device and a WAN adaptor device. The WAN adaptor device receives initial packets of a traffic flow from a client device, and sends the initial packets to the gateway device for slowpath (SP) processing. The gateway device creates fastpath (FP) processing rules for the traffic flow, including traffic modifications resulting from the SP processing, and sends the FP processing rules to the WAN adaptor device. The WAN adaptor device applies the FP processing rules to perform the traffic modifications on subsequent packets of the second traffic flow. The FP processing rules enable the WAN adaptor device to forward the subsequent packets of the traffic flow to the client device directly, without bridging to the gateway device for FP processing.

The invention discloses an active congestion avoiding method and system based on flow prediction, and relates to the technical field of network communication, and the method comprises the steps: collecting the network state information of a physical network in real time; dynamically synchronizing and mapping network state information of a physical network to a virtual mirror image by using a digital twinning technology; under the virtual mirror image, traffic prediction is carried out on the network state information based on a time domain convolutional network model, and a traffic prediction result is obtained; the traffic prediction result is transmitted into a scheduling strategy engine for dynamic analysis and evaluation, and an active traffic scheduling strategy for traffic prediction is determined; issuing the active flow scheduling strategy to a physical network for execution; and according to the latest network state information, an active flow scheduling strategy is dynamically adjusted to form a closed-loop adaptive system. According to the method, the virtual mirroring of the network state information is realized by using the digital twin technology, the traffic prediction result is obtained by using the time domain convolutional network model, and the traffic scheduling strategy is actively adjusted before traffic congestion occurs, so that congestion is effectively avoided.

The invention discloses a concentrator network switching decision-making system and method based on communication quality evaluation. Safe and intelligent switching is achieved through cooperation of multiple modules. Constructing a physical, network and application layer multi-dimensional index system, and generating a communication quality score by adopting a dynamic weight and a random forest; the safety protection module ensures signal legality through radio frequency fingerprint and digital signature two-factor authentication; the switching decision is based on a double-threshold mechanism, trend prediction and a pre-switching mechanism, so that the interruption time is shortened; and the privacy protection adopts dynamic differential privacy and federated learning to realize data desensitization and model security aggregation.

The invention relates to the technical field of computer networks, and discloses a communication method and device for a computing node, equipment and a storage medium. The method is applied to a computing node, the computing node comprises a virtual switch and a physical network card, a plurality of virtual network interfaces are created in the virtual switch, the plurality of virtual network interfaces are in one-to-one correspondence with a plurality of service networks, and the physical network card is connected with at least one other node. The method comprises the following steps: receiving a target data message of a target service network through a target virtual network interface of a virtual switch; and sending the target data message to a corresponding node in the at least one other node through the physical network card. A plurality of virtual network interfaces are created in the virtual switch, and one virtual network interface corresponds to one service network, so that deployment of a plurality of service networks in the virtual switch is realized, network multiplexing in the virtual switch is realized, and the problem that physical network card resources of computing nodes are insufficient is solved. And a plurality of virtualized networks cannot be provided.

The invention discloses a dynamic resource optimal configuration method for an electric power communication network, and belongs to the technical field of electric power system communication. The problems of low communication resource utilization rate and poor real-time response in the existing electric power communication are solved, the communication resources of physical network equipment are acquired through a network management system, and network operation state data and traffic flow characteristics are acquired in real time by utilizing a network probe or NETCONF / YANG; the method comprises the following steps: identifying service flows flowing into a communication network by adopting a deep packet inspection technology, classifying the service flows according to security partitions of power services, and mapping different types of service flows to different service levels; a quantitative QoS demand template is established for each type of services; and on the basis of the network operation state data, the service flow characteristics and the QoS demand template, constructing a multi-objective optimization model which takes guarantee of the service quality of key services as a highest priority objective, and solving by adopting an optimization algorithm to obtain an optimal resource allocation strategy. The method is suitable for optimal configuration of dynamic resources of the power communication network.

The invention discloses an intelligent self-healing operation and maintenance method and system for a power communication network based on digital twinning, and relates to the technical field of power communication. The method comprises the following steps: constructing an electric power communication twinborn space on a three-dimensional simulation platform based on a digital twinborn technology; predicting a communication fault risk coefficient of each sub-region in a future time period in combination with historical operation data; dynamically correcting the monitoring depth according to the risk coefficient and formulating a differential monitoring mechanism; and data monitoring is carried out according to a set mechanism in a target time period, and fault sensing, positioning and self-healing repair are completed in a twin space. According to the method, virtual mapping of a physical network is realized through a digital twinning technology, a mode of combining intelligent prediction and dynamic monitoring is adopted, an operation and maintenance mode is converted into active prevention from passive response, the utilization efficiency of operation and maintenance resources is effectively improved, and the intelligent operation and maintenance level and the system reliability of a power communication network are enhanced.

The invention discloses a network interface card with autonomous access authentication, and provides an integrated hardware authentication mechanism. The EAP-TLS client protocol stack is integrated on the bottom layer of the network card, so that the defect that an authentication module depends on a host system, manual intervention and the like in the existing scheme is overcome, TLS handshake and certificate verification are independently completed on the network card side, and authentication interaction is automatically initiated. The network interface card serves as a unique identity certificate of an access network, a client certificate and a corresponding private key are embedded in the network interface card and are stored in a protected nonvolatile area, and data confidentiality is effectively enhanced. The network card is used as an identity certificate and network access equipment at the same time, and the integrated design reduces the dependence on the service capability of management personnel. A traditional physical network card and an automatic authentication protocol are fused, and the method is suitable for application environments with high requirements for access control and authentication safety, such as an enterprise intranet and a government affair private network.

The invention provides a data transmission method based on a bus technology and a related device, and is applied to the technical field of computers. According to the embodiment of the invention, the serial number of the message and the feedback information from the second computing device are synchronized to the aggregation network card, the aggregation network card carries out unified management configuration, and after the aggregation network card confirms the network card corresponding to the sent message, the aggregation network card notifies the network card sending the corresponding message to release the cache of the message. According to the embodiment of the invention, reliable transmission of data between network equipment can be ensured, the data cached in the physical network card can be effectively ensured to be released, and the situation that the network card which needs to release the message cache cannot be released and the cache overflows is avoided.

The invention discloses a network communication system and method, and belongs to the technical field of network communication. The system comprises a master device, a data transfer module and a slave device. The main equipment comprises a plurality of physical network nodes which are all in communication connection with the data transfer module; the slave device is provided with virtual network nodes in one-to-one correspondence with the physical network nodes, and the virtual network nodes are in communication connection with the data transfer module through the physical network card of the slave device. The slave device is used for acquiring first service data including a target logic address, determining a corresponding target physical network node, processing the service data by a corresponding source virtual network node, and sending the service data to the data transfer module through a physical network card, and the processed data includes a source physical address of the source virtual network node. And the data transfer module determines a corresponding target physical network node according to the source physical address, and forwards the first service data to the node. The problem of confusion transmission of data packets between peer-to-peer communication nodes is effectively solved.

The invention relates to a debugging method for an automatic system of an intelligent substation, and relates to the technical field of intelligent substations, and the method comprises the steps: analyzing a substation system configuration description file; obtaining physical network topology configuration information; mapping the virtual terminal connection relation to physical network topology configuration information; calculating a congestion delay parameter of each physical link based on the association table and a set fault scene; generating a test excitation sequence according to the to-be-tested protection logic, and distributing a transmission delay offset for a test message in the test excitation sequence according to the congestion delay parameter; sending a test excitation sequence carrying the transmission delay offset to the tested electronic equipment and monitoring an action message fed back by the tested electronic equipment; calculating a theoretical effective time window of the action message; and judging a debugging result according to whether the timestamp of the monitored action message falls into a theoretical effective time window or not. The method has the effect of improving the comprehensiveness of debugging of the automatic system of the intelligent substation.

The invention discloses a network traffic real-time identification method and device, equipment and a storage medium, and relates to the field of network security. Calling a network data frame of a physical network card and extracting header information of the data frame based on the XDP node in the kernel mode, packaging structural body data and pushing the structural body data to the user mode through the AFXDP; constructing a quintuple logic flow identifier by using the obtained structural body data, and performing context aggregation on data frame head information to generate a plurality of groups of behavior index characteristics; carrying out dimensionality reduction transformation on the index vector by adopting a PCA (Principal Component Analysis) compression mode, and constructing a principal component vector; and inputting the principal component vector into a knowledge distillation MLP inference model, determining a risk rating according to a confidence value output by the model, and executing a corresponding strategy. According to the scheme, a full-blind detection link based on a structure agent is constructed, multiple mechanisms such as high-speed acquisition, index modeling, semantic distillation and strategy linkage are fused, and high-precision full-scene discrimination is realized on the basis of not depending on complete protocol analysis or high-cost hardware.

The invention relates to a dynamic reconstruction method and system for a digital twin optical switching network, and relates to the technical field of optical communication network intellectualization, in particular to a dynamic reconstruction system applied to an optical switching network, comprising the following steps: in a digital twin, establishing a topological graph capable of being dynamically updated in real time by adopting multi-dimensional real-time topology perception, and combining key parameter data to obtain a topological graph; and high-precision twinning synchronization is established for the digital twinning body and the physical network state. And service intention analysis is performed on service requests or fault triggering reconstruction through an intention driving control layer, different services are constrained and mapped, and a constraint set is quantified. And combining the constraint set with source and destination nodes, and analyzing on a topological graph to generate a candidate strategy. And performing simulation verification by the digital twin through a simulation engine and pre-verification, selecting an optimal strategy, and outputting an instruction. In a physical network layer, physical processing such as port switching and light emitting of an optical module is executed according to an instruction, and performance deviation is corrected through closed-loop feedback. According to the invention, high-reliability and high-efficiency dynamic optical path reconstruction is realized.

The invention provides a graph data communication intensity mapping method and system based on optical transport network topology. According to the method, an adjacent matrix is established by extracting graph data structure information, vertex centrality and a clustering coefficient are calculated, and a graph data communication feature matrix is generated; oTN network equipment information and optical link topology are collected, link parameters and wavelength resource states are measured, and an OTN physical network feature matrix is obtained; establishing a double-layer mapping relation matrix through a resource mapping algorithm; integrating the communication frequency, the time delay sensitivity, the bandwidth requirement, the wavelength resource and the topological matching degree, and calculating a communication strength weight matrix; generating a candidate layout scheme, performing multi-dimensional evaluation, and determining an optimized data layout scheme; and dynamically adjusting the mapping relation by adopting an incremental updating algorithm. According to the invention, the efficient collaboration of the graph computing task and the optical transport network resource is realized, and the performance and resource utilization efficiency of the distributed graph computing system are obviously improved.

The invention discloses a multi-IP motion controller, industrial equipment and a control method, and relates to the technical field of virtual controllers. A plurality of virtual controls; a multi-IP binding module; an IP mapping module; wherein the virtual controller receives a data packet to generate a control instruction, and sends the control instruction to the corresponding execution terminal through the physical network interface, so as to control the operation of the execution terminal. According to the multi-IP motion controller provided by the invention, the independent IP address is allocated to each internal virtual controller and bound to the same physical network interface, and accurate data addressing and distribution based on the target IP address are realized in combination with an IP mapping mechanism, so that the problems of resource coupling and communication mixing of a traditional single IP architecture are effectively solved, the system integration and use process is simplified, and the system reliability is improved. And a high-performance, high-reliability and flexible solution is provided for complex multi-station cooperative control.

The invention relates to the technical field of cable materials, discloses a crosslinked polyethylene insulated power cable and a preparation method thereof, and aims to solve the problems that harmful by-products are introduced and complicated degassing is needed in the conventional chemical crosslinking material. According to the material, a hierarchical dual-network structure composed of a physical cross-linked network and a dynamic covalent cross-linked network is constructed through components such as matrix resin, a dynamic network functional monomer and a physical network functional nanofiller. The preparation method comprises the following steps: preparing a hierarchical network precursor by reactive grafting in a twin-screw extruder, and devolatilizing; in the cable extrusion process, network in-situ curing is achieved through cooling, and traditional high-temperature crosslinking and degassing steps are omitted. According to the scheme, crosslinking by-products are fundamentally avoided, it is ensured that the material has excellent electrical properties, thermal mechanical properties and long-term reliability, the preparation process is remarkably simplified, and meanwhile the material has the thermally induced self-repairing potential.

The application discloses a kind of power industrial control terminal network isolation method and system based on process security label binding;Belong to the technical field of power system network security, its operating steps include: decoupling physical network resources into independent partitions and mapping to independent user-mode network protocol stack instances;Through the bottom flow direction rule, the in-bound traffic is accurately delivered to the corresponding partition;Identify process security label at the application layer, establish the forced mapping of process and specific protocol stack instance and link;Through the controlled shared memory channel, realize the safe data interaction between partitions.The application realizes strong logical isolation on unified hardware, through the forced binding of process identity and network link, reduces the privilege promotion and horizontal penetration risk caused by traditional protocol stack sharing, while limiting the scope of failure impact, without relying on external physical isolation equipment, significantly improves the endogenous security protection capability of industrial control system network boundary.

Photonic interposers that enable low-power, high-bandwidth inter-chip (e.g., board-level and / or rack-level) as well as intra-chip communication are described. Described herein are techniques, architectures and processes that improve upon the performance of conventional computers. Some embodiments provide photonic interposers that use photonic tiles, where each tile includes programmable photonic circuits that can be programmed based on the needs of a particular computer architecture. Some tiles are instantiations of a common template tile that are stitched together in a 1D or a 2D arrangement. Some embodiments described herein provide a programmable physical network designed to connect pairs of tiles together with photonic links.

The invention provides an unattended express cabinet coordination device based on physical network management, which comprises an express cabinet body, one side surface of the express cabinet body is hinged with a group of blocking doors through a group of pin shafts, one side surface of the express cabinet body is connected with a coordination assembly, the coordination assembly comprises a mounting shell, and relates to the technical field of express cabinets. According to the device, whether expresses are stored in the express cabinet body or not can be conveniently known through the indicator lamps, the expresses can be conveniently scanned in cooperation with the scanning display screen, and in addition, the information of recipients, the storage time and the storage price can be conveniently recorded and stored in combination with the express information storage module, the time module and the pricing module; through the man-machine interaction module and the short message notification module, first notification of short messages with recipients can be conveniently carried out, man-machine communication with the recipients can be carried out to urge the recipients to take express items, the express item taking efficiency is improved, and the coordination of the express items is improved.

In certain embodiments, a physical network access token at a network access terminal may be authenticated for modification of records at a remote server system. In some embodiments, a set of records and counterpart records having the same record identifiers and resource amounts may be stored independently on a physical token or user device and the remote server system. When a connection is established between an access terminal and the physical token (e.g., for authenticating a modification of record(s)), the access terminal may transmit input data to the token, which may use the input data with the records stored on the token to generate authentication data, which may be used by the remote server to authenticate a network action requested via the token.

This invention relates to the field of electronic digital data processing and digital information transmission technology, specifically to a cloud-based intelligent data processing system for multiple nodes. The system includes a data preprocessing unit, a topology-aware scheduling engine, a graph neural network device, and a task execution unit. The data preprocessing unit extracts the temporal dependencies and logical associations of the input data stream to generate a directed acyclic graph (DAG). The topology-aware scheduling engine maps the graph to the physical network topology and calculates link bandwidth margin and congestion status. The graph neural network device jointly encodes node computational load and edge link status to output a task allocation strategy. The task execution unit schedules strongly dependent tasks to adjacent nodes with sufficient link margin and idle computing power according to the strategy, and dynamically migrates tasks to alternative path nodes based on link packet loss rate during execution. This invention reduces data transmission latency across switches in multi-node cascading and avoids node computing power idleness caused by local link congestion.

The present disclosure provides an information transmission method and apparatus, and a storage medium. The method is applied to a digital twin network which includes a physical network entity and a twin network entity of the physical network entity, wherein the physical network entity includes a first controller, and network element devices of a first user plane communicatively connection to the first controller, both of which are based on a software-defined network architecture; and the twin network entity includes a second controller, and network element devices of a second user plane communicatively connected to the second controller, both of which are based on a software-defined network architecture; the second controller is used to obtain user plane information from the first controller and send the user plane information to a corresponding network element device of the second user plane, the user plane information is obtained by the first controller from a network element device in the first user plane, and transmission of the user plane information of the physical network entity to a network element device of a user plane of the twin network entity is achieved.

To provide systems and methods for virtual Layer 2 networks.SOLUTION: The method comprises providing a virtual Layer 3 network within a virtualized cloud environment of a virtualized cloud network (VCN) 602. The virtual Layer 3 network may be hosted by the underlying physical network. The method also includes providing a virtual Layer 2 network deployed in the virtualized cloud environment and hosted by the underlying physical network of the cloud service provider infrastructure (CSPI) 601. The virtual Layer 2 network may be hosted by the underlying physical network.SELECTED DRAWING: Figure 6

The application discloses an SSL VPN tunnel transmission method for an IP layer, and relates to the technical field of network communication.The method constructs an IP virtual tunnel outside an SSL session, and directly encapsulates and transmits complete IP messages, thereby completely breaking through the limitation that a traditional SSL VPN only supports a Web proxy, and transparently passing through the tunnel for TCP services, UDP streaming media, ICMP network diagnostic messages, and the like, so that the method realizes remote access of the IP layer in a true sense, and a server adopts a south-north decoupling design, a virtual network port is used as a southward interface to communicate with a client tunnel, and the northward directly interacts with an intranet physical network card through a system routing table, without analyzing transport layer content, without maintaining a TCP connection state, and only performing IP layer transparent forwarding, so that the processing cost is greatly reduced, and the throughput performance is obviously improved.

The application relates to the field of 5G communication technology, and discloses a 5G network slice security isolation method and system.The 5G physical network is divided into multiple independent slices, each slice contains an access node, a core node and an output node, the access node is used for security authentication, the terminal matching index is dynamically calculated based on terminal state parameters and authentication matching times; the core node is used for a security management module, the flow security index is obtained based on the weighted comparison of the current flow and a reference value and historical flow; the output node is used for security evaluation, the output security index is obtained by the weighted comparison of the current communication times and a reference value and historical times; the access, flow and output indexes are compared with corresponding threshold values; if any one is abnormal, the current slice is directly isolated; the deviation of each security index and the threshold value is weighted calculated and compared with the threshold value; if greater than or equal to the corresponding threshold value, the current slice is isolated, multi-dimensional security isolation of the 5G network slice is realized, and the balance between precision and calculation efficiency is achieved.

The invention relates to the technical field of digital twinning technology and network communication optimization, in particular to a method and a system of a digital twinning network simulation driven NAT (Network Address Translation) optimization engine, comprising the following steps: constructing a virtualization mapping model of a physical network; simulating an NAT (Network Address Translation) process in a digital twin environment through a real-time simulation engine; dynamically adjusting an NAT (Network Address Translation) rule and a load balancing strategy of a physical network based on a simulation result; executing safety protection operation in combination with a machine learning algorithm; the method has the beneficial effects that a digital twinning technology and NAT optimization are deeply fused, and a visual and visual management platform is provided for network management personnel. Management personnel can monitor the network state and the NAT performance in real time through the platform and deeply analyze the network problem root by means of a simulation result, and complex field troubleshooting and manual strategy adjustment do not need to be carried out. Therefore, the difficulty and the cost of network management are reduced, the accuracy and the timeliness of management are improved, and the network management is promoted to develop towards the intelligentization and automation directions.

According to the communication method and device, the physical machine and the storage medium provided by the invention, the target physical network card is determined based on the network card mapping relationship by setting a network structure under the condition that the target first virtual network card in the first physical machine obtains the first data packet sent by the second virtual network card, the network card mapping relationship comprises a mapping relationship between the first virtual network card and the physical network card; and the first data packet is sent to the public network through the target physical network card, so that a plurality of physical hosts in the intranet can multiplex different public network IP addresses to communicate in the public network according to requirements.