CN114785754A - Anti-channel conflict method and related device thereof - Google Patents

Abstract

The embodiment of the application discloses a goods fleeing prevention method and a related device thereof, which are used for determining that goods fleeing occurs to network edge equipment. The method of the embodiment of the application comprises the following steps: the method comprises the steps that the network edge device obtains an IP address of a domain name server, the domain name server is a domain name server corresponding to a region where the network edge device is located, the network edge device determines region information of the region where the network edge device is located according to the IP address of the domain name server and the corresponding relation between the IP address and the region information of the region where the network edge device is located, and if the region information is inconsistent with preset region information of the network edge device, the network edge device executes goods fleeing prevention operation.

Description

A kind of anti-smuggling method and related device

technical field

The embodiments of the present application relate to the field of communications, and in particular, to an anti-smuggling method and a related device.

Background technique

Network edge devices refer to devices that provide users with an entry point to the core network, such as optical network terminals (ONTs), home routers, and switches used in homes. Network edge devices are sold in multiple regions. , due to the different sales strategies in different regions, the sales prices of network edge devices in different regions are also inconsistent. There may be a situation where a third party buys network edge devices from low-price regions and illegally sells them to high-price regions, which leads to manufacturers’ concerns about network edge devices. The management of the price of edge devices is out of control.

In the prior art, a location information module can be attached to the network edge device. After the network edge device is sold and put into use, the location information module can determine the region where the network edge device is located. If the region is inconsistent with the preset sales region set at the factory, it means that the network edge device has been illegally sold by a third party.

However, the solution in the prior art must rely on an external location information module to identify the current location of the network edge device, and if the location information module is indoors, the location information module will not work normally.

SUMMARY OF THE INVENTION

The embodiments of the present application provide an anti-smuggling method and a related device, which are used to determine whether there is a smuggling situation in a network edge device. Embodiments of the present application also provide corresponding apparatuses, systems, computer-readable storage media, computer program products, and the like.

A first aspect of the embodiments of the present application provides a method for preventing smuggling:

The setting of the domain name server address is usually planned by the operator, and the operator will assign one or more different domain name server addresses according to different regions. The network edge device will obtain the Internet Protocol of the domain name server corresponding to its current region. After obtaining the IP address of the domain name server (internet protocol, IP) address, the network edge device can determine the network edge according to the IP address of the domain name server and the correspondence between the IP address and the area information of the area where the network edge device is located The area information of the area where the device is located, specifically, the corresponding relationship between the IP address and the area information of the area where the network edge device is located may include an IP address set, where the IP address set includes the IP address of the domain name server that has been put into work, and the IP address Each IP address in the address set has a corresponding relationship with each area information set in the area information set, and the area information of the area where the network edge device is located is included in the area information set. After determining the area information of the area where the network edge device is located, if the network edge device determines that the area information of the network edge device is inconsistent with the preset area information of the network edge device, the network edge device will perform anti-smuggling operations, and the network edge device will The preset area information is set in the network edge device before the network edge device leaves the factory.

In the above first aspect, the IP addresses in the IP address set and the area information in the area information set are not necessarily in a one-to-one correspondence, and it is also possible that one area information corresponds to two or more IP addresses, so the network edge device obtains The IP address of the domain name server corresponding to the current area is not necessarily the IP address of a single domain name server, but may also be obtained by obtaining the IP addresses of multiple domain name servers in the area where the network edge device is currently located. The comparison with the IP address set determines the area information of the area where the network edge device is currently located.

In the embodiment of the present application, even if the network edge device is located indoors, the network edge device may be determined according to the IP address of the domain name server corresponding to the area where the network edge device is located and the correspondence between the IP address and the area information of the area where the network edge device is located The information of the area where the network edge device is currently located, and when the area information is inconsistent with the preset area information, the anti-smuggling operation is performed, which ensures the interests of the manufacturer and reduces the cost of anti-smuggling.

In a possible implementation, the network edge device may first initiate a point-to-point protocol over ethernet (PPPOE) dial-up or a dynamic host configuration protocol (DHCP) dial-up to the router, and then, The network edge device can receive the packet from the router, and the packet will carry the IP address of the domain name server corresponding to the area where the network edge device is located.

In a possible implementation, the network edge device may obtain a domain name server request message according to a well-known transmission control protocol (TCP) port number or a well-known user datagram protocol (UDP) port number, and the domain name server The request packet is first sent by the device attached to the network edge device to the network edge device, and then the domain name server request packet is sent by the network edge device to the domain name server corresponding to the area where the network edge device is located. After obtaining the domain name server request packet After that, the network edge device can parse the domain name server message to obtain the IP address of the domain name server.

In a possible implementation manner, before obtaining the IP address of the domain name server, the network edge device may also obtain the preset area information locally. The preset area information has been encrypted and signed. After obtaining the preset area After the information, the network edge device can decrypt and verify the preset area information.

In the embodiment of the present application, the network edge device can decrypt and verify the preset area information, which ensures the security and reliability of the preset area information.

In a possible implementation manner, the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be obtained locally by the network edge device.

In the embodiment of the present application, the network edge device can obtain the corresponding relationship locally, thereby improving the efficiency of anti-smuggling.

In a possible implementation manner, the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be obtained by the network edge device from a remote server.

In the embodiment of the present application, the network edge device obtains the corresponding relationship from the remote server, which improves the flexibility of the solution.

In a possible implementation, the anti-smuggling operation may be to stop working or issue a warning.

A second aspect of the embodiments of the present application provides a network edge device:

The network edge device includes an acquisition unit, a determination unit, and an execution unit, and the acquisition unit can be used to acquire the IP address of a domain name server, which is a domain name server corresponding to the current location of the network edge device.

The determining unit can be used to determine the area information of the network edge device according to the IP address of the domain name server, and the corresponding relationship between the IP address and the area information of the area where the network edge device is currently located. Specifically, the IP address is related to the network edge device. The corresponding relationship of the area information of the area where the device is located may include an IP address set, wherein the IP address set will include the IP address of the domain name server that has been put into work, and each IP address in the IP address set and each of the area information sets. There is a corresponding relationship between the area information sets, and the area information of the area where the network edge device is located is included in the area information set.

The execution unit may be configured to perform an anti-smuggling operation when the area information of the area where the network edge device is currently located is inconsistent with the preset area information, the preset area information is set in the network edge device before the network edge device leaves the factory.

In the second aspect above, there is not necessarily a one-to-one correspondence between the IP addresses in the IP address set and the area information in the area information set, and it is also possible that one area information corresponds to two or more IP addresses, so the network edge device obtains the information. The IP address of the domain name server corresponding to the current area is not necessarily the IP address of a single domain name server, but may also be obtained by obtaining the IP addresses of multiple domain name servers in the area where the network edge device is currently located. The comparison with the IP address set determines the area information of the area where the network edge device is currently located.

In the embodiment of the present application, even if the network edge device is located indoors, the network edge device may be determined according to the IP address of the domain name server corresponding to the area where the network edge device is located and the correspondence between the IP address and the area information of the area where the network edge device is located The information of the area where the network edge device is currently located, and when the area information is inconsistent with the preset area information, the anti-smuggling operation is performed, which ensures the interests of the manufacturer and reduces the cost of anti-smuggling.

In a possible implementation, the acquisition unit of the network edge device is specifically used to initiate PPPOE dial-up or DHCP dial-up to the router. After the dial-up is initiated, the acquisition unit can also receive a message from the router, and the message from the router will Carry the IP address of the above domain name server.

In a possible implementation manner, the obtaining unit of the network edge device is specifically configured to obtain a domain name server request message according to a well-known TCP port number or a well-known UDP port number, and the domain name server request message is first sent by a device attached to the network edge device The domain name server request message is sent to the network edge device, and then the domain name server request message is sent by the network edge device to the domain name server corresponding to the area where the network edge device is located. After obtaining the domain name server request message, the obtaining unit can parse the domain name server message. to obtain the IP address of the domain name server.

In a possible implementation manner, the acquisition unit of the network edge device may also be used to acquire preset area information, the preset area information has undergone encryption and signature processing, and after acquiring the preset area information, the acquisition unit may also Decrypt and verify the preset area information.

In the embodiment of the present application, the network edge device can decrypt and verify the preset area information, which ensures the security and reliability of the preset area information.

In a possible implementation manner, the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be obtained locally by the network edge device.

In the embodiment of the present application, the network edge device can obtain the corresponding relationship locally, thereby improving the efficiency of anti-smuggling.

In a possible implementation manner, the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be obtained by the network edge device from a remote server.

In the embodiment of the present application, the network edge device obtains the corresponding relationship from the remote server, which improves the flexibility of the solution.

A third aspect of the embodiments of the present application provides a network edge device, including a processor, a memory, an input and output device, and a bus, where the processor, the memory, and the input and output device are connected to the bus, and the processor is configured to execute the aforementioned first aspect. method.

A fourth aspect of the embodiments of the present application provides a computer-readable storage medium, where a program is stored in the computer-readable storage medium, and when the computer executes the program, the process in the method of the foregoing first aspect is performed.

A fifth aspect of the embodiments of the present application provides a computer program product, where the computer program product includes computer-executable instructions, where the computer-executable instructions are stored in a computer-readable storage medium; at least one processor of a network edge device may be readable from a computer The storage medium reads the computer-executable instructions, and at least one processor executes the computer-executable instructions to cause the device to implement the method of the first aspect.

A sixth aspect of the present application provides a chip system, where the chip system includes a processor for supporting a network edge device to implement the functions involved in the foregoing first aspect. In a possible design, the chip system may further include a memory for storing necessary program instructions and data of the terminal device. The chip system may be composed of chips, or may include chips and other discrete devices.

Description of drawings

Figure 1a is a schematic structural diagram of a network edge device;

FIG. 1b is an example of an application scenario of the anti-smuggling method in the embodiment of the application;

Fig. 2 is a schematic flow chart of the method for preventing goods smuggling in the embodiment of the application;

Fig. 3 is another schematic flow chart of the anti-smuggling method in the embodiment of the application;

Fig. 4 is another schematic flow chart of the anti-smuggling method in the embodiment of the application;

FIG. 5 is a schematic structural diagram of a network edge device in an embodiment of the application;

FIG. 6 is another schematic structural diagram of a network edge device in an embodiment of the present application.

Detailed ways

The embodiments of the present application will be described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Those of ordinary skill in the art know that, with the development of technology and the emergence of new scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

The terms "first", "second" and the like in the description and claims of the present application and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It is to be understood that data so used may be interchanged under appropriate circumstances so that the embodiments described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the terms "comprising" and "having" and any variations thereof, are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those expressly listed Rather, those steps or units may include other steps or units not expressly listed or inherent to these processes, methods, products or devices.

The embodiments of the present application provide an anti-smuggling method and a related device, which are used to determine whether a network edge device has a smuggling situation. Embodiments of the present application also provide corresponding apparatuses, systems, computer-readable storage media, computer program products, and the like. Each of them will be described in detail below.

A network edge device is a device that provides an entry point to a core network for a user, such as an optical network terminal (ONT), a home router, and a switch used in a home.

Network edge devices are generally sent to the sales area agreed on in customer orders after they leave the factory. However, since multiple sales areas may have different sales prices for the same network edge device, there may be a third party purchasing the network edge from regions with low prices. Equipment, and then sell network edge equipment in high-priced areas. This situation is called smuggling, and smuggling will cause manufacturers to lose control over the price management and sales strategy of network edge equipment, resulting in economic losses. .

In the prior art, please refer to Fig. 1a, a dedicated positioning module can be set on the network edge device to locate the network edge device, so as to identify the area information of the area where the network edge device is located, the positioning module can be Beidou The positioning module, or the global positioning system (GPS) positioning module, the positioning module can receive satellite signals through the antenna to determine its own area information, and then transmit the area information to the network edge device. After the regional information is obtained, it can be judged whether the regional information is consistent with the preset sales area when leaving the factory. If it is inconsistent, it means that there is smuggling behavior. For example, the current regional information obtained by the network edge device through the positioning module is region A, but the network If the preset sales area of the edge device is region B, it means that there is smuggling behavior. However, in the solution of the prior art, additionally adding a positioning module will increase the cost of the network edge device, and if the network edge device is indoors, the function of the positioning module will be affected, resulting in failure to work normally.

The solutions of the prior art have been introduced above, and the solutions of the embodiments of the present application are described below. Please refer to FIG. 1b. FIG. 1b is an example of an application scenario of the embodiments of the present application. As shown in FIG. 1b, the optical network terminal 2 is The area planned to be sold when leaving the factory is area A. If a third party sells the optical network terminal 2 to area B for sale, for example, the planned sales area of the optical network terminal 2 when it leaves the factory is Shanghai. If smuggling goods are sold in Shenzhen, the optical network terminal will perform corresponding anti-smuggling operations, so that the optical network terminal cannot work normally in area B, thereby protecting the rights of the manufacturer.

Referring to Fig. 2, a process of the anti-smuggling method according to the embodiment of the present application is described below:

201. The network edge device obtains an internet protocol (internet protocol, IP) address of the domain name server.

At the beginning, the network edge device can obtain the IP address of the domain name server in a corresponding way, and the domain name server is the domain name server in the area where the network edge device is located. For example, if the network edge device is deployed in Shenzhen, the network edge device will obtain the IP address. The IP address of the domain name server also deployed in Shenzhen. It should be noted that the IP address may be the IP address of one domain name server or the IP addresses of multiple domain name servers. For example, if multiple domain name servers are deployed in Shenzhen , the network edge device will obtain the IP addresses corresponding to the multiple domain name servers. If only one domain name server is deployed in Shenzhen, the network edge device will only obtain the IP address of this one domain name server.

202. The network edge device determines the area information of the network edge device according to the IP address of the domain name server and the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located.

After obtaining the IP address of the domain name server, the network edge device can determine the area information of the network edge device according to the IP address of the domain name server and the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located. Specifically, The area information of the network edge device is the information of the area where the network edge device is currently located, such as Shenzhen or Shanghai. The operator will assign a specific domain name server address to a specific area. For example, configure the domain name server address for the domain name server in area A. A, configure domain name server address B for the domain name server in area B, so that the network edge device can determine the network edge device according to the IP address of the domain name server and the corresponding relationship between the IP address of the domain name server and the area information of the area where the network edge device Regional information.

203. The network edge device determines that the area information of the network edge device is inconsistent with the preset area information, and performs an anti-smuggling operation.

After the network edge device determines the area information of the network edge device, the network edge device can compare the area information of the network edge device with the preset area information. It should be noted that the preset area information is set before the network edge device leaves the factory. In the network edge device, if the region information of the network edge device is inconsistent with the preset region information, the network edge device can perform anti-smuggling operations. For example, the network edge device determines that the region information of the network edge device is Shanghai, and the network edge device If the preset area information of the device is Shenzhen, the network edge device performs an anti-smuggling operation. Specifically, the anti-smuggling operation may be to stop working or issue a warning.

In the embodiment of the present application, after acquiring the IP address of the domain name server, the network edge device determines the area information of the network edge device according to the IP address of the domain name server and the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located, And if the area information of the area where the network edge device is located is inconsistent with the preset area information, the anti-smuggling operation is performed. Due to the above method, the anti-smuggling method can be normally performed even if the network edge device is indoors.

A more general description of the anti-smuggling method according to the embodiment of the present application has been made above. Please refer to FIG. 3 , and a detailed flow of the anti-smuggling method according to the embodiment of the present application is described below:

301. The network edge device acquires preset area information.

Before leaving the factory, the preset area information will be written in the network edge device. The preset area information is the area where the manufacturer plans to sell the network edge device. For example, the preset area information can be Shanghai or Shenzhen. There is no specific limitation here. After the network edge device leaves the factory and is put into use, it can obtain the preset area information locally. It should be noted that the preset area information can also be encrypted and signed. Preset area information , the network edge device can decrypt and verify the preset area information after acquiring the preset area information.

302. The network edge device dials a point-to-point protocol (point to point protocol over ethernet, PPPOE) or a dynamic host configuration protocol (dynamic host configuration protocol, DHCP) dial on the Ethernet of the router.

Layer 3 devices work at the network layer and can determine the forwarding address of packets based on different IP addresses. If the network edge device is put into use as a Layer 3 device, the network edge device can initiate PPPOE dial-up or DHCP dial-up to the router first.

303. The network edge device receives the packet from the router.

After the network edge device initiates PPPOE dial-up or DHCP dial-up to the router, it can receive a packet from the router. The packet will carry the IP address of the domain name server in the area where the network edge device is currently located. It should be noted that the IP address It may be the IP address of one domain name server, or it may be the IP address of multiple domain name servers. For example, if multiple domain name servers are deployed in Shenzhen, the network edge device can obtain the corresponding IP addresses of the multiple domain name servers through different packets. IP address. If only one domain name server is deployed in Shenzhen, the network edge device will only obtain the IP address of this domain name server.

304. The network edge device determines the area information of the network edge device according to the IP address of the domain name server and the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located.

After obtaining the IP address of the domain name server, the network edge device can determine the area information of the network edge device according to the IP address of the domain name server and the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located. Specifically, The area information of the network edge device is the information of the area where the network edge device is currently located, such as Shenzhen or Shanghai. The operator will assign a specific domain name server address to a specific area. For example, configure the domain name server address for the domain name server in area A. A. Configure the domain name server address B for the domain name server in the B area. The corresponding relationship between the IP address of the domain name server and the area information of the area where the network edge device is located may specifically include an IP address set, where the IP address set will include those that have been put into work. The IP address of the domain name server, each IP address in the IP address set has a corresponding relationship with each zone information in the zone information set, for example, please refer to Table 1:

Table 1 IP address set

Internet Protocol Address Collection Regional information collection Domain Name Server Internet Protocol Address A Beijing Domain Name Server Internet Protocol Address B Shanghai Domain Name Server Internet Protocol Address C Shenzhen

The IP address set includes domain name server IP address A, domain name server IP address B, and domain name server IP address C. Due to the configuration of the operator, domain name server IP address A can correspond to Beijing, domain name server IP address B can correspond to Shanghai, and domain name server IP address Address C may correspond to Shenzhen. Therefore, after obtaining the IP address of the domain name server, the network edge device can compare the IP address of the domain name server with the IP address set to determine the area information of the network edge device.

It should be noted that the corresponding relationship between the IP address of the domain name server and the area information of the area where the network edge device is located may be written in the network edge device before the network edge device leaves the factory, or it may also be after the network edge device is put into use. , which is downloaded and obtained by the network edge device from the remote server, which is not specifically limited here.

305. The network edge device determines that the area information of the network edge device is inconsistent with the preset area information, and performs an anti-smuggling operation.

After the network edge device determines the area information of the network edge device, the network edge device can compare the area information of the network edge device with the preset area information. It should be noted that the preset area information is set before the network edge device leaves the factory. In the network edge device, if the region information of the network edge device is inconsistent with the preset region information, the network edge device can perform anti-smuggling operations. For example, the network edge device determines that the region information of the network edge device is Shanghai, and the network edge device If the preset area information of the device is Shenzhen, the network edge device performs an anti-smuggling operation. Specifically, the anti-smuggling operation may be to stop working or issue a warning.

In the embodiment of the present application, even if the network edge device is indoors, the network edge device can obtain the IP address of the domain name server through the packet from the router, and can obtain the IP address of the domain name server through the IP address of the domain name server and the IP address of the domain name server. The corresponding relationship between the area information of the area at the location determines the area information of the network edge device, and then according to the comparison between the area information of the network edge device and the preset area information, it is determined whether there is a smuggling behavior, and if so, the anti-smuggling operation is performed to ensure that the interests of the manufacturer.

A process of the anti-smuggling method according to the embodiment of the present application has been introduced above, please refer to FIG. 4 , and another process of the anti-smuggling method is described in detail below:

401. The network edge device acquires preset area information.

Before leaving the factory, the preset area information will be written in the network edge device. The preset area information is the area where the manufacturer plans to sell the network edge device. For example, the preset area information can be Shanghai or Shenzhen. There is no specific limitation here. After the network edge device leaves the factory and is put into use, it can obtain the preset area information locally. It should be noted that the preset area information can also be encrypted and signed. Preset area information , the network edge device can decrypt and verify the preset area information after acquiring the preset area information.

402. The network edge device obtains a domain name server request message according to a well-known transmission control protocol (transmission control protocol, TCP) port number or a well-known user datagram protocol (user datagram protocol, UDP) port number.

The Layer 2 device belongs to the data link layer device and can identify the MAC address information in the packet, forward the packet according to the MAC address information, and record the MAC address information and its corresponding port number. When the device receives the packet, the Layer 2 device will first read the source MAC address in the packet, then read the destination MAC address in the packet, and look up the corresponding port number in the address table. port number, the packet will be forwarded to this port number. In the specific implementation, if the network edge device is put into use as a Layer 2 device, the network edge device will forward the domain name server request message of the device attached to the network edge device to the domain name server. Therefore, the network edge device can use the well-known TCP port number. Or use the UDP port number as the access control list to obtain the domain name server request message sent by the user to the domain name server. Specifically, the port number can be the well-known TCP port number 53 or the well-known UDP port number 53.

403. The network edge device obtains the IP address of the domain name server according to the domain name server request message.

After obtaining the domain name server request packet, the network edge device can parse the domain name server request packet to obtain the destination IP address in the domain name server request packet, that is, the IP address of the domain name server. In actual implementation, The network edge device can also save the obtained IP addresses of multiple domain name servers, so as to perform subsequent comparison with the IP address set. It should be noted that the IP address may be the IP address of a domain name server, or it may be It is the IP address of multiple domain name servers. For example, if multiple domain name servers are deployed in Shenzhen, the network edge device will obtain the IP addresses corresponding to the multiple domain name servers through different domain name server request packets. If only one domain name server is deployed in Shenzhen If there is a domain name server, the network edge device will only obtain the IP address of this domain name server.

404. The network edge device determines the area information of the network edge device according to the IP address of the domain name server and the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located.

After obtaining the IP address of the domain name server, the network edge device can determine the area information of the network edge device according to the IP address of the domain name server and the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located. Specifically, The area information of the network edge device is the information of the area where the network edge device is currently located, such as Shenzhen or Shanghai. The operator will assign a specific domain name server address to a specific area. For example, configure the domain name server address for the domain name server in area A. A. Configure the domain name server address B for the domain name server in the B area. The corresponding relationship between the IP address of the domain name server and the area information of the area where the network edge device is located may specifically include an IP address set, where the IP address set will include those that have been put into work. The IP address of the domain name server. Each IP address in the IP address set has a corresponding relationship with each area information in the area information set. For example, please refer to Table 1. As shown in Table 1, the IP address set includes the domain name server. IP address A, domain name server IP address B, and domain name server IP address C, and due to the configuration of the operator, domain name server IP address A can correspond to Beijing, domain name server IP address B can correspond to Shanghai, and domain name server IP address C can correspond to Shenzhen. Therefore, after acquiring the IP address of the domain name server, the network edge device can compare the IP address of the domain name server with the IP address set, so as to determine the area information of the network edge device.

It should be noted that the corresponding relationship between the IP address of the domain name server and the area information of the area where the network edge device is located may be written in the network edge device before the network edge device leaves the factory, or it may also be after the network edge device is put into use. , which is downloaded and obtained by the network edge device from the remote server, which is not specifically limited here.

405. The network edge device determines that the area information of the network edge device is inconsistent with the preset area information, and performs an anti-smuggling operation.

After the network edge device determines the area information of the network edge device, the network edge device can compare the area information of the network edge device with the preset area information. It should be noted that the preset area information is set before the network edge device leaves the factory. In the network edge device, if the region information of the network edge device is inconsistent with the preset region information, the network edge device can perform anti-smuggling operations. For example, the network edge device determines that the region information of the network edge device is Shanghai, and the network edge device If the preset area information of the device is Shenzhen, the network edge device performs an anti-smuggling operation. Specifically, the anti-smuggling operation may be to stop working or issue a warning.

In the embodiment of the present application, even if the network device is indoors, the network edge device can obtain the IP address of the domain name server according to the obtained domain name server request message, and can obtain the IP address of the domain name server through the IP address of the domain name server and the IP address of the domain name server. The corresponding relationship between the area information of the area where the edge device is located determines the area information of the network edge device, and then determines whether there is a smuggling behavior according to the comparison between the area information of the network edge device and the preset area information, and if so, executes an anti-smuggling operation. , thus ensuring the interests of the manufacturer.

The anti-smuggling method in the embodiment of the present application has been described above, and the network edge device in the embodiment of the present application is described below:

Referring to FIG. 5 , the network edge device 500 in this embodiment of the present application includes an acquisition unit 501 , a determination unit 502 , and an execution unit 503 .

The obtaining unit 501 is configured to obtain an IP address of a domain name server, where the domain name server is a domain name server corresponding to an area where the network edge device is located.

The determining unit 502 is configured to determine the area information of the area where the network edge device is located according to the IP address of the domain name server and the corresponding relationship between the IP address and the area information of the area where the network edge device is located.

The execution unit 503 is configured to execute an anti-smuggling operation if the area information is inconsistent with the preset area information of the network edge device, and the preset area information is set on the network edge device before the network edge device leaves the factory.

In the embodiment of the present application, after acquiring the IP address of the domain name server, the network edge device determines the area information of the network edge device according to the IP address of the domain name server and the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located, And if the area information of the area where the network edge device is located is inconsistent with the preset area information, the anti-smuggling operation is performed. Due to the above method, the anti-smuggling method can be normally performed even if the network edge device is indoors.

Based on the network edge device 500 shown in FIG. 5 above,

The obtaining unit 501 is specifically configured to initiate PPPOE dial-up or DHCP dial-up to the router.

The obtaining unit 501 is further configured to receive a packet from the router, where the packet carries the IP address of the domain name server.

or,

Based on the network edge device 500 shown in FIG. 5 above,

The obtaining unit 501 is specifically configured to obtain a domain name server request message according to a well-known TCP port number or a well-known UDP port number. After the domain name server request message is sent by a device attached to the network edge device to the network edge device, the network edge device sends the domain name server request message. server sent.

The obtaining unit 501 is further configured to obtain the IP address of the domain name server according to the domain name server request message.

Based on the network edge device 500 shown in FIG. 5 above,

The obtaining unit 501 is further configured to obtain preset area information, and the preset area information is encrypted and signed.

The obtaining unit 501 is further configured to decrypt and verify the preset area information.

In the embodiment of the present application, the network edge device can decrypt and verify the preset area information, which ensures the security and reliability of the preset area information.

Based on the network edge device 500 shown in FIG. 5 above,

The correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located is obtained by the network edge device 500 locally.

In the embodiment of the present application, the network edge device can obtain the corresponding relationship locally, thereby improving the efficiency of anti-smuggling.

or,

Based on the network edge device 500 shown in FIG. 5 , the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located is obtained by the network edge device 500 from a remote server.

In the embodiment of the present application, the network edge device obtains the corresponding relationship from the remote server, which improves the flexibility of the solution.

FIG. 6 is a schematic structural diagram of a network edge device provided by an embodiment of the present application. The network edge device 600 may include one or more central processing units (central processing units, CPU) 601 and a memory 605, where the memory 605 stores one or more applications or data.

Among them, the memory 605 may be volatile storage or persistent storage. A program stored in memory 605 may include one or more modules, each of which may include a series of instructions to operate on the server. Furthermore, the central processing unit 601 may be configured to communicate with the memory 605 to execute a series of instruction operations in the memory 605 on the network edge device 600 .

The network edge device 600 may also include one or more power supplies 602, one or more wired or wireless network interfaces 603, one or more input and output interfaces 604, and/or, one or more operating systems, such as Windows Server™, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM, etc.

The central processing unit 601 may perform the operations of the network edge device in the foregoing embodiments shown in FIG. 2 to FIG. 4 , and details are not repeated here.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system, device and unit described above can refer to the corresponding process in the foregoing method embodiments, which is not repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, apparatus and method may be implemented in other manners. For example, the apparatus embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not implemented. On the other hand, the shown or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection of devices or units, and may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution in this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically alone, or two or more units may be integrated into one unit. The above-mentioned integrated units may be implemented in the form of hardware, or may be implemented in the form of software functional units.

The integrated unit, if implemented in the form of a software functional unit and sold or used as an independent product, may be stored in a computer-readable storage medium. Based on this understanding, the technical solutions of the present application can be embodied in the form of software products in essence, or the parts that contribute to the prior art, or all or part of the technical solutions, and the computer software products are stored in a storage medium , including several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: U disk, removable hard disk, read-only memory (ROM, read-only memory), random access memory (RAM, random access memory), magnetic disk or optical disk and other media that can store program codes.

Claims (15)

1. A method of preventing tampering, comprising:

the method comprises the steps that network edge equipment obtains an Internet Protocol (IP) address of a domain name server, wherein the domain name server is a domain name server corresponding to an area where the network edge equipment is located;

the network edge device determines the area information of the area where the network edge device is located according to the IP address of the domain name server and the corresponding relation between the IP address and the area information of the area where the network edge device is located;

and if the area information is inconsistent with the preset area information of the network edge equipment, the network edge equipment executes anti-channel conflict operation, wherein the preset area information is set in the network edge equipment before the network edge equipment leaves a factory.

2. The method of claim 1, wherein the network edge device obtaining the IP address of the domain name server comprises:

the network edge equipment initiates point-to-point protocol PPPOE dialing or dynamic host configuration protocol DHCP dialing on the Ethernet to the router;

and the network edge equipment receives a message from a router, wherein the message carries the IP address of the domain name server.

3. The method of claim 1, wherein the network edge device obtaining the IP address of the domain name server comprises:

the network edge device acquires a domain name server request message according to a known Transmission Control Protocol (TCP) port number or a known User Datagram Protocol (UDP) port number, and the domain name server request message is sent to the domain name server by the network edge device after being sent to the network edge device by a down-hanging device of the network edge device;

and the network edge equipment acquires the IP address of the domain name server according to the domain name server request message.

4. The method according to any one of claims 1 to 3, wherein before the network edge device obtains the IP address of the domain name server, the method further comprises:

the network edge equipment acquires the preset area information from the local, and the preset area information is encrypted and signed;

and the network edge equipment decrypts and verifies the preset area information.

5. The method of any of claims 1 to 3, wherein the correspondence between the IP address and the area information of the area where the network edge device is located is obtained locally by the network edge device.

6. The method of any of claims 1 to 3, wherein the correspondence between the IP address and the area information of the area where the network edge device is located is obtained by the network edge device from a remote server.

7. The method of any one of claims 1 to 3, wherein the tamper-proof operation comprises stopping work or issuing a warning.

8. A network edge device, comprising:

an obtaining unit, configured to obtain an internet protocol IP address of a domain name server, where the domain name server is a domain name server corresponding to an area where the network edge device is located;

a determining unit, configured to determine, according to the IP address of the domain name server and a correspondence between the IP address and area information of an area where the network edge device is located, area information of the area where the network edge device is located;

and the execution unit is used for executing the anti-channel conflict operation if the area information is inconsistent with the preset area information of the network edge equipment, wherein the preset area information is set in the network edge equipment before the network edge equipment leaves the factory.

9. The network edge device of claim 8,

the acquiring unit is specifically configured to initiate a point-to-point protocol over ethernet (PPPOE) dialing or a Dynamic Host Configuration Protocol (DHCP) dialing to the router;

the acquiring unit is further configured to receive a packet from a router, where the packet carries the IP address of the domain name server.

10. The network edge device of claim 8,

the acquiring unit is specifically configured to acquire a domain name server request packet according to a known Transport Control Protocol (TCP) port number or a known User Datagram (UDP) protocol port number, where the domain name server request packet is sent to the network edge device by a drop device of the network edge device and then sent to the domain name server by the network edge device;

the obtaining unit is further configured to obtain the IP address of the domain name server according to the domain name server request packet.

11. The network edge device of any of claims 8 to 10,

the acquisition unit is further configured to acquire the preset area information, and the preset area information is subjected to encryption and signature processing;

the obtaining unit is further configured to decrypt and verify the preset region information.

12. The network edge device of any of claims 8 to 10, wherein the correspondence between the IP address and the zone information of the zone where the network edge device is located is obtained locally by the network edge device.

13. The network edge device of any of claims 8 to 10, wherein the correspondence between the IP address and the zone information of the zone where the network edge device is located is obtained by the network edge device from a remote server.

14. A network edge device, the network edge device comprising:

a processor, a memory, an input-output device, and a bus;

the processor, the memory and the input and output equipment are connected with the bus;

the processor is configured to perform the method of any one of claims 1 to 7.

15. A computer-readable storage medium, characterized in that a program is stored in the computer-readable storage medium, which, when executed by the computer, performs the method according to any one of claims 1 to 7.

Images