CN106161417A - A kind of isomery function equivalence body dispatching device and method thereof - Google Patents
A kind of isomery function equivalence body dispatching device and method thereof Download PDFInfo
- Publication number
- CN106161417A CN106161417A CN201510293341.7A CN201510293341A CN106161417A CN 106161417 A CN106161417 A CN 106161417A CN 201510293341 A CN201510293341 A CN 201510293341A CN 106161417 A CN106161417 A CN 106161417A
- Authority
- CN
- China
- Prior art keywords
- function equivalence
- isomery function
- equivalence body
- isomery
- service request
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Hardware Redundancy (AREA)
Abstract
nullThe disclosure is directed to a kind of isomery function equivalence body dispatching device and method thereof，Including multiple for providing the isomery function equivalence body of identical function for external service request，Also include redundant manipulator and input proxy server，Redundant manipulator receives the triggering signal that input proxy server provides，And according to the control parameter of the outside input received，Randomly choose isomery function equivalence body and provide service for external service request，Therefore，On the one hand the method for this random combine scheduling isomery function equivalence body makes device have different complexities in structural characterization aspect，Isomery function equivalence body for each service request selecting is different，And the result of the isomery function equivalence body according to different scheduling strategy output also differs，Externally show the output state of dynamically changeable，And then back door or the leak loaded is difficult to be found out by offense or utilize.Device is made just to have autoimmune ability to network system there may be multiple unknown security threat.
Description
Technical field
The present invention relates to cyberspace technical field of safety protection, particularly relate to a kind of isomery function equivalence body dispatching device and
Its method.
Background technology
Computer and the cyberspace environment being made up of computer are that the life of people, working and learning bring the most just
Profit, computer constitute cyberspace environment include network equipment terminal (such as mobile phone, computer), operate in terminal with
The software (such as browser, bitcom) that network is relevant, server, and for network provide interconnection various equipment (as
Switch, router) etc..Software and hardware device in cyberspace field can be system, subsystem, parts, module,
Component even device, the configuration state that these software and hardware devices externally present is referred to as structural characterization.
Existing network space field gives the software and hardware device of service function, its formal structure form and its inner constructional form
Between there are certain mapping relations, and this mapping relations are the most static and really on the Technical Architecture in cyberspace field
Fixed.Mostly redundant system the most of the prior art, be based on isomorphism redundant system, the inherence of this isomorphism redundant system
Structure and design logic thereof are identical so that when isomorphism redundancy dispatching, and structural characterization is identical, and with isomorphism merit
The structure of energy equivalents is similar and has nature static.
Additionally, realize mechanism inside it again and there is similarity relation to a certain extent between formal structure.Analyze these relations
Can indirectly obtain about the software and hardware structure information within device, and may be had by sniff or scan available
The unknown defect being worth, or find the contact channel activating back door, and then network system is attacked or invades, prestige
The information security of side of body device or network security.
Summary of the invention
The embodiment of the present invention provides a kind of isomery function equivalence body dispatching device and method thereof, to solve the problems referred to above.
In order to solve above-mentioned technical problem, the embodiment of the invention discloses following technical scheme:
A kind of isomery function equivalence body dispatching device, including multiple for providing the isomery of identical function for external service request
Function equivalence body, also includes redundant manipulator and inputs proxy server, wherein,
Described input proxy server, is used for receiving external service request, uses described external service request to trigger described redundancy control
Device processed, and, receive the isomery function equivalence body information that described redundant manipulator selects, described external service request is divided
These isomery function equivalence bodies of dispensing.
Described redundant manipulator, for receiving the triggering signal that input proxy server provides, receives the control parameter of outside input,
According to the instruction of described control parameter, randomly choose isomery function equivalence body and provide service for external service request, and,
Isomery function equivalence body selection information is fed back to described input proxy server.
Further, described control parameter includes to select the quantity of isomery function equivalence body or for producing random number
Seed.
Further, the step randomly choosing isomery function equivalence body described in includes:
When the quantity selected is 1, determine an isomery function equivalence body according to the first preassigned pattern；
When the quantity selected is n, determine n isomery function equivalence body according to the second preassigned pattern；
Wherein, quantity m of the isomery function equivalence body that n provides less than or equal to device.
Further, described second preassigned pattern includes odd number even numbers pattern, ordered mode or random model.
Further, determine that the step of n isomery function equivalence body includes according to described random model:
In m the isomery function equivalence body that device provides, arbitrarily select n therein1Individual isomery function equivalence body；
At remaining m-n1In individual isomery function equivalence body, more arbitrarily select n therein2Individual isomery function equivalence body；
According to previous step, during until the quantity of selected isomery function equivalence body is n.
Further, when described selected isomery function equivalence body there are and can not providing service for external service request
Isomery function equivalence body time, described redundant manipulator again randomly choose new isomery function equivalence body be external service please
Offer service is provided.
Further, all service can not be provided for external service request when all described selected isomery function equivalence bodies
Time, described redundant manipulator again randomly chooses new isomery function equivalence body and provides service for external service request.
Further, described device also includes the monitoring being arranged between described redundant manipulator and described input proxy server
Device,
Described watch-dog is monitored for the duty acting on behalf of described redundant manipulator and described input, and to generation
The redundant manipulator that carries out of unusual condition or input proxy server report to the police or restart.
A kind of isomery function equivalence body dispatching method, described method includes:
Input proxy server receives external service request, triggers redundant manipulator according to described external service request；
Described redundant manipulator receives the triggering signal that input proxy server provides, and receives the control parameter of outside input, and,
According to the instruction of described control parameter, randomly choose one or more isomery function equivalence body and provide clothes for external service request
Business；
Isomery function equivalence body selection information is fed back to described input proxy server by described redundant manipulator；
Described input proxy server receives the isomery function equivalence body information that described redundant manipulator selects, and by described outside clothes
Business requests assignment to these isomery function equivalence bodies.
Further, described returning method includes:
The described isomery function equivalence body randomly choosed receives the external service request of described input proxy server distribution, and exports
Service response.
Embodiment of the disclosure that the technical scheme of offer can include following beneficial effect:
A kind of isomery function equivalence body dispatching device of present invention offer and method thereof, owing to redundant manipulator can be according to reception
The instruction of the control parameter of the outside input arrived, randomly chooses isomery function equivalence body and provides service for external service request,
Therefore, on the one hand make the output response of isomery function equivalence body have different complexities in structural characterization aspect, for
The isomery function equivalence body of each service request selecting is different, and according to the isomery function etc. of different scheduling strategy output
The result of valency body also differs, and externally shows the output state of dynamically changeable, and then makes the back door loaded in cyberspace
Or leak (defect) is difficult to because losing nature static and definitiveness be found out by offense or utilize.On the other hand, to different
Multiple unknown leak (defect) is there may be, as long as the leak of these the unknowns (defect) is not in institute on structure function equivalence body
Have on the same position of isomery function equivalence body, and be not not to be hacked person to break through, then this device is to network system simultaneously
In there may be multiple unknown security breaches (defect), just there is defence capability.
Additionally, by the random combine of isomery function equivalence body is dispatched, make isomery function equivalence body dispatching device structural table
Levy and present uncertainty, and then hide or covered up the abnormal operating condition of isomery function equivalence body well, significantly
The predictability reducing device protective behavior.
Accompanying drawing explanation
In order to be illustrated more clearly that the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing
In technology description, the required accompanying drawing used is briefly described, it should be apparent that, for those of ordinary skill in the art
Speech, on the premise of not paying creative work, it is also possible to obtain other accompanying drawing according to these accompanying drawings.
The structural representation of a kind of isomery function equivalence body dispatching device that Fig. 1 provides for the embodiment of the present invention；
The structural representation of the another kind of isomery function equivalence body dispatching device that Fig. 2 provides for the embodiment of the present invention；
The flow chart of a kind of isomery function equivalence body dispatching method that Fig. 3 provides for the embodiment of the present invention.
Detailed description of the invention
For the technical scheme making those skilled in the art be more fully understood that in the present invention, implement below in conjunction with the present invention
Accompanying drawing in example, is clearly and completely described the technical scheme in the embodiment of the present invention, it is clear that described reality
Executing example is only a part of embodiment of the present invention rather than whole embodiments.They are only and the most described claims
The example of the apparatus and method that middle some aspects described in detail, the present invention are consistent.
Fig. 1 is the structural representation according to a kind of isomery function equivalence body dispatching device shown in embodiment.This device is applied
In cyberspace field.
As it is shown in figure 1, this isomery function equivalence body dispatching device 100 includes multiple for providing phase for external service request
The isomery function equivalence body 30 of congenerous, redundant manipulator 20 and input proxy server 10.
Input proxy server 10 redundant manipulator 20 respectively is connected, outside being used for receiving with multiple isomery function equivalence bodies 30
Portion's service request, uses this external service request to trigger redundant manipulator 20, and, receive redundant manipulator 20 and select
Isomery function equivalence body information, this external service request is distributed to these isomery function equivalence bodies.
The external service request that wherein input proxy server 10 receives, input proxy server has any form of service request point
Formula formula.This external service request can be that be given by external equipment or artificial given, such as: internal storage access,
Router-level topology, web request etc..
Redundant manipulator 20, for receiving the triggering signal that input proxy server 10 sends, receives the control ginseng of outside input
Number, according to the instruction of this control parameter, randomly chooses isomery function equivalence body and provides service for external service request, and,
Isomery function equivalence body selection information is fed back to input proxy server 10.
Additionally, redundant manipulator 20 is additionally operable to occurring abnormal isomery function equivalence body to send instruction of restarting, or to different
Structure function equivalence body makees the operations such as cleaning or the reset of tactic.This tactic is cleaned and is included: cleaning caching, cleaning configuration
File etc..Reset refers to isomery function equivalence body is carried out Initialize installation.
Additionally, isomery function equivalence body service implementation is managed by redundant manipulator 20 by input proxy server 10, including control
System input proxy server 10 is given the distribution service request of isomery function equivalence body 30, is selected service output and isomery function equivalence
The mutual state of body or data syn-chronization etc..
Multiple isomery function equivalence bodies 30 with identical function, respectively with input proxy server 10 and redundant manipulator 20
Being connected, for providing service to from outside service request, and each isomery function equivalence body has identical
Service function.The scale of each isomery function equivalence body can be system, subsystem, module, function, middleware, structure
Part etc..The functional expression of isomery function equivalence body, be service request provide service implementation can be by software,
The mode such as hardware, software and hardware realizes, and the structure form of isomery function equivalence body can be rigidity, it is also possible to be by weight
Structure, restructuring, the mode of software definable realize functional expression.
Isomery function equivalence body functionally has an equivalence provide service according to service request, but each isomery function etc.
Valency body has an isomerism at following aspect:
The first, key algorithm is different, and this key algorithm includes stream table rule matching algorithm, file system page allocation algorithm etc.；
The second, implementation is different, such as data structure, programming language, compiling option, software architecture, hardware-accelerated
The implementations such as mode；
3rd, running environment is different, such as OS Type version, hardware architecture environment etc..
A kind of isomery function equivalence body dispatching device of the disclosure, when redundant manipulator receives the triggering that input proxy server provides
Signal, and according to the control parameter of the outside input received, randomly choosing isomery function equivalence body is external service request
Thering is provided service, therefore, on the one hand this method randomly choosing isomery function equivalence body combined schedule makes isomery function etc.
The output response of valency body has different complexities in structural characterization aspect, for the isomery function of each service request selecting
Equivalents is different, and also differs, to appearance according to the result of the isomery function equivalence body of different scheduling strategy output
Reveal the output state of dynamically changeable, and then make the back door loaded in cyberspace or leak (defect) because losing quiet
State property and definitiveness and be difficult to be found out by offense or utilize.
On the other hand, to there may be multiple unknown leak (defect) on isomery function equivalence body, as long as these the unknowns
Leak (defect) is not on the same position of all isomery function equivalence bodies, and is not not to be hacked person to break through simultaneously,
So this device is to there may be multiple unknown security breaches (defect) in network system, just has defence capability, i.e. attacks
Person is not easy to break through the leak (defect) on all isomery function equivalence bodies simultaneously.
Additionally, by the random combine of isomery function equivalence body is dispatched, make isomery function equivalence body dispatching device structural table
Levy and present uncertainty, and then hide or covered up the abnormal operating condition of isomery function equivalence body well, significantly
The predictability reducing device protective behavior.
In another embodiment, further, redundant manipulator 20 is receiving the triggering letter that input proxy server 10 provides
After number, receiving the control parameter of outside input, the control parameter of this outside input includes selecting isomery function equivalence body
Quantity or for producing the seed of random number.Above-mentioned redundant manipulator may perform to the control parameter from outside input,
Also can perform the control parameter being internally generated, should include but not limited to from the control parameter of outside or inside: active schedule
Number, storage occupancy, processor occupancy etc..
The seed of this generation random number, refers to initialize the external parameter of random function so that it is the random number of generation has more
Good random effect.These randoms number produced are determined for selecting the number of isomery function equivalence body, and select
The numbering of isomery function equivalence body.
Redundant manipulator 20 can select the control parameter of outside input according to its internal service condition.When outside is defeated
The control parameter entered is big, when i.e. the quantity of the isomery function equivalence body of redundant manipulator 20 needs scheduling is more, to device
Power consumption can increase, redundant manipulator 20 in device, the burden weightening finish of input proxy server 10, but selects a large amount of number
External service request is serviced by isomery function equivalence body, and the complexity making the external structural characterization of device is higher, anti-network
The ability of intruder attack is the strongest；On the contrary, if the control parameter of outside input is little, redundant manipulator scheduling 20 in device
Isomery function equivalence body quantity few, the power consumption of device is reduced, but due to the isomery merit serviced for external service request
Energy equivalents quantity is few, therefore when some of which isomery function equivalence body can not export response, device can be made to exist easily
By network attack, person invades.
Further, redundant manipulator 20 randomly chooses the step of isomery function equivalence body 30 and includes:
Step S1: when the quantity selected is 1, determine an isomery function equivalence body according to the first preassigned pattern；
This first preassigned pattern can be the isomery that redundant manipulator is randomly assigned according to the policing parameter that outside inputs
Function equivalence body, or one isomery function equivalence body of fixing appointment.
Step S2: when the quantity selected is n, determine n isomery function equivalence body according to the second preassigned pattern；
Wherein, quantity m of the isomery function equivalence body that n provides less than or equal to dispatching device, i.e. n≤m.
Randomly choose in the embodiment of isomery function equivalence body above, described second preassigned pattern includes odd number even numbers mould
Formula, ordered mode or random model.
This second preassigned pattern can be preset by redundant manipulator inner function module, or by outside function
Module, such as parameter configuration device, set the second preassigned pattern.
Odd number even numbers pattern refers to, in m the isomery function equivalence body that system provides, according to from front to back 1,2,
3 ..., the order of m be numbered to successively each isomery function equivalence body, reselection numbering is the isomery function of odd number
Equivalents, such as, be numbered 1,3,5,7 ... isomery function equivalence body, select n；Or select according to even numbers
Be numbered 2,4,6,8 ... isomery function equivalence body, select n.
Ordered mode refers to m isomery function equivalence body selects, and select n in a certain order.Such as
It is numbered successively according to all isomery function equivalence bodies order from 1 to m, when selecting, can be suitable according to positive sequence
Sequence, the order from 1 to m selects；Or according to inverted order order, from the order selection etc. of m to 1.
Random model refers to randomly choose n isomery function equivalence body in m isomery function equivalence body.Can be countless
The method of kind selects n from m isomery function equivalence body, as long as by randomly choosing, enumerate therein below
One or both randomly choose the method for n isomery function equivalence body, but are not limited to this one or both methods enumerated.
Enumerate one, determine that according to above-mentioned random model the step of n isomery function equivalence body includes:
Step S11: in m the isomery function equivalence body that system provides, arbitrarily selects n therein1Individual isomery function etc.
Valency body；Such as n1When being 1, arbitrarily select 1 isomery function equivalence body.
Step S12: at remaining m-n1In individual isomery function equivalence body, more arbitrarily select n therein2Individual isomery function etc.
Valency body；Such as, in step s 11, n is worked as2When being 1, and n1When being 1, at remaining m-1 isomery function equivalence
In body, 1 isomery function equivalence body of reselection.
According to previous step S11 or S12, during until the quantity of selected isomery function equivalence body is n.I.e.
Remove each selected isomery function equivalence external, randomly select in the isomery function equivalence body of volume residual, when full
Foot: n1+n2+n3+ ... during=n, stop selecting.
Enumerate two, according to random model, m the isomery function equivalence body that dispatching device provides selects n isomery merit
Can equivalents method it may also is that
Step S21: control the isomery function equivalence body quantity that stochastic parameter selects to need to provide service for external service request
For n (1≤n≤m)；
According to controlling the seed producing random number that parameter provides, initialize random function.
Step S22: using random function to produce random number a in redundant manipulator, a is as the volume of isomery function equivalence body
Number；
Step S23: use random function to produce random number x (0≤x≤1), ifSelect the isomery of numbered a
Function equivalence body, as providing the isomery function equivalence body serviced for external service request, otherwise, does not selects；
Step S24: circulation step S22 and step S23, until the isomery function equivalence body selecting n difference to number is
Only.
Further, when one or more isomery function equivalence bodies that redundant manipulator selects there are and can not taking for outside
When business request provides the isomery function equivalence body of service, redundant manipulator again randomly chooses new isomery function equivalence body and is
External service request provides service.
Such as, when selected n isomery function equivalence body there being an isomery function equivalence body can not ask for external service
When asking offer service, redundant manipulator 20 randomly chooses an isomery function in remaining m-n isomery function equivalence body
Equivalents, substitutes the isomery function equivalence body not being provided that service, eliminates this isomery function not being provided that service simultaneously
Equivalents so that the number of selected isomery function equivalence body is n.
Or, it is also possible in m the isomery function equivalence body that system provides, again randomly choose n new isomery merit
Can equivalents, and select pattern can be odd number even numbers pattern, ordered mode or random model.
Further, when all selected isomery function equivalence bodies all can not provide service for external service request, superfluous
Remaining controller 20 again randomly chooses new isomery function equivalence body and provides service for external service request.
For example, it is possible to by above-mentioned odd number even numbers pattern, ordered mode or random model to all m isomery function equivalences
Body randomly chooses, and forms n new isomery function equivalence body so that the isomery function equivalence body reselected can
Service is provided for external service request.
In another embodiment of the disclosure, as in figure 2 it is shown, be the safety strengthening above-mentioned dispatching device, further
Ground, this device also includes watch-dog 40 (being commonly called as " house dog "), watch-dog 40 and redundant manipulator 20 and input agency
Device 10 is connected, for monitoring redundant manipulator 20 and the duty of input proxy server 10, and to the unusual condition occurred
Carry out reporting to the police or sending operational order.
Such as, detect that redundant manipulator 20 and input proxy server 10 are to servicing function request or instruction when watch-dog 40
During without respond/not working, or isomery function equivalence body is not adjusted by redundant manipulator 20 according to the scheduling strategy set
When spending, watch-dog 40 sends instruction of restarting to redundant manipulator 20 or input proxy server 10, and correspondingly sends warning,
Control occur that abnormal redundant manipulator 20 or input proxy server 10 restart the output service response making not affect device simultaneously.
Further, watch-dog watch-dog 40 can also be connected with multiple isomery function equivalence bodies 30 with identical function
Connect, for the duty of isomery function equivalence body is monitored, and carry out reporting to the police or sending behaviour according to monitoring situation
Instruct.When the isomery function equivalence body that can not provide function services for external service request being detected, watch-dog pair
This isomery function equivalence body is restarted.
In conjunction with a kind of isomery function equivalence body dispatching device disclosed above, the present invention also provides for a kind of isomery function equivalence body
Dispatching method, method includes:
Step 101: input proxy server receives external service request, triggers redundant manipulator according to this external service request；
When inputting the information that proxy server receives external service request, send one according to this external service request to redundant manipulator
Individual triggering signal.
Step 102: redundant manipulator receives the triggering signal that input proxy server provides, and receives the control from outside input
Parameter processed, and, according to the instruction of this external control parameters, randomly choose one or more isomery function equivalence body for outward
Portion's service request provides service.
Step 103: the isomery function equivalence body randomly choosed selection information is fed back to input proxy server by redundant manipulator；
Step 104: input proxy server receives the isomery function equivalence body information that redundant manipulator selects, and by external service
Request assignment to these selected isomery function equivalence bodies.
According to the another aspect of disclosure embodiment, above-mentioned dispatching method also includes:
Step 105: the isomery function equivalence body randomly choosed receives the external service request of above-mentioned input proxy server distribution,
And export service response.
Input proxy server, redundant manipulator and one in the embodiment of above-mentioned a kind of isomery function equivalence body dispatching method
The 26S Proteasome Structure and Function of the isomery function equivalence body that individual or multiple service function is identical and aforementioned a kind of isomery function equivalence body scheduling
Device is identical, does not elaborates at this.
A kind of isomery function equivalence body dispatching method that the embodiment of the present invention provides, gives when redundant manipulator receives input agency
The triggering signal gone out, and according to the control parameter of the outside input received, randomly choose isomery function equivalence body for outside
Service request provides service, by dispatching the random combine of isomery function equivalence body, makes dispatching device structural characterization present
Uncertainty, the number of the isomery function equivalence body being external service request offer service is uncertain, by which isomery merit
Equivalents service can be provided to be uncertain for external service request, this uncertain one side makes isomery function equivalence
The output response of body has different complexities in structural characterization aspect, for the isomery function etc. of each service request selecting
Valency body is different, and also differs according to the result of the isomery function equivalence body of different scheduling strategy output, externally shows
Go out the output state of dynamically changeable, so make the trapdoor (back door) that loads in cyberspace or leak (defect) because
Lose nature static and definitiveness and be difficult to be found out by offense or utilize.
On the other hand, to there may be multiple unknown leak (defect) on isomery function equivalence body, as long as these the unknowns
Leak (defect) is not on the same position of all isomery function equivalence bodies, and is not not to be hacked person to break through simultaneously,
So this device is to there may be multiple unknown security breaches (defect) in network system, just has defence capability.
Additionally, by the random combine of isomery function equivalence body is dispatched, make isomery function equivalence body dispatching device structural table
Levy and present uncertainty, and then hide or covered up the abnormal operating condition of isomery function equivalence body well, significantly
The predictability reducing device protective behavior.
Compared with traditional isomorphism Redundant Control, the isomery function equivalence body dispatching method that this programme provides, in Redundant Control
On the basis of imported based on isomery object formal structure characterize complexity promote new method, i.e. random combine dispatching method,
Make device not only be better than the reliability of isomorphism redundancy in mechanism, and be allowed to the energy possessing active protection the unknown security risk
Power and regulatable means.
Those skilled in the art it can be understood that can add by software to the technology in the embodiment of the present invention required
The mode of general hardware platform realizes.Based on such understanding, the technical scheme in the embodiment of the present invention substantially or
Saying that the part contributing prior art can embody with the form of software product, this computer software product is permissible
It is stored in storage medium, such as ROM/RAM, magnetic disc, CD etc., instructs with so that a computer sets including some
Standby (can be personal computer, server, or the network equipment etc.) performs each embodiment of the present invention or embodiment
The method described in some part.
The above is only the detailed description of the invention of the present invention, it is noted that for those skilled in the art
For, under the premise without departing from the principles of the invention, it is also possible to make some improvements and modifications, these improvements and modifications are also
Should be regarded as protection scope of the present invention.
Claims (10)
1. an isomery function equivalence body dispatching device, including multiple for providing the different of identical function for external service request
Structure function equivalence body, it is characterised in that also include redundant manipulator and input proxy server, wherein,
Described input proxy server, is used for receiving external service request, uses described external service request to trigger described redundancy control
Device processed, and, receive the isomery function equivalence body information that described redundant manipulator selects, described external service request is divided
These isomery function equivalence bodies of dispensing；
Described redundant manipulator, for receiving the triggering signal that input proxy server provides, receives the control parameter of outside input,
According to the instruction of described control parameter, randomly choose isomery function equivalence body and provide service for external service request, and,
Isomery function equivalence body selection information is fed back to described input proxy server.
Device the most according to claim 1, it is characterised in that described control parameter includes selecting isomery function
The quantity of equivalents or for producing the seed of random number.
Device the most according to claim 2, it is characterised in that described in randomly choose the step of isomery function equivalence body
Including:
When the quantity selected is 1, determine an isomery function equivalence body according to the first preassigned pattern；
When the quantity selected is n, determine n isomery function equivalence body according to the second preassigned pattern；
Wherein, quantity m of the isomery function equivalence body that n provides less than or equal to device.
Device the most according to claim 3, it is characterised in that described second preassigned pattern include odd number even numbers pattern,
Ordered mode or random model.
Device the most according to claim 4, it is characterised in that determine n isomery function according to described random model
The step of equivalents includes:
In m the isomery function equivalence body that device provides, arbitrarily select n therein1Individual isomery function equivalence body；
At remaining m-n1In individual isomery function equivalence body, more arbitrarily select n therein2Individual isomery function equivalence body；
According to previous step, during until the quantity of selected isomery function equivalence body is n.
6. according to the device described in claim 1,2,3,4 or 5, it is characterised in that when described selected isomery
When function equivalence body there are the isomery function equivalence body that can not provide service for external service request, described Redundant Control
Device again randomly chooses new isomery function equivalence body and provides service for external service request.
7. according to the device described in claim 1,2,3,4 or 5, it is characterised in that when all described selected
When isomery function equivalence body all can not provide service for external service request, described redundant manipulator randomly chooses new again
Isomery function equivalence body provides service for external service request.
8. according to the device described in claim 1,2,3,4 or 5, it is characterised in that described device also includes arranging
Watch-dog between described redundant manipulator and described input proxy server,
Described watch-dog is monitored for the duty acting on behalf of described redundant manipulator and described input, and to generation
Unusual condition redundant manipulator or input proxy server report to the police or restart.
9. an isomery function equivalence body dispatching method, it is characterised in that described method includes:
Input proxy server receives external service request, triggers redundant manipulator according to described external service request；
Described redundant manipulator receives the triggering signal that input proxy server provides, and receives the control parameter of outside input, and,
According to the instruction of described control parameter, randomly choose one or more isomery function equivalence body and provide clothes for external service request
Business；
Isomery function equivalence body selection information is fed back to described input proxy server by described redundant manipulator；
Described input proxy server receives the isomery function equivalence body information that described redundant manipulator selects, and by described outside clothes
Business requests assignment to these isomery function equivalence bodies.
Method the most according to claim 9, it is characterised in that described returning method includes:
The described isomery function equivalence body randomly choosed receives the external service request of described input proxy server distribution, and exports
Service response.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510293341.7A CN106161417B (en) | 2015-06-01 | 2015-06-01 | A kind of isomery function equivalence body dispatching device and its method |
| US15/018,559 US9954885B2 (en) | 2015-06-01 | 2016-02-08 | Software/hardware device with uncertain service function and structural characterization, and scheduling method thereof |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510293341.7A CN106161417B (en) | 2015-06-01 | 2015-06-01 | A kind of isomery function equivalence body dispatching device and its method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106161417A true CN106161417A (en) | 2016-11-23 |
| CN106161417B CN106161417B (en) | 2019-05-14 |
Family
ID=57348287
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510293341.7A Active CN106161417B (en) | 2015-06-01 | 2015-06-01 | A kind of isomery function equivalence body dispatching device and its method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106161417B (en) |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107040530A (en) * | 2017-03-31 | 2017-08-11 | 中国人民解放军信息工程大学 | The output judgment device and method of a kind of isomery triplication redundancy processor |
| CN107347066A (en) * | 2017-07-05 | 2017-11-14 | 中国人民解放军信息工程大学 | A kind of function equivalence body isomery degree maximizes dispatching method and device |
| CN107346272A (en) * | 2017-06-01 | 2017-11-14 | 上海红阵信息科技有限公司 | The determination method and apparatus of dynamic heterogeneous redundant system |
| CN107395414A (en) * | 2017-07-19 | 2017-11-24 | 上海红阵信息科技有限公司 | A kind of negative feedback control method and system based on output ruling |
| WO2018059186A1 (en) * | 2016-09-27 | 2018-04-05 | 上海红阵信息科技有限公司 | Apparatus, method and device for encapsulating heterogeneous function equivalent bodies |
| CN108134740A (en) * | 2017-12-08 | 2018-06-08 | 中国电子科技集团公司第三十研究所 | A kind of weighting ruling and accidental scheduling method based on physical isomerism redundancy |
| CN109413024A (en) * | 2018-08-27 | 2019-03-01 | 华东计算技术研究所（中国电子科技集团公司第三十二研究所） | Reverse data verification method and system for multi-mode judgment result of heterogeneous functional equivalent |
| CN109409138A (en) * | 2018-11-13 | 2019-03-01 | 天津市滨海新区信息技术创新中心 | A kind of the mimicry micro processor, apparatus and data processing method of high safety |
| CN110611672A (en) * | 2019-09-17 | 2019-12-24 | 中国人民解放军战略支援部队信息工程大学 | Network space safety protection method, server equipment, node equipment and system |
| CN111049677A (en) * | 2019-11-27 | 2020-04-21 | 网络通信与安全紫金山实验室 | Cleaning and recovering method and device for mimic switch heterogeneous execution body |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101013388A (en) * | 2007-01-26 | 2007-08-08 | 浙江大学 | Heterogeneous multi-core system-oriented process scheduling method |
| US20080084447A1 (en) * | 2006-10-10 | 2008-04-10 | Silverbrook Research Pty Ltd | Inkjet printhead with adjustable bubble impulse |
| CN101488843A (en) * | 2008-01-16 | 2009-07-22 | 北京航空航天大学 | High availability service combined implementing method based on redundancy mechanism |
| CN102902920A (en) * | 2012-09-13 | 2013-01-30 | 西北工业大学 | Method and system for access safety detection and isolation of virtualized user |
| CN104394150A (en) * | 2014-11-26 | 2015-03-04 | 大连梯耐德网络技术有限公司 | System and method for implementing mimic security network architecture based on hardware reconfiguration |
-
2015
- 2015-06-01 CN CN201510293341.7A patent/CN106161417B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080084447A1 (en) * | 2006-10-10 | 2008-04-10 | Silverbrook Research Pty Ltd | Inkjet printhead with adjustable bubble impulse |
| CN101013388A (en) * | 2007-01-26 | 2007-08-08 | 浙江大学 | Heterogeneous multi-core system-oriented process scheduling method |
| CN101488843A (en) * | 2008-01-16 | 2009-07-22 | 北京航空航天大学 | High availability service combined implementing method based on redundancy mechanism |
| CN102902920A (en) * | 2012-09-13 | 2013-01-30 | 西北工业大学 | Method and system for access safety detection and isolation of virtualized user |
| CN104394150A (en) * | 2014-11-26 | 2015-03-04 | 大连梯耐德网络技术有限公司 | System and method for implementing mimic security network architecture based on hardware reconfiguration |
Non-Patent Citations (2)
| Title |
|---|
| 刘杰等: "《动态弹性安全防御技术及发展趋势》", 《通信技术》 * |
| 邬江兴: "《网络空间拟态安全防御》", 《保密科学技术》 * |
Cited By (18)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US11159571B2 (en) | 2016-09-27 | 2021-10-26 | Shanghai Hongzhen Information Science & Technology Co. Ltd. | Apparatus, method and device for encapsulating heterogeneous functional equivalents |
| WO2018059186A1 (en) * | 2016-09-27 | 2018-04-05 | 上海红阵信息科技有限公司 | Apparatus, method and device for encapsulating heterogeneous function equivalent bodies |
| CN107040530A (en) * | 2017-03-31 | 2017-08-11 | 中国人民解放军信息工程大学 | The output judgment device and method of a kind of isomery triplication redundancy processor |
| CN107346272A (en) * | 2017-06-01 | 2017-11-14 | 上海红阵信息科技有限公司 | The determination method and apparatus of dynamic heterogeneous redundant system |
| CN107346272B (en) * | 2017-06-01 | 2020-11-17 | 珠海高凌信息科技股份有限公司 | Method and device for determining dynamic heterogeneous redundant system |
| CN107347066B (en) * | 2017-07-05 | 2019-08-20 | 中国人民解放军信息工程大学 | A kind of function equivalence body isomery degree maximizes dispatching method and device |
| CN107347066A (en) * | 2017-07-05 | 2017-11-14 | 中国人民解放军信息工程大学 | A kind of function equivalence body isomery degree maximizes dispatching method and device |
| CN107395414B (en) * | 2017-07-19 | 2020-07-28 | 上海红阵信息科技有限公司 | Negative feedback control method and system based on output arbitration |
| CN107395414A (en) * | 2017-07-19 | 2017-11-24 | 上海红阵信息科技有限公司 | A kind of negative feedback control method and system based on output ruling |
| US11575710B2 (en) | 2017-07-19 | 2023-02-07 | Shanghai Hongzhen Information Science & Technology | Output-decision-based negative feedback control method and system |
| CN108134740A (en) * | 2017-12-08 | 2018-06-08 | 中国电子科技集团公司第三十研究所 | A kind of weighting ruling and accidental scheduling method based on physical isomerism redundancy |
| CN108134740B (en) * | 2017-12-08 | 2020-08-14 | 中国电子科技集团公司第三十研究所 | Weighting arbitration and random scheduling method based on physical heterogeneous redundancy |
| CN109413024A (en) * | 2018-08-27 | 2019-03-01 | 华东计算技术研究所（中国电子科技集团公司第三十二研究所） | Reverse data verification method and system for multi-mode judgment result of heterogeneous functional equivalent |
| CN109413024B (en) * | 2018-08-27 | 2021-05-11 | 华东计算技术研究所（中国电子科技集团公司第三十二研究所） | Reverse data verification method and system for multi-mode judgment result of heterogeneous functional equivalent |
| CN109409138A (en) * | 2018-11-13 | 2019-03-01 | 天津市滨海新区信息技术创新中心 | A kind of the mimicry micro processor, apparatus and data processing method of high safety |
| CN110611672A (en) * | 2019-09-17 | 2019-12-24 | 中国人民解放军战略支援部队信息工程大学 | Network space safety protection method, server equipment, node equipment and system |
| CN111049677A (en) * | 2019-11-27 | 2020-04-21 | 网络通信与安全紫金山实验室 | Cleaning and recovering method and device for mimic switch heterogeneous execution body |
| CN111049677B (en) * | 2019-11-27 | 2021-11-23 | 网络通信与安全紫金山实验室 | Cleaning and recovering method and device for mimic switch heterogeneous execution body |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106161417B (en) | 2019-05-14 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106161417A (en) | A kind of isomery function equivalence body dispatching device and method thereof | |
| CN106161418B (en) | A kind of device and method of isomery function equivalence body output service response | |
| CN104303538B (en) | The time delay of behavioural analysis is minimized using signature cache memory | |
| CN105450487B (en) | The method, apparatus and terminal of a kind of remote control intelligent household equipment or system | |
| CN107395414B (en) | Negative feedback control method and system based on output arbitration | |
| US9954885B2 (en) | Software/hardware device with uncertain service function and structural characterization, and scheduling method thereof | |
| CN106156631B (en) | A kind of service function and the uncertain software and hardware device of structural characterization corresponding relationship | |
| CN105282047A (en) | Access request processing method and device | |
| CN105656688A (en) | State control method and device | |
| CN107347066B (en) | A kind of function equivalence body isomery degree maximizes dispatching method and device | |
| Wang et al. | Comparison of availability between two systems with warm standby units and different imperfect coverage | |
| CN110493238A (en) | Defence method, device, honey pot system and honey jar management server based on honey jar | |
| CN109409138B (en) | High-safety mimicry microprocessor device and data processing method | |
| EP1374010A2 (en) | Security monitor of system running software simulator in parallel | |
| Zhu et al. | Scaling service-oriented applications into geo-distributed clouds | |
| CN110532096B (en) | System and method for multi-node grouping parallel deployment | |
| CN108471442A (en) | A kind of seismic network operation management system based on wechat platform | |
| CN108667826B (en) | Scheduling device and scheduling method based on four-mode heterogeneous redundant processor | |
| CN105511273B (en) | A kind of client operation management method and client | |
| CN104506630B (en) | Permissions data generation method, server and system based on user role | |
| CN105487917A (en) | Method and device for repairing verification code system with virtual machine | |
| US20180267491A1 (en) | Cognitive computing control of a potentially hazardous item | |
| CN104883340B (en) | The method and access device of Intrusion prevention | |
| CN110412894A (en) | Multi-load starts control method, storage medium, control device and relay | |
| Netkachov et al. | Quantification of the impact of cyber attack in critical infrastructures |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |