CN105939278B - Traffic processing method and device - Google Patents
Traffic processing method and device Download PDFInfo
- Publication number
- CN105939278B CN105939278B CN201510220363.0A CN201510220363A CN105939278B CN 105939278 B CN105939278 B CN 105939278B CN 201510220363 A CN201510220363 A CN 201510220363A CN 105939278 B CN105939278 B CN 105939278B
- Authority
- CN
- China
- Prior art keywords
- traffic
- flow
- response
- identification information
- board card
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Abstract
The invention provides a traffic processing method and a traffic processing device, wherein the method is applied to a cloud board card, the cloud board card comprises a convergence port and a plurality of service board cards, and the method comprises the following steps: when a service board card receives a request flow, reconstructing the request flow and sending the reconstructed request flow to a server, wherein the reconstructed request flow comprises identification information of the service board card; and when receiving a response flow which is returned by the server and carries the identification information, the aggregation port sends the response flow to the service board card corresponding to the identification information. Therefore, the response flow can be prevented from being sent to the main control board card, the service burden of the main control board card is reduced, and the service processing efficiency of the cloud board card is improved.
Description
Technical Field
The present invention relates to the field of network technologies, and in particular, to a traffic processing method and apparatus.
Background
With the rapid increase of the number of user access terminals and the demand of users for large bandwidth, an IPoE system generally overlaps a plurality of service boards into a logical cloud board to meet the increasing traffic volume.
In the prior art, a cloud board card may shunt and forward received request traffic to a server through a plurality of service board cards. The server shares the response traffic to each service board through a five-tuple algorithm of aggregation through a BOND (aggregation) port. However, the quintuple algorithm cannot distinguish the user attribute of the response traffic, so that the aggregation port cannot determine the corresponding relationship between the response traffic and the service board card through the quintuple. Because the response traffic received by the service board card does not necessarily correspond to the request traffic processed by the service board card, the service board card also needs to send the response message to the main control board card for further differentiation, thereby increasing the burden of the service board card and the main control board card, enabling the main control board card to become the performance bottleneck of the whole system, and reducing the operation efficiency of the whole system.
Disclosure of Invention
In view of the above, the present invention provides a traffic processing method and device to solve the problem of increased operation load of the main control board caused by the inability to distinguish the response traffic.
Specifically, the invention is realized by the following technical scheme:
a traffic processing method is applied to a cloud board card, the cloud board card comprises a convergence port and a plurality of service board cards, and the method comprises the following steps:
when a service board card receives a request flow, reconstructing the request flow and sending the reconstructed request flow to a server, wherein the reconstructed request flow comprises identification information of the service board card;
and when receiving a response flow which is returned by the server and carries the identification information, the aggregation port sends the response flow to the service board card corresponding to the identification information.
Further, the reconstructing the request traffic includes:
replacing the specified flow information in the request flow with the identification information of the service board card;
the method further comprises the following steps:
and after receiving the response flow sent by the aggregation port, the service board card restores the identification information in the response flow into the specified flow information.
Further, the identification information includes:
the MAC address and/or port number of the traffic board.
Further, the sending the response traffic to the service board card corresponding to the identification information includes:
setting an ACL rule in the aggregation port in advance, wherein the ACL rule comprises the corresponding relation between identification information and a service board card;
and when the identification information in the response flow is matched with the ACL rule, the aggregation port sends the response flow to the service board card corresponding to the identification information.
Further, the method further comprises:
when the service board card receives the request flow, the abstract information in the request flow is uploaded to a main control board card;
and when the aggregation port does not find the ACL rule matched with the identification information in the response flow, the response flow is uploaded to the main control board card.
Based on the same concept, the invention also provides a traffic processing device, which is applied to the cloud board card, wherein the cloud board card comprises a convergence port and a plurality of service board cards, and the device comprises:
the request reconstruction unit is used for reconstructing the request flow and sending the reconstructed request flow to the server when the service board card receives the request flow, wherein the reconstructed request flow comprises the identification information of the service board card;
and the traffic sending unit is used for sending the response traffic to the service board card corresponding to the identification information when the aggregation port receives the response traffic which is returned by the server and carries the identification information.
Further, the request reconstructing unit is specifically configured to replace the specified traffic information in the request traffic with the identification information of the service board;
the device further comprises:
and the information restoring unit is used for restoring the identification information in the response flow into the specified flow information after the service board card receives the response flow sent by the aggregation port.
Further, the identification information includes:
the MAC address and/or port number of the traffic board.
Further, the traffic sending unit includes:
a rule setting subunit, configured to set an ACL rule in the aggregation port in advance, where the ACL rule includes a correspondence between the identification information and the service board;
and the traffic sending subunit is configured to, when identification information in the response traffic matches the ACL rule, send the response traffic to the service board card corresponding to the identification information through the aggregation port.
Further, the apparatus further comprises:
an information uploading unit, configured to upload summary information in the request traffic to a master control board when the service board receives the request traffic;
the traffic sending subunit is further configured to, when the aggregation port does not find an ACL rule that matches the identification information in the response traffic, send the response traffic up to the master control board.
Therefore, the service board card of the invention can add the identification information of the service board card in the request flow, so that when the aggregation port receives the response flow returned by the server, the response flow is sent to the service board card corresponding to the identification information according to the identification information carried in the response flow, thereby avoiding sending the response flow to the main control board card, reducing the service burden of the main control board card, and improving the service processing efficiency of the cloud board card.
Drawings
Fig. 1 is a schematic diagram of a cloud board in an exemplary embodiment of the invention;
FIG. 2 is a process flow diagram of a traffic handling method in an exemplary embodiment of the invention;
FIG. 3 is an interactive flow diagram of a traffic handling method in an exemplary embodiment of the invention;
FIG. 4 is a hardware block diagram of a device in which a traffic processing apparatus is located in an exemplary embodiment of the invention;
fig. 5 is a logical block diagram of a flow processing device in an exemplary embodiment of the invention.
Detailed Description
Fig. 1 is a schematic diagram of a cloud board according to an exemplary embodiment of the present invention. The cloud board card can be formed by superposing a service board card A and a service board card B, and the service board card A and the service board card B can shunt traffic on the cloud board card. The service board card A and the service board card B are respectively connected with the main control board card through the inter-board channel, and the service board card can report the running state of the service board card A and the traffic data needing to be processed by the main control board card to the main control board card through the inter-board channel; the main control board card can also issue a control instruction to the service board card through the inter-board channel and process the completed flow data.
As shown in fig. 1, after the service boards a and B receive DHCP request traffic 1 and 2 from the user side, respectively, the request traffic 1 and 2 may be forwarded to the server (no other service processing is considered here). The server can feed back corresponding response flow according to the received request flow. When the response traffic reaches the aggregation port of the cloud board card, the aggregation port can divide the response traffic into response traffic 1 and response traffic 2 through an aggregated quintuple algorithm, and then the response traffic 1 and the response traffic 2 are respectively shared to the service board cards A and B for processing. However, since the quintuple algorithm has limitations and cannot identify the user attribute in the response traffic, taking the service board a as an example, the received response traffic 1 includes both the response to the request traffic 1 and the response to the request traffic 2. After receiving such a composite response flow 1, the service board a needs to determine whether the response flow 1 is a response to the request flow 1 forwarded by the service board a by searching summary information of the request flow 1 recorded in the request flow, if so, relevant information is recorded and then forwarded to a user side, and if not, the flow needs to be forwarded to the main control board for processing, so that the service burden of the main control board is increased, the main control board becomes a performance bottleneck of the whole system, and the operation efficiency of the whole system is reduced.
In order to solve the above problems, the service board card of the present invention may add the identification information of the service board card in the request traffic, so that when the aggregation port receives the response traffic returned by the server, the response traffic is sent to the service board card corresponding to the identification information according to the identification information carried in the response traffic, thereby avoiding sending the response traffic to the main control board card, reducing the service burden of the main control board card, and improving the service processing efficiency of the cloud board card.
Referring to fig. 2, a processing flow chart of a traffic processing method in an exemplary embodiment of the present invention is shown, where the method is applied to a cloud board, where the cloud board includes an aggregation port and a plurality of service boards, and the method includes:
in this embodiment, when the service board receives the request traffic, the service board may reconstruct the request traffic, so that the reconstructed request traffic includes the identification information of the service board, and the identification information may distinguish different service boards. In an alternative embodiment of the present invention, the identification information may use the MAC address and/or the port number of the service board. The service board card can send the reconstructed request traffic to the server, so that the server can respond to the request traffic of the user.
In this embodiment, the aggregation port of the cloud board may receive, from the server side, a response traffic corresponding to the request traffic, where the response traffic carries the identification information in the request traffic. The aggregation port may determine the service board card corresponding to the response traffic according to the identification information of the response traffic, and forward the response traffic to the corresponding service board card.
Therefore, the service board card of the invention can add the identification information of the service board card in the request flow, so that when the aggregation port receives the response flow returned by the server, the response flow is sent to the service board card corresponding to the identification information according to the identification information carried in the response flow, thereby avoiding sending the response flow to the main control board card, reducing the service burden of the main control board card, and improving the service processing efficiency of the cloud board card.
In an optional embodiment of the present invention, when the service board reconstructs the requested traffic, the specified traffic information in the requested traffic may be replaced with the identification information of the service board. And after receiving the response flow sent by the aggregation port, the service board card can restore the identification information in the response flow into the specified flow information. The reconstruction mode does not add excessive information in the original request flow, so that the flow expense can be further saved.
In an optional embodiment of the present invention, a network administrator may set an ACL rule in the aggregation port in advance, where the ACL rule includes a correspondence between the identification information and the service board. And after the aggregation port receives the response flow, the service board card corresponding to the response flow can be searched according to the ACL rule. When the identification information in the response flow is matched with the ACL rule, the aggregation port sends the response flow to the service board card corresponding to the identification information, so that the processing efficiency on the aggregation port can be further improved.
In an optional embodiment of the present invention, when the service board receives the request traffic, the service board may also upload the summary information in the request traffic to the master control board. When the aggregation port does not find the service board card corresponding to the identification information in the response flow, the aggregation port may upload the response flow to the master control board card. The summary information of the request traffic sent by the service board card is stored on the main control board card, so that the main control board card can analyze the response traffic according to the summary information to determine the service board card corresponding to the response traffic. Therefore, when the stored summary information is lost after the failure restart of the service board card or the service board card corresponding to the response flow cannot be found by the aggregation port, the response flow can be processed by the main control board card, so that the problem of flow delay processing caused by an unexpected condition is avoided.
In order to make the objects, technical solutions and advantages of the present invention more clearly understood, the solutions of the present invention are further described in detail below based on the schematic diagram of the cloud board in fig. 1.
A network administrator allocates continuous and non-repetitive MAC addresses in a certain range to each service board according to the number of actual access users of the service boards, for example, 00:24:01:00:00:00 to 00:24:01: ff: ff to a service board a in a cloud board, 00:24:02:00:00 to 00:24:02: ff: ff to a service board B in the cloud board, configures an ACL rule on a convergence port, and sends traffic matching the MAC addresses in the range to the service board corresponding to the traffic range, for example, sends a message with the MAC addresses of 00:24:01:00:00:01 to the service board a.
Taking the processing flow of the request traffic 1 on the service board a as an example, the processing procedure of the present invention is specifically described below with reference to the interaction flow chart of the traffic processing method between the service board and the aggregation port in fig. 3, where the processing procedure includes the steps of:
when the service board a receives the request traffic 1, a MAC address is selected from the allocated MAC address resources as identification information of the service board a, the MAC address is used to replace a hardware address represented by a fixed field chaddr (the MAC address of the client) in the request traffic, the replaced MAC address is recorded in summary information, and then the request traffic 1 is forwarded to the server. After receiving the request traffic 1, the server may respond to the request traffic 1.
When the composite response flow returned by the server reaches the aggregation port, the aggregation port can match the chaddr field in the response flow with the ACL rules, shunt according to the matching result, and send the response flow 1 matched to the service board card a. For example, assuming that the chaddr field of the response traffic 1 is 00:24:01:00:00:05, since 00:24:01:00:00:05 belongs to the MAC address range of the service board a, it can be known from the ACL rule that the action matched with 00:24:01:00:00:05 is to forward the response traffic 1 to the service board a.
After receiving the response traffic 1, the service board a determines that the response traffic 1 is a reply to the request traffic 1, and therefore the summary information of the request traffic 1 is inevitably hit, so that the service board a can forward the response traffic to the user side after performing reverse replacement of the MAC address on the response traffic 1. The method of the service board B when processing the request traffic 2 is the same, and is not described herein again.
Therefore, the service board card of the invention can add the identification information of the service board card in the request flow, so that when the aggregation port receives the response flow returned by the server, the response flow is sent to the service board card corresponding to the identification information according to the identification information carried in the response flow, thereby avoiding sending the response flow to the main control board card, reducing the service burden of the main control board card, and improving the service processing efficiency of the cloud board card.
Based on the same conception, the invention also provides a flow processing device, which can be realized by software, or by hardware or a combination of the software and the hardware. Taking software implementation as an example, the traffic processing device of the present invention is a logical device, and is operated by the CPU of the network forwarding device in which the traffic processing device is located after reading the corresponding computer program instruction in the memory.
Referring to fig. 4 and fig. 5, a traffic processing apparatus 500 according to an exemplary embodiment of the present invention is applied to a cloud board, where the cloud board includes an aggregation port and a plurality of service boards, and a basic operating environment of the apparatus includes a CPU, a memory, and other hardware, and from a logical aspect, the apparatus 500 includes:
a request reconstructing unit 501, configured to reconstruct the request traffic and send the reconstructed request traffic to a server when a service board receives the request traffic, where the reconstructed request traffic includes identification information of the service board;
a traffic sending unit 502, configured to send a response traffic to the service board card corresponding to the identification information when the aggregation port receives the response traffic carrying the identification information and returned by the server.
Optionally, the request reconstructing unit 501 is specifically configured to replace the specified traffic information in the requested traffic with the identification information of the service board;
the device further comprises:
an information restoring unit 503, configured to restore, after the service board receives the response traffic sent by the aggregation port, the identifier information in the response traffic to the specified traffic information.
Optionally, the identification information includes: the MAC address and/or port number of the traffic board.
Optionally, the traffic sending unit 502 includes:
a rule setting subunit 5021, configured to set an ACL rule in the aggregation port in advance, where the ACL rule includes a correspondence between the identification information and the service board;
a traffic sending subunit 5022, configured to send the response traffic to the service board card corresponding to the identifier information through the aggregation port when the identifier information in the response traffic matches the ACL rule.
Optionally, the apparatus further comprises:
an information uploading unit 504, configured to upload summary information in the request traffic to the master control board when the service board receives the request traffic;
the traffic sending subunit 5022 is further configured to, when the aggregation port does not find an ACL rule that matches the identification information in the response traffic, send the response traffic up to the main control board.
Therefore, the service board card of the invention can add the identification information of the service board card in the request flow, so that when the aggregation port receives the response flow returned by the server, the response flow is sent to the service board card corresponding to the identification information according to the identification information carried in the response flow, thereby avoiding sending the response flow to the main control board card, reducing the service burden of the main control board card, and improving the service processing efficiency of the cloud board card.
The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents, improvements and the like made within the spirit and principle of the present invention should be included in the scope of the present invention.
Claims (6)
1. A traffic processing method is characterized in that the method is applied to a cloud board card, the cloud board card comprises a convergence port and a plurality of service board cards, and the method comprises the following steps:
when a service board card receives a request flow, reconstructing the request flow and sending the reconstructed request flow to a server, wherein the reconstructed request flow comprises identification information of the service board card;
when the aggregation port receives response flow which is returned by the server and carries the identification information, the response flow is sent to the service board card corresponding to the identification information;
the request traffic is DHCP request traffic, and the response traffic is DHCP response traffic;
the sending the response traffic to the service board card corresponding to the identification information includes:
setting an Access Control List (ACL) rule in the aggregation port in advance, wherein the ACL rule comprises the corresponding relation between identification information and a service board card;
when the identification information in the response flow is matched with the ACL rule, the aggregation port sends the response flow to a service board card corresponding to the identification information;
when the service board card receives the request flow, the abstract information in the request flow is uploaded to a main control board card;
and when the aggregation port does not find an ACL rule matched with the identification information in the response flow, the response flow is uploaded to the main control board card, so that the main control board determines a target service board corresponding to the response flow according to the summary information, and the main control board sends the response flow to the target service board.
2. The method of claim 1, wherein the reconstructing the requested traffic comprises:
replacing the specified flow information in the request flow with the identification information of the service board card;
the method further comprises the following steps:
and after receiving the response flow sent by the aggregation port, the service board card restores the identification information in the response flow into the specified flow information.
3. The method of claim 1, wherein the identification information comprises:
the media access of the service board controls the MAC address and/or port number.
4. The utility model provides a flow processing apparatus, its characterized in that, the device is applied to the cloud integrated circuit board, the cloud integrated circuit board includes aggregation port and polylith business integrated circuit board, the device includes:
the request reconstruction unit is used for reconstructing the request flow and sending the reconstructed request flow to the server when the service board card receives the request flow, wherein the reconstructed request flow comprises the identification information of the service board card;
the traffic sending unit is used for sending the response traffic to the service board card corresponding to the identification information when the aggregation port receives the response traffic which is returned by the server and carries the identification information;
the request traffic is DHCP request traffic, and the response traffic is DHCP response traffic;
the traffic sending unit includes:
a rule setting subunit, configured to set an ACL rule in the aggregation port in advance, where the ACL rule includes a correspondence between the identification information and the service board;
the traffic sending subunit is configured to send, when identification information in the response traffic matches the ACL rule, the aggregation port to the service board card corresponding to the identification information;
an information uploading unit, configured to upload summary information in the request traffic to a master control board when the service board receives the request traffic;
the traffic sending subunit is further configured to, when the aggregation port does not find an ACL rule that matches the identification information in the response traffic, send the response traffic to the main control board card, so that the main control board determines, according to the summary information, a target service board corresponding to the response traffic, and the main control board sends the response traffic to the target service board.
5. The apparatus of claim 4,
the request reconstruction unit is specifically configured to replace specified traffic information in the request traffic with identification information of the service board;
the device further comprises:
and the information restoring unit is used for restoring the identification information in the response flow into the specified flow information after the service board card receives the response flow sent by the aggregation port.
6. The apparatus of claim 4, wherein the identification information comprises:
the MAC address and/or port number of the traffic board.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510220363.0A CN105939278B (en) | 2015-04-30 | 2015-04-30 | Traffic processing method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510220363.0A CN105939278B (en) | 2015-04-30 | 2015-04-30 | Traffic processing method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105939278A CN105939278A (en) | 2016-09-14 |
| CN105939278B true CN105939278B (en) | 2020-04-03 |
Family
ID=57152734
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510220363.0A Active CN105939278B (en) | 2015-04-30 | 2015-04-30 | Traffic processing method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105939278B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106789711B (en) * | 2016-12-30 | 2020-03-06 | 杭州迪普科技股份有限公司 | Flow distribution method and device |
| CN109347985A (en) * | 2018-12-03 | 2019-02-15 | 群蜂信息技术(上海)有限公司 | A kind of multi-service processing method based on edge calculations, device and Edge Server |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1838592A (en) * | 2006-04-26 | 2006-09-27 | 南京大学 | Firewall method and system based on high-speed network data processing platform |
| CN101217394A (en) * | 2007-12-29 | 2008-07-09 | 上海华为技术有限公司 | A veneer groove bit mark collocation method, core veneer, and operation veneer and communication system |
| CN102571587A (en) * | 2012-01-13 | 2012-07-11 | 大唐移动通信设备有限公司 | Method and equipment for forwarding messages |
| CN104065759A (en) * | 2013-03-22 | 2014-09-24 | 杭州迪普科技有限公司 | Method for improving utilization efficiency of NAT address pool resource and device thereof |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100473037C (en) * | 2007-03-19 | 2009-03-25 | 中兴通讯股份有限公司 | Method for realizing distributed DHCP relay |
| CN101110768B (en) * | 2007-06-20 | 2010-10-06 | 杭州华三通信技术有限公司 | Data communication method, system, master control card and cable fastener |
-
2015
- 2015-04-30 CN CN201510220363.0A patent/CN105939278B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1838592A (en) * | 2006-04-26 | 2006-09-27 | 南京大学 | Firewall method and system based on high-speed network data processing platform |
| CN101217394A (en) * | 2007-12-29 | 2008-07-09 | 上海华为技术有限公司 | A veneer groove bit mark collocation method, core veneer, and operation veneer and communication system |
| CN102571587A (en) * | 2012-01-13 | 2012-07-11 | 大唐移动通信设备有限公司 | Method and equipment for forwarding messages |
| CN104065759A (en) * | 2013-03-22 | 2014-09-24 | 杭州迪普科技有限公司 | Method for improving utilization efficiency of NAT address pool resource and device thereof |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105939278A (en) | 2016-09-14 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109949111B (en) | Electronic bill identification distribution method, electronic bill generation method, device and system | |
| CN108683668B (en) | Resource checking method, device, storage medium and equipment in content distribution network | |
| CN109818934B (en) | Method and device for automatically processing logs and computing equipment | |
| WO2019075773A1 (en) | Data processing method and apparatus, computer device and storage medium | |
| CN105005521A (en) | Test method and apparatus | |
| WO2016095149A1 (en) | Data compression and storage method and device, and distributed file system | |
| CN108933829A (en) | A kind of load-balancing method and device | |
| CN110995513A (en) | Data sending and receiving method in Internet of things system, Internet of things equipment and platform | |
| CN109739435B (en) | File storage and updating method and device | |
| CN110389859B (en) | Method, apparatus and computer program product for copying data blocks | |
| CN109088957B (en) | NAT rule management method, device and equipment | |
| CN104793982A (en) | Method and device for establishing virtual machine | |
| CN108205482B (en) | File mount restoration methods | |
| CN113361913A (en) | Communication service arranging method, device, computer equipment and storage medium | |
| WO2017147794A1 (en) | Differential data backup method and device | |
| CN106686117B (en) | Data storage processing system and method of distributed computing cluster | |
| CN105939278B (en) | Traffic processing method and device | |
| CN107896196B (en) | Method and device for distributing messages | |
| CN110989935A (en) | Data processing and transmitting method and device of flash system | |
| CN110839007B (en) | Cloud network security processing method and device and computer storage medium | |
| CN105357260B (en) | Realize system, VDI data cache method and the VDI buffer memory device of virtual desktop | |
| CN102857547A (en) | Distributed caching method and device | |
| CN109710502A (en) | Log transmission method, apparatus and storage medium | |
| CN107168642B (en) | Data storage method and system | |
| US9432476B1 (en) | Proxy data storage system monitoring aggregator for a geographically-distributed environment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: Binjiang District and Hangzhou city in Zhejiang Province Road 310051 No. 68 in the 6 storey building Applicant after: Hangzhou Dipu Polytron Technologies Inc Address before: Binjiang District and Hangzhou city in Zhejiang Province Road 310051 No. 68 in the 6 storey building Applicant before: Hangzhou Dipu Technology Co., Ltd. |
|
| CB02 | Change of applicant information | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |