208 results about "QUIC" patented technology

The invention relates to a QUIC protocol-based distributed node unified identity authentication method and system, belongs to the technical field of network security, is applied to a client, and comprises the following steps: registering a client domain name identity through a certificate authority, obtaining a client certificate, and pre-storing a server certificate chain; generating a QUIC initial data packet according to the target server domain name identifier and the client certificate, and sending the QUIC initial data packet to the server; receiving a QUIC handshake data packet returned by the server; verifying the legality of the server certificate based on the server certificate chain, and if the server certificate is legal, calculating a pre-master key according to the client DH private key and the server DH public key; deriving a 1-RTT session key based on the pre-master key; generating a signature verification message, and sending the client certificate and the signature verification message to a server; and synchronously using the 1-RTT session key to encrypt the application layer data with the server, and transmitting the data to the server in the 1-RTT encryption space of the QUIC protocol. According to the invention, the reliability of node identities and the confidentiality of data are ensured.

The invention discloses a reliable communication system based on a publishing and subscribing mode in a satellite-ground weak network environment, and aims to solve the problems of high round-trip delay, limited link bandwidth, high instantaneous packet loss rate, easiness in blocking and switching influence of links and the like in a data transmission process between a low-orbit satellite and a ground station. A publishing and subscribing model is introduced into an application layer to realize service logic decoupling, deep fusion with an underlying enhanced QUIC transmission protocol is realized, and mechanisms such as message persistence, breakpoint resume, forward error correction and connection migration are combined, so that stable, orderly, complete and safe transmission of service data can still be ensured under the conditions of link instability, quality fluctuation and communication interruption, and the service data transmission efficiency is improved. And high availability and continuity of a satellite-ground communication task under a weak network condition are realized.

The invention relates to the technical field of network management, and discloses an intent-driven network management method and system based on a large language model (LLM). The method comprises the following steps: receiving a natural language intention of a network administrator, analyzing the intention by utilizing a pre-trained large language model, extracting a key target and constraint, generating a configuration scheme of a TCP / IP or QUIC protocol based on an analysis result and a network protocol knowledge base, and ensuring the effectiveness and safety of configuration through a network constraint verification module. And the configuration passing the verification is applied to the network system. The system comprises an intention input module, an LLM analysis module, a configuration generation module, a verification module, an application module and the like. According to the invention, through conversion from automation intention to configuration, the network management process is simplified, the management efficiency and flexibility are improved, the method is especially suitable for multi-parameter optimization scenes of protocols such as TCP / IP and QUIC, and intelligent network management is realized.

A QUIC encrypted traffic classification method based on multi-model fusion belongs to the field of communication, and comprises the following steps: a model training stage: dividing a data set, training each model in a high-precision model group and a high-recall-rate model group by using a training set, evaluating model performance by using a verification set, if a dynamic weight mechanism is started, calculating the weight of the model according to a model evaluation result, and if the dynamic weight mechanism is started, calculating the weight of the model; carrying out normalization processing on the weight, and searching an optimal decision threshold by using a plurality of candidate thresholds; in the model prediction stage, prediction data are input, each model generates a respective prediction probability, and if a dynamic weight mechanism is started, the prediction probability of each model is subjected to weighted averaging according to the weight obtained in the training stage so as to perform probability calibration; and combining the calibration probability of each model, judging the calibration probability through an optimal decision threshold, and generating a final classification prediction result. According to the method, the risks of overfitting and poor generalization ability of a single model are reduced, and QUIC encrypted traffic classification with high accuracy and stability is realized.

The invention discloses an intelligent call capability monitoring method and system based on a cloud mobile phone and a storage medium, and the method comprises the steps: collecting and preprocessing audio, video and other heterogeneous data through a QUIC protocol, dynamically evaluating the weight through a Transform architecture model to generate an abnormal confidence coefficient, triggering multi-modal data backtracking during abnormality, and carrying out the correlation analysis of a high-frequency sampling bottom hardware index. And constructing a three-level time sequence evidence chain and a root cause knowledge graph to position a fault root, and performing joint training and reinforcement learning parameter adjustment in combination with user feedback to realize online iteration of the model. The system comprises a heterogeneous data fusion acquisition unit, a dynamic weight evaluation unit and the like, and the steps of the method are correspondingly executed. According to the invention, through multiple dimensions, full-process accurate monitoring of the call data, rapid abnormal positioning and efficient solution are realized, a closed-loop optimization system is constructed, continuous evolution of a monitoring model is promoted, the cloud mobile phone call quality and the user experience are remarkably improved, and a solid technical guarantee is provided for the cloud mobile phone call service.

Apparatuses, methods, and systems are disclosed for multipath QUIC for ATSSS using stream-aware steering mode. One method includes establishing a multiaccess data connection with a mobile communication network. The method includes establishing a plurality of QUIC connections, each QUIC connection supporting data transmission with a mobile communication network over first and second access networks. The method includes detecting a data packet to be transmitted via the multiaccess data connection and selecting a first steering rule from a configured set of steering rules. The method includes selecting a first QUIC connection of the plurality of the QUIC connections. The method includes allocating a new stream in the first QUIC connection, where the new stream is configured to transmit data traffic using a steering mode of the first steering rule and sending the data packet using the new stream.

The invention belongs to the technical field of audio and video fusion transmission, and discloses an audio and video signal fusion transmission method and device, equipment and a medium, and the method comprises the steps: extracting 512-dimensional semantic feature vectors of an audio and a video, and generating a joint feature matrix through a cross-modal attention mechanism; calculating a fusion feature flow based on a coefficient alpha output by the scene classification model; a quantum random number generator is used for generating a session master key Kmain, the session master key Kmain is packaged into an encrypted session key Kenc through a Kyber-768 algorithm, and frame-level dynamic encryption is carried out on the fusion feature flow; and selecting a GPMI Type-B wired protocol or wireless transmission based on QUIC according to the transmission environment. According to the invention, the transmission efficiency, the anti-interference capability and the anti-quantum-attack security are improved, and multi-scene requirements are met.

Techniques for encoding metadata representing a policy into a QUIC connection ID are described herein. A metadata-aware network including one or more enforcement nodes, a policy engine, and / or a connection datastore may be utilized to enforce a policy and route communications on a QUIC connection. The policy engine may be configured to encode metadata representing one or more network policies into a QUIC source connection ID (SCID) and / or may store a mapping between the SCID and a corresponding destination connection ID (DCID) in the connection datastore. The policy engine may communicate with a QUIC application server and / or one or more QUIC proxy nodes to encode the SCID into a QUIC packet. The enforcement nodes may access the metadata and enforce the policies via a connection ID included in a QUIC header of a QUIC packet or by performing a lookup in the connection datastore using the connection ID.

The invention discloses a quantum key distribution method and system after satellite communication based on QUIC, and belongs to the field of information security. The method comprises the steps that a two-stage key distribution method is designed, in the first stage, a ground control terminal sends a public key in a public and private key pair generated by a post-quantum key encapsulation algorithm to a satellite terminal requesting to initiate, and the ground control terminal retains a corresponding private key; wherein the public key is used for generating an application key and a key ciphertext, and the private key is used for decrypting the key ciphertext to obtain the corresponding application key; in the second stage, exchange of application keys of the ground control terminal and the satellite terminal is completed; a two-stage key distribution method is integrated with a QUIC protocol, and a next-generation post-quantum encryption algorithm is introduced into the QUIC protocol. The method has the capability of resisting future quantum computing attack, can reduce the computing consumption of the satellite terminal, is low in transformation and migration cost, and is also suitable for multi-scene adaptive use.

The invention relates to a smart home equipment control method and system based on QUIC point-to-point communication, and belongs to the technical field of smart home control, and the control method comprises the steps: receiving a natural language instruction of a user terminal, and carrying out the analysis to obtain a target equipment identifier and an operation intention description text; retrieving a pre-constructed equipment registry according to the target equipment identifier, and obtaining a corresponding cue word template and a QUIC connection address; calling an artificial intelligence model deployed locally, and outputting a structured equipment control instruction in combination with the operation intention description text and the cue word template; performing signature encryption on the structured equipment control instruction, establishing a QUIC end-to-end encryption transmission channel between the user terminal and the target equipment, and transmitting the QUIC end-to-end encryption transmission channel to the target equipment; receiving operation response data fed back by the target equipment after the target equipment verifies and executes the structured equipment control instruction; the device registry is dynamically optimized based on the operational response data. According to the invention, the risk of cloud service privacy leakage can be reduced, and the data security of the smart home system is improved.

The invention discloses a video information processing method, and relates to video transmission, and the method comprises the steps: obtaining a video stream of a video conference participant, and obtaining auxiliary information from a video conference system; dividing the auxiliary information into control type information and content type information; establishing a first transmission channel independent of a video stream for the control type information through a WebSocket or QUIC protocol; establishing a second transmission channel associated with the video stream for the content information through an SEI mechanism or an RTCP channel of the video encoder; respectively transmitting the control type information and the content type information according to the first transmission channel and the second transmission channel, and adding a serial number and a timestamp to the transmitted information; and receiving the auxiliary information at a receiving end, and performing timestamp alignment and synchronization processing on the auxiliary information and the video stream according to the serial number and the timestamp to generate a synchronous data structure. Aiming at low transmission reliability of the auxiliary information under the condition that the network condition is unstable, the application improves the transmission reliability of the auxiliary information under the condition that the network is unstable.

The invention discloses a multi-link data return system and method based on a low-altitude aircraft and a medium, and the system comprises an airborne multi-link communication gateway which is used for connecting a plurality of communication links at the same time, and dynamically selecting the communication link with the optimal current performance based on link quality parameters for data return; the protocol conversion module is used for receiving the TCP data stream from the aircraft intranet equipment and converting the TCP data stream into a QUIC data stream in a QUIC protocol; the data encryption module is used for performing end-to-end encryption processing on the QUIC data stream to generate an encrypted QUIC data packet; and the data transmission module is used for receiving the encrypted QUIC data packet, keeping QUIC connection when an IP address changes through a Consection ID mechanism of a QUIC protocol, and sending the encrypted QUIC data packet to a ground receiving end through the selected optimal communication link. According to the invention, seamless switching among multiple links and efficient and safe data transmission are realized.

The invention relates to the technical field of network communication, and discloses a weak network adaptive multipath transmission method and system, and a storage medium. The method comprises the following steps: performing multi-path connectivity and quality detection on a target server, constructing a candidate set comprising a first path of a native UDP bearing QUIC, a second path of a TCP tunnel packaging QUIC and a third path of a TCP combined TLS, and performing initial selection of a main path according to the priority from high to low; periodically collecting and smoothly processing network quality indexes such as round-trip delay and packet loss rate during the connection duration; and when the monitoring data meets a preset degradation condition, reordering and switching the candidate paths in combination with a lag mechanism and a comprehensive quality scoring model. Through multi-dimensional perception and a dynamic strategy, the problem of QUIC failure caused by UDP blocking in a firewall interference or weak network environment is solved, the advantages of a QUIC protocol can be reserved to the greatest extent on the premise of not interrupting services, and the reliability and fluency of data transmission are remarkably improved.

The invention provides a Web page first screen loading acceleration method and system, a medium and equipment, and relates to the technical field of Web front-end performance optimization and network transmission, the method comprises the following steps: after obtaining a request of a user for accessing a URL (Uniform Resource Locator), analyzing an HTML (Hypertext Markup Language) and constructing a DOM (Document Object Model) tree; marking first screen resources to obtain a first screen resource list; key resources are inserted into the head of the loading queue, and non-key resources are marked as defer; if the weak network is detected, degrading the picture quality; after the CSSOM is ready, text and layout are rendered immediately, and placeholders are replaced after pictures are asynchronously loaded; when the delay is high, switching to an edge CDN node or starting a QUIC protocol; and pre-fetching resources are predicted based on user behaviors, and the pre-fetching resources are stored in a Service Worker cache. According to the method, the first screen loading time can be shortened, the maximum content drawing time is shortened, the network transmission cost is saved, and the cache utilization efficiency is improved.

Systems and methods for Protocol Data Unit (PDU) Set identification for end-to-end encrypted traffic, such as QUIC traffic between a User Equipment (UE) and Application Server (AS). Mechanisms can include one or more of: (i) additional path identification with corresponding Connection IDs (CIDs), such as for even and odd sets; (ii) sharing of key information for access to set sequence numbering; (iii) coalescing PDU set identification information in capsules with encrypted packet data for PDUs over encrypted channels; and / or (iv) elimination of capsule information for a PDU set in subsequent transmissions following initial transmissions in order to reduce signaling overhead.

A data transmission method, device and system, in the method, a first access network device sends first information, the first information indicates a first address of a first tunnel, and the first tunnel is used for performing data transmission between a terminal device and the first access network device by using a first transport layer network protocol, the first address is associated with the first access network equipment; and establishing the first tunnel with the terminal device according to the first address. The method is used for designing a QUIC protocol suitable for being used between UE and access network equipment.

Technologies for accelerated QUIC packet processing include a computing device having a network controller. The computing device programs the network controller with an encryption key associated with a QUIC protocol connection. The computing device may pass a QUIC packet to the network controller, which encrypts a payload of the QUIC packet using the encryption key. The network controller may segment the QUIC packet into multiple segmented QUIC packets before encryption. The network controller transmits encrypted QUIC packets to a remote host. The network controller may receive encrypted QUIC packets from a remote host. The network controller decrypts the encrypted payload of received QUIC packets and may evaluate an assignment function with an entropy source in the received QUIC packets and forward the received QUIC packets to a receive queue based on the assignment function. Each receive queue may be associated with a processor core. Other embodiments are described and claimed.

The invention provides a data flow priority scheduling method and system based on QUIC multi-path transmission, and the method comprises the following steps: S1, when a QUIC connection is established, a client and a server negotiate and create two or more independent network transmission paths, create an independent data flow for each request file, and send the data flow to a server; therefore, parallel transmission and independent scheduling of data streams are realized. S2, after a server receives a file transmission request of a client, an initial priority is distributed to each data stream according to factors such as file types, real-time requirements and user-defined configuration; and S3, marking the data packets of the data streams according to the priorities of the streams to which the data packets belong, and adding the data packets into a unified scheduling queue. And S4, selecting an optimal network transmission path for each data packet by adopting an SP-PRT scheduling algorithm. And S5, according to the priorities of the data packets in the scheduling queue, performing parallel data transmission through the selected optimal path.

The invention discloses a subpackage mechanism-oriented QUIC protocol flow SNI field extraction method, which comprises the following steps of: firstly, performing quintuple flow formation on captured internet flow, and extracting an Initial data packet sent by a client in a QUIC flow based on a QUIC protocol special field mark; secondly, a client Initial data packet header protection key and a client initial key are constructed based on a QUIC protocol, header protection is removed from a client Initial data packet, and a ciphertext load is decrypted; in the QUIC protocol flow applying a subpackaging mechanism, a load part of an Initial data packet is composed of out-of-order frames, for the out-of-order frames, a Length field and an Offset field of each frame are extracted, finally, a TLS record in a QUIC flow is screened out, and SNI field information contained in a ClientHello fragment is extracted. According to the scheme, application identification of the QUIC flow can be realized, and the vacancy of network management capability of the QUIC flow is filled.

The invention relates to the technical field of data transmission, and discloses a speed reducer remote monitoring and parameter configuration system, which comprises the following modules: a calculation module used for establishing QUIC protocol connection between a speed reducer terminal and a cloud server to realize communication; the speed reducer terminal collects vibration, temperature and load data, extracts a main frequency amplitude and calculates a comprehensive index of the health state of the equipment; the scheduling module is used for determining the priority of the current data for the cloud server to perform flow scheduling; the reporting module is used for calculating the size of a data aggregation window by the speed reducer terminal in combination with the smooth round-trip time and priority of the QUIC connection; a plurality of time sequence telemetering floating point values collected in the window size are converted into fixed-length binary sequences, and after the fixed-length binary sequences are spliced to form aggregated data blocks, bit compression coding is carried out, and the aggregated data blocks are reported; and the feedback module is used for realizing asynchronous feedback of an instruction execution state after the speed reducer terminal executes the instruction. According to the invention, the real-time performance of data transmission and the reliability of connection are improved.

The invention discloses a satellite communication-oriented QUIC communication method and device based on data classification, and a medium. The method comprises the following steps: a client sends client greeting to a server; in response to client greeting, the server determines an encryption algorithm, a key negotiation algorithm and a signature algorithm adopted by transmission data corresponding to each security level label, and the server sends server greeting to the client; therefore, handshake between the client side and the server side is completed; according to the security level label, the client and the server perform key generation and key negotiation; the client encrypts the transmission data according to the security level label and uploads the encrypted transmission data to the server; and the server side decrypts the encrypted transmission data according to the security level label so as to complete secure transmission of the data. The client signs the transmission data according to the security level label, and uploads the signed transmission data and the security level label to the server; and the server verifies the signature according to the security level label.

According to the unmanned aerial vehicle display system and method supporting multi-scene self-adaption, a key transmission module monitors the network state in real time based on a QUIC protocol and dynamically adjusts a transmission strategy, and key data are transmitted preferentially to enhance the reliability of a weak network; the priority transmission module constructs a multi-dimensional scoring model through a WFQ algorithm, and dynamically allocates resources in combination with a Kafka queue to realize high-priority data preemption scheduling; the visual angle switching module utilizes WebGL to render cluster statistical information and individual states, and combines a dynamic geofence and an R tree index to realize rapid switching between global overview and detail analysis. According to the system and the method disclosed by the invention, the high throughput data processing capability, the real-time response efficiency and the multi-scene display flexibility of a large-scale unmanned aerial vehicle cluster are remarkably improved through a self-adaptive transmission strategy, intelligent resource scheduling and multi-granularity visual cooperation.

The invention discloses a multi-level streaming media cascading and cluster scheduling system and a multi-level streaming media cascading and cluster scheduling method. The system comprises a source station node, a scheduling node, an edge node and a state bus, wherein the nodes are interconnected through QUIC protocol channels; the source station node releases an original media stream, writes metadata of the original media stream into the state bus through the cluster plug-in, and broadcasts a media stream release event to the scheduling node; the scheduling node carries out registration management and API proxy on the multi-level nodes, and carries out scheduling and switching control on the media stream service according to a subscription request of the edge node; the edge node responds to a request service of the monitoring terminal, provides a media stream service, and carries out state reporting, upstream acquisition and service switching under the control of the scheduling node; and the state bus manages the operation state of each node in a centralized manner. According to the invention, low-delay back-to-source and switching can be realized, the streaming media delay performance is improved, the resource utilization rate is improved, and centralized and efficient state synchronization is realized.

The invention discloses a method, a device and equipment for establishing fast user datagram protocol network connection. The rapid user datagram protocol network connection establishment method is applied to a client and comprises the steps that a rapid user datagram protocol network connection QUIC connection request is established, and the connection request comprises a plurality of QUIC protocol version numbers; the QUIC connection request is sent; handshake negotiation information from the server side is received, the handshake negotiation information comprises the QUIC protocol version numbers supported by the server side, and the QUIC protocol version numbers supported by the server side are obtained by verifying the multiple QUIC protocol version numbers through the server side. According to the establishment method of the rapid user datagram protocol network connection provided by the embodiment of the invention, the situation that QUIC protocol versions are incompatible can be reduced, the protocol version compatibility and renegotiation problems are solved, and the QUIC connection establishment speed is improved.

The embodiments of the present application provide a remote access method, electronic device, and storage medium, relating to the field of information technology. The method includes: performing a QUIC protocol-based session handshake with a second device, wherein the QUIC protocol-based session handshake is used to declare the application layer protocol type used for access authentication; establishing a QUIC session with the second device; and on the established QUIC session, using an application layer protocol message corresponding to the application layer protocol type used for access authentication, performing access authentication interaction with the second device to complete remote access on the second device. The method provided by the embodiments of the present application can improve the efficiency of remote access and reduce the cost of network deployment.

A communication method and a communication apparatus, which are used for implementing communication between a terminal and a core network by means of a unified non-3GPP access gateway, thereby reducing the complexity of network deployment. The method comprises: receiving a first message from a terminal, the first message being used for requesting authentication, connection establishment or connection release, and the first message being an internet protocol security (IPSec) message, or the first message being a quick user datagram protocol internet connection (QUIC) protocol message; and sending a second message to a control plane network element, the second message being a non-access stratum (NAS) message determined on the basis of the first message.

A computer-implemented method is provided that enables remote control of a headless browser. A message from a client to open a connection to a headless browser running on a device remote from the client is received. A command to provision the browser is sent to the headless browser. The command may configure the browser to appear as if the browser is controlled by a human. A command for controlling the headless browser is received from the client. The command is sent to the headless browser for execution. A response to the command is received from the headless browser. Finally, the response is forwarded to the client.

Encryption operations are securely offloaded to a network interface controller (NIC). Encryption keys are securely transferred from a virtual machine (VM) to the NIC and data is securely transferred from encrypted VM memory to secure buffers in the NIC. The NIC handles the encryption and decryption operations in hardware, greatly increasing encryption performance while not reducing security. This is especially useful in cloud server environments, so the cloud service provider does not have access to the encryption keys or the unencrypted data. The offloaded operations are performed with numerous different communication protocols, including RDMA, QUIC, IPsec underlay and WireGuard.

The embodiment of the invention provides a communication method and device, and relates to the field of communication. According to the method provided by the embodiment of the invention, the QUIC connection or the MP-QUIC link can be established between the network side control terminal equipment and the UPF network element, so that the data transmission of the flow granularity can be realized for the UDP service flow based on the QUIC connection or the MP-QUIC link. Comprises: an SMF network element receiving a first message from a terminal device for requesting establishment or PDU session, the SMF network element sending a second message to the terminal device, the second message being used for indicating that the PDU session is established or updated successfully, the second message comprising second indication information, the second indication information being used for indicating that a service flow in the PDU session is transmitted by a QUIC method, and the second indication information being used for indicating that the service flow in the PDU session is transmitted by the QUIC method; or used for indicating that the service flow in the PDU session is transmitted by an MP-QUIC method.

Systems and methods for providing application-layer characterization is disclosed. Quick User Datagram Protocol (UDP) Internet Connection (QUIC) is an end-to-end encrypted, transport-layer protocol, with a goal to improve communication security and quality of experience (QoE) towards end-users. The systems and methods disclosed herein relate to estimating application-level traffic attributes without decrypting QUIC packets. Based on size, timing, and direction information available in the encrypted packet, the system analyzes associated network traffic to infer an identity of each request and response pair, including time, size, and request-response match, as well as multiplexing feature in each QUIC connection. In the case of request and response multiplexing, several requests will be gathered and matched as a group with their corresponding responses, to form a super request-response pair. The inferred attributes may be used to evaluate the QoE of application-layer services and identify the service categories for traffic classification in the encrypted QUIC connections.