33 results about "Internet layer" patented technology

The present invention is directed towards systems and methods for mixed-mode load balancing by a virtual server in a network supporting a plurality of internet protocols. In various embodiments, a mixed-mode virtual server receives service requests based on two or more internet layer protocols. The mixed-mode virtual server is configured to detect an IP address type of the client issuing the service request, and identify the internet protocol of the service request based on the detected IP address type. The mixed-mode virtual server can then forward the request to a server supporting the identified internet protocol. In this manner, the mixed-mode virtual server can bind load balance servers supporting a plurality of internet protocols.

A network authentication method is disclosed. A transmission-side client and a reception-side client have the same password. The transmission-side client transmits multiple authentication packets to the reception-side client at a slot interval according to an authentication code generated based on the password. The reception-side client measures a slot interval corresponding to the arrival timings of the respective authentication packets and then generates an authentication code based on the same password. The reception-side client compares the measured slot interval with the generated authentication code. When the two comparison targets are identical, the reception-side client concludes that the authentication is successful and transmits packets that have not been transmitted until such moment to a layer higher than an Internet layer.

The invention relates to a system and method for identifying and preventing DDoS attacks on the basis of an SDN framework. The system comprises a cheating message detection module, a destroying message detection module, an abnormal message detection module and a threat processing module, wherein the cheating message detection module is used for detecting cheating behaviors of addresses of a link layer and an internet layer, the destroying message detection module is used for detecting abnormal behaviors of zone bit settings of the internet layer and a transmission layer, and the abnormal message detection module is used for detecting flooding type attack behaviors of an application layer and the transmission layer; the cheating message detection module, the destroying message detection module and the abnormal message detection module are used for sequentially detecting messages; if any detection module detects that the messages have cheating, abnormity and attack behaviors, the messages are shifted to the threat processing module; the threat processing module is suitable for discarding the messages and shielding programs and/or hosts transmitting the messages. Extensible modular design is adopted for the processing framework, and efficient detection and flexible processing of DDoS threats are achieved; processing procedures are segmented finely, and the high cohesion property of the modules is improved.

The invention discloses a route abnormal detection method in domain based on multiview to solve the problem that can not find out hidden route abnormal or false abnormal report in prior art, which comprises: designing a route abnormal detection system to finish two stages work as: Internet mode construction by BGP route list information and other network topological knowledge to build Internet hierarchy relation mode and commercial interlinkage relation mode for ISP; abnormal detection and report for first general detection then special detection and treating abnormal route and generating report. This invention reinforces route monitoring system capacity obviously.

The invention discloses an intelligent safety supervision management system and a realization method based on a GIS geographic information platform. The whole system is composed of four levels and is characterized by comprising 1) an Internet of things sensor layer: respective industrial and mining business production and operation units create Internet of things of respective enterprises based on enterprise internal networks, and constituent equipment includes various network intelligent sensors installed at production sites, Internet of things sensing network node equipment, enterprise safety production monitoring and management computers, and acousto-optic alarm equipment. 2) an Internet layer: respective enterprises communicate with a safety supervision management department data center by using the Internet, the monitoring data of respective enterprises is uploaded to a storage device in a municipal-level safety supervision department data center; 3) a B/S architecture layer including servers and storage devices installed in the safety supervision management department data center; and 4) a mobile user layer: authorized users can get access to a related database in the mobile terminal device to adjust and query a variety of data.

The invention discloses an intelligent control system for a multifunctional rainwater regulation and storage pond. The system comprises a field layer, a monitoring layer and an internet layer; the field layer comprises a regulation and storage pond water inlet valve, a regulation and storage pond liquid level meter, a water quality detector, a water pump, a water outlet tank liquid level meter, aclean water pump, a shut-off valve, a drain pump and a three-way valve; the monitoring layer comprises a PLC, a switchboard and an engineer station, the PLC controls the regulation and storage pond water inlet valve, the regulation and storage pond liquid level meter, the water quality detector, the water pump, the water outlet tank water level meter, the clean water pump, the shut-off valve, thedrain pump and the three-way valve to work, and the PLC is connected with the engineer station through the switchboard; the internet layer comprises a server, and the server is connected with the switchboard. The invention further provides an intelligent control method for the multifunctional rainwater regulation and storage pond. In the intelligent control system and method, appropriate functionsare automatically selected according to current weather conditions, the multi-functionalization of the regulation and storage pond is realized, and the functions of regulation and storage, surface source pollution control and rainwater reuse are integrated in the regulation and storage pond.

A method for providing an Internet layer address from a service device to a client device through a relay device, the method comprising the following steps on the relay device: receiving a first message from the client device and receiving a second message from the service device; sending Another first message is sent to the service device and another second message is sent to the client device. In order to allow the relay device to relatively adequately monitor a certain service, the method is provided on the relay device with the step of inserting the Internet layer address defining the relay device into a high-level field of another second message, said high-level field Originally designed to identify service devices. As a result, future messages sent from the client device to the serving device must pass through the relay device. The high-level fields include the server Internet Protocol address field and the option-54 field. Dynamic host configuration protocol messages are discover, offer, request, acknowledge, and request and/or update and/or release messages.

A network-to-network bridge is provided. In one embodiment, the network-to-network bridge is coupled between a main system and a subsystem system. The main system includes a slot to couple with the subsystem, wherein the slot complies with the PCIe standard. The network-to-network bridge includes a transport layer and an internet layer but lacks of a network access layer allocated between the first main system and subsystem so as to transfer data by following the PCIe standard therebetween. The network-to-network bridge transfers data between the main system and the subsystem by accessing and employing their MAC addresses, and the network-to-network bridge can be allocated in the mainboard of the main system or the subsystem.

The invention discloses a blockchain intelligent control network data security vulnerability mining method and system, relates to the field of control or monitoring, and solves the technical problem of lagging of network data information security vulnerability detection. Calculating a network data information transmission rate, a communication protocol and a communication type, and setting a physical layer, a data link layer, an internet layer, a transportation layer and an application layer in the block chain network; the method comprises the following steps: acquiring data information in a network data information transmission process through network data acquisition, and labeling block chain node data information and position information passing through a block chain network on the acquired data information; security threat analysis in a network data transmission process is realized through a vulnerability analysis algorithm with a positioning function; and when a data vulnerability is detected, information transmission is carried out through a block chain control network, and an alarm signal is transmitted to a user. According to the invention, the network data vulnerability monitoring capability is greatly improved.

The invention relates to an Internet layer connection measuring method adopting an IGMP (Internet Group Management Protocol) message and a relevant topology. The detection message of the prior art is easy to be identified as an aggressive behaviour and then is filtered, which breaks the integrity of measurement topology. The method comprises the following steps of: determining a measurement range represented by a group of Internet protocol IP address blocks and selecting the IP addresses of a group of router interfaces as a measurement goal address set from the measurement range; filling the IP detection message for packaging an IGMP neighbor request type message, and then sending the detection message; processing a response message according to the type of the response message if the response message is received in a preset time; and implementing waiting time overtime processing if the response message is not received in the preset time. An IP-stage or router-stage network topological graph can be constructed according to IP connection information and alias information which are obtained by measurement. The invention is used for a measuring method of moderate resistance filtration in an IP network.

The invention relates to a method for realizing PPPOE packaged multicast protocol message handling. The method comprises the following steps: judging the type of a protocol of a protocol message by a route; then, directly extracting the lengths of offset PPPOE headers of an IP packaged protocol message or a PPPOE packaged protocol message; judging whether the protocol message is a multicast protocol message by the route according to a transmission target. By adopting the method for realizing the PPPOE packaged multicast protocol message handling, a layer-by-layer stripping analysis way on a LAN side data message is carried out when the data message is received in an inner core drive; based on the layer-by-layer analysis from a data link layer to an internet layer, the multicast protocol message handling on the PPPOE header is added in the route, so that the phenomenon that the PPPOE packaged multicast protocol message is directly used as a unicast data package to be forwarded when the multicast protocol message passes through the route is avoided, and the multicast protocol message is accurately controlled; therefore, the method has a wider application range.

The invention discloses a method for a mobile terminal to share network resources. The method comprises the steps that a Bluetooth module of a user mobile terminal uses a Bluetooth network encapsulation protocol, wherein the Bluetooth module receives network signals, and the network signals are converted into an Ethernet package; the Ethernet package is sent to an Ethernet payload area from an internet protocol layer of the Bluetooth module and is directly copied to a Bluetooth network package protocol area, then, the Ethernet package is sent to a logical link control layer and an adaption protocol layer, and data are read to enable the mobile terminal to be connected to the internet. According to the method for the mobile terminal to share the network resources, an entire system can allow a plurality of sets of mobile terminals to be connected, the mobile terminals are mutually independent, mutual influence of the mobile terminals is avoided, direct mapping among an internet layer, the logical link control layer and the adaption protocol layer can be achieved, and the mobile terminals do not need to be inserted into other layers. The method for the mobile terminal to share the network resources can enable a Bluetooth network to have a wider and more open interface, and network connection is quick.

The invention provides a roadside parking lot management system. The system adopts three layers of network architectures of ZigBee, GPRS and Internet so as to connect parking lot information to a distributed system architecture of the Internet. A first layer is a ZigBee node wireless sensing network which is formed by ZigBee nodes distributed below parking spaces in a star topology structure. The ZigBee nodes are connected to a geomagnetic sensor so as to take charge of collecting parking lot parking space states. All parking lot information is collected to a ZigBee coordinator node. A coordinator and a relay gateway main controller exchange data through a serial port. The data is concentratedly processed in the relay gateway main controller. A second layer is a GPRS network. The relay gateway main controller is connected to a GPRS module through a UART interface and sends AT connection so as to finally realize remote transmission of the data. A third layer is the Internet. A user or an administrator can use a computer or a mobile phone to log in a far-end WEB server according to an authority so as to check and manage parking lot information.

The invention discloses a personalized customization flexible production line information system architecture. An internet layer comprises a user client and an enterprise management client; the data layer comprises a database server and a database; and the field equipment layer comprises a PLC (Programmable Logic Controller) and other field equipment controlled by the PLC. OPC UA servers are integrated in the database server and the PLC and are used for data collection, data format conversion and data transfer; the user client, the enterprise management client, the database server and the PLC are all provided with OPC UA clients, and each OPC UA client can be connected with the OPC UA server and is used for achieving two-way communication of the whole system. The simplified architecture is more beneficial to deployment of a small-sized manufacturing system, and a production plan is directly issued without passing through an enterprise resource management layer, so that the purposes of rapid construction and production are achieved. And an OPC UA communication protocol is used, so that the interoperability of heterogeneous equipment is improved, the distributed deployment of the system is also facilitated, and the efficiency of the whole system is also improved.