CN101674311B - Address inquiring method, gateway or user device, and server - Google Patents
Address inquiring method, gateway or user device, and server Download PDFInfo
- Publication number
- CN101674311B CN101674311B CN2009102042027A CN200910204202A CN101674311B CN 101674311 B CN101674311 B CN 101674311B CN 2009102042027 A CN2009102042027 A CN 2009102042027A CN 200910204202 A CN200910204202 A CN 200910204202A CN 101674311 B CN101674311 B CN 101674311B
- Authority
- CN
- China
- Prior art keywords
- address
- node
- safety information
- geographical position
- neighbor networks
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Landscapes
- Telephonic Communication Services (AREA)
Abstract
The invention relates to network security technology and discloses an address inquiring method, a network node and a server. The address inquiring method comprises the following steps: acquiring an address which needs to be inquired, and acquiring address information of a neighbor network node of an adjacent geographical position; constructing an address security information inquiry request comprising the address; transmitting the address security information inquiry request to the server, and transmitting the address security information inquiry request to the neighbor network node of the adjacent geographical position according to the address information; and receiving an inquiry response comprising the address security information, and processing the address according to the address security information. By using the invention, the inquiry time can be reduced without increasing the operation cost of URL classification service providers and/or URL credit service providers.
Description
Technical field
The present invention relates to network security technology, be specifically related to address inquiring method, gateway or subscriber equipment and server.
Background technology
URL (URL:Uniform Resource Locator) filters and URL prestige is assessed the important component part as UTM (UTM:United Threat Management) function; More and more receive people's attention; Its advantage is to respond malicious websites fast; Can when the user sends the URL request, just mask malicious websites, user's security has been protected in tackling before attacking generation threatening truly greatly.
Wherein, url filtering mainly is divided into two parts, URL local search (black/white list) and URL remote inquiry.The assessment of URL remote inquiry and URL prestige mainly is that the URL in when the user sends the URL request, will ask sends to that the remote inquiry server is inquired about and prestige is assessed; By the remote inquiry server assessment result is returned to sender's (like UTM equipment or url filtering host software) then, the sender blocks/loosens corresponding HTTP (the HTTP:Hyper TextTransfer Protocol) request of URL according to the result.Because to obtain replying be to need a period of time to the sender transmiting a request to, if (being query time) is long during this period of time, then the user can feel that web displaying is blunt, causes user experience very bad.
Obtain replying the needed time in order to reduce the sender transmiting a request to; Existing a kind of solution is in serve side server cluster technology and content distributing network (CDN) technology to be provided, and increases the disposal ability of server and utilizes the CDN technology to dispose content distributing server to alleviate the network delay between network pressure and the region in the more region of user inquiring amount.
In research to prior art; The inventor finds because said method has adopted Clustering and content distributing network technology; Increased URL classified service provider and/or URL prestige service provider's operation cost widely, and along with the further popularization of URL classified service and URL prestige evaluation services, operation cost will continue to increase; Operation drops into and also has bigger increase, is unfavorable for the widespread deployment of content distributing server.
Summary of the invention
The embodiment of the invention provides address inquiring method, network node and server, can when reducing query time, not increase URL classified service provider and/or URL prestige service provider's operation cost.
The embodiment of the invention provides a kind of address inquiring method, comprising:
Acquisition needs the address of inquiry, obtains the neighbor networks address of node information in close geographical position;
Structure comprises the address safety information inquiring request of said address;
Send said address safety information inquiring request to server, send said address safety information inquiring request according to the neighbor networks node of said address information to close geographical position;
Reception comprises the inquiry response of address safety information, according to said address safety information said address is handled.
The embodiment of the invention also provides a kind of address inquiring method, comprising:
Subscriber equipment or gateway receive from neighbor networks address of node security information query requests, and said address safety information inquiring request comprises the address of needs inquiry, and said subscriber equipment or gateway and said neighbor networks node are in close geographical position;
Said subscriber equipment or gateway are searched the address safety information of said address from the address safety information of preserving;
Said subscriber equipment or gateway send inquiry response to said neighbor networks node, and said inquiry response comprises the address safety information of said address.
The embodiment of the invention also provides a kind of network node, comprising:
Acquiring unit is used to obtain the address that needs are inquired about, and obtains the neighbor networks address of node information in close geographical position;
Structural unit is used to construct the address safety information inquiring request of the address that comprises that said acquiring unit obtains;
Transmitting element is used for sending the address safety information inquiring request that said structural unit is constructed to server, sends the address safety information inquiring request of said structural unit structure to the neighbor networks node in close geographical position according to said address information;
Receiving element is used at said transmitting element after the neighbor networks node in server and close geographical position sends said address safety information inquiring request, receiving the inquiry response that comprises address safety information;
Processing unit is used for according to the address safety information that said receiving element receives said address being handled.
The embodiment of the invention also provides a kind of network node, comprising:
Receiving element is used for receiving from neighbor networks address of node security information query requests, and said address safety information inquiring request comprises the address of needs inquiry, and said network node and said neighbor networks node are in close geographical position;
Search the unit, be used for searching the address safety information of the address of said receiving element reception from the address safety information of preserving;
Transmitting element is used for sending inquiry response to said neighbor networks node, and said inquiry response comprises the said address safety information of searching the unit of searching.
The embodiment of the invention also provides a kind of address inquiring method, comprising:
Reception is from the address safety information inquiring request of first network node, and said address safety information inquiring request comprises the address of needs inquiry;
From the address safety information of preserving, search the address safety information of said address;
Send inquiry response to said first network node, said inquiry response comprises the address safety information of said address;
Confirm the geographical position of said first network node, the address information of preserving said first network node according to said geographical position according to the source address of said address safety information inquiring request.
The embodiment of the invention also provides a kind of server, comprising:
Receiving element is used to receive the address safety information inquiring request from first network node, and said address safety information inquiring request comprises the address of needs inquiry;
Search the unit, be used for searching the address safety information of the address of said receiving element reception from the address safety information of preserving;
Transmitting element is used for sending inquiry response to said first network node, and said inquiry response comprises the said address safety information of searching the unit of searching;
Confirm the unit, the source address of the address safety information inquiring request that is used for receiving according to said receiving element is confirmed the geographical position of said first network node;
Preserve the unit, be used for the address information of preserving said first network node according to the geographical position that said definite unit is confirmed.
Can find out from the above technical scheme that the embodiment of the invention provides; Because gateway or subscriber equipment can send the address safety information inquiring request to the neighbor networks node in server and close geographical position in the embodiment of the invention; Thereby server and neighbor networks node can be searched the address safety information of address; Simultaneously; Because gateway or subscriber equipment and neighbor networks node are in close geographical position, so the neighbor networks node can receive the address safety information inquiring request quickly, correspondingly; The neighbor networks node also can respond address security information query requests quickly; Therefore can reduce query time,, therefore can't increase URL classified service provider and/or URL prestige service provider's operation cost owing to can respond address security information query requests by the neighbor networks node.
Description of drawings
In order to be illustrated more clearly in the technical scheme of the embodiment of the invention; The accompanying drawing of required use is done to introduce simply in will describing embodiment below; Obviously, the accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills; Under the prerequisite of not paying creative work property, can also obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the flow chart of address inquiring method embodiment one in the embodiment of the invention;
Fig. 2 is the flow chart of address inquiring method embodiment two in the embodiment of the invention;
Fig. 3 is the flow chart of address inquiring method embodiment three in the embodiment of the invention;
Fig. 4 is the flow chart of address inquiring method embodiment four in the embodiment of the invention;
Fig. 5 is the flow chart of address inquiring method embodiment five in the embodiment of the invention;
Fig. 6 is the flow chart of address inquiring method embodiment six in the embodiment of the invention;
Fig. 7 is the structure chart of network node embodiment one in the embodiment of the invention;
Fig. 8 is the structure chart of network node embodiment two in the embodiment of the invention;
Fig. 9 is the structure chart of network node embodiment three in the embodiment of the invention;
Figure 10 is the structure chart of network node embodiment four in the embodiment of the invention;
Figure 11 is the structure chart of server implementation example one in the embodiment of the invention;
Figure 12 is the structure chart of server implementation example two in the embodiment of the invention.
Embodiment
To combine the accompanying drawing in the embodiment of the invention below, the technical scheme in the embodiment of the invention is carried out clear, intactly description, obviously, described embodiment only is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills are not making the every other embodiment that is obtained under the creative work prerequisite, all belong to the scope of the present invention's protection.
Introduce the address inquiring method that the embodiment of the invention provides earlier; Fig. 1 has described the flow process of address inquiring method embodiment one; What this embodiment described is the handling process of gateway or subscriber equipment, and what this embodiment described is the handling process of network node, wherein; Network node is meant gateway device or subscriber equipment in the embodiment of the invention, and this embodiment comprises:
101, acquisition needs the address of inquiry, obtains the neighbor networks address of node information in close geographical position.
The address that needs inquiry is the current address that needs visit of user, and the address of the network linking of clicking like the user or user are in the address of address field input etc.; This address can be the URL link, like http address, FTP (FTP:File Transfer Protocol) address etc.
Wherein, specifically can from the file of preserving in advance, obtain the neighbor networks address of node information in close geographical position, also can obtain the neighbor networks address of node information in close geographical position from server.
102, structure comprises the address safety information inquiring request of the address of needs inquiry.
Wherein, the address in the address safety information inquiring request can be that expressly form can be the ciphertext form also, and the embodiment of the invention does not limit.
103, send the address safety information inquiring request to server, send the address safety information inquiring request according to the neighbor networks node of address information to close geographical position.
When the neighbor networks node in server and close geographical position sends the address safety information inquiring request; Can be simultaneously neighbor networks node to server and close geographical position send the address safety information inquiring request; Also can be in a certain order neighbor networks node to server and close geographical position send the address safety information inquiring request, the embodiment of the invention does not limit.
104, receive the inquiry response of the address safety information of the address that comprises the needs inquiry, the address is handled according to the address security information.
Wherein, this inquiry response is an address safety information inquiring request in the response 103.
The inquiry response that receives can be second inquiry response from the neighbor networks node, also can be first inquiry response from server.
Particularly, because neighbor networks node and gateway or subscriber equipment are in close geographical position, so the neighbor networks node can receive the address safety information inquiring request quickly, so also can send second inquiry response quickly; Wherein, have when a plurality of at the neighbor networks node, second inquiry response that gateway or subscriber equipment receive also has a plurality of, and this moment, gateway or subscriber equipment can be handled according to second inquiry response that arrives at first.
Because the neighbor networks node possibly not inquired about the address safety information that needs inquiry; Therefore preservations do not need the address safety information of inquiry, and this moment, the neighbor networks node can not be given gateway or the subscriber equipment transmission inquiry response that sends the address safety information inquiring request.At this moment, gateway or subscriber equipment can receive first inquiry response from server, and first inquiry response comprises the address safety information of address, and then according to this address safety information the address are handled.It is understandable that; Under any circumstance; Gateway or subscriber equipment can receive the inquiry response from server, therefore in the present invention realizes, after gateway or subscriber equipment have sent the address safety information inquiring request; Can receive at least one inquiry response, gateway or subscriber equipment are handled the address according to the address safety information in the inquiry response that receives the earliest.
From the above; Gateway or subscriber equipment can send the address safety information inquiring request to the neighbor networks node in server and close geographical position in the present embodiment; Thereby server and neighbor networks node can search the address safety information of address, simultaneously, because gateway or subscriber equipment and neighbor networks node are in close geographical position; Therefore the neighbor networks node can receive the address safety information inquiring request quickly; Correspondingly, the neighbor networks node also can respond address security information query requests quickly, therefore can reduce query time; Owing to can respond address security information query requests by the neighbor networks node, therefore can't increase URL classified service provider and/or URL prestige service provider's operation cost.
In one embodiment of the invention; Gateway or subscriber equipment be when the neighbor networks node in close geographical position sends the address safety information inquiring request, can send the address safety information inquiring request to the neighbor networks node in all or part of close geographical position.Wherein, When the part neighbor networks node to close geographical position sends the address safety information inquiring request; Can send the address safety information inquiring request to the neighbor networks node in the big close geographical position of queries, for example directly the neighbor networks node to the maximum close geographical position of queries sends the address safety information inquiring request; Because the address of the neighbor networks querying node that queries is big is many; The address safety information of corresponding preservation is also many; Comparatively speaking this neighbor networks node find the possibility of the address safety information of the address that need search also will be big; Thereby improve the speed of inquiry, also can not increase the load of network significantly.
Fig. 2 has described the flow process of address inquiring method embodiment two, and what this embodiment described is the handling process of gateway or subscriber equipment, comprising:
201, acquisition needs the address of inquiry, obtains the neighbor networks address of node information in close geographical position.
202, structure comprises the address safety information inquiring request of the address of needs inquiry.
203, send the address safety information inquiring request to server, send the address safety information inquiring request according to the neighbor networks node of address information to close geographical position.
204, reception is from second inquiry response of neighbor networks node, and second inquiry response comprises the address safety information of the address of needs inquiry.
Wherein, the address safety information in second inquiry response can be that the ciphertext form also can be the plaintext form, and the embodiment of the invention does not limit.
205, according to the address security information address is handled.
Processing can be blocking-up accessed, permission accessed etc.Particularly, when being safe, can allow accessed in this address of address safety message identification; When this address of address safety message identification is dangerous, the blocking-up accessed.
In one embodiment of the invention; Gateway or subscriber equipment are after having obtained address safety information; Can further preserve address safety information, preserving address safety information can be based on internet caching agreement (ICP:Internet Cache Protocol); Thereby when gateway or subscriber equipment receive the address safety information inquiring request; Can be according to the address safety information of this address of address search in the security information query requests of address; When having found the address safety information of this address, send inquiry response, when not finding the address safety information of this address, do not send inquiry response.
From the above; Gateway or subscriber equipment can send the address safety information inquiring request to server and the neighbor networks node that be in the close geographical position in the present embodiment, thereby server and neighbor networks node can search the address safety information of address, simultaneously; Because gateway or subscriber equipment and neighbor networks node are in close geographical position; Therefore the neighbor networks node can receive the address safety information inquiring request quickly, and correspondingly, the neighbor networks node also can respond address security information query requests quickly; Therefore can reduce query time; Gateway or subscriber equipment can be handled the address according to the address safety information that the neighbor networks node returns, thereby improve the speed of address process, improve user experience; Owing to can respond address security information query requests by the neighbor networks node, therefore can't increase URL classified service provider and/or URL prestige service provider's operation cost.
Fig. 3 has described the flow process of address inquiring method embodiment three in the embodiment of the invention, and what this embodiment described is the handling process of gateway or subscriber equipment, comprising:
301, send neighbours to server and obtain request.
302, the neighbor networks address of node information in the close geographical position of reception server transmission.
Wherein, Gateway or subscriber equipment are after having received the neighbor networks address of node information in close geographical position; Can monitor the ageing time of the neighbor networks address of node information in close geographical position, because the neighbor networks node in close geographical position also is a user side equipment, and the line duration of user side equipment is at random; Therefore need the neighbor networks address of node information in the close geographical position of monitoring whether to reach ageing time, so that real-time update.If gateway or subscriber equipment are confirmed the neighbor networks address of node information in close geographical position and have been reached ageing time; Can send neighbours to server and upgrade request, and then the neighbor networks address of node information in the close geographical position after the renewal of reception server transmission.Thereby guarantee the validity of the neighbor networks address of node information in close geographical position, guarantee the accuracy of inquiring about.
Wherein, the neighbor networks address of node information in the close geographical position that the server of reception sends can adopt the mode of tabulation, also can adopt other modes, and the embodiment of the invention does not limit.
303, acquisition needs the address of inquiry, obtains the neighbor networks address of node information in close geographical position.
304, structure comprises the address safety information inquiring request of the address of needs inquiry.
305, send the address safety information inquiring request to server, send the address safety information inquiring request according to the neighbor networks node of address information to close geographical position.
306, reception is from second inquiry response of neighbor networks node, and second inquiry response comprises the address safety information of the address of needs inquiry.
307, according to the address security information address is handled.
From the above; Gateway or subscriber equipment can send the address safety information inquiring request to the neighbor networks node in server and close geographical position in the present embodiment, thereby server and neighbor networks node can search the address safety information of address, simultaneously; Because gateway or subscriber equipment and neighbor networks node are in close geographical position; Therefore the neighbor networks node can receive the address safety information inquiring request quickly, and correspondingly, the neighbor networks node also can respond address security information query requests quickly; Therefore can reduce query time; Gateway or subscriber equipment can be handled the address according to the address safety information that the neighbor networks node returns, thereby improve the speed of address process, improve user experience; Owing to can respond address security information query requests by the neighbor networks node, therefore can't increase the operation cost of URL classified service provider and/or URL prestige service provider's server.
Fig. 4 has described the flow process of address inquiring method embodiment four in the embodiment of the invention, and what this embodiment described is the handling process of gateway or subscriber equipment, comprising:
401, receive from neighbor networks address of node security information query requests, this address safety information inquiring request comprises the address of needs inquiry; Gateway or the subscriber equipment and the neighbor networks node that receive this address safety information inquiring request are in close geographical position.
402, from the address safety information of preserving, search and need the address safety information of the address of inquiry.
Because gateway or subscriber equipment can be preserved the address safety information of the address of having inquired about; So after having received from neighbor networks address of node security information query requests, can be according to the address safety information of this address of address search in this address safety information inquiring request.
403, send inquiry response to the neighbor networks node, this inquiry response comprises the address safety information of the address of needs inquiry.
Wherein,, then can not send inquiry response, send the neighbor networks node increase of address safety information inquiring request with exempt from customs examination and handle load if from the address safety information of preserving, do not find the address safety information of the address that needs inquiry.
From the above; Gateway or subscriber equipment can receive the address safety information inquiring request that the neighbor networks node sends in the present embodiment; And from the address safety information of preserving, search the address safety information of the address of needs inquiry according to the address in the security information query requests of address; And the address safety information that finds sent to the neighbor networks node, because gateway or subscriber equipment and neighbor networks node are in close geographical position, so the neighbor networks node can receive address safety information quickly; Thereby minimizing query time; The neighbor networks node can be handled the address according to the address safety information that the neighbor networks node returns, thereby improve the speed of address process, improve user experience; Owing to be address security information query requests to be responded, therefore can't increase URL classified service provider and/or URL prestige service provider's operation cost by the neighbor networks node.
Fig. 5 has described the flow process of address inquiring method embodiment five in the embodiment of the invention, and what this embodiment described is the handling process of server, comprising:
501, reception is from the address safety information inquiring request of first network node, and the address safety information inquiring request comprises the address of needs inquiry.
502, from the address safety information of preserving, search the address safety information of the address that needs inquiry.
503, send inquiry response to first network node, inquiry response comprises the address safety information of the address of needs inquiry.
504, confirm the geographical position of first network node according to the source address of address security information query requests.
Source address can be globally unique addresses such as IP address, and corresponding geographical position, each IP address is all confirmed, therefore can confirm the geographical position of first network node according to source address.
505, preserve the address information of first network node according to the geographical position of first network node.
Particularly; The address information that will have a network node in close geographical position is stored as set of network nodes (like tabulation etc.); After the geographical position of first network node is confirmed; Just can confirm the set of network nodes that the geographical position is corresponding, thus the address information that can preserve first network node according to the geographical position of first network node.
From the above; Server can be preserved the address information of network node according to the geographical position of network node in the present embodiment; Thereby the network node that will be in close geographical position adds same set of network nodes; Thereby when making neighbor networks querying node address in this set of network nodes of the gateway that obtained this set of network nodes or subscriber equipment; The neighbor networks node can receive address safety information quickly, thereby reduces query time, and the neighbor networks node can be handled the address according to the address safety information that the neighbor networks node returns; Thereby improve the speed of address process; Improve user experience,, therefore can't increase the operation cost of URL classified service provider and/or URL prestige service provider's server owing to can respond address security information query requests by the neighbor networks node.
Fig. 6 has described the flow process of address inquiring method embodiment six in the embodiment of the invention, and what this embodiment described is the handling process of server, comprising:
601, reception is from the address safety information inquiring request of first network node, and the address safety information inquiring request comprises the address of needs inquiry.
602, from the address safety information of preserving, search the address safety information of the address that needs inquiry.
603, send inquiry response to first network node, inquiry response comprises the address safety information of the address of needs inquiry.
604, confirm the geographical position of first network node according to the source address of address security information query requests.
605, preserve the address information of first network node according to the geographical position of first network node.
Wherein, can further add up the quantity of the address safety information inquiring request that first network node sends, the queries of promptly adding up first network node, and then the queries of first network node also joined neighbor list.
606, the neighbours that receive from second network node obtain request.
607, obtain the source address of definite said second network node of request according to neighbours.
608, send the address information that is in the network node in close geographical position with second network node to second network node according to the source address of second network node.
What receive is that neighbours from second network node processing and 606～608 the processing when upgrading request is similar, repeats no more.
From the above; Server can add same set of network nodes with the network node that is in close geographical position in the present embodiment; Thereby when making neighbor networks querying node address in this set of network nodes of the gateway that obtained this set of network nodes or subscriber equipment; The neighbor networks node can receive address safety information quickly, thereby reduces query time, and the neighbor networks node can be handled the address according to the address safety information that the neighbor networks node returns; Thereby improve the speed of address process; Improve user experience,, therefore can't increase URL classified service provider and/or URL prestige service provider's operation cost owing to can respond address security information query requests by the neighbor networks node.
Need to prove; For aforesaid each method embodiment, for simple description, so it all is expressed as a series of combination of actions; But those skilled in the art should know; The present invention does not receive the restriction of described sequence of movement, because according to the present invention, some step can adopt other orders or carry out simultaneously.Secondly, those skilled in the art also should know, the embodiment described in the specification all belongs to preferred embodiment, and related action and module might not be that the present invention is necessary.
Introduce the network node that the embodiment of the invention provides again as follows, Fig. 7 has described the structure of network node embodiment one, comprising:
Acquiring unit 701 is used to obtain the address that needs are inquired about, and obtains the neighbor networks address of node information in close geographical position.
Transmitting element 703 is used for sending the address safety information inquiring request that structural unit 702 is constructed to server, sends the address safety information inquiring request of structural unit 702 structures to the neighbor networks node in close geographical position according to address information.
Receiving element 704 is used at transmitting element 703 after the neighbor networks node of server and neighbor list sends the address safety information inquiring request, receiving the inquiry response that comprises address safety information;
From the above; Network node can send the address safety information inquiring request to the neighbor networks node in server and the neighbor list in the present embodiment; Thereby server and neighbor networks node can search the address safety information of address, simultaneously, because gateway or subscriber equipment and neighbor networks node are in close geographical position; Therefore the neighbor networks node can receive the address safety information inquiring request quickly; Correspondingly, the neighbor networks node also can respond address security information query requests quickly, therefore can reduce query time; Owing to can respond address security information query requests by the neighbor networks node, therefore can't increase URL classified service provider and/or URL prestige service provider's operation cost.
As shown in Figure 7, the network node that one embodiment of the invention provides can also comprise preserves unit 706, be used for receiving element 704 received receive comprise the inquiry response of address safety information after, preserve address safety information.Thereby when network node receives the address safety information inquiring request; Can be according to the address safety information of this address of address search in the security information query requests of address; When having found the address safety information of this address, send inquiry response, when not finding the address safety information of this address, do not send inquiry response.
Fig. 8 has described the structure of network node embodiment two, comprising:
Acquiring unit 801 is used to obtain the address that needs are inquired about, and obtains the neighbor networks address of node information in close geographical position.
As shown in Figure 8, in one embodiment of the invention, acquiring unit 801 can comprise: neighbor request unit 8011 is used for sending neighbours to server and obtains request; Neighbours' receiving element 8012 is used for the neighbor networks address of node information in the close geographical position that reception server sends.
Transmitting element 803 is used for sending the address safety information inquiring request that structural unit 802 is constructed to server, sends the address safety information inquiring request of structural unit 802 structures to the neighbor networks node in close geographical position according to address information.
Receiving element 804 is used at transmitting element 803 after the neighbor networks node of server and neighbor list sends the address safety information inquiring request, receiving the inquiry response that comprises address safety information;
From the above; Network node can send the address safety information inquiring request to the neighbor networks node in server and close geographical position in the present embodiment, thereby server and neighbor networks node can search the address safety information of address, simultaneously; Because network node and neighbor networks node are in close geographical position; Therefore the neighbor networks node can receive the address safety information inquiring request quickly, and correspondingly, the neighbor networks node also can respond address security information query requests quickly; Therefore can reduce query time; Network node can be handled the address according to the address safety information that the neighbor networks node returns, thereby improve the speed of address process, improve user experience; Owing to can respond address security information query requests by the neighbor networks node, therefore can't increase URL classified service provider and/or URL prestige service provider's operation cost.
Fig. 9 has described the structure of network node embodiment three, comprising:
Acquiring unit 901 is used to obtain the address that needs are inquired about, and obtains the neighbor networks address of node information in close geographical position.
As shown in Figure 9, in one embodiment of the invention, acquiring unit 901 can comprise: neighbor request unit 9011 is used for sending neighbours to server and obtains request; Neighbours' receiving element 9012 is used for the neighbor networks address of node information in the close geographical position that reception server sends.
Transmitting element 903 is used for sending the address safety information inquiring request that structural unit 902 is constructed to server, sends the address safety information inquiring request of structural unit 902 structures to the neighbor networks node in close geographical position according to address information.
Receiving element 904 is used at transmitting element 903 after the neighbor networks node of server and neighbor list sends the address safety information inquiring request, receiving the inquiry response that comprises address safety information;
Monitoring means 907 is used for after neighbours' receiving element 9012 has received the neighbor networks address of node information in the close geographical position that server sends, and whether the neighbor networks address of node information of monitoring close geographical position reach ageing time.
From the above; Network node can send the address safety information inquiring request to the neighbor networks node in server and the close geographical position in the present embodiment, thereby server and neighbor networks node can search the address safety information of address, simultaneously; Because gateway or subscriber equipment and neighbor networks node are in close geographical position; Therefore the neighbor networks node can receive the address safety information inquiring request quickly, and correspondingly, the neighbor networks node also can respond address security information query requests quickly; Therefore can reduce query time; Network node can be handled the address according to the address safety information that the neighbor networks node returns, thereby improve the speed of address process, improve user experience; Owing to can respond address security information query requests by the neighbor networks node, therefore can't increase the operation cost of URL classified service provider and/or URL prestige service provider's server; And when network node confirms that the neighbor networks address of node information in close geographical position has reached ageing time; Can send neighbours to server and upgrade request; And then the neighbor networks address of node information in the close geographical position after the renewal of reception server transmission; Thereby guarantee the validity of the neighbor networks address of node information in close geographical position, guarantee the accuracy of inquiring about.
Figure 10 has described the structure of network node embodiment five, comprising:
Receiving element 1001 is used for receiving from neighbor networks address of node security information query requests, and the address safety information inquiring request comprises the address of needs inquiry, and this network node and this neighbor networks node are in close geographical position.
Transmitting element 1003 is used for sending inquiry response to the neighbor networks node, and inquiry response comprises the address safety information of the address of searching the needs inquiry of searching unit 1002.
From the above; Network node can receive the address safety information inquiring request that the neighbor networks node sends in the present embodiment; And from the address safety information of preserving, search the address safety information with the address of needs inquiry according to the address in the security information query requests of address; And the address safety information that finds sent to the neighbor networks node, because network node and neighbor networks node are in close geographical position, so the neighbor networks node can receive address safety information quickly; Thereby minimizing query time; The neighbor networks node can be handled the address according to the address safety information that the neighbor networks node returns, thereby improve the speed of address process, improve user experience; Owing to can respond address security information query requests by the neighbor networks node, therefore can't increase the operation cost of URL classified service provider and/or URL prestige service provider's server.
The network node that the embodiment of the invention provides can be used as subscriber equipment or gateway.
Introduce the server that the embodiment of the invention provides as follows, Figure 11 has described the structure of server implementation example one, comprising:
Receiving element 1101 is used to receive the address safety information inquiring request from first network node, and the address safety information inquiring request comprises the address of needs inquiry.
Search unit 1102, be used for searching the address safety information of the address of receiving element 1101 receptions from the address safety information of preserving.
Transmitting element 1103 is used for sending inquiry response to first network node, and inquiry response comprises the address safety information of searching unit 1102 of searching.
Confirm unit 1104, the source address of the address safety information inquiring request that is used for receiving according to receiving element 1101 is confirmed the geographical position of first network node.
Preserve unit 1105, be used for according to the address information of confirming that said first network node is preserved in 1104 definite geographical position, unit.
From the above; Server can be preserved the address information of network node according to the geographical position of network node in the present embodiment; Thereby the network node that will be in close geographical position adds same set of network nodes; Thereby when making neighbor networks querying node address in this set of network nodes of the gateway that obtained this set of network nodes or subscriber equipment; The neighbor networks node can receive address safety information quickly, thereby reduces query time, and the neighbor networks node can be handled the address according to the address safety information that the neighbor networks node returns; Thereby improve the speed of address process; Improve user experience,, therefore can't increase the operation cost of URL classified service provider and/or URL prestige service provider's server owing to can respond address security information query requests by the neighbor networks node.
Figure 12 has described the structure of server implementation example two, comprising:
Receiving element 1201 is used to receive the address safety information inquiring request from first network node, and the address safety information inquiring request comprises the address of needs inquiry; Reception is upgraded request from the neighbours' request of obtaining or the neighbours of second network node.
Transmitting element 1203 is used for sending inquiry response to first network node, and inquiry response comprises the address safety information of searching unit 1202 of searching; Send the corresponding neighbor list of second network node that definite unit 1204 is confirmed to second network node.
From the above; Server can add same set of network nodes with the network node that is in close geographical position in the present embodiment; Thereby when making neighbor networks querying node address in this set of network nodes of the gateway that obtained this set of network nodes or subscriber equipment; The neighbor networks node can receive address safety information quickly, thereby reduces query time, and the neighbor networks node can be handled the address according to the address safety information that the neighbor networks node returns; Thereby improve the speed of address process; Improve user experience,, therefore can't increase URL classified service provider and/or URL prestige service provider's operation cost owing to can respond address security information query requests by the neighbor networks node.
The embodiment of the invention also provides the embodiment three of server; The embodiment three of server compares with the embodiment two of the embodiment one of server and server; Further comprise statistic unit, this statistic unit is used to add up the quantity of the address safety information inquiring request that first network node that receiving element receives sends.At this moment, preserve the unit, the queries that can also be used to preserve first network node, queries is confirmed according to the quantity of the address safety information inquiring request of first network node transmission of statistic unit statistics.
Contents such as the information interaction between said apparatus and intrasystem each module, implementation and since with the inventive method embodiment based on same design, particular content can repeat no more referring to the narration among the inventive method embodiment here.
One of ordinary skill in the art will appreciate that all or part of flow process that realizes in the foregoing description method; Be to instruct relevant hardware to accomplish through computer program; Described program can be stored in the computer read/write memory medium; This program can comprise the flow process like the embodiment of above-mentioned each side method when carrying out.Wherein, described storage medium can be magnetic disc, CD, read-only storage memory body (Read-OnlyMemory, ROM) or at random store memory body (Random Access Memory, RAM) etc.
More than address inquiring method, gateway or subscriber equipment and server that the embodiment of the invention provided have been carried out detailed introduction, the explanation of above embodiment just is used for help understanding method of the present invention and thought thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, the part that on embodiment and range of application, all can change, in sum, this description should not be construed as limitation of the present invention.
Claims (9)
1. an address inquiring method is characterized in that, comprising:
Acquisition needs the address of inquiry, obtains the neighbor networks address of node information in close geographical position;
Structure comprises the address safety information inquiring request of said address;
Send said address safety information inquiring request to server, send said address safety information inquiring request according to the neighbor networks node of said address information to close geographical position;
Reception comprises the inquiry response of address safety information, according to the address safety information in the inquiry response that receives at first said address is handled.
2. address inquiring method as claimed in claim 1 is characterized in that, also comprises after receiving the inquiry response comprise address safety information:
Preserve said address safety information.
3. according to claim 1 or claim 2 address inquiring method is characterized in that said neighbor networks node to close geographical position sends said address safety information inquiring request step and comprises:
Neighbor networks node to the maximum close geographical position of queries sends said address safety information inquiring request.
4. address inquiring method as claimed in claim 1 is characterized in that, the step of the neighbor networks address of node information in the geographical position that said acquisition is close comprises:
Send neighbours to said server and obtain request;
Receive the neighbor networks address of node information in the close geographical position of said server transmission.
5. address inquiring method as claimed in claim 4 is characterized in that, this method also comprises:
When the neighbor networks address of node information that monitors close geographical position has reached ageing time, send neighbours to said server and upgrade request;
Receive the neighbor networks address of node information in the close geographical position after the renewal that said server sends.
6. a network node is characterized in that, comprising:
Acquiring unit is used to obtain the address that needs are inquired about, and obtains the neighbor networks address of node information in close geographical position;
Structural unit is used to construct the address safety information inquiring request of the address that comprises that said acquiring unit obtains;
Transmitting element is used for sending the address safety information inquiring request that said structural unit is constructed to server, sends the address safety information inquiring request of said structural unit structure to the neighbor networks node in close geographical position according to said address information;
Receiving element is used at said transmitting element after the neighbor networks node in server and close geographical position sends said address safety information inquiring request, receiving the inquiry response that comprises address safety information;
Processing unit, the address safety information of the inquiry response that is used for receiving at first according to said receiving element is handled said address.
7. network node as claimed in claim 6 is characterized in that, also comprises:
Preserve the unit, be used for after said receiving element has received said inquiry response, preserve said address safety information.
8. like claim 6 or 7 described network nodes, it is characterized in that said acquiring unit comprises:
The neighbor request unit is used for sending neighbours to said server and obtains request;
Neighbours' receiving element is used to receive the neighbor networks address of node information in the close geographical position that said server sends.
9. network node as claimed in claim 8 is characterized in that, also comprises:
Monitoring means is used for after said neighbours' receiving element has received the neighbor networks address of node information in the close geographical position that said server sends, and whether the neighbor networks address of node information of monitoring said close geographical position reaches ageing time;
Said neighbor request unit also is used for when the neighbor networks address of node information that said monitoring means monitors close geographical position has reached ageing time, sends neighbours to said server and upgrades request;
Said neighbours' receiving element also is used to receive the neighbor networks address of node information in the close geographical position after the renewal that said server sends.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2009102042027A CN101674311B (en) | 2009-10-10 | 2009-10-10 | Address inquiring method, gateway or user device, and server |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2009102042027A CN101674311B (en) | 2009-10-10 | 2009-10-10 | Address inquiring method, gateway or user device, and server |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101674311A CN101674311A (en) | 2010-03-17 |
| CN101674311B true CN101674311B (en) | 2012-07-04 |
Family
ID=42021298
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2009102042027A Expired - Fee Related CN101674311B (en) | 2009-10-10 | 2009-10-10 | Address inquiring method, gateway or user device, and server |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101674311B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102413459B (en) * | 2012-01-12 | 2014-05-28 | 中国电信股份有限公司 | Method and system for sending information |
| CN114661688B (en) * | 2022-03-25 | 2023-09-19 | 马上消费金融股份有限公司 | Address error correction method and device |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1901551A (en) * | 2005-07-19 | 2007-01-24 | 上海贝尔阿尔卡特股份有限公司 | Repeat address detecting method and its device for supporting IPv6 two layer access net |
| CN1951081A (en) * | 2004-06-25 | 2007-04-18 | 苹果电脑有限公司 | Method and apparatus for looking up configuration information for a network node |
-
2009
- 2009-10-10 CN CN2009102042027A patent/CN101674311B/en not_active Expired - Fee Related
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1951081A (en) * | 2004-06-25 | 2007-04-18 | 苹果电脑有限公司 | Method and apparatus for looking up configuration information for a network node |
| CN1901551A (en) * | 2005-07-19 | 2007-01-24 | 上海贝尔阿尔卡特股份有限公司 | Repeat address detecting method and its device for supporting IPv6 two layer access net |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101674311A (en) | 2010-03-17 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP3085064B1 (en) | Countering security threats with domain name system | |
| US8533293B1 (en) | Client side cache management | |
| CN103051740B (en) | Domain name analytic method, dns server and domain name analysis system | |
| EP3170091B1 (en) | Method and server of remote information query | |
| US20100235915A1 (en) | Using host symptoms, host roles, and/or host reputation for detection of host infection | |
| US9258289B2 (en) | Authentication of IP source addresses | |
| CN102651861B (en) | Download method for mobile terminal, mobile terminal and proxy download server | |
| CN101355587B (en) | Method and apparatus for obtaining URL information as well as method and system for implementing searching engine | |
| CN102929984B (en) | Inefficacy address searching method and apparatus | |
| CN102884764B (en) | Message receiving method, deep packet inspection device, and system | |
| US20110289434A1 (en) | Certified URL checking, caching, and categorization service | |
| CN102137111A (en) | Method and device for preventing CC (Challenge Collapsar) attack and content delivery network server | |
| CN102611763A (en) | DNS (Domain Name Server) inquiring method and equipment | |
| CN104301180B (en) | A kind of service message processing method and equipment | |
| CN102685259B (en) | To method, system and intelligent DNS that dns resolution request is resolved | |
| CN109802919B (en) | Web page access intercepting method and device | |
| CN104506525A (en) | Method for preventing malicious grabbing and protection device | |
| CN102945259B (en) | A kind of searching method based on collection and searcher | |
| CN102916983A (en) | Protection system for network access behavior | |
| CN102780711A (en) | Method, device and system for accessing application data of SNS (Social Network Site) | |
| CN101183946B (en) | Method and system of obtaining resource listing of download file | |
| CN105550593A (en) | Cloud disk file monitoring method and device based on local area network | |
| US8789177B1 (en) | Method and system for automatically obtaining web page content in the presence of redirects | |
| CN102739717A (en) | Downloading method, downloading proxy server and network system | |
| CN113810381B (en) | Crawler detection method, web application cloud firewall device and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| C56 | Change in the name or address of the patentee |
Owner name: HUAWEI DIGITAL TECHNOLOGY (CHENGDU) CO., LTD. Free format text: FORMER NAME: CHENGDU HUAWEI SYMANTEC TECHNOLOGIES CO., LTD. |
|
| CP01 | Change in the name or title of a patent holder |
Address after: 611731 Chengdu high tech Zone, Sichuan, West Park, Qingshui River Patentee after: Huawei Symantec Technologies Co., Ltd. Address before: 611731 Chengdu high tech Zone, Sichuan, West Park, Qingshui River Patentee before: Chengdu Huawei Symantec Technologies Co., Ltd. |
|
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20120704 Termination date: 20191010 |