专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明授权

US11095674B2 DDoS attack detection method and device 有权
公开(公告)号：US11095674B2
公开(公告)日：2021-08-17
申请号：US16455717
申请日：2019-06-27
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： Chong Zhou , Tienan Wang
IPC分类号： H04L29/06
摘要： This application discloses a distributed denial of service attack detection method. The method includes: obtaining a data stream sent to a protection object device in each detection period, obtaining total duration of each data stream; dividing each data stream into a long data stream or a short data stream based on the total duration of each data stream; adding, based on a detection period through which the long data stream goes, total data traffic of the long data stream to statistical traffic; adding data traffic of a short data stream in each detection period to the data traffic, of the long data stream, that is added to a corresponding detection period, to determine statistical traffic in each detection period; and if there is a detection period in which the statistical traffic exceeds a preset traffic threshold, determining that the protection object device undergoes a DDoS attack in the detection period.

12. 发明申请

US20190327224A1 Certificate Obtaining Method, Authentication Method, and Network Device 审中-公开
公开(公告)号：US20190327224A1
公开(公告)日：2019-10-24
申请号：US16456706
申请日：2019-06-28
申请人： Huawei Technologies Co., Ltd.
发明人： Dacheng Zhang , Tianfu Fu , Chong Zhou
IPC分类号： H04L29/06
摘要： This application provides a certificate obtaining method, an authentication method, and a network device, to improve control over operation permission of an APP on an API. The certificate is used for permission authentication when the APP accesses an API of a controller. The certificate includes one or more of (a) to (c): (a) information about operation permission of the APP on N application programming interfaces APIs of the controller, (b) identifiers of L APIs that are of the N APIs and that the APP has permission to operate, and (c) identifiers of R APIs that are of the N APIs and that the APP has no permission to operate.

13. 发明申请

US20170300595A1 DATA PACKET EXTRACTION METHOD AND APPARATUS 审中-公开
公开(公告)号：US20170300595A1
公开(公告)日：2017-10-19
申请号：US15639180
申请日：2017-06-30
申请人： Huawei Technologies Co., Ltd.
发明人： Tianfu Fu , Chong Zhou , Yibo Zhang
IPC分类号： G06F17/30 , H04L12/24 , H04L12/743 , H04L12/26 , H04L12/851 , H04L29/06 , H04L12/935 , H04L12/931 , H04L12/741
CPC分类号： G06F16/90344 , H04L29/06 , H04L41/142 , H04L41/50 , H04L41/5009 , H04L43/022 , H04L43/026 , H04L43/06 , H04L43/0817 , H04L43/0847 , H04L43/0852 , H04L43/087 , H04L43/106 , H04L43/18 , H04L45/745 , H04L45/7453 , H04L47/2441 , H04L49/205 , H04L49/3009 , H04L69/16 , H04L69/161
摘要： A data packet extraction method and apparatus is disclosed. Two hash values calculated based on quintuple information of different data packets of a same session are the same, that is, two calculated remainders are also the same at a same sampling ratio. When one remainder of the two calculated remainders is a preset sampling remainder, all the data packets in a network that belong to the session are extracted, so as to implement data packet extraction based on a session. When the quintuple information of the different data packets of the same session matches a first mapping table, either all the data packets of the same session can match the first mapping table, or none of the data packets of the same session can match the first mapping table, so as to implement data packet extraction based on a session.

14. 发明授权

US09407538B2 Ring network failure switching method and apparatus 有权
标题翻译：环网故障切换方法及装置
公开(公告)号：US09407538B2
公开(公告)日：2016-08-02
申请号：US14187660
申请日：2014-02-24
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： Chong Zhou
IPC分类号： H04L12/703 , H04L12/437 , H04L12/707 , H04L12/721
CPC分类号： H04L45/28 , H04L12/437 , H04L45/22 , H04L45/66
摘要： A ring network failure switching method, includes: receiving first data traffic, where the first data traffic includes a destination MAC address; querying a forwarding entry stored in a local node according to the destination MAC address, to obtain a ring network identifier corresponding to the destination MAC address, where the ring network identifier is uniquely corresponding to the first node connected to the destination MAC address; and obtain path state information of a link corresponding to the ring network identifier; and transmitting the first data traffic to the first node in a direction that is opposite to that of the link when the path state information indicates that the link is in a failure state.
摘要翻译：环网故障切换方法，包括：接收第一数据业务，其中第一数据业务包括目的MAC地址; 根据目的MAC地址查询本地节点存储的转发表项，获取与目的MAC地址对应的环网标识符，其中环网标识符唯一对应于连接到目的MAC地址的第一节点; 获取与所述环网标识符对应的链路的路径状态信息; 以及当所述路径状态信息指示所述链路处于故障状态时，以与所述链路的方向相反的方向将所述第一数据业务发送到所述第一节点。

15. 发明授权

US10846393B2 Application program integrity verification method and network device 有权
公开(公告)号：US10846393B2
公开(公告)日：2020-11-24
申请号：US15594264
申请日：2017-05-12
申请人： Huawei Technologies Co., Ltd.
发明人： Tianfu Fu , Chong Zhou
IPC分类号： G06F21/54 , G06F21/56 , G06F21/57 , G06F12/14 , H04L9/32 , H04L29/06 , G06F21/51
CPC分类号： G06F21/51 , G06F12/1408 , G06F21/56 , G06F21/565 , G06F21/57 , H04L9/3234 , H04L9/3247 , H04L63/0435 , H04L63/0442 , H04L63/061 , H04L63/123 , G06F2212/1052
摘要： Embodiments of the present disclosure disclose an application program integrity verification method and a network device. The method includes: performing eigenvalue calculation on data of an application program when the application program starts, to obtain a first digest of the application program (101); decrypting a stored digital signature of the application program according to a public key in an embedded key pair to obtain a second digest of the application program, where the digital signature is obtained, according to a private key in the key pair, by signing data of the application program each time the application program is updated (102), and the key pair is a manufacturer key pair corresponding to the application program; and determining that integrity verification of the application program passes if the first digest and the second digest are the same, otherwise, determining that integrity verification of the application program does not pass (103).

16. 发明申请

US20190327255A1 DDOS ATTACK DETECTION METHOD AND DEVICE 审中-公开
公开(公告)号：US20190327255A1
公开(公告)日：2019-10-24
申请号：US16455717
申请日：2019-06-27
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： Chong Zhou , Tienan Wang
IPC分类号： H04L29/06
摘要： This application discloses a distributed denial of service attack detection method. The method includes: obtaining a data stream sent to a protection object device in each detection period, obtaining total duration of each data stream; dividing each data stream into a long data stream or a short data stream based on the total duration of each data stream; adding, based on a detection period through which the long data stream goes, total data traffic of the long data stream to statistical traffic; adding data traffic of a short data stream in each detection period to the data traffic, of the long data stream, that is added to a corresponding detection period, to determine statistical traffic in each detection period; and if there is a detection period in which the statistical traffic exceeds a preset traffic threshold, determining that the protection object device undergoes a DDoS attack in the detection period.

17. 发明申请

US20170200010A1 SECURITY CONTROL METHOD AND NETWORK DEVICE 审中-公开
公开(公告)号：US20170200010A1
公开(公告)日：2017-07-13
申请号：US15468776
申请日：2017-03-24
申请人： Huawei Technologies Co., Ltd.
发明人： Tianfu Fu , Chong Zhou , Hao Lei , Liang Zhu , Yubai Ye
IPC分类号： G06F21/57 , H04L29/06 , H04L9/14 , G06F9/44
CPC分类号： G06F21/575 , G06F9/4406 , G06F21/57 , H04L9/14 , H04L63/0428 , H04L63/06 , H04L63/10 , H04L63/20 , H04L2209/16
摘要： Disclosed are a security control method and a network device. The method includes: a network device obtains confidential data generated by a software trusted platform module (TPM) running in the network device, where the confidential data includes permanent confidential data and refreshable confidential data, the permanent confidential data is data that cannot be updated during a startup process of the network device and the refreshable confidential data is data that can be updated during a startup process of the network device; the network device encrypts the permanent confidential data by using a white box algorithm and stores the permanent confidential data encrypted by using the white box algorithm and the refreshable confidential data in a storage unit whose address is hidden.

18. 发明申请

US20140169156A1 RING NETWORK FAILURE SWITCHING METHOD AND APPARATUS 有权
标题翻译：环网故障切换方法和设备
公开(公告)号：US20140169156A1
公开(公告)日：2014-06-19
申请号：US14187660
申请日：2014-02-24
申请人： HUAWEI TECHNOLOGIES CO., LTD.
发明人： Chong Zhou
IPC分类号： H04L12/703 , H04L12/707
CPC分类号： H04L45/28 , H04L12/437 , H04L45/22 , H04L45/66
摘要： A ring network failure switching method, includes: receiving first data traffic, where the first data traffic includes a destination MAC address; querying a forwarding entry stored in a local node according to the destination MAC address, to obtain a ring network identifier corresponding to the destination MAC address, where the ring network identifier is uniquely corresponding to the first node connected to the destination MAC address; and obtain path state information of a link corresponding to the ring network identifier; and transmitting the first data traffic to the first node in a direction that is opposite to that of the link when the path state information indicates that the link is in a failure state.
摘要翻译：环网故障切换方法，包括：接收第一数据业务，其中第一数据业务包括目的MAC地址; 根据目的MAC地址查询本地节点存储的转发表项，获取与目的MAC地址对应的环网标识符，其中环网标识符唯一对应于连接到目的MAC地址的第一节点; 获取与所述环网标识符对应的链路的路径状态信息; 以及当所述路径状态信息指示所述链路处于故障状态时，以与所述链路的方向相反的方向将所述第一数据业务发送到所述第一节点。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式