CN106549784B - A kind of data processing method and equipment - Google Patents
A kind of data processing method and equipment Download PDFInfo
- Publication number
- CN106549784B CN106549784B CN201510603327.2A CN201510603327A CN106549784B CN 106549784 B CN106549784 B CN 106549784B CN 201510603327 A CN201510603327 A CN 201510603327A CN 106549784 B CN106549784 B CN 106549784B
- Authority
- CN
- China
- Prior art keywords
- abnormal data
- data
- server
- sent
- user identifier
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer And Data Communications (AREA)
Abstract
This application discloses a kind of data processing method and equipment, comprising: primary server receives the abnormal data alarm that at least one auxiliary server is sent, the user identifier of the user comprising transmission abnormal data in abnormal data alarm；The first abnormal data synchronizing information comprising user identifier is sent to the auxiliary server within institute's range of management；Receive the number for the abnormal data that each described auxiliary server is sent；When determining that the sum of number of abnormal data received is greater than given threshold, the abnormal data comprising the user identifier is sent to auxiliary server and intercepts instruction.In this way, in a distributed system, abnormal data is monitored by auxiliary server, auxiliary server is avoided in real time to the problem of causing network server working efficiency to reduce when synchronous data are abnormal data caused by primary server synchrodata, also abnormal data is significantly reduced to the attack possibility of primary server, effectively improves the safety of network service system.
Description
Technical field
This application involves field of computer technology more particularly to a kind of data processing methods and equipment.
Background technique
With the development of internet technology, people are increasing to the dependence of internet.People can pass through internet
Data are inquired, the various network services of network operator's offer can also be provided.
Generally, in order to preferably provide network service to people, network operator uses distributed network service system
System.So-called distributed network service system is comprising at least one primary networking service device (hereinafter referred to as primary server) and at least
One auxiliary network server (hereinafter referred to as auxiliary server), primary server and auxiliary server provide network service jointly.
Illustrate how distributed network service provides network service so that user initiates logging request as an example below.Specifically
Ground, when user is when accessing internet, user from distributed network service system in itself closer auxiliary server
Network parameters in acquisition (such as: IP address, domain name addresses etc.), and initiated based on the upper network parameters got to the auxiliary server
Logging request carries the user login information of the user in the logging request, such as: username and password etc..The auxiliary server
When receiving the logging request, the logging request is synchronized to primary server using distributed structure/architecture.Primary server is receiving
When to the logging request, which is authenticated, and pass sequentially through login response message when certification passes through
Auxiliary server is sent to the user, completes the operation that user logs in internet.
But with the development of science and technology, there is network hacker.Some network hackers are exclusively used in attack website service
Device, so that Website server cisco unity malfunction under attack.Such as: when a certain malicious user takes to the website of a certain website
Business device sends logging request, and server auxiliary in this way is stepped on when receiving the logging request each time of user's transmission by what is received
Record request, which synchronizes, is sent to primary server.Once malicious user is intended to attack primary server, send in a short time multiple
Logging request or malicious attack data, so that in data volume short time between auxiliary server and primary server on communication link
Increase severely.Since the bandwidth of communication link between primary server and auxiliary server is limited, will lead to primary server and auxiliary server it
Between resource occupied by malicious attack data so that the working efficiency of network service system reduces, while reducing network service system
The safety of system.
Summary of the invention
In view of this, the embodiment of the present application provides a kind of data processing method and equipment, for solving current network clothes
The problem that working efficiency existing for business system is lower and safety is poor.
This application provides a kind of data processing methods, comprising:
Primary server receives the abnormal data alarm that at least one auxiliary server is sent, wherein the abnormal data alarm
In comprising send abnormal data user user identifier；
The primary server sends the first exception comprising the user identifier to the auxiliary server within institute's range of management
Data synchronization information, wherein the first abnormal data synchronizing information is used to indicate the auxiliary server to the primary server
Transmit and receive the number of the abnormal data sent by the corresponding user of the user identifier；
The primary server receives the number for the abnormal data that each described auxiliary server is sent；
The primary server is when determining that the sum of number of the abnormal data received is greater than given threshold, Xiang Suoshu
Auxiliary server sends the abnormal data comprising the user identifier and intercepts instruction, wherein the abnormal data intercepts instruction and is used for
The abnormal data for indicating that the auxiliary server sends the corresponding user of the user identifier intercepts.
Present invention also provides a kind of data processing methods, comprising:
Auxiliary server receives the pending data that user sends, wherein comprising the user in the pending data
User identifier；
The auxiliary server is when the number for determining the pending data received is greater than setting threshold value, to main clothes
Business device sends abnormal data alarm, wherein includes the user identifier in the abnormal data alarm.
Present invention also provides a kind of data processing equipments, comprising:
Receiving unit, the abnormal data alarm sent for receiving at least one auxiliary server, wherein the abnormal data
The user identifier of user comprising transmission abnormal data in alarm；
Transmission unit, it is abnormal for sending first comprising the user identifier to the auxiliary server within institute's range of management
Data synchronization information, wherein the first abnormal data synchronizing information is used to indicate the auxiliary server to the primary server
Transmit and receive the number of the abnormal data sent by the corresponding user of the user identifier；
The receiving unit is also used to receive the number for the abnormal data that each described auxiliary server is sent；
The transmission unit is also used to determining the sum of number of the abnormal data received greater than given threshold
When, the abnormal data comprising the user identifier is sent to the auxiliary server and intercepts instruction, wherein the abnormal data intercepts
Instruction is used to indicate the abnormal data that the auxiliary server sends the corresponding user of the user identifier and intercepts.
Present invention also provides a kind of data processing equipments, comprising:
Receiving unit, for receiving the pending data of user's transmission, wherein include the use in the pending data
The user identifier at family；
Transmission unit, when for being greater than setting threshold value in the number for determining the pending data received, to master
Server sends abnormal data alarm, wherein includes the user identifier in the abnormal data alarm.
The application has the beneficial effect that:
The embodiment of the present application primary server receives the abnormal data alarm that at least one auxiliary server is sent, the exception number
According to the user identifier of the user in alarm comprising sending abnormal data；Send to the auxiliary server within institute's range of management includes institute
The first abnormal data synchronizing information of user identifier is stated, the first abnormal data synchronizing information is used to indicate the auxiliary server
The number to the abnormal data sent by the corresponding user of the user identifier is transmitted and received to the primary server；It receives
The number for the abnormal data that each described auxiliary server is sent；Determine the number of the abnormal data that receives it
When with being greater than given threshold, the abnormal data comprising the user identifier is sent to the auxiliary server and intercepts instruction, it is described different
Regular data intercepts instruction and is used to indicate the abnormal data progress that the auxiliary server sends the corresponding user of the user identifier
It intercepts.In this way, in a distributed system, being monitored by auxiliary server to abnormal data, when primary server is receiving service
When the abnormal data alarm that device is sent, by the synchronous number for obtaining each auxiliary server and receiving abnormal data, determined with this be
It is no to need to intercept abnormal data, thus avoid auxiliary server in real time to caused by primary server synchrodata when same
The data of step cause network server working efficiency to reduce when being abnormal data the problem of, also effectively by the attack of abnormal data
It intercepts at auxiliary server, reduces abnormal data to the attack possibility of primary server, effectively improve network service system
Safety.
Detailed description of the invention
In order to more clearly explain the technical solutions in the embodiments of the present application, make required in being described below to embodiment
Attached drawing is briefly introduced, it should be apparent that, the drawings in the following description are only some examples of the present application, for this
For the those of ordinary skill in field, without any creative labor, it can also be obtained according to these attached drawings
His attached drawing.
Fig. 1 is a kind of flow diagram of data processing method provided by the embodiments of the present application；
Fig. 2 is a kind of flow diagram of data processing method provided by the embodiments of the present application；
Fig. 3 is a kind of flow diagram of data processing method provided by the embodiments of the present application；
Fig. 4 is a kind of structural schematic diagram of data processing equipment provided by the embodiments of the present application；
Fig. 5 is a kind of structural schematic diagram of data processing equipment provided by the embodiments of the present application.
Specific embodiment
In order to realize the purpose of the application, the embodiment of the present application provides a kind of data processing method and equipment, main service
Device receives the abnormal data alarm that at least one auxiliary server is sent, and includes transmission abnormal data in the abnormal data alarm
The user identifier of user；It is same that the first abnormal data comprising the user identifier is sent to the auxiliary server within institute's range of management
Walk information, the first abnormal data synchronizing information be used to indicate the auxiliary server to the primary server transmit and receive to by
The number for the abnormal data that the corresponding user of the user identifier sends；Receive the institute that each described auxiliary server is sent
State the number of abnormal data；When determining that the sum of number of the abnormal data for receiving is greater than given threshold, to described auxiliary
Server sends the abnormal data comprising the user identifier and intercepts instruction, and the abnormal data interception instruction is used to indicate described
The abnormal data that auxiliary server sends the corresponding user of the user identifier intercepts.In this way, in a distributed system, by
Auxiliary server is monitored abnormal data, when primary server receive server transmission abnormal data alarm when, will be same
Step obtains the number that each auxiliary server receives abnormal data, determines a need for intercepting abnormal data with this, by
This avoid auxiliary server in real time to caused by primary server synchrodata when synchronous data be abnormal data when cause net
The attack of abnormal data is also effectively intercepted at auxiliary server, is reduced different by the problem of network server working efficiency reduces
Regular data effectively improves the safety of network service system to the attack possibility of primary server.
The each embodiment of the application is described in further detail with reference to the accompanying drawings of the specification.Obviously, described
Embodiment is merely a part but not all of the embodiments of the present application.Based on the embodiment in the application, this field
Those of ordinary skill's all other embodiment obtained without making creative work belongs to the application protection
Range.
Fig. 1 is a kind of flow diagram of data processing method provided by the embodiments of the present application.The method can be as follows
It is described.The executing subject of the embodiment of the present application is primary server.
Step 101: primary server receives the abnormal data alarm that at least one auxiliary server is sent.
It wherein, include the user identifier for sending the user of abnormal data in the abnormal data alarm.
In a step 101, it in distributed network service system, when auxiliary monitoring server to abnormal data and determines full
When foot sends abnormal data alarm conditions, abnormal data alarm is sent to primary server, and includes hair in abnormal data alarm
The user identifier for sending abnormal data enables primary server to carry out the abnormal data that the corresponding user of the user identifier sends
Judgement.
That is, within the compass of competency of primary server, arbitrary auxiliary server is detecting abnormal data and really
When fixed satisfaction sends abnormal data alarm conditions, abnormal data alarm can be sent to primary server, so that primary server one
The abnormal data alarm that at least one auxiliary server is sent is received in range of fixing time.
What needs to be explained here is that user identifier described in the embodiment of the present application can be the IP address of user,
The device identification that can be the used equipment of user, is not specifically limited here.
Step 102: the primary server is sent to the auxiliary server within institute's range of management comprising the user identifier
First abnormal data synchronizing information.
Wherein, the first abnormal data synchronizing information is used to indicate the auxiliary server and connects to primary server transmission
Receive the number of the abnormal data sent by the corresponding user of the user identifier.
In a step 102, the primary server can be by the way of broadcast to the auxiliary server within institute's range of management
The first abnormal data synchronizing information comprising the user identifier is sent, point-to-point mode can also be used to institute's range of management
Within auxiliary server send include the user identifier the first abnormal data synchronizing information, can also using other modes send out
It send, the sending method of the first abnormal data synchronizing information is not specifically limited here.
Specifically, in the abnormal data alarm for receiving the transmission of at least one server, determination is being distributed primary server
There is the risk attacked in the network service system of formula, whether is attacked in order to further determine distributed network service system
It hits, is synchronized then primary server sends the first abnormal data comprising the user identifier to the server within institute's range of management
Information facilitates primary server in this way and further obtains the frequency that the corresponding user of the user identifier sends abnormal data, is true
Whether fixed distributed network service system is by attack offer judgment basis.
Step 103: the primary server receives the number for the abnormal data that each described auxiliary server is sent.
In step 103, the primary server is in the abnormal data for receiving each auxiliary server transmission
Number when, the primary server is calculated according to the number for receiving the abnormal data that each described auxiliary server is sent
The number of the abnormal data received and value.
Optionally, also occur comprising abnormal data in the abnormal data alarm and the first abnormal data synchronizing information
Time, in this way, also mean that primary server to auxiliary server send the first abnormal data synchronizing information when, need to inform
The time that auxiliary server exception data occur, the time can be a period, is also possible to a time point, do not do here
It limits.
Each described auxiliary server is synchronous according to the first abnormal data when receiving the first abnormal data synchronizing information
The time that the abnormal data for including in information occurs counts the exception received in the time range of abnormal data appearance
The number of data, and the number that statistics obtains is sent to primary server.
In this way, number of the primary server according to the abnormal data for receiving each auxiliary server transmission,
Count the number of the abnormal data received and value.
Step 104: whether the sum of the number of the abnormal data that the primary server judgement receives is greater than setting threshold
Value, if more than thening follow the steps 105；Otherwise, step 106 is executed.
What needs to be explained here is that the size of given threshold involved in the embodiment of the present application can be according to practical need
It was determined that can also be according to the actual conditions determination or adjustment in real time of network service system resource load, here without limitation.
Step 105: the primary server is determining the sum of number of the abnormal data received greater than given threshold
When, the abnormal data comprising the user identifier, which is sent, to the auxiliary server intercepts instruction.
Wherein, the abnormal data intercepts instruction and is used to indicate the auxiliary server to the corresponding user of the user identifier
The abnormal data of transmission is intercepted.
In step 105, the primary server is determining the sum of number of the abnormal data received greater than setting
When threshold value, malicious attack of the distributed network service system by user is determined, need to the corresponding user of the user identifier
The abnormal data of transmission is intercepted, and is blocked then primary server sends the abnormal data comprising the user identifier to auxiliary server
Cut instruction.
Step 106: the primary server is determining the sum of number of the abnormal data received no more than setting threshold
When value, the data flush instructions comprising the user identifier are sent to the auxiliary server.
Wherein, the data flush instructions be used to indicate receive the data flush instructions auxiliary server empty it is described
The record for the abnormal data number that the corresponding user of user identifier sends.
In step 106, the primary server is not more than in the sum of determining number of the abnormal data received and sets
When determining threshold value, it can determine distributed network service system not yet by the malicious attack of user or by malicious attack
Possibility is smaller, and the abnormal data that can be sent to the corresponding user of the user identifier is handled.
Optionally, the primary server sends data flush instructions to the auxiliary server, comprising:
The primary server sends the second abnormal data synchronizing information comprising the time cycle to the auxiliary server, described
Primary server determines the sum of number of the abnormal data received no more than given threshold when reaching the time cycle
When, data flush instructions are sent to the auxiliary server.
Wherein, the second abnormal data synchronizing information is used to indicate each and receives the second abnormal data synchronization
The number of the abnormal data received in the time cycle is sent to the primary server by the auxiliary server of information.
It should be noted that the time cycle described in the embodiment of the present application can refer to from send the first abnormal data it is same
A period of time after information starts is walked, the primary server described in this way is in the sum of the number for determining the abnormal data received
It when no more than given threshold, then continues for some time, it is desirable that the user mark that auxiliary server reports receive lasting this period
The number for the abnormal data that corresponding user sends is known, to further determine that the abnormal number of the corresponding user's transmission of the user identifier
According to whether belonging to malicious attack data.
" the first abnormal data synchronizing information " and " the second abnormal data synchronizing information " being related in the embodiment of the present application
In include " first " and " second " be only intended to distinguish primary server have sent abnormal data synchronizing information twice, without other
Particular meaning.
Specifically, the first exception is sent since the abnormal data alarm that primary server is sent according to portion of secondary server determines
Data, that is to say, that the abnormal data that the corresponding user of the user identifier sends is constituted for portion of secondary server at this time dislikes
Meaning attack, but whether then it is same, which to send the first abnormal data, for primary server to be determined to primary server composition malicious attack
Walk information, it is desirable that the auxiliary server within compass of competency, which reports, receives the abnormal data that the corresponding user of the user identifier sends
Number, judge whether the abnormal data that the corresponding user of the user identifier sends is constituted malicious attack to primary server with this.
It, can be to transmission when the sum of number of the abnormal data that the primary server is received in determination is no more than given threshold
The auxiliary server of abnormal data alarm sends the abnormal data comprising the user identifier and intercepts instruction, can also be to not yet sending
The auxiliary server of abnormal data alarm sends the data flush instructions comprising the user identifier, is not specifically limited here.
Optionally, the primary server is sending the abnormal data interception comprising the user identifier to the auxiliary server
After instruction, the method also includes:
The primary server sends the data processing instructions comprising the user identifier to the auxiliary server.
Wherein, the data processing instructions are used to indicate the auxiliary server for receiving the data processing instructions to the use
Family identifies the abnormal data that corresponding user sends and handles.
Optionally, the primary server determines the number of the abnormal data received when reaching the time cycle
The sum of be greater than given threshold when, jump execute step 105.
It should be noted that abnormal data described in the embodiment of the present application refers to that user sends the frequency of data greater than finger
The data of fixed number value, specified numerical value here can determine according to actual needs, here without limitation.
By the scheme of the embodiment of the present application, primary server receives the abnormal data that at least one auxiliary server is sent and accuses
It is alert, the user identifier of the user comprising transmission abnormal data in the abnormal data alarm；Auxiliary clothes within institute's range of management
Business device sends the first abnormal data synchronizing information comprising the user identifier, and the first abnormal data synchronizing information is for referring to
Show that the auxiliary server is transmitted and received to the primary server to the exception sent by the corresponding user of the user identifier
The number of data；Receive the number for the abnormal data that each described auxiliary server is sent；Described in determining receive
When the sum of number of abnormal data is greater than given threshold, the abnormal data comprising the user identifier is sent to the auxiliary server
Instruction is intercepted, the abnormal data intercepts instruction and is used to indicate the auxiliary server to the user identifier corresponding user transmission
Abnormal data intercepted.In this way, in a distributed system, being monitored by auxiliary server to abnormal data, when main service
Device is in the abnormal data alarm for receiving server transmission, by synchronous for obtaining each auxiliary server and receiving abnormal data
Number, determines a need for intercepting abnormal data with this, and it is synchronous to primary server in real time to thus avoid auxiliary server
The problem of causing network server working efficiency to reduce when synchronous data are abnormal data caused by data also effectively will
The attack of abnormal data intercepts at auxiliary server, reduces abnormal data to the attack possibility of primary server, is effectively promoted
The safety of network service system.
Fig. 2 is a kind of flow diagram of data processing method provided by the embodiments of the present application.The method can be as follows
It is described.Server supplemented by the executing subject of the embodiment of the present application.
Step 201: auxiliary server receives the pending data that user sends.
It wherein, include the user identifier of the user in the pending data.
Step 202: the auxiliary server determines whether the number of the pending data received is greater than setting thresholding
Value, if more than thening follow the steps 203；If being not more than, the pending data received is handled.
Step 203: the auxiliary server is greater than setting threshold value in the number for determining the pending data received
When, abnormal data alarm is sent to primary server.
It wherein, include the user identifier in the abnormal data alarm.
In step 203, in order to avoid the malicious attack due to user causes distributed network service system work paralysis
Paralysis determines a threshold value first for the auxiliary server of each of distributed network service system, and the threshold value is for sentencing
Break the auxiliary server whether the malicious attack by user.Pending data is sent in set time period for user
Number by comparing the number and sets the size of threshold value and then judges whether the auxiliary server is attacked by the malice of user
It hits.Such as: when the number is greater than setting threshold value, determine the malicious attack of the auxiliary server by user；When the number not
When greater than setting threshold value, determine the auxiliary server not yet by the malicious attack of user.
Once auxiliary server determines itself malicious attack by user, abnormal data is sent to primary server and is accused
It is alert, remind primary server in this way before malicious attack degree does not deteriorate, may be enabled to by the malicious attack of user
Distributed network service system is carried out prevention in advance and is prepared, and the safety of network service system is improved.
It should be noted that setting threshold value can be different for different auxiliary server, and it can also be identical, it does not do here
It limits.
Step 204: it is abnormal that the auxiliary server receives first comprising the user identifier that the primary server is sent
Data synchronization information.
Wherein, the first abnormal data synchronizing information is used to indicate the auxiliary server and connects to primary server transmission
Receive the number of the abnormal data sent by the corresponding user of the user identifier.
Step 205: the auxiliary server connects according to the first abnormal data synchronizing information, the transmission of Xiang Suoshu primary server
The number for the abnormal data that the corresponding user of the user identifier received sends.
In step 205, the auxiliary server receives described according to the first abnormal data synchronizing information, determination
The number for the abnormal data that the corresponding user of user identifier sends, and determining number is sent to primary server.
Optionally, if the time also occurred comprising abnormal data in the first abnormal data synchronizing information, in this way, also
Mean that primary server when sending the first abnormal data synchronizing information to auxiliary server, needs to inform auxiliary server exception data
The time of appearance, the time can be a period, be also possible to a time point, here without limitation.
The auxiliary server is when receiving the first abnormal data synchronizing information, according in the first abnormal data synchronizing information
The time that the abnormal data for including occurs counts the abnormal data received in the time range of abnormal data appearance
Number, and the number that statistics obtains is sent to primary server.
Step 206: the auxiliary server receives the abnormal data that the primary server is sent and intercepts instruction.
Wherein, the abnormal data intercepts instruction and is used to indicate the auxiliary server to the corresponding user of the user identifier
The abnormal data of transmission is intercepted.
Step 207: the auxiliary server is intercepted according to the abnormal data and is instructed, and intercepts the corresponding use of the user identifier
The abnormal data that family is sent.
Optionally, the auxiliary server is in the corresponding user of the user identifier transmitted and received to the primary server
After the number of the abnormal data sent, the method also includes:
Step 208: the auxiliary server receives the second abnormal data comprising the time cycle that the primary server is sent
Synchronizing information.
Wherein, the second abnormal data synchronizing information is used to indicate each and receives the second abnormal data synchronization
The number of the abnormal data received in the time cycle is sent to the primary server by the auxiliary server of information.
Step 209: the auxiliary server determines that the time cycle inscribed according to the second abnormal data synchronizing information
The number for the abnormal data that the corresponding user of the user identifier received sends, and the number of the abnormal data is sent out
Give the primary server.
Step 210: the auxiliary server receives the data comprising the user identifier that the primary server is sent and empties
Instruction.
Wherein, the data flush instructions be used to indicate receive the data flush instructions auxiliary server empty it is described
The record for the abnormal data number that the corresponding user of user identifier sends.
Step 211: the auxiliary server empties the corresponding user's hair of the user identifier according to the data flush instructions
The record for the abnormal data number sent.
Step 212: the auxiliary server receives the data processing comprising the user identifier that the primary server is sent
Instruction.
Wherein, the data processing instructions are used to indicate the auxiliary server for receiving the data processing instructions to the use
Family identifies the abnormal data that corresponding user sends and handles.
Step 213: the auxiliary server handles the corresponding user's hair of the user identifier according to the data processing instructions
The abnormal data sent.
It should be noted that after step 205, step 206 and step 207 belong to a kind of situation, step 208 to step
213 belong to another situation, both situations cannot exist simultaneously in a data handling procedure.
Fig. 3 provides a kind of flow diagram of data processing method for the embodiment of the present application.The method can be as follows
It is described.
Step 301: auxiliary server receives the pending data that user sends.
It wherein, include the user identifier of the user in the pending data.
Step 302: the auxiliary server determines whether the number of the pending data received is greater than setting thresholding
Value, if more than thening follow the steps 303；If being not more than, the pending data received is handled.
Step 303: the auxiliary server is greater than setting threshold value in the number for determining the pending data received
When, abnormal data alarm is sent to primary server.
Step 304: primary server receives the abnormal data alarm that at least one auxiliary server is sent.
It wherein, include the user identifier for sending the user of abnormal data in the abnormal data alarm.
Step 305: the primary server is sent to the auxiliary server within institute's range of management comprising the user identifier
First abnormal data synchronizing information.
Wherein, the first abnormal data synchronizing information is used to indicate the auxiliary server and connects to primary server transmission
Receive the number of the abnormal data sent by the corresponding user of the user identifier.
Step 306: it is abnormal that the auxiliary server receives first comprising the user identifier that the primary server is sent
Data synchronization information.
Step 307: the auxiliary server connects according to the first abnormal data synchronizing information, the transmission of Xiang Suoshu primary server
The number for the abnormal data that the corresponding user of the user identifier received sends.
Step 308: the primary server receives the number for the abnormal data that each described auxiliary server is sent.
Step 309: whether the sum of the number of the abnormal data that the primary server judgement receives is greater than setting threshold
Value, if more than thening follow the steps 310；Otherwise, step 313 is executed.
Step 310: the primary server is determining the sum of number of the abnormal data received greater than given threshold
When, the abnormal data comprising the user identifier, which is sent, to the auxiliary server intercepts instruction.
Wherein, the abnormal data intercepts instruction and is used to indicate the auxiliary server to the corresponding user of the user identifier
The abnormal data of transmission is intercepted.
Step 311: the auxiliary server receives the abnormal data that the primary server is sent and intercepts instruction.
Step 312: the auxiliary server is intercepted according to the abnormal data and is instructed, and intercepts the corresponding use of the user identifier
The abnormal data that family is sent.
Step 313: the primary server is determining the sum of number of the abnormal data received no more than setting threshold
When value, the second abnormal data synchronizing information comprising the time cycle is sent to the auxiliary server.
Wherein, the second abnormal data synchronizing information is used to indicate each and receives the second abnormal data synchronization
The number of the abnormal data received in the time cycle is sent to the primary server by the auxiliary server of information.
Step 314: the auxiliary server receives the second abnormal data comprising the time cycle that the primary server is sent
Synchronizing information.
Step 315: the auxiliary server determines that the time cycle inscribed according to the second abnormal data synchronizing information
The number for the abnormal data that the corresponding user of the user identifier received sends, and the number of the abnormal data is sent out
Give the primary server.
Step 316: the primary server judges to determine the exception received when reaching the time cycle again
Whether the sum of number of data is greater than setting threshold value, if more than thening follow the steps 310；Otherwise, 317 are executed.
Step 317: the primary server determines of the abnormal data received when reaching the time cycle
When the sum of number is not more than given threshold, data flush instructions are sent to the auxiliary server.
Wherein, the data flush instructions be used to indicate receive the data flush instructions auxiliary server empty it is described
The record for the abnormal data number that the corresponding user of user identifier sends.
Step 318: the auxiliary server receives the data comprising the user identifier that the primary server is sent and empties
Instruction.
Step 319: the auxiliary server empties the corresponding user's hair of the user identifier according to the data flush instructions
The record for the abnormal data number sent.
Step 320: the primary server sends the data processing instructions comprising the user identifier to the auxiliary server.
Wherein, the data processing instructions are used to indicate the auxiliary server for receiving the data processing instructions to the use
Family identifies the abnormal data that corresponding user sends and handles.
Step 321: the auxiliary server receives the data processing comprising the user identifier that the primary server is sent
Instruction.
Step 322: the auxiliary server handles the corresponding user's hair of the user identifier according to the data processing instructions
The abnormal data sent.
Fig. 4 is a kind of structural schematic diagram of data processing equipment provided by the embodiments of the present application, the data processing equipment
It include: receiving unit 41 and transmission unit 42, in which:
Receiving unit 41, the abnormal data alarm sent for receiving at least one auxiliary server, wherein the exception number
According to the user identifier of the user in alarm comprising sending abnormal data；
Transmission unit 42, it is different for sending first comprising the user identifier to the auxiliary server within institute's range of management
Regular data synchronizing information, wherein the first abnormal data synchronizing information is used to indicate the auxiliary server to the main service
Device transmits and receives the number to the abnormal data sent by the corresponding user of the user identifier；
The receiving unit 41 is also used to receive the number for the abnormal data that each described auxiliary server is sent；
The transmission unit 42 is also used to determining the sum of number of the abnormal data received greater than given threshold
When, the abnormal data comprising the user identifier is sent to the auxiliary server and intercepts instruction, wherein the abnormal data intercepts
Instruction is used to indicate the abnormal data that the auxiliary server sends the corresponding user of the user identifier and intercepts.
Optionally, the data processing equipment further include: processing unit 43, in which:
The processing unit 43 is specifically included for the number of the determining abnormal data received:
According to the number for receiving the abnormal data that each described auxiliary server is sent, calculate receive it is described different
The number of regular data and value.
Optionally, in abnormal data alarm and the abnormal data synchronizing information also comprising abnormal data occur when
Between；
The receiving unit 41 receives the number for the abnormal data that each described auxiliary server is sent, specific to wrap
It includes:
Receive the number for the abnormal data that each described auxiliary server is sent, wherein each described auxiliary service
The number for the abnormal data that device is sent is received in time range that the abnormal data occurs in the auxiliary server
The abnormal data counted；
The processing unit 43 determines the number of the abnormal data received, specifically includes:
According to the number for receiving the abnormal data that each described auxiliary server is sent, count receive it is described different
The number of regular data and value.
Optionally, the transmission unit 42 is also used to determining the sum of number of the abnormal data received less
When given threshold, the data flush instructions comprising the user identifier are sent to the auxiliary server, wherein the data are clear
Do-nothing instruction, which is used to indicate, to be received the auxiliary servers of the data flush instructions and empties the corresponding user of the user identifier and send
Abnormal data number record.
Specifically, the transmission unit 42 sends data flush instructions to the auxiliary server, specifically includes:
The second abnormal data synchronizing information comprising the time cycle is sent to the auxiliary server, wherein described second is different
Regular data synchronizing information is used to indicate the auxiliary server that each receives the second abnormal data synchronizing information when will be described
Between the number of the abnormal data that receives in the period be sent to primary server；
Determine the sum of number of the abnormal data received no more than given threshold when reaching the time cycle
When, data flush instructions are sent to the auxiliary server.
Optionally, the transmission unit 42 is also used to send the data comprising the user identifier to the auxiliary server
Process instruction, wherein the data processing instructions are used to indicate the auxiliary server for receiving the data processing instructions to described
The abnormal data that the corresponding user of user identifier sends is handled.
It should be noted that the data processing equipment provided in the embodiment of the present application can be realized by hardware mode,
It can be realized by software mode, specific implementation is here without limitation.
Fig. 5 is a kind of structural schematic diagram of data processing equipment provided by the embodiments of the present application.The data processing equipment
It include: receiving unit 51 and transmission unit 52, in which:
Receiving unit 51, for receiving the pending data of user's transmission, wherein comprising described in the pending data
The user identifier of user；
Transmission unit 52, when for being greater than setting threshold value in the number for determining the pending data received, to
Primary server sends abnormal data alarm, wherein includes the user identifier in the abnormal data alarm.
Optionally, the data processing equipment includes: processing unit 53, in which:
The receiving unit 51, it is different specifically for receiving first comprising the user identifier that the primary server is sent
Regular data synchronizing information, wherein the first abnormal data synchronizing information is used to indicate the auxiliary server to the main service
Device transmits and receives the number to the abnormal data sent by the corresponding user of the user identifier；
The processing unit 53, for according to the first abnormal data synchronizing information, the transmission of Xiang Suoshu primary server to be connect
The number for the abnormal data that the corresponding user of the user identifier received sends.
Optionally, the receiving unit 51 intercepts instruction specifically for receiving the abnormal data that the primary server is sent,
Wherein, the abnormal data intercept instruction be used to indicate the auxiliary server the corresponding user of the user identifier is sent it is different
Regular data is intercepted；
The processing unit 53 instructs for being intercepted according to the abnormal data, intercepts the corresponding use of the user identifier
The abnormal data that family is sent.
Optionally, the receiving unit 51, specifically for receive that the primary server sends comprising the time cycle the
Two abnormal data synchronizing informations, wherein the second abnormal data synchronizing information is used to indicate each and receives described second
The number of the abnormal data received in the time cycle is sent to institute by the auxiliary server of abnormal data synchronizing information
State primary server；
The processing unit 53, for determining that the time cycle inscribed according to the second abnormal data synchronizing information
The number for the abnormal data that the corresponding user of the user identifier received sends, and the number of the abnormal data is sent out
Give the primary server.
Optionally, the receiving unit 51 includes the user identifier specifically for receive the primary server transmission
Data flush instructions, wherein the data flush instructions are used to indicate the auxiliary server for receiving the data flush instructions
Empty the record for the abnormal data number that the corresponding user of the user identifier sends；
The processing unit 53, for emptying the corresponding user's hair of the user identifier according to the data flush instructions
The record for the abnormal data number sent.
Optionally, the receiving unit 51 includes the user identifier specifically for receive the primary server transmission
Data processing instructions, wherein the data processing instructions are used to indicate the auxiliary server for receiving the data processing instructions
The abnormal data sent to the corresponding user of the user identifier is handled；
The processor 53, for handling the corresponding user of the user identifier and sending according to the data processing instructions
Abnormal data.
It should be noted that the data processing equipment provided in the embodiment of the present application can be realized by hardware mode,
It can be realized by software mode, specific implementation is here without limitation.
It will be understood by those skilled in the art that embodiments herein can provide as method, apparatus (equipment) or computer
Program product.Therefore, in terms of the application can be used complete hardware embodiment, complete software embodiment or combine software and hardware
Embodiment form.Moreover, it wherein includes the meter of computer usable program code that the application, which can be used in one or more,
The computer journey implemented in calculation machine usable storage medium (including but not limited to magnetic disk storage, CD-ROM, optical memory etc.)
The form of sequence product.
The application is flow chart of the reference according to method, apparatus (equipment) and computer program product of the embodiment of the present application
And/or block diagram describes.It should be understood that each process in flowchart and/or the block diagram can be realized by computer program instructions
And/or the combination of the process and/or box in box and flowchart and/or the block diagram.It can provide these computer programs to refer to
Enable the processor of general purpose computer, special purpose computer, Embedded Processor or other programmable data processing devices to generate
One machine so that by the instruction that the processor of computer or other programmable data processing devices executes generate for realizing
The device for the function of being specified in one or more flows of the flowchart and/or one or more blocks of the block diagram.
These computer program instructions, which may also be stored in, is able to guide computer or other programmable data processing devices with spy
Determine in the computer-readable memory that mode works, so that it includes referring to that instruction stored in the computer readable memory, which generates,
Enable the manufacture of device, the command device realize in one box of one or more flows of the flowchart and/or block diagram or
The function of being specified in multiple boxes.
These computer program instructions also can be loaded onto a computer or other programmable data processing device, so that counting
Series of operation steps are executed on calculation machine or other programmable devices to generate computer implemented processing, thus in computer or
The instruction executed on other programmable devices is provided for realizing in one or more flows of the flowchart and/or block diagram one
The step of function of being specified in a box or multiple boxes.
Although the preferred embodiment of the application has been described, it is created once a person skilled in the art knows basic
Property concept, then additional changes and modifications may be made to these embodiments.So it includes excellent that the following claims are intended to be interpreted as
It selects embodiment and falls into all change and modification of the application range.
Obviously, those skilled in the art can carry out various modification and variations without departing from the model of the application to the application
It encloses.In this way, if these modifications and variations of the application belong within the scope of the claim of this application and its equivalent technologies, then
The application is also intended to include these modifications and variations.
Claims (12)
1. a kind of data processing method characterized by comprising
Primary server receives the abnormal data alarm that at least one auxiliary server is sent, wherein wraps in the abnormal data alarm
User identifier containing the user for sending abnormal data；
The primary server sends the first abnormal data comprising the user identifier to the auxiliary server within institute's range of management
Synchronizing information, wherein the first abnormal data synchronizing information is used to indicate the auxiliary server and sends to the primary server
Receive the number of the abnormal data sent by the corresponding user of the user identifier；
The primary server receives the number for the abnormal data that each described auxiliary server is sent；
The primary server is when determining that the sum of number of the abnormal data received is greater than given threshold, to the auxiliary clothes
Business device sends the abnormal data comprising the user identifier and intercepts instruction, wherein the abnormal data interception instruction is used to indicate
The abnormal data that the auxiliary server sends the corresponding user of the user identifier intercepts.
2. data processing method as described in claim 1, which is characterized in that the primary server determination receives described different
The number of regular data, comprising:
The primary server is received according to the number for receiving the abnormal data that each described auxiliary server is sent, calculating
The abnormal data number and value.
3. data processing method as described in claim 1, which is characterized in that the abnormal data alarm and first exception
The time also occurred comprising abnormal data in data synchronization information；
The primary server receives the number for the abnormal data that each described auxiliary server is sent, comprising:
The primary server receives the number for the abnormal data that each described auxiliary server is sent, wherein each institute
The number for stating the abnormal data that auxiliary server is sent is time range that the abnormal data occurs in the auxiliary server
What the abnormal data inside received was counted；
The primary server determines the number of the abnormal data received, comprising:
The primary server is received according to the number for receiving the abnormal data that each described auxiliary server is sent, statistics
The abnormal data number and value.
4. data processing method as described in any one of claims 1 to 3, which is characterized in that the method also includes:
The primary server is when determining the sum of number of the abnormal data for receiving no more than given threshold, to described auxiliary
Server sends the data flush instructions comprising the user identifier, wherein the data flush instructions, which are used to indicate, to be received
The auxiliary server of the data flush instructions empties the record for the abnormal data number that the corresponding user of the user identifier sends.
5. data processing method as claimed in claim 4, which is characterized in that the primary server is sent to the auxiliary server
Data flush instructions, comprising:
The primary server sends the second abnormal data synchronizing information comprising the time cycle to the auxiliary server, wherein institute
It states the second abnormal data synchronizing information and is used to indicate each auxiliary server for receiving the second abnormal data synchronizing information
The number of the abnormal data received in the time cycle is sent to the primary server；
The primary server determines that the sum of the number of the abnormal data received is not more than when reaching the time cycle
When given threshold, data flush instructions are sent to the auxiliary server.
6. data processing method as claimed in claim 5, which is characterized in that the method also includes:
The primary server sends the data processing instructions comprising the user identifier to the auxiliary server, wherein the number
The auxiliary server for receiving the data processing instructions is used to indicate according to process instruction to the user identifier corresponding user hair
The abnormal data sent is handled.
7. a kind of data processing method characterized by comprising
Auxiliary server receives the pending data that user sends, wherein includes the user of the user in the pending data
Mark；
The auxiliary server is when the number for determining the pending data received is greater than setting threshold value, to primary server
Send abnormal data alarm, wherein include the user identifier in the abnormal data alarm；
The auxiliary server receives the first abnormal data synchronizing information comprising the user identifier that the primary server is sent；
The auxiliary server is according to the first abnormal data synchronizing information, the use that Xiang Suoshu primary server transmits and receives
Family identifies the number for the abnormal data that corresponding user sends；
The auxiliary server receives the abnormal data that the primary server is sent and intercepts instruction；
The auxiliary server is intercepted according to the abnormal data and is instructed, and intercepts the exception that the corresponding user of the user identifier sends
Data.
8. data processing method as claimed in claim 7, which is characterized in that the method also includes:
The auxiliary server receives the second abnormal data synchronizing information comprising the time cycle that the primary server is sent,
In, the second abnormal data synchronizing information is used to indicate each auxiliary clothes for receiving the second abnormal data synchronizing information
The number of the abnormal data received in the time cycle is sent to the primary server by business device；
The auxiliary server determines the use received in the time cycle according to the second abnormal data synchronizing information
Family identifies the number for the abnormal data that corresponding user sends, and the number of the abnormal data is sent to the main clothes
Business device.
9. data processing method as claimed in claim 8, which is characterized in that the method also includes:
The auxiliary server receives the data flush instructions comprising the user identifier that the primary server is sent, wherein institute
It states data flush instructions and is used to indicate and receive the auxiliary servers of the data flush instructions to empty the user identifier corresponding
The record for the abnormal data number that user sends；
The auxiliary server empties the abnormal data that the corresponding user of the user identifier sends according to the data flush instructions
The record of number.
10. data processing method as claimed in claim 9, which is characterized in that the method also includes:
The auxiliary server receives the data processing instructions comprising the user identifier that the primary server is sent, wherein institute
It states data processing instructions and is used to indicate the auxiliary server for receiving the data processing instructions to the corresponding use of the user identifier
The abnormal data that family is sent is handled；
The auxiliary server handles the abnormal number that the corresponding user of the user identifier sends according to the data processing instructions
According to.
11. a kind of data processing equipment characterized by comprising
Receiving unit, the abnormal data alarm sent for receiving at least one auxiliary server, wherein the abnormal data alarm
In comprising send abnormal data user user identifier；
Transmission unit, for sending the first abnormal data comprising the user identifier to the auxiliary server within institute's range of management
Synchronizing information, wherein the first abnormal data synchronizing information is used to indicate the auxiliary server and transmits and receives to primary server
To the number of the abnormal data sent by the corresponding user of the user identifier；
The receiving unit is also used to receive the number for the abnormal data that each described auxiliary server is sent；
The transmission unit is also used to when determining that the sum of number of the abnormal data received is greater than given threshold, to
The auxiliary server sends the abnormal data comprising the user identifier and intercepts instruction, wherein the abnormal data intercepts instruction
The abnormal data that the auxiliary server sends the corresponding user of the user identifier is used to indicate to intercept.
12. a kind of data processing equipment characterized by comprising
Receiving unit, for receiving the pending data of user's transmission, wherein comprising the user in the pending data
User identifier；
Transmission unit, when for being greater than setting threshold value in the number for determining the pending data received, to main service
Device sends abnormal data alarm, wherein includes the user identifier in the abnormal data alarm；
The receiving unit, it is synchronous for receiving the first abnormal data comprising the user identifier that the primary server is sent
Information；
The transmission unit, for according to the first abnormal data synchronizing information, Xiang Suoshu primary server to be transmitted and received
The number for the abnormal data that the corresponding user of the user identifier sends；
The receiving unit intercepts instruction for receiving the abnormal data that the primary server is sent；
It is intercepted and is instructed according to the abnormal data, intercept the abnormal data that the corresponding user of the user identifier sends.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510603327.2A CN106549784B (en) | 2015-09-21 | 2015-09-21 | A kind of data processing method and equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510603327.2A CN106549784B (en) | 2015-09-21 | 2015-09-21 | A kind of data processing method and equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106549784A CN106549784A (en) | 2017-03-29 |
| CN106549784B true CN106549784B (en) | 2019-06-07 |
Family
ID=58364234
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510603327.2A Active CN106549784B (en) | 2015-09-21 | 2015-09-21 | A kind of data processing method and equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106549784B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111107522B (en) * | 2017-09-01 | 2022-02-11 | 珠海格力电器股份有限公司 | Security method and device, electric appliance, server and storage medium |
| CN109561045B (en) * | 2017-09-25 | 2021-12-14 | 北京京东尚科信息技术有限公司 | Data interception method and device, storage medium and electronic equipment |
| CN110008050B (en) * | 2019-04-11 | 2023-06-30 | 北京百度网讯科技有限公司 | Method and device for processing information |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101282366A (en) * | 2008-05-21 | 2008-10-08 | 北京中企开源信息技术有限公司 | Method and apparatus for processing data transmission in point-to-point network |
| CN101826991A (en) * | 2010-02-04 | 2010-09-08 | 蓝盾信息安全技术股份有限公司 | Method and system for identifying illegal data packet |
| US7894360B2 (en) * | 2006-12-25 | 2011-02-22 | Fujitsu Limited | Trouble-factor detecting device, trouble-factor detecting method, and computer product |
| CN104883364A (en) * | 2015-05-11 | 2015-09-02 | 广东小天才科技有限公司 | Method and device for judging abnormity of user access server |
-
2015
- 2015-09-21 CN CN201510603327.2A patent/CN106549784B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7894360B2 (en) * | 2006-12-25 | 2011-02-22 | Fujitsu Limited | Trouble-factor detecting device, trouble-factor detecting method, and computer product |
| CN101282366A (en) * | 2008-05-21 | 2008-10-08 | 北京中企开源信息技术有限公司 | Method and apparatus for processing data transmission in point-to-point network |
| CN101826991A (en) * | 2010-02-04 | 2010-09-08 | 蓝盾信息安全技术股份有限公司 | Method and system for identifying illegal data packet |
| CN104883364A (en) * | 2015-05-11 | 2015-09-02 | 广东小天才科技有限公司 | Method and device for judging abnormity of user access server |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106549784A (en) | 2017-03-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110611723B (en) | Scheduling method and device of service resources | |
| CN109787827B (en) | CDN network monitoring method and device | |
| CN103136255B (en) | The method and apparatus of information management | |
| CN104461683B (en) | A kind of method of calibration that virtual machine illegally configures, apparatus and system | |
| KR20180048655A (en) | Method and apparatus for updating verification information | |
| TW201804757A (en) | Network attack defense system and method | |
| JP6512725B2 (en) | Method, apparatus, and system for connecting a node to a network | |
| CN104717212B (en) | Protection method and system for cloud virtual network security | |
| CN106549784B (en) | A kind of data processing method and equipment | |
| CN110012076B (en) | Connection establishing method and device | |
| CN108028828A (en) | A kind of distributed denial of service ddos attack detection method and relevant device | |
| CN108521397B (en) | Method and system for accessing resource service | |
| CN107528712A (en) | The determination of access rights, the access method of the page and device | |
| CN115378700A (en) | Cross-network data secure exchange method, system, device and storage medium | |
| CN114710304A (en) | Privacy risk monitoring method and device, storage medium and terminal gateway equipment | |
| CN109218334A (en) | Data processing method, device, access control equipment, certificate server and system | |
| CN106815734A (en) | A kind of information transferring method and device | |
| Sattar et al. | Proactive and dynamic slice allocation in sliced 5g core networks | |
| CN110429982A (en) | Data transmission method and relevant apparatus | |
| CN104636103B (en) | A kind of keyboard data transmission method and device | |
| CN109005164A (en) | A kind of network system, equipment, network data exchange method and storage medium | |
| CN113067802A (en) | User identification method, device, equipment and computer readable storage medium | |
| CN107995199A (en) | The port speed constraint method and device of the network equipment | |
| CN107465669A (en) | The equipment safety partition method and device of a kind of multi-user | |
| CN105791036B (en) | A kind of AP access detection method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20200923 Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman, British Islands Patentee after: Innovative advanced technology Co.,Ltd. Address before: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman, British Islands Patentee before: Advanced innovation technology Co.,Ltd. Effective date of registration: 20200923 Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman, British Islands Patentee after: Advanced innovation technology Co.,Ltd. Address before: A four-storey 847 mailbox in Grand Cayman Capital Building, British Cayman Islands Patentee before: Alibaba Group Holding Ltd. |