CN114265666B - Network shooting range data acquisition system and method - Google Patents
Network shooting range data acquisition system and method Download PDFInfo
- Publication number
- CN114265666B CN114265666B CN202111571483.7A CN202111571483A CN114265666B CN 114265666 B CN114265666 B CN 114265666B CN 202111571483 A CN202111571483 A CN 202111571483A CN 114265666 B CN114265666 B CN 114265666B
- Authority
- CN
- China
- Prior art keywords
- acquisition
- data
- flow
- virtual machine
- network
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Abstract
The invention provides a network shooting range data acquisition system and a method thereof, wherein the method comprises the following steps: the data control module is used for formulating an acquisition strategy of the flow data of the network target range, analyzing the acquisition strategy, determining a physical computing node where the flow acquisition virtual machine is located, and issuing the acquisition strategy to an acquisition soft probe on the physical node; each acquisition soft probe is arranged on a physical computing node, is connected with a virtual network card of a virtual machine, receives an acquisition strategy, acquires the flow of the virtual network card of the virtual machine according to the acquisition strategy, and transmits the acquired flow data to a data analysis node through an independent host network card; and the data analysis node module is deployed on the physical computing node, receives and collects the flow data sent by the soft probe, and conducts outward transmission.
Description
Technical Field
The invention relates to the technical field of network security, in particular to a network shooting range data acquisition system and a network shooting range data acquisition method.
Background
Network shooting ranges have become an essential network space security core infrastructure for network space security research, learning, testing, verification, drilling and the like in various countries. The network shooting range construction is highly valued by all countries in the world and is used as an important means for construction support of safety capacity.
Data collection and analysis are the core capabilities of a network range platform. Network architecture, a service system, access behaviors and the like in a shooting range are mainly realized by a virtualization technology, and a plurality of problems are brought to network flow acquisition after virtualization, the original applicable static mirror image port acquisition and operation and maintenance mode cannot be suitable for the change of a virtualization environment, and how to carry out high-speed and flexible data dynamic acquisition is also a current technical difficulty.
The conventional general network data acquisition method of network shooting range manufacturers can be seen in the following steps: 202010769634.9, a system and method for collecting network target range flow, which separates the virtual network card of the virtual machine into: network communication network card and special flow network card. The special flow network card is responsible for mirroring the flow of the network communication network card and is connected to a physical switch through an independent physical network card, the physical switch starts/sets a mirroring function, all collected flows are mirrored to a specified flow collection virtual machine network card, and the collection of the virtual machine flow data in the network shooting range is realized through the mode.
However, the problems of the general network data acquisition method include the following aspects:
1. at least two times of mirroring is realized on the network flow of each virtual machine, wherein the mirroring is performed on the virtual switch of the virtual machine for the first time and on the physical switch for the second time, so that the configuration management complexity is increased and the performance overhead of the computing node is increased.
2. The size of the mirrored flow is determined by the performance of the virtual switch, which has a certain influence on the stability of the virtual switch, and if the number of virtual machines of the computing node is large, once the internal flow is large, the stability of the virtual switch is influenced, which directly causes the damage of normal services.
3. In a KVM (Keyboard Video Mouse) environment, a virtual management control node needs to issue a mirror image flow table in a unified manner, and management and maintenance are complex.
Disclosure of Invention
The present invention is directed to a network range data acquisition system and method that overcomes, or at least partially solves, the above-mentioned problems.
In order to achieve the purpose, the technical scheme of the invention is realized as follows:
one aspect of the present invention provides a network range data acquisition system, comprising: the data control module is used for formulating a flow data acquisition strategy of a network target range, analyzing the acquisition strategy, determining a physical computing node where a flow acquisition virtual machine is located, and issuing the acquisition strategy to an acquisition soft probe on the physical node; each acquisition soft probe is arranged on the physical computing node, is connected with a virtual network card of a virtual machine, receives the acquisition strategy, acquires the flow of the virtual network card of the virtual machine according to the acquisition strategy, and transmits the acquired flow data to a data analysis node through an independent host network card; and the data analysis node is deployed on the physical computing node, receives the flow data sent by the acquisition soft probe and conducts outward transmission.
Wherein the acquisition strategy comprises: the method comprises the following steps of collecting basic information of a network target range, virtual machine information, data collection point information and a flow rule, wherein the virtual machine information comprises a virtual machine ID number and an IP address, the data collection point information comprises a data collection point ID number, and the flow rule comprises the following steps: a specified network card, a specified IP address, a specified port, and/or a time period.
Wherein the data control module is connected with the network range through an API (application programming interface) interface.
And the acquisition soft probe establishes a VxLAN tunnel with the data analysis node through the independent host network card.
And the data analysis node carries out the outward transmission of the flow data through a VxLAN tunnel.
The invention also provides a network target range data acquisition method, which comprises the following steps: the data control module formulates a collection strategy of the flow data of the network target range, analyzes the collection strategy, determines a physical computing node where a flow collection virtual machine is located, and issues the collection strategy to a collection soft probe on the physical node; the acquisition soft probe arranged on the physical computing node receives the acquisition strategy, acquires the virtual network card flow of the virtual machine according to the acquisition strategy, and transmits the acquired flow data to the data analysis node through an independent host network card; and the data analysis node receives the traffic data sent by the acquisition soft probe and conducts outward transmission.
Wherein the acquisition strategy comprises: the method comprises the following steps of collecting basic information of a network target range, virtual machine information, data collection point information and a flow rule, wherein the virtual machine information comprises a virtual machine ID number and an IP address, the data collection point information comprises a data collection point ID number, and the flow rule comprises the following steps: a specified network card, a specified IP address, a specified port, and/or a time period.
Wherein the data control module is connected with the network range through an API (application programming interface) interface.
And the acquisition soft probe establishes a VxLAN tunnel with the data analysis node through the independent host network card.
And the data analysis node carries out the outward transmission of the flow data through a VxLAN tunnel.
Therefore, according to the network shooting range data acquisition system and method provided by the invention, the independent acquisition soft probe is deployed on the physical computing node, and the system works on the computing node in a process mode, directly acquires the network card flow of the virtual machine, and independently and directly transmits the network card flow to the data analysis node. Meanwhile, the acquisition soft probe can be automatically adjusted according to an acquisition strategy, has a flow optimization function, can realize efficient data acquisition, effectively supports the core function realization of a network target range, and solves the problems of poor flexibility and automatic management and control of mirror image acquisition.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on the drawings without creative efforts.
Fig. 1 is a schematic deployment diagram of a network range data acquisition system according to an embodiment of the present invention;
FIG. 2 is a schematic structural diagram of a network target range data acquisition system according to an embodiment of the present invention;
fig. 3 is a flowchart of a network range data acquisition method according to an embodiment of the present invention.
Detailed Description
Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.
Fig. 1 shows a schematic deployment diagram of a network range data acquisition system provided in an embodiment of the present invention, the network range data acquisition system provided in an embodiment of the present invention is disposed in a network range platform, fig. 2 shows a schematic structural diagram of the network range data acquisition system provided in an embodiment of the present invention, and in combination with fig. 1 and fig. 2, the network range data acquisition system provided in an embodiment of the present invention includes:
the data control module is used for formulating an acquisition strategy of the flow data of the network target range, analyzing the acquisition strategy, determining a physical computing node where the flow acquisition virtual machine is located, and issuing the acquisition strategy to an acquisition soft probe on the physical node;
each acquisition soft probe is arranged on a physical computing node, is connected with a virtual network card of a virtual machine, receives an acquisition strategy, acquires the flow of the virtual network card of the virtual machine according to the acquisition strategy, and transmits the acquired flow data to a data analysis node through an independent host network card;
and the data analysis node is deployed on the physical computing node, receives and collects the flow data sent by the soft probe, and conducts outward transmission.
Specifically, the physical computing node refers to a virtualized entity device, and the computing, the storage, and the virtualization construction of the network can be realized through technologies such as KVM.
And running the virtual machine on the physical computing node, and realizing internal network communication through the virtual switch. The acquisition soft probe runs on a physical computing node in a process mode, can monitor the resources and the performance of the virtual machine, and can also implement a strategy of deploying the network card flow of the virtual machine. The method has no intrusion to the virtual machine, the service and the virtual switch, can directly carry out flow acquisition on the network card, does not need to pass through the virtual switch, can implement a flow acquisition strategy at the same time, and realizes fine acquisition and drainage control. The acquisition soft probe is a user-mode process running on the physical computing node, so that the resource occupation is low and the acquisition soft probe has complete flow preprocessing capacity. When the deployment is carried out, the existing system does not need to be modified, the dependence and the influence on the production system are reduced to the minimum, and in a large-scale virtual network environment, the characteristics of zero dependence on deployment, zero strategy interference, low resource consumption and the like are met by the acquisition soft probe.
As an optional implementation manner of the embodiment of the present invention, the data control module is connected to the network target range through an API interface. Specifically, the data control module and the network shooting range platform are in seamless butt joint through an API (application programming interface) interface to obtain various resources of the network shooting range platform, including information of areas, users, subnets, virtual machines and the like, a flow acquisition strategy can keep consistent with real-time running conditions, when a rule is formulated for a certain virtual machine, a plurality of information of the physical node, a virtual network card, an IP (Internet protocol) address and the like of the virtual machine can be obtained in real time, and a soft acquisition probe of the physical node keeps communication to obtain related information.
As an optional implementation manner of the embodiment of the present invention, the data control module may formulate a collection policy of the traffic data of the network target range, where the collection policy includes: the method comprises the following steps of collecting basic information of a network target range, virtual machine information, data collection point information and a flow rule, wherein the virtual machine information comprises a virtual machine ID number and an IP address, the data collection point information comprises a data collection point ID number, and the flow rule comprises the following steps: a specified network card, a specified IP address, a specified port, and/or a time period. Specifically, the collection policy formulated by the data control module includes network shooting range basic information, collection virtual machine information (ID number, IP address, etc.), data collection point information (ID number), and traffic rules (specific network card, specific IP address, specific port, or time period, etc.). And finding a physical computing node where the flow acquisition virtual machine is located by analyzing the acquisition strategy, sending the specification to an acquisition soft probe on the physical node, starting a starting program to monitor a network card of the specified virtual machine after the acquisition soft probe is analyzed, executing according to the flow acquisition strategy, and sending a data packet executed in real time to a data analysis node through an independent host network card (a special flow analysis network card (physical network card)).
As an optional implementation manner of the embodiment of the present invention, the data control module may automatically learn resources such as hosts, projects, virtual machines, networks, and the like in the network target site and a mapping relationship between networks and resources, and monitor network connections and flows among various resources. The flow collection strategy and the collection soft probe can be managed in a unified way. The change condition of the virtual machine can be automatically sensed, and when the virtual machine is online, offline and migrated, the acquisition strategy is automatically matched and identified.
The data control module realizes fine acquisition and drainage control by formulating a data acquisition rule. The collection rules can be collected based on multiple angles such as IP, IP sections, virtual machines, subnets, ports and the like, in addition, resource groups can be defined to collect, and the subsequent differentiation distribution can be expanded and derived.
As an optional implementation of the embodiment of the present invention, the acquisition soft probe establishes a VxLAN tunnel with the data analysis node through an independent host network card. Specifically, the VxLAN tunnel is deployed on each physical computing node and is responsible for receiving an acquisition strategy issued by the data control module, optimizing functions of virtual machine network card flow acquisition, flow distribution as required, copying, slicing, duplicate removal and the like are achieved, a VxLAN tunnel is established through the independent host network card and the data analysis node, and flow is distributed to the data analysis node or other network equipment.
As an optional implementation manner of the embodiment of the present invention, the data analysis node performs an external transmission of the traffic data through the VxLAN tunnel. Specifically, the data analysis nodes are deployed on the independent physical computing nodes and can be deployed in a distributed mode, the data analysis nodes are used for receiving the traffic data sent by the acquisition soft probes, a VxLAN tunnel is automatically established between the data analysis nodes and the acquisition soft probes, and meanwhile the acquired traffic can be forwarded to other traffic acquisition platforms or target analysis tools through the VxLAN tunnel.
Therefore, by the network shooting range data acquisition system provided by the embodiment of the invention, the data is acquired by acquiring the flow of the virtual network card instead of the port mirror image of the virtual switch, so that the operations such as multiple network card flow mirror images are avoided, the configuration management complexity is reduced, and the resource consumption is reduced; the network card flow can be finely acquired and the flow guide control can be realized, and the function which cannot be realized by the common virtual switch mirror image can be realized; the centralized management system can realize centralized management and automation and realize high-efficiency management under a large-scale network target range.
Fig. 3 shows a flowchart of a network target range data acquisition method provided in an embodiment of the present invention, where the network target range data acquisition method applies the above system, and the following only briefly describes the flow of the network target range data acquisition method, and please refer to the related description in the network target range data acquisition system for other things, referring to fig. 3, the network target range data acquisition method provided in an embodiment of the present invention includes:
s1, a data control module formulates a collection strategy of flow data of a network target range, analyzes the collection strategy, determines a physical computing node where a flow collection virtual machine is located, and issues the collection strategy to a collection soft probe on the physical node;
s2, a collection soft probe arranged on the physical computing node receives a collection strategy, collects the flow of a virtual network card of the virtual machine according to the collection strategy, and sends the collected flow data to a data analysis node through an independent host network card;
and S3, the data analysis node receives and collects the flow data sent by the soft probe and conducts outward transmission.
As an optional implementation manner of the embodiment of the present invention, the acquisition policy includes: the method comprises the following steps of collecting basic information of a network target range, collecting virtual machine information, data collecting point information and a flow rule, wherein the collected virtual machine information comprises a virtual machine ID number and an IP address, the data collecting point information comprises a data collecting point ID number, and the flow rule comprises the following steps: a specified network card, a specified IP address, a specified port, and/or a time period.
As an optional implementation manner of the embodiment of the present invention, the data control module is connected to the network target range through an API interface.
As an optional implementation of the embodiment of the present invention, the acquisition soft probe establishes a VxLAN tunnel with the data analysis node through an independent host network card.
As an optional implementation manner of the embodiment of the present invention, the data analysis node performs an external transmission of the traffic data through the VxLAN tunnel.
Therefore, by the network shooting range data acquisition method provided by the embodiment of the invention, the data is acquired by acquiring the flow of the virtual network card instead of the port mirror image of the virtual switch, so that the operations such as multiple network card flow mirror images are avoided, the configuration management complexity is reduced, and the resource consumption is reduced; the network card flow can be finely acquired and the flow guide control can be realized, and the function which cannot be realized by the common virtual switch mirror image can be realized; the centralized management system can realize centralized management and automation and realize high-efficiency management under a large-scale network target range.
The above are merely examples of the present application and are not intended to limit the present application. Various modifications and changes may occur to those skilled in the art. Any modification, equivalent replacement, improvement or the like made within the spirit and principle of the present application shall be included in the scope of the claims of the present application.
Claims (10)
1. A network range data acquisition system, comprising:
the data control module is used for formulating an acquisition strategy of the flow data of the network target range, analyzing the acquisition strategy, determining a physical computing node where a flow acquisition virtual machine is located, and issuing the acquisition strategy to an acquisition soft probe on the physical node;
each acquisition soft probe is arranged on the physical computing node, is connected with a virtual network card of a virtual machine, receives the acquisition strategy, acquires the flow of the virtual network card of the virtual machine according to the acquisition strategy, and transmits the acquired flow data to a data analysis node through an independent host network card;
the data analysis node is deployed on the physical computing node, receives the traffic data sent by the acquisition soft probe and conducts outward transmission;
the physical computing nodes refer to virtualized entity equipment, and computing, storage and network virtualization construction are realized through a KVM (keyboard, video and mouse) technology;
the acquisition soft probe runs on the physical computing node in a process mode, monitors the resources and the performance of the virtual machine, implements deployment to implement a network card flow strategy of the virtual machine, implements a flow acquisition strategy and realizes fine acquisition and drainage control.
2. The system of claim 1, wherein the collection strategy comprises:
the method comprises the following steps of collecting basic information of a network target range, virtual machine information, data collection point information and a flow rule, wherein the virtual machine information comprises a virtual machine ID number and an IP address, the data collection point information comprises a data collection point ID number, and the flow rule comprises the following steps: a specified network card, a specified IP address, a specified port, and/or a time period.
3. The system of claim 1, wherein the data control module interfaces with the network range through an API interface.
4. The system of claim 1, wherein the acquisition soft probe establishes a VxLAN tunnel with the data analysis node through the independent host network card.
5. The system of claim 1, wherein the data analytics node exports the traffic data via a VxLAN tunnel.
6. A network range data acquisition method is characterized by comprising the following steps:
the data control module formulates an acquisition strategy of the flow data of the network target range, analyzes the acquisition strategy, determines a physical computing node where a flow acquisition virtual machine is located, and issues the acquisition strategy to an acquisition soft probe on the physical node;
the acquisition soft probe arranged on the physical computing node receives the acquisition strategy, acquires the virtual network card flow of the virtual machine according to the acquisition strategy and sends the acquired flow data to the data analysis node through an independent host network card;
the data analysis node receives the traffic data sent by the acquisition soft probe and conducts outward transmission;
the physical computing node refers to virtualized entity equipment, and computing, storage and network virtualization construction are realized through a KVM (keyboard, video and mouse) technology;
the acquisition soft probe runs on the physical computing node in a process mode, monitors the resources and the performance of the virtual machine, implements deployment on a network card flow strategy of the virtual machine, implements a flow acquisition strategy, and realizes fine acquisition and drainage control.
7. The method of claim 6, wherein the acquisition strategy comprises:
the method comprises the following steps of collecting basic information of a network target range, collecting virtual machine information, data collection point information and a flow rule, wherein the collected virtual machine information comprises a virtual machine ID number and an IP address, the data collection point information comprises a data collection point ID number, and the flow rule comprises the following steps: a specified network card, a specified IP address, a specified port, and/or a time period.
8. The method of claim 6, wherein the data control module is coupled to the network range via an API interface.
9. The method of claim 6, wherein the acquisition soft probe establishes a VxLAN tunnel with the data analysis node through the independent host network card.
10. The method of claim 6, wherein the data analysis node exports the traffic data through a VxLAN tunnel.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111571483.7A CN114265666B (en) | 2021-12-21 | 2021-12-21 | Network shooting range data acquisition system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111571483.7A CN114265666B (en) | 2021-12-21 | 2021-12-21 | Network shooting range data acquisition system and method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114265666A CN114265666A (en) | 2022-04-01 |
| CN114265666B true CN114265666B (en) | 2022-12-02 |
Family
ID=80828232
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111571483.7A Active CN114265666B (en) | 2021-12-21 | 2021-12-21 | Network shooting range data acquisition system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114265666B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114785718B (en) * | 2022-04-07 | 2023-06-30 | 南京赛宁信息技术有限公司 | Network target range flow acquisition and analysis system and method |
| CN115348126A (en) * | 2022-07-26 | 2022-11-15 | 北京永信至诚科技股份有限公司 | Network target range entity equipment access method, device and implementation system |
| CN116074223B (en) * | 2023-03-27 | 2023-06-27 | 南京赛宁信息技术有限公司 | Network target range probe downloading and collecting reporting method and system |
| CN117294533B (en) * | 2023-11-24 | 2024-04-02 | 华信咨询设计研究院有限公司 | Network traffic collection method and system based on cloud environment |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6493868B1 (en) * | 1998-11-02 | 2002-12-10 | Texas Instruments Incorporated | Integrated development tool |
| CN101854359A (en) * | 2010-05-19 | 2010-10-06 | 南京联创科技集团股份有限公司 | Access control method based on virtualized calculation |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108092852A (en) * | 2017-12-26 | 2018-05-29 | 北京科来数据分析有限公司 | A kind of OpenStack flow collection methods based on Transmission Control Protocol |
| CN108111384A (en) * | 2017-12-26 | 2018-06-01 | 北京科来数据分析有限公司 | A kind of OpenStack flow collection methods based on tunnel protocol |
| CN111371640B (en) * | 2020-02-24 | 2023-03-03 | 深圳供电局有限公司 | SDN controller-based traffic collection analysis method and system |
| CN111651241B (en) * | 2020-08-04 | 2020-11-13 | 北京赛宁网安科技有限公司 | Flow acquisition system and method for network target range |
-
2021
- 2021-12-21 CN CN202111571483.7A patent/CN114265666B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6493868B1 (en) * | 1998-11-02 | 2002-12-10 | Texas Instruments Incorporated | Integrated development tool |
| CN101854359A (en) * | 2010-05-19 | 2010-10-06 | 南京联创科技集团股份有限公司 | Access control method based on virtualized calculation |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114265666A (en) | 2022-04-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN114265666B (en) | Network shooting range data acquisition system and method | |
| US20180270127A1 (en) | Interactive hierarchical network chord diagram for application dependency mapping | |
| US9021065B2 (en) | Automated topology formation in dynamic distributed environments | |
| CN109144813B (en) | System and method for monitoring server node fault of cloud computing system | |
| JP6740911B2 (en) | Port switching program, port switching method, and information processing device | |
| CN110572439B (en) | Cloud monitoring method based on metadata service and virtual forwarding network bridge | |
| CN111371640B (en) | SDN controller-based traffic collection analysis method and system | |
| US8387013B2 (en) | Method, apparatus, and computer product for managing operation | |
| CN111049747B (en) | Intelligent virtual network path planning method for large-scale container cluster | |
| CN100394418C (en) | Dynamic online multi-parameter optimization system and method for autonomic computing systems | |
| CN103297262A (en) | Management server and management method | |
| CN102316043B (en) | Port virtualization method, switch and communication system | |
| CN108512678B (en) | Method and system for accessing physical equipment to virtual network based on overlay technology | |
| CN109639488B (en) | Multi-extranet shunt acceleration method and system | |
| CN101651561B (en) | Network topology analytical method and system based on rule engine | |
| CN108845865A (en) | A kind of monitoring service dispositions method, system and storage medium | |
| CN102929613A (en) | Adjusting and optimizing device and method for operating system | |
| CN105245386A (en) | Method and system for automatic positioning of server connection relation | |
| EP3961985A1 (en) | Intent-based distributed alarm service | |
| CN102571416B (en) | Positioning method and device for virtual machine | |
| CN103326902A (en) | Configurable monitoring system and monitoring method for distributed type mainframe performance testing data | |
| CN113542092A (en) | Openstack-based automatic drainage method | |
| US8170415B2 (en) | Physical wiring control device, physical wiring control method, and computer product | |
| CN101404594A (en) | Hot backup performance test method and apparatus, communication equipment | |
| CN111600929A (en) | Transmission line detection method, route strategy generation method and proxy server |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CP01 | Change in the name or title of a patent holder |
Address after: 100094 103, building 6, yard 9, FengHao East Road, Haidian District, Beijing Patentee after: Yongxin Zhicheng Technology Group Co.,Ltd. Address before: 100094 103, building 6, yard 9, FengHao East Road, Haidian District, Beijing Patentee before: BEIJING YONGXIN ZHICHENG TECHNOLOGY CO.,LTD. |
|
| CP01 | Change in the name or title of a patent holder |