213 results about "Software-defined networking" patented technology

The embodiment of the invention provides a security authentication method, device and system for a test platform, and a storage medium, and relates to the technical field of network security. The method comprises the following steps: performing fingerprint acquisition on virtual and real equipment to generate a unique identifier, dynamically slicing based on a software defined network to form an isolated test environment, and injecting a zero-trust access strategy associated with the fingerprint; and based on the zero-trust access policy and the device fingerprint, allocating a minimum permission through an attribute-based access control model, continuously evaluating device behaviors to calculate a dynamic trust score, and adaptively updating the permission according to the trust score. By constructing a full-process security certification system and through multi-dimensional mechanism cooperation, dynamic risk perception and timely strategy adjustment, fine-grained control of virtual and real equipment access in an industrial control scene is realized, the dynamic adaptability and risk resistance of a test platform in a complex network environment are improved, and the test efficiency is improved. Equipment access safety, authority distribution minimization and behavior monitoring continuity are ensured, and the safety risk of the industrial control system is reduced.

The invention discloses a road roller construction quality real-time monitoring system based on digital twinning, and relates to the technical field of road roller construction intelligent monitoring, and the road roller construction quality real-time monitoring system comprises a data acquisition module which uses a multi-modal fusion sensor network and edge calculation to comprehensively acquire and preprocess data; the digital twinborn model building module is used for modeling by combining physical-data dual drive with geological characteristics; the data transmission module is used for ensuring efficient and safe transmission by using a software defined network and a block chain; the real-time monitoring and analysis module is used for carrying out multi-scale space-time correlation analysis and generating virtual data; and the decision support module fuses deep reinforcement learning and a knowledge graph, supports man-machine cooperation decision, and provides intelligent suggestions for construction. According to the invention, the advantages are obvious, multi-modal acquisition and edge calculation ensure accurate and real-time data, a dual-drive model truly simulates construction, an advanced transmission technology ensures data safety, multi-scale analysis comprehensively evaluates quality, full-process coverage improves construction quality and management intelligence, and cost reduction and efficiency improvement are realized.

The invention discloses a welding process parameter intelligent optimization system based on digital twinning, which relates to the technical field of welding intelligent manufacturing and comprises a plurality of modules, a data holographic acquisition module, a multi-modal sensor array, an advanced algorithm for noise reduction to obtain accurate data, a digital twinning model building module, a digital twinning model building module, a digital twinning model building module, a digital twinning model building module and a digital twinning model building module, a digital twinning model building module and a digital twinning model building module. In combination with a multi-physics field coupling equation and a microstructure evolution model, deep simulation is realized, a data transmission synchronization module uses terahertz and software to define a network fusion architecture, the transmission quantity is reduced through edge federation transfer learning, data consistency is ensured by dual mechanisms, an optimization algorithm fusion module fuses multiple algorithms, and the data transmission efficiency is improved. The parameter adjustment feedback module updates the model in real time according to feedback by means of multi-agent cooperation and fuzzy prediction control. By means of digital twinning, the welding process is comprehensively monitored and accurately simulated, parameters are intelligently optimized, the welding quality stability is improved, the production efficiency is improved, the frontier technology is fused, and intelligent development of the welding industry is promoted.

A method for detecting network attack based on kernel operating characteristics of a software switch, comprising: collecting kernel operating characteristic data of the software switch during network management and packet forwarding of the software switch, wherein the kernel operating characteristic data of the software switch can reflect characteristic data of a fine-grained operating state of a network; preprocessing the kernel operating characteristic data of the software switch; and inputting the preprocessed kernel operating characteristic data of the software switch into a pre-trained attack detection model to detect a potential attack behavior in a network. The method is applicable to all scenarios where the software switch is applicable, especially a software-defined network and a cloud data center, an industrial Internet, 5G, edge computing based on the software-defined network. More accurate and timely detection and early warning of potential anomalies and attack behaviors in the network can be implemented.

The invention discloses a method for automatically inspecting equipment in intelligent manufacturing, which comprises the following steps of: 1, deploying edge computing nodes, combining with 5G network slices, cleaning and compressing inspection data in real time, dividing priorities, performing low-delay transmission on key data through a special bandwidth, and locally caching or filtering non-key data; 2, developing a controller based on the software defined network, monitoring a link state, introducing a reinforcement learning algorithm, and dynamically optimizing a transmission path; 3, deploying a TinyML framework at an equipment end, integrating a model compression technology to operate a lightweight AI model, and combining sensor data to perform real-time early warning and support offline analysis; 4, constructing an incremental learning framework, dynamically updating model parameters through knowledge distillation, and only adjusting part of parameters to adapt to state change; and step 5, an analysis result is fed back to the system by using a message queue, and a patrol strategy is dynamically adjusted in combination with a rule engine to form a closed-loop optimization mechanism of data acquisition-transmission-analysis-decision.

In communication with components of a cloud platform, namely a software-defined network constructed to overlay at least one public cloud network, a controller features a virtual processor and a data store. The data store includes network address translation (NAT) processing logic configured to determine whether a control plane message from tenant resources is associated with a network address overlapping condition, which represents a first network address included in the control plane message overlaps a network address range relied upon by either (a) at least one of the components of the cloud platform or (b) a component associated with other tenant resources. The NAT processing logic is further configured to alter routing data stores that maintain routing information for each of the components of the cloud platform to substitute the first network address with a first virtual network address for subsequent data message routing.

An automated system provides end-to-end (E2E) orchestration for machine learning (ML)-enabled and software-defined network (SDN)-enabled reactive and predictive (e.g., 5G) cell-on-drone (COD) dispatch and deployment. The system may be configured to detect or predict traffic surges (e.g., relative to typical or baseline levels) in a given cell site and orchestrate provisioning of resources, including COD deployment, to address the surge. COD deployment may involve one or more clusters or colonies of drones equipped with low-powered cellular radio access (or small cell) nodes, where each cluster includes (or is led by) one or more SDN-equipped drones that provide intelligent SDN-on-drone (SOD) functionality.

The invention provides a self-adaptive data packet scheduling method based on approximate quantiles and multiple queues on a programmable data plane, and aims to solve the problem that the scheduling performance and the resource efficiency are difficult to balance in the prior art. According to the method, lightweight ranking scoring, dynamic queue mapping and a cascade enqueue strategy are combined. A relative priority score of the data packet is efficiently calculated through a minimum-maximum normalization mechanism; adaptively mapping the data packets to one of a plurality of FIFO queues according to the scores and real-time congestion conditions of the queues, and providing a fast channel for extremely high priority traffic; and when the target queue is full, trying to store the data packet into a queue with a lower priority in a cascading manner so as to avoid unnecessary discarding. According to the method, resource consumption and implementation complexity are remarkably reduced while the approximate ideal PIFO scheduling performance is achieved, and the method is particularly suitable for resource-limited environments such as a software-defined network and edge computing.

The invention belongs to the field of network communication, and provides a network fault automatic processing method and system, and the method comprises the steps: collecting a multi-source monitoring signal, and constructing a space-time matrix used for representing a network state; training the decision tree model by using a reinforcement learning algorithm, and constructing a reward function according to the root cause positioning accuracy and the repair effect; when the decision tree model determines a fault root cause, calling a software defined network (SDN) controller interface, generating a corresponding rerouting strategy according to the fault root cause, and issuing the rerouting strategy to network equipment for path adjustment; applying the rerouting strategy in a simulation environment, collecting QoS (Quality of Service) indexes before and after adjustment, and verifying the validity of a repair strategy; and feeding back a repair verification result to a training process of the decision tree model, and updating parameters of the reinforcement learning algorithm. According to the invention, the accuracy of network fault automatic processing can be improved.

The present invention relates to the technical field of communications, and provides a 6G space-air-ground-sea integrated fusion architecture based on software-defined cloud-edge collaboration, comprising: three tiers of cloud nodes from low to high: an edge cloud, a space-based cloud, and a core cloud; the edge cloud comprises 6G-enabled ships based on software-defined networking and mobile edge computing technologies; the space-based cloud comprises low earth orbit satellites based on software-defined satellite technology and low earth orbit satellite constellations connected by means of an inter-satellite link; the core cloud comprises a space-based 6G core network; the edge cloud, the space-based cloud, and the core cloud follow a task offloading mechanism and an information feedback mechanism; the task offloading mechanism is configured to select, on the basis of characteristics of a task, a cloud node of a target tier for task processing; and the information feedback mechanism is configured such that the cloud node of the upper tier sends feedback information to a cloud node of the lower tier, so as to optimize task processing of the lower tier. The present invention achieves fast and flexible networking for a 6G space-air-ground-sea integrated fusion network, thereby realizing efficient utilization and collaborative management and control of resources.

The present disclosure provides a latency information query method, device, equipment, readable storage medium and product, the method comprises: obtaining the latency query request sent by a lightweight network management platform; determining the query times and the query latency interval according to the query constraint information; according to the latency query request, sending the query request matched with the query times to the preset software defined network controller according to the query latency interval; obtaining the query result fed back by the software defined network controller, determining the target latency data between the starting end information and the terminal end information according to the query result, and the query result includes at least one path information matched with the query constraint information. Through limited query times, the query result including all circuit path information data meeting the query constraint information provided by the user can be queried, different circuit path options are provided for the user, and the efficiency and accuracy of the latency information query are improved.

The application discloses a hospital multi-active data center network management system based on a software defined network, relates to the technical field of data management, and discloses a network management system controlled based on an SDN controller, which comprises a traffic collection module, a prediction module, a scheduling module, a multi-active data module and a security module; the traffic collection module is used for collecting historical traffic data of a hospital, analyzing and managing the acquired traffic data, obtaining historical data of traffic loads of various devices of the hospital, and storing the data; the prediction module predicts future traffic loads of devices of the hospital based on historical data acquired in the traffic collection module and uploads the prediction result to the scheduling module; the application can predict future traffic loads of devices of the hospital, reasonably distribute network traffic to various data centers and corresponding servers according to the prediction result, flexibly configure the network, quickly adjust the distribution of network resources, and improve the medical experience of patients.

The present disclosure provides an information transmission method and apparatus, and a storage medium. The method is applied to a digital twin network which includes a physical network entity and a twin network entity of the physical network entity, wherein the physical network entity includes a first controller, and network element devices of a first user plane communicatively connection to the first controller, both of which are based on a software-defined network architecture; and the twin network entity includes a second controller, and network element devices of a second user plane communicatively connected to the second controller, both of which are based on a software-defined network architecture; the second controller is used to obtain user plane information from the first controller and send the user plane information to a corresponding network element device of the second user plane, the user plane information is obtained by the first controller from a network element device in the first user plane, and transmission of the user plane information of the physical network entity to a network element device of a user plane of the twin network entity is achieved.

Systems and methods are provided for dynamic name resolution in a distributed software-defined network. An fxDeviceApp registers service metadata with a centralized application manager that maintains authoritative deployment information. A name resolution service receives requests to resolve service names and identifies active instances of the requested services based on real-time deployment state. The name resolution service then returns corresponding network addresses, enabling service-to-service communication within and across network zones. The system supports localized caching, zone-specific resolution rules governed by policy managers, and dynamic updates in response to changes in application deployment. Resolution decisions may account for service health or load metrics, and service lookup requests may be handled using a standardized message format compatible with a virtual messaging fabric. These features enable reliable, scalable, and policy-aware service discovery for distributed applications deployed across heterogeneous execution environments.

The present application relates to the technical field of information security, and more particularly to a dynamic white list management method and system based on immune-Kalman collaborative evolution, which comprises the following steps: receiving the observation data of the service access request collected and sent by the edge access gateway; predicting and updating the state vector of the current service baseline through the Kalman filter state estimator to obtain the prior state prediction value and the prediction residual; dynamically adjusting the "self-non-self" judgment threshold of the immune system, if it is judged as self, the characteristics of the service access request are fed back to the Kalman filter state estimator as observation samples and updated; if it is judged as non-self, an isolation instruction is generated and sent to the software defined network controller, and a denial of access instruction is sent to the edge access gateway; based on the prediction residual and the comprehensive health degree index, the running state of the system is judged, and the corresponding matching strategy is selected from the preset white list matching strategy set and sent to the edge access gateway for execution.

The invention provides a network diagnosis method and device based on a software defined network (SDN), and electronic equipment. The method comprises the following steps: obtaining to-be-detected service data, wherein the to-be-detected service data comprises one or more of the following items: service configuration data, service issuing data and service receiving data; network connectivity diagnosis is carried out on the SDN based on the service data through a flow diagnosis model, a diagnosis result is obtained, and the diagnosis result is used for indicating whether the service of the SDN is normally configured or not and whether the service of the SDN is normally issued or not; performing data reconciliation on the SDN based on the service data through a service reconciliation model to obtain a reconciliation result, the reconciliation result being used for indicating whether the service of the SDN is normally received; therefore, comprehensive detection of service configuration, issuing and receiving processes in the SDN network is realized.

The application discloses a network traffic load balancing method based on reinforcement learning, comprising the following steps: 1) a software defined network (SDN) controller acquires switch flow table information, constructs an end-to-end traffic matrix and a network topology; 2) based on the network topology and the traffic matrix, a linear programming model is used to solve an optimization problem with the minimum maximum link bandwidth utilization as the target, and the result is stored in a database in the form of data pairs; 3) a reinforcement learning model with the optimal bandwidth utilization and the minimum service disturbance as the target is established, and data in the database is extracted for training; 4) actual traffic forwarding requirements are collected and sent into the reinforcement learning model to obtain a key data flow set, and a linear programming model is used to solve a key data flow rerouting scheme; 5) the rerouting scheme is parsed into a transmission path; and 6) the network configuration is updated according to the transmission path, and the link load is optimized. The application has good application prospects while realizing load balancing and taking the influence on services into account.

Transmission Control Protocol (TCP) states of an active device are replicated at a backup device configured to track connections in a software defined network (SDN). The backup device receives, from the active device, a TCP packet with a TCP flag including one or more of SYN, SYN-ACK, ACK, FIN, FIN-ACK, ACK, or RESET. When the TCP packet has a SYN flag, the backup device adds a connection record to a connection table. Otherwise, the backup device derives an updated connection state for the connection record using a TCP state machine. The connection state is updated as future packets are received by the backup device.

The application discloses a kind of anonymous routing methods of double-layer satellite network for delay-sensitive service, it is applied to VLEO / LEO double-layer satellite network, this network is based on software-defined network SDN architecture implementation, including data plane, control plane and application plane;Data plane includes VLEO layer, VLEO / LEO cross layer and LEO layer;Application plane is deployed with the routing method of the application upper;The method comprises: constructing layered decoupling routing calculation framework, to divide routing decision into including LEO layer inner routing, VLEO / LEO cross layer routing and VLEO layer inner routing multilayer path selection;Using the collaborative computing capability of SDN controller and satellite node, multilayer path selection is reconfigured and weight disturbance in real time, generates optimal routing path.The application can effectively reduce end-to-end delay, balance network load, improve the real-time performance, robustness and security anonymity of double-layer satellite network.

The application discloses a path selection method, device, equipment, storage medium and program product. The method is applied to a software defined network controller. The method comprises the following steps: acquiring first policy information, wherein the first policy information comprises information of a priority; judging the size relationship between the priority of the first policy information and the priority of second policy information, wherein the first policy information and the second policy information are policy information corresponding to the same head node address and the same destination node address; and in the case that the priority of the first policy information is smaller than the priority of the second policy information, sending a first target path to a head node according to the head node address in the first policy information, wherein the target path is a path in a first path corresponding to the first policy information and not coexisting with a second path corresponding to the second policy information. In this way, the balance of network resource utilization rate is ensured.

The present disclosure pertains to systems and methods for monitoring and configuring a software-defined network (SDN). A system may include a communication interface to communicate a plurality of communication flows to a plurality of network devices in the SDN and to receive information from the plurality of network devices related to traffic in the SDN between a plurality of hosts. A configuration subsystem may generate the plurality of communication flows based on a planned configuration. A monitoring subsystem may monitor information from the plurality of network devices related to traffic in the SDN to identify a change to at least one aspect of the planned configuration. An operator-interface subsystem to generate an alert regarding the change. The configuration subsystem may implement an update to the planned configuration based on the change.

Techniques are disclosed for a computing system comprising processing circuitry having access to a storage device, the processing circuitry configured to: generate, by a network controller executing in a software defined network (SDN), an advertisement in a first network cluster executing within a container orchestration platform of the SDN, wherein the advertisement conforms to a routing protocol and comprises information identifying a network service executing in the first network cluster, wherein the network service exposes a backend of a network application to the container orchestration platform of the SDN; and broadcast, by the network controller and to a second network cluster executing within the container orchestration platform of the SDN, the advertisement in accordance with the routing protocol.

Provided are a data transmission method, a communication apparatus, and a storage medium. The method is executed by a first node. The first node is a device in a forwarding layer of a software defined network (SDN). The method comprises: sending heartbeat information to a second node, the second node being a device in a control layer of the SDN, and the heartbeat information being carried by a link layer discovery protocol (LLDP) packet.

The present application relates to the technical field of software defined network, especially to a traffic scheduling method and system for multi-core SDN switches, the present application significantly improves the traffic processing capacity and network performance of multi-core SDN switches through integrated load prediction model and dynamic pipeline configuration strategy, the main process includes real-time collection of network traffic and performance data, optimization of load prediction model using these data, and dynamic adjustment of pipeline configuration and load balancing strategy according to model prediction results; this includes increasing processing capacity during traffic peak and saving resources during low traffic, ensuring optimal utilization of network resources; the present application effectively reduces network delay, improves data transmission throughput, and reduces data packet loss rate, especially during traffic peak, can significantly improve the performance of key business applications; in addition, by continuously adjusting and optimizing the pipeline configuration, the present application can also continuously improve the overall stability and reliability of the network.

Provided are techniques for using AI-driven WCMP to identify paths for data centers. Observations and rewards are used to generate a Weight Certainty Indicator (WCI) value and a Weight Sensitivity Response (WSR) value. For each disjointed path in a plurality of disjointed paths in a network topology, a distance from an overall minimum available capacity for that disjointed path is determined, the distance is normalized, and a weight for that disjointed path is determined using the normalized distance, the WCI value, the WSR value. The weight for each disjointed path of the plurality of disjointed paths is sent to each switch for use in selecting a next switch on a path to a destination.

This invention discloses a heterogeneous multipath secure routing calculation method based on software-defined network load balancing, comprising the following steps: 1) transmitting derived encryption and authentication keys to the switch using a secure channel, and constructing the switch's identity identifier using the switch's ID and input port number; 2) constructing a temporary message using the switch's input port number, identity identifier, and plaintext message; constructing a route forwarding data packet based on the encryption key, authentication key, and temporary message; 3) generating a set of heterogeneous paths for multiple source-destination node pairs; 4) performing traffic load balancing on the paths of the multiple source-destination node pairs; 5) the next switch on the transmission path verifies the data packet; if verification is successful, it forwards it downstream; if verification fails, routing stops, the damaged switch is located, and the data packet is re-routed according to the new path. This invention allocates traffic to the generated paths to ensure load balancing.

In an example, a network controller for an SDN architecture system includes processing circuitry of a central cluster of first one or more compute nodes; a configuration node configured for execution by the processing circuitry; a control node configured for execution by the processing circuitry. The configuration node includes a custom API server to process requests for operations on custom resources for SDN architecture configuration. Each of the custom resources for SDN architecture configuration corresponds to a type of configuration object in the SDN architecture system. The control node, in response to detecting an event on an instance of a first custom resource of the custom resources, obtains configuration data for the instance of the first custom resource and configures a corresponding instance of a configuration object in a workload cluster of second one or more compute nodes. The first and second compute nodes may be distinct.

The application discloses a power internet of things agent system for dynamic resource management, which is connected between an internet of things terminal and an internet of things management platform, and comprises a device atomic layer, a device arrangement layer and a network communication layer; the device atomic layer, the device arrangement layer and the network communication layer are sequentially connected in series; the device atomic layer is connected with the internet of things terminal and realizes data acquisition of the internet of things terminal through protocol analysis and data preprocessing; the device arrangement layer realizes connection with the device atomic layer and the network communication layer through a software defined network interface, and realizes matching of resources and tasks through construction of a virtual resource pool; the network communication layer is connected with the internet of things management platform through an encryption channel, and realizes hierarchical transmission of data of the internet of things terminal through a master-standby communication link and a queue buffer mode. The application not only realizes agent data transmission between the internet of things terminal and the internet of things management platform, but also has higher reliability and better real-time performance.

This application relates to an automated performance testing system and method for software-defined network controllers. The system includes: an automatic measurement unit for softswitch traffic generation capability, an automatic data plane network construction unit, a given load traffic triggering unit, and a southbound protocol message information statistical analysis unit. By relying on software-defined network simulation tools and widely used software switches, it facilitates testing of network controllers based on constantly evolving and new southbound protocols, ensuring the advanced nature and universality of the testing system.

The application relates to a satellite topology separation routing forwarding method, device, equipment and storage medium. The method comprises the following steps: based on a periodically changed full topology, generating a periodically changed inter-satellite topology and a satellite-ground topology corresponding by a software defined network; based on the inter-satellite topology, determining the shortest path from each satellite to all other satellites; based on the satellite-ground topology, obtaining the direct connection satellite corresponding to each ground station, and generating the satellite-ground routing corresponding to each ground station based on the direct connection satellite; based on the satellite-ground routing corresponding to each ground station, generating the routing mapping table of each satellite and multiple ground stations; based on the routing mapping table, querying the landing satellite corresponding to the target ground station, and sending a message carrying a message header to the target ground station through the landing satellite; wherein the landing satellite is the direct connection satellite to the target ground station. The method can improve the efficiency of the satellite network and guarantee the timeliness of the satellite network communication.