25 results about "Tunneling protocol" patented technology

A first base station (BS) sends a first parameter indicating that the first BS configures protocol data unit (PDU) set importance (PSI) based discarding, for a PDU session, of a wireless device, terminated at the first BS. The first BS determines that resources of the first BS are congested, for the PDU session, and sends a general packet radio service tunneling protocol (GTP) message comprising a second parameter indicating activation of PSI based discarding for the PDU session.

The invention discloses a network connection unmanned aerial vehicle identification method, and relates to the technical field of unmanned aerial vehicle prevention and control. The method comprises the following steps: acquiring a user plane data stream at a base station side in a cellular communication network; performing protocol analysis on the user plane data stream, and extracting inner-layer communication feature information packaged in a tunnel protocol; based on the inner-layer communication feature information, judging whether the user plane data flow is matched with a preset unmanned aerial vehicle service identifier feature or not; if yes, performing secondary verification by combining the flow behavior characteristics of the user plane data flow with a preset unmanned aerial vehicle communication behavior model; and when the flow behavior characteristics meet the unmanned aerial vehicle communication behavior model, determining that the user plane data flow corresponds to the network connection unmanned aerial vehicle. Through a dual verification mechanism of high-level service feature matching and bottom-level flow behavior secondary verification, accurate and real-time identification of the networked unmanned aerial vehicle is realized, an identification blind area of a traditional physical detection means in a cellular network environment is effectively made up, and the method can be widely applied to scenes of low-altitude security and protection, key infrastructure protection and the like.

In one embodiment, a method is disclosed, comprising: receiving a packet; processing the packet in a Control Unit–User Plane (CU-UP) as a user-space application with kernel-bypass networking; performing packet Input / Output (I / O) by the CU-UP user-space application, wherein the CU-UP performs Internet Protocol (IP) validation on received user-plane packets before processing Packet Data Convergence Protocol (PDCP), Service Data Adaptation Protocol (SDAP) and General Packet Radio Service Tunnelling Protocol (GTPU) protocol stack and performing direct I / O to a Network Interface Controller (NIC) for sending the packet over a network to a Distributed Unit (DU). The method may further comprise using a containerized CU-UP. The method may further comprise using a plurality of worker threads. The method may further comprise using a polling user space networking accelerator framework.

Penetration testing is performed on a cellular network environment. An attacker system sends a request packet to a target user equipment that is connected to a base station of a cellular network. A source Internet Protocol (IP) address of the request packet is changed to an IP address that allows a response packet from the target user equipment to be received at a relay system. The request packet is encapsulated in a General Packet Radio Services Tunneling Protocol User (GTP-U) tunnel packet that is sent to a UPF of the cellular network. The response packet, which is responsive to the request packet, is received at the relay system by way of the UPF. A destination IP address of the response packet is changed to an IP address of the attacker system before forwarding the response packet to the attacker system.

The invention discloses a network policy automatic generation and verification method and system, a product and a medium, and relates to the field of computer network communication. The method comprises the following steps: controlling an edge node to send a standard size reference detection stream without a label and a full size feature detection stream carrying a label to a terminal plug-in, if only the reference stream is connected, marking a link as a blocking type limitation, and if both the reference stream and the full size feature detection stream are connected but the feature stream label is missing, marking as a stripping type limitation; packaging according with a size threshold value is adopted for the blocking type link, and tunnel protocol hidden label packaging is adopted for the stripping type link; and sending the packaged data packet to the terminal plug-in to remove the outer layer protocol and restore the original service data packet, verifying the head integrity, and if the priority mark is abnormal, triggering an alarm and switching the protocol type. By implementing the technical scheme provided by the invention, the consistency of the network policy execution effect and the monitoring state is improved.

The invention provides a communication method, device and system for a task session. The method comprises: receiving a packet; the present invention relates to a method and a device for transmitting a general packet radio service (GPRS) packet generated on the basis of a packet and a general packet radio service (GPRS) user plane tunneling protocol (GTP) protocol, in which the GTP-U packet includes information on a task session for providing a task service to a task customer, the task service being a service for both packet data unit (PDU) connection and data processing, and a method for transmitting a GTP-U packet generated on the basis of the packet and the GTP-U protocol, in which the GTP-U packet includes information on a task session for providing a task service to the task customer.

The invention discloses a cross-RAT seamless switching method and a cross-RAT seamless switching system for an agent with a body, relates to the technical field of cross-RAT switching, and aims to solve the problem of wireless access mode switching when the agent with the body moves indoors and outdoors. Therefore, the dependence on a static configuration start-stop mode is eliminated; the method specifically comprises the following steps: subscribing position data, map data and motion trend data of a tool body agent, and periodically acquiring network quality information of a WLAN and a cellular network interface at the same time; based on subscription data and network quality information, two contents are dynamically controlled: one is to control opening and closing of a double-transmitting selective receiving function in a direction corresponding to an agent with a body and a communication opposite end on a WLAN and cellular network interface; and 2, when the double-transmitting selective-receiving function is closed, determining an optimal main transmission link in the WLAN and the cellular network interface. According to the invention, resource waste can be reduced while cross-RAT seamless switching is carried out.

A destination computing device that is associated with a first network establishes a tunnel that utilizes a tunneling protocol with a source computing device that is associated with a second network. The destination computing device generates a value that the source computing device is to insert into a field of tunnel packets generated by the source computing device in accordance with the tunneling protocol, wherein the value is for use by a network device driver (NDD) associated with a network interface device (NID) of the first network in selecting a downstream destination for the tunnel packets. The destination computing device sends the value to the source computing device and stores the value in a data structure accessible to the NDD.

The invention provides an intelligent networking method, an intelligent networking device and terminal equipment, which are suitable for the technical field of communication. Generating multiple pieces of initial networking information according to the main link network state monitoring information, the multiple pieces of standby link network state monitoring information, the multiple pieces of terminal networking demand information, the multiple pieces of tunnel protocol information and the multiple pieces of preset networking priority information; and based on a preset target networking model, according to the multiple pieces of standby link network state monitoring information and the multiple pieces of tunnel protocol information, performing optimization processing on the multiple pieces of initial networking information, and generating multiple pieces of target networking information. The method is used for quickly constructing remote networking in a scene without a public network IP, so as to meet the multi-scene requirements of remote management of industrial field equipment, remote maintenance of commercial buildings, remote office networking and mutual access and the like.

Some embodiments provide systems and methods to monitor network communications, comprising: a computing device comprising a control circuit and memory with instructions executed by the control circuit to implement: a tunneled monitoring service (TMS) operated local on the mobile computing device; and a tunnel protocol within the mobile computing device that is configured to establish a tunnel interface between software applications and the TMS, wherein the tunnel interface is configured, to collect output data transactions, communicated by the software applications, and direct the output data transactions to the TMS; wherein the TMS is configured to initiate a monitoring of each output data transaction relative to predefined criteria to identify relevant parameter information, obtained from one or more of the output data transactions, that have a predefined relationship with one or more of the criteria, and cause results of the monitoring relative to the criteria to be recorded.

The application discloses a method and device for establishing communication, relates to the technical field of communication, and can quickly establish communication between a LAC forwarding entity and a LNS forwarding entity in a control plane entity co-management LAC forwarding entity and LNS forwarding entity scenario. The method is applied to a network device for managing a Layer 2 Tunnel Protocol Access Concentrator (LAC) forwarding entity. The method comprises the following steps: determining that the network device manages a Layer 2 Tunnel Protocol Network Server (LNS) forwarding entity; in response to the determination that the network device manages the LNS forwarding entity, generating first forwarding information and second forwarding information; sending the first forwarding information to the LAC forwarding entity and sending the second forwarding information to the LNS forwarding entity. The first forwarding information and the second forwarding information are used to realize communication between the LAC forwarding entity and the LNS forwarding entity.

A method can include receiving, by a first base station from a user plane function (UPF), one or more general packet radio service tunneling protocol (GTP) protocol data units (PDUs) associated with a data burst. The data burst can include one or more PDU sets for an application of a wireless device. A last GTP PDU of the one or more GTP PDUs can include a GTP header indicating an end of the data burst. The method can also include sending, by the first base station to a second base station, a GTP PDU comprising a field indicating the end of the data burst, wherein the wireless device is dual connected via the first base station and the second base station.

Wireless User Equipment, UE, and network apparatuses may be adapted to facilitate continuity of Multicast / Broadcast Service, MBS, across cells. A UE in idle / inactive mode, for example, may receive MBS assistance information comprising scheduling information defining MB S reception windows and perform a cell re selection evaluation process accordingly. An UE in connected mode may conduct and report MB S quality measurements and receive an RRC reconfiguration comprising an MB S configuration for a target cell, determine that MBS transmission progress differs between the source cell and the target cell, and recover lost MBS PDUs or delete duplicate MBS PDUs accordingly. A network apparatus, such as a gNB for example, may map a GPRS Tunneling Protocol Sequence Number of an MBS PDU, to a Packet Data Convergence Protocol Sequence Number in a target cell, and determine an MB S configuration for use by a UE requesting a handover accordingly.

The application provides a data scheduling transmission method and a communication device. The method comprises the following steps: an access network device receives a first data packet from a user plane network function through a first general packet radio service tunneling protocol-user plane (GTP-U) tunnel, wherein the first data packet comprises scheduling indication information, and the scheduling indication information has a corresponding relationship with a service type of the first data packet; further, the access network device sends a second data packet to a terminal device according to the scheduling indication information, wherein the second data packet comprises data of the first data packet. Through the data scheduling transmission method, the access network device can perform air interface transmission on the data packet of the service according to the scheduling indication information which has a corresponding relationship with the service type, so as to realize differentiated air interface scheduling of data according to the service type, and facilitate to meet the transmission requirements of different services in a communication system.

According to some embodiments, a method is performed by a first network node for operations of non-homogeneous deployment of new radio (NR) user plane support user plane additions. The method includes constructing a General Packet Radio Service (GPRS) Tunneling Protocol User Plane (GTP-U) packet including an extended header, the extended header including a Protocol Data Unit (PDU) set container. The PDU set container includes an indication that the second network node can ignore the PDU set container when the second network node does not support PDU set functionality. The method further includes transmitting the GTP-U packet to the second network node.

A method, system, product, and medium for automatic generation and verification of network policies are disclosed, relating to the field of computer network communication. The method includes: controlling edge nodes to send unlabeled standard-size baseline probe streams and labeled full-size feature probe streams to terminal plug-ins; if only the baseline stream is connected, the link is marked as blocking-type restricted; if both are connected but feature stream labels are missing, it is marked as stripped-type restricted; for blocking links, encapsulation conforming to a size threshold is used; for stripped links, tunneling protocol-based label-hiding encapsulation is used; the encapsulated data packets are sent to the terminal plug-in to remove the outer protocol layer and restore the original service data packets, verifying header integrity; if the priority label is abnormal, an alarm is triggered and the protocol type is switched. Implementing the technical solution provided in this application improves the consistency of network policy execution effect and monitoring status.

The invention relates to the technical field of power system data monitoring and network communication, in particular to a virtual power plant real-time checking method and system based on network flow, and the method comprises the step that a programmable switch connected in series between a virtual power plant and a power transaction system performs real-time checking on a flowing network data packet. The method comprises the following steps: firstly, analyzing a data packet, and extracting total addition data, adjustment data and one or more single data carried by a user-defined tunneling protocol header of the data packet; then, based on the data, three types of verification of quantity value consistency, time sequence integrity and physical constraint are executed in parallel, and a parallel verification result is generated; then, generating a comprehensive check mark according to the result; and forwarding the data packet to a normal port or an abnormal alarm port according to the indication of the sign, and triggering an alarm. In the checking process, no matter whether the result is normal or not, all the data packets are normally forwarded to the power transaction system, so that the service continuity is ensured. According to the invention, the accuracy of real-time verification of the virtual power plant is improved.

The invention relates to a method, a device and equipment for realizing automatic identification and access to CPE (Customer Premise Equipment) based on a reverse tunnel, and the method comprises the steps: based on a reverse tunnel protocol, actively initiating TCP (Transmission Control Protocol) connection and carrying out three-time handshake through the CPE, realizing the establishment of an initial communication link, and according to the established TCP connection, reporting equipment identification and structured equipment information through the CPE along the path, and realizing automatic identification and access to the CPE. Automatic equipment identification and port mapping management of the controller are realized, and active access to any service of the CPE equipment is realized by querying mapping through the controller and utilizing the logic connection according to the binding relationship between the equipment identification and the logic connection. According to the method, the device identifier and the structured information are reported in advance by using the TCP connection, the controller actively queries the mapping relationship between the device identifier and the logic connection, and the device discovery, the tunnel establishment and the service agent process are integrated into a single continuous session, so that the connection establishment efficiency and the system expandability are improved.

In some implementations, a computer-implemented method includes establishing, by a network device, a communications connection between the network device and a destination host. The communications connection includes a first Virtual Private Network (VPN)-based sub-connection between the network device and a gateway device configured in a private network; and a second VPN-based sub-connection between the gateway device and a residential endpoint device configured in the private network. Each of the first and second VPN-based sub-connections is implemented using a tunneling protocol that encapsulates packets. The network device communicates with the destination host via the residential endpoint device using the first and second VPN-based sub-connections.

According to an implementation, a communication device transmits a TMM message over a traffic management and monitoring TMM transport channel. The TMM transmission channel is a transmission channel based on a user plane, the transmission channel based on the user plane uses a TMM quality of service (QoS) flow, and the TMM QoS flow is different from a user data QoS flow used for user data transmission. Or a data radio bearer DRB between the UE and the base station and a general packet radio service tunneling protocol user GTP-U protocol between the base station and the UPF network entity are used. Or, the transmission channel is a transmission channel based on a control plane, and the transmission channel based on the control plane uses a non-access stratum (NAS) signaling between the UE and a session management function (SMF) network entity and a packet forwarding control protocol (PFCP) between the SMF network entity and the UPF network entity.

This application discloses an RTMP one-way proxy method, system, device, and medium based on a one-way import device. It mainly relates to the field of one-way proxy technology, aiming to address the problem that existing solutions severely restrict one-way data flow. However, VPNs require bidirectional communication to establish a tunnel, and the RTMP protocol handshake process also relies on bidirectional transmission; existing technologies cannot avoid this deficiency. The system includes: a streaming media service relay module connected to the RTMP streaming end device A; a one-way sending program connected to the streaming media service relay module; a one-way receiving program connected to the one-way sending program; and a simulated terminal publishing module connected to the one-way receiving program; a simulated terminal subscription module connected to the subscribed external network RTMP streaming media server; a one-way sending program connected to the simulated terminal subscription module; a one-way receiving program connected to the one-way sending program; and a simulated terminal publishing module connected to the one-way receiving program.

The present disclosure provides a container network communication method, which includes steps as follows. An encapsulation based on a tunneling protocol is performed on a first packet with a destination network address indicating a second pod by a first tunnel endpoint of a first SDN switch, so as to obtain a first tunnel packet; the first tunnel packet is sent from the first SDN switch to the second SDN switch, and then performing a decapsulation based on the tunneling protocol on the first tunnel packet by a second tunnel endpoint of the second SDN switch, so that the second pod obtains a data of the first packet.

This disclosure relates to fifth-generation (5G) or sixth-generation (6G) communication systems for supporting higher data transmission rates. A method and system for optimizing radio access network (RAN) nodes in a wireless network are provided. The method includes measuring downstream throughput at the interface between a base station (BS) and a user plane function (UPF) entity, and measuring upstream throughput at the interface between the BS and the UPF entity, wherein the measurement includes at least one of measuring the number of octets of General Packet Radio Service (GPRS) Tunneling Protocol (GTP) data packets incoming from the user plane function to the RAN's N3 / NgU interface, and measuring the number of octets of GTP data packets outgoing from the RAN to the UPF's N3 / NgU interface.

The invention discloses a data transmission method and device based on open system interconnection, equipment and a medium, and relates to the technical field of data security, and the method comprises the steps: determining a data reading request for target data in a preset database of a server, and generating a corresponding target structured query statement, encrypting the target structured query statement through a transmission layer of an open system interconnection model by using a preset tunnel protocol to obtain encrypted information, transmitting a first data packet generated based on the encrypted information to a server side by using the open system interconnection model, and receiving target data returned by the server side; wherein the preset tunnel protocol is a network protocol constructed based on a transmission control protocol or a user datagram protocol between the client and the server. The tunnel protocol is directly deployed on the transmission layer to encrypt the SQL statement, full encryption does not need to be performed on the whole data packet, the calculation overhead is reduced, application layer service codes and server database configuration do not need to be changed, and the universality of the technical scheme is improved.

The invention relates to a data transmission method and device, network equipment, a chip and a chip module. The method comprises the following steps: receiving first target data through a first network interface in first network equipment, routing the first target data to a second network interface, packaging the first target data based on a sending function and a target tunnel protocol configured in a second network to obtain a first target data packet, and sending the first target data packet to the second network equipment; and sending the first target data packet to the second network device. By adopting the method, the data transmission path can be effectively reduced, and the data transmission performance is improved.