CN106534173A - Business processing method and apparatus - Google Patents
Business processing method and apparatus Download PDFInfo
- Publication number
- CN106534173A CN106534173A CN201611117562.XA CN201611117562A CN106534173A CN 106534173 A CN106534173 A CN 106534173A CN 201611117562 A CN201611117562 A CN 201611117562A CN 106534173 A CN106534173 A CN 106534173A
- Authority
- CN
- China
- Prior art keywords
- address
- service
- business
- request message
- service request
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/12—Applying verification of the received information
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a business processing method and apparatus. The method comprises the following steps: when a business request message is received, judging whether a destination internet protocol IP address of the business request message is an effective business IP address, wherein the effective business IP address can change with time; if the destination IP address of the business request message is the effective business IP address, responding to the business request message; and otherwise, refusing to respond to the business request message. By application of the business processing method and apparatus provided by the embodiment of the invention, the business operation security can be improved.
Description
Technical field
The present invention relates to technical field of video monitoring, more particularly to a kind of method for processing business and device.
Background technology
Many servers and equipment are all directly disposed on a wide area network at present, the very serious safety problem brought.Such as
Attacker can pass through server or device IP (Internet Protocol, the interconnection that the means such as reptile are collected on wide area network
FidonetFido) address, and then corresponding business operation is attacked according to the IP address for getting.
The content of the invention
The present invention provides a kind of method for processing business and device, to improve the security of business operation.
According to the first aspect of the invention, there is provided a kind of method for processing business, service response method, apparatus, the side are applied to
Method includes：
When service request message is received, judge that whether the purpose internet protocol address of the service request message is
Effective traffic IP address；Wherein, effective traffic IP address can change with the time；
If the purpose IP address of service request message are effective traffic IP address, the service request message is responded；
Otherwise, refusal respond service request message.
According to the first aspect of the invention, there is provided a kind of method for processing business, service request method, apparatus, the side are applied to
Method includes：
When initiating business request is needed, according to current service IP address generation parameter, using pre-set business IP address
Generating algorithm generates corresponding service IP address；Wherein, service IP address generation parameter can change with the time；
Service request message is sent, the purpose IP address of the service request message are the service IP address.
According to the third aspect of the invention we, there is provided a kind of business processing device, service response method, apparatus are applied to, its feature
It is that described device includes：
Receiving unit, for receiving service request message；
Judging unit, for judging the purpose Internet protocol IP ground of service request message that the receiving unit is received
Whether location is effective traffic IP address；Wherein, effective traffic IP address can change with the time；
Processing unit, if the purpose IP address for service request message are effective traffic IP address, responds the business
Request message；Otherwise, refusal respond service request message.
According to the fourth aspect of the invention, there is provided a kind of business processing device, service request method, apparatus, the dress are applied to
Put including：
Signal generating unit, for when initiating business request is needed, according to current service IP address generation parameter, using pre-
If service IP address generating algorithm generates corresponding service IP address；Wherein, service IP address generation parameter can be sent out with the time
Changing；
Transmitting element, for sending service request message, the purpose IP address of the service request message are the business
IP address.
Using technical scheme disclosed by the invention, when service request method, apparatus need initiating business request, can basis
Current service IP address generation parameter, generates corresponding service IP address using pre-set business IP address generating algorithm, concurrently
Send the service request message that purpose IP address are the service IP address；When service response method, apparatus receive service request message
When, it can be determined that whether the purpose IP address of the service request message are effective service IP address, and work as the service request report
When the purpose IP address of text are effective traffic IP address, the service request message is responded；Otherwise, refusal respond service request report
Text, improves business operation security.
Description of the drawings
Fig. 1 is a kind of network architecture schematic diagram of Business Processing provided in an embodiment of the present invention；
Fig. 2 is a kind of schematic flow sheet of method for processing business provided in an embodiment of the present invention；
Fig. 3 is a kind of schematic flow sheet of method for processing business provided in an embodiment of the present invention；
Fig. 4 is a kind of structural representation of business processing device provided in an embodiment of the present invention；
Fig. 5 is the structural representation of another kind of business processing device provided in an embodiment of the present invention；
Fig. 6 is a kind of structural representation of business processing device provided in an embodiment of the present invention.
Specific embodiment
In order that those skilled in the art more fully understand the technical scheme in the embodiment of the present invention, below first to the present invention
The network architecture that embodiment is suitable for is briefly described.
Fig. 1 is referred to, is a kind of network architecture schematic diagram of Business Processing provided in an embodiment of the present invention, as shown in figure 1,
In the network architecture, when service request method, apparatus are needed to service response method, apparatus initiating business request, service request side
Equipment directly to the device identification IP address initiating business request of service response method, apparatus, but can't be needed to service response
The service IP address initiating business request of method, apparatus.
Wherein, intrinsic IP address of the device identification IP address of service response method, apparatus for service response method, apparatus, business
The service IP address of responder device can be generated using pre-set business IP address and is calculated according to pre-set business IP address generation parameter
Method is generated, and the service IP address can change with the time, to avoid the device identification IP address quilt of service response method, apparatus
It was found that in the case of, business operation is attacked, and improves the security of business operation.
It should be noted that in embodiments of the present invention, service response method, apparatus can include but is not limited to video monitoring
The video monitoring front end equipment (such as IPC (Internet Protocol Camera, web camera)) in field, video monitoring clothes
Business device, video data storage device etc.；Service request method, apparatus can be between service response method, apparatus there is business demand
Client, the business demand can include but is not limited to video request program (including live program request or Video data playback), shooting
Machine head control etc..
Based on the network architecture shown in Fig. 1, a kind of method for processing business is embodiments provided, as shown in Fig. 2 for originally
A kind of schematic flow sheet of method for processing business that inventive embodiments are provided, wherein, the method for processing business can apply to Fig. 1
Service request method, apparatus in the shown network architecture, as shown in Fig. 2 the method for processing business may comprise steps of：
Step 201, when initiating business request is needed, according to current service IP address generation parameter, using default industry
Business IP address generating algorithm generates corresponding service IP address；Wherein, service IP address generation parameter can occur to become with the time
Change.
In the embodiment of the present invention, revealing in order to avoid the device identification IP address due to service response method, apparatus causes business
There is the risk attacked in the business between request method, apparatus and service response method, apparatus, improve service request method, apparatus and business
Business operation safety between responder device, service response method, apparatus can carry out device identification IP address and service IP address
Separate, i.e., when service request method, apparatus are needed to service response method, apparatus initiating business request, no longer to service response method, apparatus
Device identification IP address initiate, but need to service response method, apparatus service IP address initiate.
Additionally, in order to avoid due to service response method, apparatus service IP address reveal and cause service request method, apparatus with
There is the risk attacked in the business between service response method, apparatus, further improve service request method, apparatus and service response side
Business operation safety between equipment, the service IP address of service response method, apparatus can change with the time.
Correspondingly, in embodiments of the present invention, service request method, apparatus and service response method, apparatus can consult industry in advance
Business IP address generation parameter and service IP address generating algorithm, so that service request method, apparatus and service response method, apparatus can
When there is business demand, correspondingly service IP address is generated, and ensures service request method, apparatus and the life of service response method, apparatus
Into service IP address uniformity.Wherein, service IP address generation parameter can change with the time.
Alternatively, in embodiments of the present invention, service IP address generation parameter can include setting for service response method, apparatus
Standby mark IP address and seed parameter；Or, service IP address generation parameter can include the equipment mark of service response method, apparatus
Know IP address, seed parameter and type of service；Wherein, seed parameter can be carried out periodically with the time or timing changes.
For example, corresponding seed parameter can be generated (hereinafter referred to according to system time periodically or regularly
Seed), for example, the life of the times such as corresponding seed or is generated according to system time per 10 minutes at daily 3 points, 6 points and 12 points
Into corresponding seed.Wherein, seed meets below equation with system time (time)：
Seed=Transfer (Time)
Wherein, Transfer can be seed parameter generating algorithm set in advance, and system time is different, by above-mentioned public affairs
The seed parameter that formula is generated is different.
Alternatively, in the embodiment of the present invention, seed parameter can be generated in the manner described above by service response method, apparatus, and
Notify to give service request method, apparatus by special packet, for example, by between service response method, apparatus and service request method, apparatus
Logon message or keep Alive Packet etc., or, by the message of other new definition.
In the embodiment of the present invention, when service request method, apparatus need initiating business request, service request method, apparatus can be with
Current service IP address generation parameter (newest service IP address generation parameter) is obtained first, and according to current business IP ground
Location generation parameter, using pre-set business IP address generating algorithm, is calculated corresponding service IP address.
Wherein, seed can notify to give service request method, apparatus by service response method, apparatus, and service response method, apparatus set
Standby mark IP can be configured in service request method, apparatus by user (such as keeper), or passes through net by service request method, apparatus
The technical limit spacings such as network reptile；The service request that type of service can be initiated as needed by service request method, apparatus determines.
Step 202, transmission service request message, the purpose IP address of the service request message are service IP address.
In the embodiment of the present invention, when service request method, apparatus need initiating business request, and determine service IP address it
Afterwards, the service request report that purpose IP address are the service IP address can be sent to the service IP address initiating business request
Text.
Wherein, service response method, apparatus receive service request method, apparatus transmission service request message when handling process
The associated description in method flow shown in Fig. 3 is may refer to, the embodiment of the present invention will not be described here.
Based on the network architecture shown in Fig. 1, a kind of method for processing business is embodiments provided, as shown in figure 3, for originally
The schematic flow sheet of another kind of method for processing business that inventive embodiments are provided, wherein, the method for processing business can apply to
Service response method, apparatus in the network architecture shown in Fig. 1, as shown in figure 3, the method for processing business may comprise steps of：
301st, when service request message is received, judge whether the purpose IP address of the service request message are effective industry
Business IP address；Wherein, effective traffic IP address can change with the time.If so, go to step 302；Otherwise, go to step
303。
In the embodiment of the present invention, when service response method, apparatus receive service request message, service response message can be with
The purpose IP address of the service request message are obtained, and compare the purpose IP address and the local effective traffic IP address for preserving,
Whether the purpose IP address for judging the service request message are valid ip address, that is, judge that the purpose IP address are preserved with local
Whether effective traffic IP address is consistent, to determine the need for responding the service request message.
As a kind of optional embodiment, the purpose IP ground of the service request message in embodiments of the present invention, is judged
Before whether location is effective traffic IP address, also include：
Judge whether the service IP address of last generation fails；
If not failing, the last service IP address for generating is defined as into effective traffic IP address；
If failure, service IP address generation parameter is updated, and according to the service IP address generation parameter after renewal, utilized
Pre-set business IP address generating algorithm generates corresponding service IP address, and the service IP address is defined as effective traffic IP ground
Location.
In this embodiment, as service IP address can change with the time, therefore, service response method, apparatus are generated
After service IP address, the effective status of real-time update service IP address is needed.
For example, it is assumed that service response method, apparatus periodically update seed, correspondingly, service IP address also periodically can become
Change, therefore the service IP address that service response method, apparatus are generated can be only effective status within the cycle, in next cycle, the industry
Business IP address will fail, accordingly it is desirable to generate new service IP address.
In this embodiment, when service response method, apparatus determine the service IP address failure of last generation, business
Responder device needs to regenerate new service IP address, and the newly-generated service IP address is defined as effective traffic IP
Address.
Wherein, in order to generate new service IP address, service response method, apparatus need to update service IP address generation parameter.
By taking device identification IP address and seed of the service IP address generation parameter for service response method, apparatus as an example, work as industry
When business responder device determines that the last service IP address for generating fails, service response method, apparatus can first update seed, and
Seed according to the device identification IP address of service response method, apparatus and after updating, using pre-set business IP address generating algorithm
Generate new service IP address.
For example, it is assumed that pre-set business IP address generating algorithm is FunIP (IP, Seed), wherein, IP is set for service response side
Standby device identification IP, Seed are seed parameter (seed).
When responder device determine it is last generate service IP address (be assumed to be IP1=FunIP (IP0, seed1),
IP0 for service response method, apparatus device identification IP address) failure when, responder device can first update seed, it is assumed that from
Seed1 is updated to seed2, and the device identification IP address (i.e. IP0) according to service response method, apparatus and the seed after renewal
(i.e. seed2) generates new service IP address, i.e. IP2=FunIP (IP0, seed2), and IP2 is defined as effective traffic IP ground
Location.
Wherein, after service response method, apparatus update service IP address generation parameter, need the business that will be changed
IP address generation parameter notifies to give service request method, apparatus.
For example, it is assumed that service IP address generation parameter include the device identification IP address of service response method, apparatus and
Seed, then, when service response method, apparatus update service IP address generation parameter, service response method, apparatus are needed after renewal
Seed notifies to give service request method, apparatus.
What deserves to be explained is, in embodiments of the present invention, in order to ensure the availability of service IP address, service response side sets
It is standby generate service IP address using aforesaid way after, before using the service IP address, can also first pass through including but not
It is limited to a kind of modes such as ping (network diagnostic tool) and determines whether the service IP address is reachable, if reachable, it is determined that the business
IP address is unavailable, updates seed, generates next service IP address, till the service IP address for generating is available, and protects
Seed when generating the service IP address is deposited, and is notified and is given service request method, apparatus.
Preferably, service response method, apparatus are generated service IP address and the device identification IP address of service response method, apparatus
In the same network segment.
Further, in embodiments of the present invention, when service response method, apparatus determine the last service IP address for generating
During failure, service response method, apparatus need to determine whether whether the business of the service IP address association is wholly off；If so, then
Discharge the service IP address；Otherwise, retain the service IP address, and be set to failure state, until the service IP address is closed
When the business of connection is wholly off, the service IP address is discharged.
Specifically, in embodiments of the present invention, for arbitrary service IP address, service response method, apparatus need to record the industry
(when i.e. the service IP address is effective traffic IP address, service request method, apparatus are to business IP for the business of business IP address association
Address initiate business) state.
When service response method, apparatus find that certain service IP address fails, service response method, apparatus need to judge business IP
Whether the business of address information is wholly off, if wholly off, discharges the service IP address；Otherwise, service response method, apparatus
The service IP address first can not be discharged, but retains the service IP address, and be set to failure state, until business IP
When the business of address information is wholly off, the service IP address is discharged.
Wherein, when service response method, apparatus receive the service IP address initiation not discharged for this but in disarmed state
Service request when, service response method, apparatus will not respond the service request.
For example, when service response method, apparatus receive service request message, and the purpose IP address of the service request message
When being the service IP address in disarmed state, service response method, apparatus can directly abandon the service request message, and not right
Which is responded.
Further, in embodiments of the present invention, in order to avoid due to service IP address quantity in service response method, apparatus
Excessive and caused IP address is overflowed, and the maximum quantity that can preset service IP address in service response method, apparatus (can be with
Set according to actual scene, referred to herein as predetermined threshold value), the service IP address being newly generated when service response method, apparatus is (i.e.
The last service IP address for generating) failure when, service response method, apparatus first can be sentenced before new service IP address is generated
Whether the quantity of the service IP address of local failure state of breaking reaches predetermined threshold value, if reaching, service response method, apparatus are temporary transient
New service IP address is not first generated, but from the service IP address of local failure state, selects an activation to be effective traffic
IP address.
Correspondingly, in embodiments of the present invention, when the last service IP address for generating fails, above-mentioned more new business IP
Before the generation parameter of address, can also include：
Judge whether the quantity of the service IP address of local failure state reaches predetermined threshold value；
If reaching, from the service IP address of local failure state, an activation is selected to be effective traffic IP address, and
Corresponding seed parameter is notified to give service request method, apparatus, so that service request method, apparatus generate business according to the seed parameter
IP address；
If not up to, it is determined that perform above-mentioned renewal service IP address generation parameter, and according to the business IP ground after renewal
Location generation parameter.
In this embodiment, when responder device determines the last service IP address failure for generating, and locally fail
When the quantity of the service IP address (failure but the not wholly off service IP address of the business for associating) of state reaches predetermined threshold value,
Responder device can select a service IP address to enter line activating from the service IP address of failure state so as to become again
Effectively service IP address, when being released up to the service IP address for having failure, just regenerates service IP address.
Wherein, responder device can be at random or according to hash algorithm or according to other strategies from business IP of failure state
A service IP address is selected to enter line activating in address；After the service IP address of responder device activation failure state, need
The service IP address corresponding seed is notified to give service request method, apparatus, so that service request method, apparatus need initiation business to ask
When asking, service IP address can be generated according to the seed.
Step 302, respond the service request message.
Step 303, the refusal respond service request message.
In the embodiment of the present invention, when responder device determines that the purpose IP address of the service request message for receiving are effective
During service IP address, responder device can respond the service request message；When responder device determines that the business for receiving please
When the purpose IP address for seeking message are not effective traffic IP address, responder device can be with the refusal respond service request message.
Wherein, the concrete processing mode of the service request message that the response of service response method, apparatus is received may refer to existing
Associated description in relevant programme, the embodiment of the present invention will not be described here.
It can be seen that, by configuring the service IP address dedicated for service request, realize business IP of service response method, apparatus
Address is separated with device identification IP address, it is to avoid caused by being revealed due to device identification IP address, business operation is attacked
Situation occurs；Further, since effective traffic IP address can change with the time, therefore can further improve business operation
Security.
Can be seen that in technical scheme provided in an embodiment of the present invention by above flow process, when service request method, apparatus
When needing initiating business request, can be generated using pre-set business IP address and calculated according to current service IP address generation parameter
Method generates corresponding service IP address, and sends the service request message that purpose IP address are the service IP address；When business is rung
When answering method, apparatus to receive service request message, it can be determined that whether the purpose IP address of the service request message are effective industry
Business IP address, and when the purpose IP address of the service request message are effective traffic IP address, respond the service request message；
Otherwise, the refusal respond service request message, improves business operation security.
Fig. 4 is referred to, is a kind of structural representation of business processing device provided in an embodiment of the present invention, wherein, the industry
Business processing meanss can apply to the service response method, apparatus in said method embodiment, as shown in figure 4, the business processing device
Can include：
Receiving unit 410, for receiving service request message；
Judging unit 420, for judging the purpose Internet protocol of service request message that the receiving unit is received
Whether IP address is effective traffic IP address；Wherein, effective traffic IP address can change with the time；
Processing unit 430, if the purpose IP address for service request message are effective traffic IP address, responds the industry
Business request message；Otherwise, refusal respond service request message.
In an alternative embodiment, the judging unit 420, is additionally operable to judge whether the service IP address of last generation loses
Effect；
Correspondingly, please also refer to Fig. 5, it is the structural representation of another kind of business processing device provided in an embodiment of the present invention
Figure, as shown in figure 5, on the basis of business processing device shown in Fig. 4, the business processing device shown in Fig. 5 also includes：
Determining unit 440, if not failing for the last service IP address for generating, by last business IP for generating
Address is defined as effective traffic IP address；
Signal generating unit 450, if for the last service IP address failure for generating, updating service IP address and generating ginseng
Number, and according to the service IP address generation parameter after renewal, corresponding business is generated using pre-set business IP address generating algorithm
IP address；
The determining unit 440, is additionally operable to for the service IP address to be defined as effective traffic IP address；
Wherein, service IP address generation parameter includes the device identification IP address and seed parameter of service response method, apparatus；
Or, service IP address generation parameter includes device identification IP address, seed parameter and the service class of service response method, apparatus
Type, the seed parameter carries out cyclically-varying with the time or timing changes.
In an alternative embodiment, the judging unit 420, is additionally operable to when the last service IP address for generating fails,
Judge whether the business of the service IP address association is wholly off；
The signal generating unit 450, if the business for being additionally operable to the service IP address association is wholly off, discharges business IP
Address；Otherwise, retain the service IP address, and be set to failure state, until the business whole of the service IP address association
During stopping, the service IP address is discharged.
In an alternative embodiment, the judging unit 420, is additionally operable to, when the service IP address that last time generates fails, sentence
Whether the quantity of the service IP address of local failure state of breaking reaches predetermined threshold value；
The signal generating unit 450, if whether the quantity for being additionally operable to the service IP address of local failure state reaches default threshold
Value, then select an activation for effective traffic IP address from the service IP address of local failure state, and by corresponding seed
Parameter notifies to give service request method, apparatus, so that service request method, apparatus generate service IP address according to the seed parameter；If not
Reach, then update service IP address generation parameter, and according to the service IP address generation parameter after renewal, using pre-set business IP
Algorithm of Address Generation generates corresponding service IP address.
Fig. 6 is referred to, is a kind of structural representation of business processing device provided in an embodiment of the present invention, wherein, the industry
Business processing meanss can apply to the service request method, apparatus in said method embodiment, as shown in fig. 6, the business processing device
Can include：
Signal generating unit 610, for when initiating business request is needed, according to current service IP address generation parameter, profit
Corresponding service IP address is generated with pre-set business IP address generating algorithm；Wherein, service IP address generation parameter can be at any time
Between change；
Transmitting element 620, for sending service request message, the purpose IP address of the service request message are the industry
Business IP address.
In an alternative embodiment, service IP address generation parameter include service response method, apparatus device identification IP address and
Seed parameter；Or, service IP address generation parameter include the device identification IP address of service response method, apparatus, seed parameter with
And type of service, the seed parameter carries out cyclically-varying with the time or timing changes.
In said apparatus, the function of unit and effect realizes that process specifically refers to correspondence step in said method
Process is realized, be will not be described here.
For device embodiment, as which corresponds essentially to embodiment of the method, so related part is referring to method reality
Apply the part explanation of example.Device embodiment described above is only schematic, wherein described as separating component
The unit of explanation can be or may not be physically separate, as the part that unit shows can be or can also
It is not physical location, you can local to be located at one, or can also be distributed on multiple NEs.Can be according to reality
Need to select some or all of module therein to realize the purpose of the present invention program.Those of ordinary skill in the art are not paying
In the case of going out creative work, you can to understand and implement.
As seen from the above-described embodiment, when service request method, apparatus need initiating business request, can be according to current industry
Business IP address generation parameter, generates corresponding service IP address using pre-set business IP address generating algorithm, and sends purpose IP
Address is the service request message of the service IP address；When service response method, apparatus receive service request message, can sentence
Whether the purpose IP address of the disconnected service request message are effective service IP address, and when purpose IP of the service request message
When address is effective traffic IP address, the service request message is responded；Otherwise, the refusal respond service request message, improves
Business operation security.
Those skilled in the art will readily occur to its of the present invention after considering specification and putting into practice invention disclosed herein
Its embodiment.The application is intended to any modification of the present invention, purposes or adaptations, these modifications, purposes or
Person's adaptations follow the general principle of the present invention and including the undocumented common knowledge in the art of the present invention
Or conventional techniques.Description and embodiments are considered only as exemplary, and true scope and spirit of the invention are by following
Claim is pointed out.
It should be appreciated that the precision architecture for being described above and being shown in the drawings is the invention is not limited in, and
And various modifications and changes can be being carried out without departing from the scope.The scope of the present invention is limited only by appended claim.
Claims (10)
1. a kind of method for processing business, is applied to service response method, apparatus, it is characterised in that methods described includes：
When service request message is received, judge whether the purpose internet protocol address of the service request message is effective
Service IP address；Wherein, effective traffic IP address can change with the time；
If the purpose IP address of service request message are effective traffic IP address, the service request message is responded；
Otherwise, refusal respond service request message.
2. method according to claim 1, it is characterised in that the purpose IP address of the judgement service request message are
Before the no IP address for effective traffic, also include：
Judge whether the service IP address of last generation fails；
If not failing, the last service IP address for generating is defined as into effective traffic IP address；
If failure, service IP address generation parameter is updated, and according to the service IP address generation parameter after renewal, using default
Service IP address generating algorithm generates corresponding service IP address, and the service IP address is defined as effective traffic IP address；
Wherein, service IP address generation parameter includes the device identification IP address and seed parameter of service response method, apparatus；Or,
Service IP address generation parameter includes device identification IP address, seed parameter and the type of service of service response method, apparatus, institute
Stating seed parameter carries out cyclically-varying or timing change with the time.
3. method according to claim 2, it is characterised in that methods described also includes：
When the last service IP address for generating fails, judge whether the business of the service IP address association is wholly off；
If so, then discharge the service IP address；
Otherwise, retain the service IP address, and be set to failure state, until the business of the service IP address association is all stopped
When only, the service IP address is discharged.
4. method according to claim 2, it is characterised in that when the service IP address that last time generates fails, it is described more
Before new business IP address generation parameter, also include：
Judge whether the quantity of the service IP address of local failure state reaches predetermined threshold value；
If reaching, from the service IP address of local failure state, an activation is selected to be effective traffic IP address, and will be right
The seed parameter answered notifies to give service request method, apparatus, so that service request method, apparatus generate business IP ground according to the seed parameter
Location；
If not up to, it is determined that the step of performing the renewal service IP address generation parameter.
5. a kind of method for processing business, is applied to service request method, apparatus, it is characterised in that methods described includes：
When initiating business request is needed, according to current service IP address generation parameter, generated using pre-set business IP address
Algorithm generates corresponding service IP address；Wherein, service IP address generation parameter can change with the time；
Service request message is sent, the purpose IP address of the service request message are the service IP address.
6. a kind of business processing device, is applied to service response method, apparatus, it is characterised in that described device includes：
Receiving unit, for receiving service request message；
Judging unit, for judging that the purpose internet protocol address of service request message that the receiving unit is received is
It is no for effective traffic IP address；Wherein, effective traffic IP address can change with the time；
Processing unit, if the purpose IP address for service request message are effective traffic IP address, responds the service request
Message；Otherwise, refusal respond service request message.
7. device according to claim 6, it is characterised in that
The judging unit, is additionally operable to judge whether the service IP address of last generation fails；
Described device also includes：
Determining unit, if not failing for the last service IP address for generating, will be the last service IP address for generating true
It is set to effective traffic IP address；
Signal generating unit, if failing for the last service IP address for generating, renewal service IP address generation parameter, and according to
Service IP address generation parameter after renewal, generates corresponding service IP address using pre-set business IP address generating algorithm；
The determining unit, is additionally operable to for the service IP address to be defined as effective traffic IP address；
Wherein, service IP address generation parameter includes the device identification IP address and seed parameter of service response method, apparatus；Or,
Service IP address generation parameter includes device identification IP address, seed parameter and the type of service of service response method, apparatus, institute
Stating seed parameter carries out cyclically-varying or timing change with the time.
8. device according to claim 7, it is characterised in that
The judging unit, is additionally operable to, when the last service IP address for generating fails, judge the service IP address association
Whether business is wholly off；
The signal generating unit, if the business for being additionally operable to the service IP address association is wholly off, discharges the service IP address；It is no
Then, retain the service IP address, and be set to failure state, until when the business of the service IP address association is wholly off,
Discharge the service IP address.
9. device according to claim 7, it is characterised in that
The judging unit, is additionally operable to, when the service IP address that last time generates fails, judge business IP of local failure state
Whether the quantity of address reaches predetermined threshold value；
The signal generating unit, if whether the quantity for being additionally operable to the service IP address of local failure state reaches predetermined threshold value, from
Select an activation to be effective traffic IP address in the service IP address of local failure state, and corresponding seed parameter is notified
Service request method, apparatus are given, so that service request method, apparatus generate service IP address according to the seed parameter；If not up to, more
New business IP address generation parameter, and according to the service IP address generation parameter after renewal, generated using pre-set business IP address
Algorithm generates corresponding service IP address.
10. a kind of business processing device, is applied to service request method, apparatus, it is characterised in that described device includes：
Signal generating unit, for when initiating business request is needed, according to current service IP address generation parameter, using default industry
Business IP address generating algorithm generates corresponding service IP address；Wherein, service IP address generation parameter can occur to become with the time
Change；
Transmitting element, for sending service request message, the purpose IP address of the service request message are business IP ground
Location.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611117562.XA CN106534173B (en) | 2016-12-07 | 2016-12-07 | A kind of method for processing business and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201611117562.XA CN106534173B (en) | 2016-12-07 | 2016-12-07 | A kind of method for processing business and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106534173A true CN106534173A (en) | 2017-03-22 |
| CN106534173B CN106534173B (en) | 2019-10-18 |
Family
ID=58341928
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201611117562.XA Active CN106534173B (en) | 2016-12-07 | 2016-12-07 | A kind of method for processing business and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106534173B (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN2757447Y (en) * | 2004-09-10 | 2006-02-08 | 上海广域信息网络有限公司 | Long distance data collecting and transmission device and long distance data transmission system |
| CN101277257A (en) * | 2007-03-26 | 2008-10-01 | 华为技术有限公司 | Method, apparatus and system for dynamically updating DNS |
| US20090300176A1 (en) * | 2008-06-03 | 2009-12-03 | Canon Kabushiki Kaisha | Information processing apparatus, control method therefor, and computer-readable storage medium |
| CN101719937A (en) * | 2009-11-30 | 2010-06-02 | 中兴通讯股份有限公司 | Method and system for updating terminal device |
| CN102855568A (en) * | 2012-08-14 | 2013-01-02 | 广东汇卡商务服务有限公司 | Payment system and method capable of preventing a point of sale (POS) terminal from being illegally relocated |
-
2016
- 2016-12-07 CN CN201611117562.XA patent/CN106534173B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN2757447Y (en) * | 2004-09-10 | 2006-02-08 | 上海广域信息网络有限公司 | Long distance data collecting and transmission device and long distance data transmission system |
| CN101277257A (en) * | 2007-03-26 | 2008-10-01 | 华为技术有限公司 | Method, apparatus and system for dynamically updating DNS |
| US20090300176A1 (en) * | 2008-06-03 | 2009-12-03 | Canon Kabushiki Kaisha | Information processing apparatus, control method therefor, and computer-readable storage medium |
| CN101719937A (en) * | 2009-11-30 | 2010-06-02 | 中兴通讯股份有限公司 | Method and system for updating terminal device |
| CN102855568A (en) * | 2012-08-14 | 2013-01-02 | 广东汇卡商务服务有限公司 | Payment system and method capable of preventing a point of sale (POS) terminal from being illegally relocated |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106534173B (en) | 2019-10-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9491189B2 (en) | Revival and redirection of blocked connections for intention inspection in computer networks | |
| US20140173712A1 (en) | Network security system with customizable rule-based analytics engine for identifying application layer violations | |
| CN108270722B (en) | Attack behavior detection method and device | |
| US20170264590A1 (en) | Preventing dns cache poisoning | |
| CN104247332A (en) | Systems involving firewall of virtual machine traffic and methods of processing information associated with same | |
| KR20190004350A (en) | Handle network traffic to defend against attacks | |
| CN103516587B (en) | Instant communication client terminal disconnection reconnection method and device | |
| CN103812823A (en) | Method, device and system for configuration information migration in thermal migration of virtual machine | |
| US9794154B2 (en) | Selective IP address allocation for probes that do not have assigned IP addresses | |
| JP2009266202A5 (en) | Information processing apparatus, information processing apparatus control method, session management system, and program | |
| CN109587167B (en) | Message processing method and device | |
| JP4390649B2 (en) | Network loop detector | |
| CN114095258B (en) | Attack defense method, attack defense device, electronic equipment and storage medium | |
| CN105959282A (en) | Protection method and device for DHCP attack | |
| CN104883360A (en) | ARP spoofing fine-grained detecting method and system | |
| CN104901953A (en) | Distributed detection method and system for ARP (Address Resolution Protocol) cheating | |
| CN109617912B (en) | Device for preventing DDoS attack by adopting intelligent switching of multiple domain names | |
| CN104486125A (en) | Backup method and device of configuration files | |
| CN108881233A (en) | anti-attack processing method, device, equipment and storage medium | |
| CN112019366A (en) | Leasing method and device of physical host, cloud platform and readable storage medium | |
| CN102185724B (en) | Address management method and equipment | |
| CN110012076B (en) | Connection establishing method and device | |
| CN106412146A (en) | Method and device for updating IP through DHCP client | |
| CN106534173A (en) | Business processing method and apparatus | |
| CN107241297B (en) | Communication interception method and device, and server |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20221107 Address after: 15 / F, Zhongchuang Plaza, 385 Hangtian Middle Road, national civil aerospace industrial base, Xi'an City, Shaanxi Province 710100 Patentee after: Xi'an Yu vision Mdt InfoTech Ltd. Address before: 310051 Zhejiang Jiangling Hangzhou Road, Binjiang District, Jiangling, 88, No. 10 South Block 1-11. Patentee before: ZHEJIANG UNIVIEW TECHNOLOGIES Co.,Ltd. |