CN114785754A - Anti-channel conflict method and related device thereof - Google Patents
Anti-channel conflict method and related device thereof Download PDFInfo
- Publication number
- CN114785754A CN114785754A CN202110075438.6A CN202110075438A CN114785754A CN 114785754 A CN114785754 A CN 114785754A CN 202110075438 A CN202110075438 A CN 202110075438A CN 114785754 A CN114785754 A CN 114785754A
- Authority
- CN
- China
- Prior art keywords
- network edge
- edge device
- domain name
- name server
- address
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 44
- 238000012545 processing Methods 0.000 claims description 7
- 230000005540 biological transmission Effects 0.000 claims description 3
- 230000002265 prevention Effects 0.000 abstract description 10
- 230000003287 optical effect Effects 0.000 description 9
- 230000008569 process Effects 0.000 description 5
- 230000008901 benefit Effects 0.000 description 4
- 238000010586 diagram Methods 0.000 description 4
- 230000006399 behavior Effects 0.000 description 3
- 238000004891 communication Methods 0.000 description 3
- 238000004590 computer program Methods 0.000 description 3
- 230000008878 coupling Effects 0.000 description 3
- 238000010168 coupling process Methods 0.000 description 3
- 238000005859 coupling reaction Methods 0.000 description 3
- 230000006870 function Effects 0.000 description 2
- 238000012795 verification Methods 0.000 description 2
- 230000002159 abnormal effect Effects 0.000 description 1
- 230000002776 aggregation Effects 0.000 description 1
- 238000004220 aggregation Methods 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 239000003814 drug Substances 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 230000002085 persistent effect Effects 0.000 description 1
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiment of the application discloses a goods fleeing prevention method and a related device thereof, which are used for determining that goods fleeing occurs to network edge equipment. The method of the embodiment of the application comprises the following steps: the method comprises the steps that the network edge device obtains an IP address of a domain name server, the domain name server is a domain name server corresponding to a region where the network edge device is located, the network edge device determines region information of the region where the network edge device is located according to the IP address of the domain name server and the corresponding relation between the IP address and the region information of the region where the network edge device is located, and if the region information is inconsistent with preset region information of the network edge device, the network edge device executes goods fleeing prevention operation.
Description
Technical Field
The embodiment of the application relates to the field of communication, in particular to a goods fleeing prevention method and a related device thereof.
Background
The network edge device is a device that provides an entry point to a core network for a user, for example, an Optical Network Terminal (ONT), a home router, a switch, and the like used in a home, and the network edge device may be sold to multiple regions, and since different sales strategies exist in each region, the sales prices of the network edge device in each region are not consistent, and a third party may purchase the network edge device from a low-price region and illegally sell the network edge device to a high-price region, thereby causing a manufacturer to manage the price of the network edge device out of control.
In the prior art, a location information module may be externally connected to a network edge device, and after the network edge device is sold and put into use, the location information module may determine an area where the network edge device is located, and if the area where the network edge device is located is not consistent with a preset sales area set when the network edge device leaves a factory, it indicates that the network edge device is illegally sold by a third party.
However, the prior art solution must rely on the external location information module to identify the current location of the network edge device, and if the location information module is located indoors, the location information module will not work properly.
Disclosure of Invention
The embodiment of the application provides a channel conflict prevention method and a related device thereof, which are used for determining whether channel conflict exists in network edge equipment. The embodiment of the application also provides a corresponding device, a corresponding system, a corresponding computer readable storage medium, a corresponding computer program product and the like.
The first aspect of the embodiment of the application provides a method for preventing channel conflict:
the setting of the address of the domain name server is usually planned by an operator, and the operator may allocate one or more different domain name server addresses according to different regions, where after acquiring the IP address of the domain name server, the network edge device may determine the region information of the region where the network edge device is located according to the IP address of the domain name server and the corresponding relationship between the IP address and the region information of the region where the network edge device is located, specifically, the corresponding relationship between the IP address and the region information of the region where the network edge device is located may include an IP address set, where the IP address set includes the IP address of the domain name server that has already been put into operation, and each IP address in the IP address set has a corresponding relationship with each region information set in the region information set, the area information of the area where the network edge device is located is included in the area information set. After determining the area information of the area where the network edge device is located, if the network edge device determines that the area information of the network edge device is inconsistent with the preset area information of the network edge device, the network edge device executes a channel conflict prevention operation, and the preset area information of the network edge device is set in the network edge device before the network edge device leaves a factory.
In the first aspect, the IP addresses in the IP address set do not necessarily correspond to the area information in the area information set one to one, and it is also possible that one area information corresponds to two or more IP addresses, so that the obtaining, by the network edge device, the IP address of the domain name server corresponding to the area where the network edge device is currently located is not necessarily the IP address of only a single domain name server, and it is also possible that the obtaining is the IP addresses of multiple domain name servers of the area where the network edge device is currently located, and the area information of the area where the network edge device is currently located is determined by comparing the multiple IP addresses with the IP address set.
In the embodiment of the application, even if the network edge equipment is indoors, the network edge equipment can determine the current area information of the network edge equipment according to the IP address of the domain name server corresponding to the area where the network edge equipment is located and the corresponding relation between the IP address and the area information of the area where the network edge equipment is located, and when the area information is inconsistent with the preset area information, the goods fleeing prevention operation is executed, so that the benefit of a manufacturer is ensured, and the goods fleeing prevention cost is reduced.
In a possible implementation, a network edge device may initiate point to point protocol over ethernet (PPPOE) dialing or Dynamic Host Configuration Protocol (DHCP) dialing to a router, and then receive a packet from the router, where the packet may carry an IP address of a domain name server corresponding to an area where the network edge device is located.
In one possible implementation, the network edge device may obtain a domain name server request packet according to a known Transmission Control Protocol (TCP) port number or a known User Datagram Protocol (UDP) port number, where the domain name server request packet is sent to the network edge device by a drop device of the network edge device, and then the domain name server request packet is sent to a domain name server corresponding to a region where the network edge device is located by the network edge device, and after obtaining the domain name server request packet, the network edge device may analyze the domain name server packet, so as to obtain an IP address of the domain name server.
In a possible implementation manner, before acquiring the IP address of the domain name server, the network edge device may also acquire the preset region information from the local, where the preset region information is encrypted and signed, and after acquiring the preset region information, the network edge device may decrypt and verify the preset region information.
In the embodiment of the application, the network edge device can decrypt and verify the preset area information, so that the safety and reliability of the preset area information are ensured.
In a possible implementation manner, the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be obtained locally by the network edge device.
In the embodiment of the application, the network edge equipment can obtain the corresponding relation locally, so that the efficiency of preventing the channel conflict is improved.
In a possible implementation manner, the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be obtained from a remote server by the network edge device.
In the embodiment of the application, the network edge device acquires the corresponding relation from the remote server, so that the flexibility of the scheme is improved.
In one possible implementation, the tamper-proof operation may be a stop-work or warning.
A second aspect of the embodiments of the present application provides a network edge device:
the network edge device comprises an acquisition unit, a determination unit and an execution unit, wherein the acquisition unit can be used for acquiring an IP address of a domain name server, and the domain name server is a domain name server corresponding to the current position of the network edge device.
The determining unit may be configured to determine the area information of the network edge device according to the IP address of the domain name server and a correspondence between the IP address and the area information of the area where the network edge device is currently located, specifically, the correspondence between the IP address and the area information of the area where the network edge device is located may include an IP address set, where the IP address set includes IP addresses of domain name servers that have already worked, a correspondence exists between each IP address in the IP address set and each area information set in the area information set, and the area information of the area where the network edge device is located is included in the area information set.
The execution unit may be configured to execute the anti-channel conflict operation when the area information of the area where the network edge device is currently located is inconsistent with preset area information, where the preset area information is set in the network edge device before the network edge device leaves a factory.
In the second aspect, the IP addresses in the IP address set and the area information in the area information set are not necessarily in a one-to-one correspondence, and it is also possible that one area information corresponds to two or more IP addresses, so that the network edge device does not necessarily obtain the IP addresses of the domain name servers corresponding to the area where the network edge device is currently located, but also obtains the IP addresses of multiple domain name servers of the area where the network edge device is currently located, and determines the area information of the area where the network edge device is currently located by comparing the multiple IP addresses with the IP address set.
In the embodiment of the application, even if the network edge equipment is indoors, the network edge equipment can determine the current area information of the network edge equipment according to the IP address of the domain name server corresponding to the area where the network edge equipment is located and the corresponding relation between the IP address and the area information of the area where the network edge equipment is located, and when the area information is inconsistent with the preset area information, the anti-channel conflict operation is executed, so that the benefit of a manufacturer is ensured, and the anti-channel conflict cost is reduced.
In a possible implementation, the obtaining unit of the network edge device is specifically configured to initiate PPPOE dialing or DHCP dialing to the router, and after the dialing is initiated, the obtaining unit may further receive a packet from the router, where the packet of the router may carry the IP address of the domain name server.
In a possible implementation manner, the obtaining unit of the network edge device is specifically configured to obtain a domain name server request packet according to a well-known TCP port number or a well-known UDP port number, where the domain name server request packet is sent to the network edge device by a drop device of the network edge device, and then the domain name server request packet is sent to a domain name server corresponding to a region where the network edge device is located by the network edge device, and after obtaining the domain name server request packet, the obtaining unit may analyze the domain name server packet, so as to obtain an IP address of the domain name server.
In a possible implementation manner, the obtaining unit of the network edge device may be further configured to obtain preset area information, where the preset area information is subjected to encryption and signature processing, and after the preset area information is obtained, the obtaining unit may further perform decryption and verification processing on the preset area information.
In the embodiment of the application, the network edge device can decrypt and verify the preset area information, so that the safety and reliability of the preset area information are ensured.
In a possible implementation manner, the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be obtained locally by the network edge device.
In the embodiment of the application, the network edge equipment can obtain the corresponding relation locally, so that the efficiency of preventing the channel conflict is improved.
In a possible implementation manner, the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be obtained from a remote server by the network edge device.
In the embodiment of the application, the network edge device acquires the corresponding relation from the remote server, so that the flexibility of the scheme is improved.
A third aspect of the embodiments of the present application provides a network edge device, including a processor, a memory, an input/output device, and a bus, where the processor, the memory, and the input/output device are connected to the bus, and the processor is configured to execute the method according to the first aspect.
A fourth aspect of embodiments of the present application provides a computer-readable storage medium, which stores a program that, when executed by a computer, performs the procedures in the method of the first aspect.
A fifth aspect of embodiments of the present application provides a computer program product, which includes computer executable instructions stored in a computer readable storage medium; the computer executable instructions may be read by at least one processor of the network edge device from a computer readable storage medium, execution of which by the at least one processor causes the device to carry out the method of the first aspect described above.
A sixth aspect of the present application provides a system on a chip, where the system on a chip includes a processor configured to support a network edge device to implement the functions recited in the first aspect. In one possible design, the system-on-chip may further include a memory for storing necessary program instructions and data for the terminal device. The chip system may be constituted by a chip, or may include a chip and other discrete devices.
Drawings
FIG. 1a is a schematic diagram of a network edge device;
FIG. 1b is an example of an application scenario of the anti-channel conflict method in the embodiment of the present application;
FIG. 2 is a schematic flow chart of a tamper-proof method according to an embodiment of the present application;
FIG. 3 is another schematic flow chart of a tamper-proof method according to an embodiment of the present disclosure;
FIG. 4 is another schematic flow chart of a tamper-proof method according to an embodiment of the present disclosure;
fig. 5 is a schematic structural diagram of a network edge device in an embodiment of the present application;
fig. 6 is another schematic structural diagram of a network edge device in the embodiment of the present application.
Detailed Description
Embodiments of the present application will be described with reference to the accompanying drawings, and it is to be understood that the described embodiments are only some embodiments of the present application, and not all embodiments of the present application. As can be known to those skilled in the art, with the development of technology and the emergence of new scenarios, the technical solution provided in the embodiments of the present application is also applicable to similar technical problems.
The terms "first," "second," and the like in the description and claims of this application and in the foregoing drawings are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It will be appreciated that the data so used may be interchanged under appropriate circumstances such that the embodiments described herein may be practiced otherwise than as specifically illustrated or described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
The embodiment of the application provides a goods fleeing prevention method and a related device thereof, which are used for judging whether the goods fleeing condition exists in network edge equipment. The embodiment of the application also provides a corresponding device, a system, a computer readable storage medium, a computer program product and the like. The following are detailed below.
A network edge device refers to a device that provides an entry point to a core network for a user, such as an Optical Network Terminal (ONT) used in a home, a home router, and a switch.
After leaving the factory, the network edge device is generally sent to a sales area appointed by a customer order, however, since there may be different sales prices for the same network edge device in a plurality of sales areas, there may be a case where a third party purchases the network edge device from an area with a low price and then sells the network edge device to an area with a high price, which is called a channel conflict, and the channel conflict causes a manufacturer to lose control over price management and sales policies of the network edge device, thereby causing economic loss.
In the prior art, please refer to fig. 1a, a dedicated positioning module may be disposed on a network edge device for positioning the network edge device, so as to identify regional information of a region where the network edge device is located, where the positioning module may be a beidou positioning module or a Global Positioning System (GPS) positioning module, the positioning module may receive a signal of a satellite through an antenna, so as to determine regional information of the positioning module, and then transmit the regional information to the network edge device, after the network edge device acquires the regional information, it may determine whether the regional information is consistent with a preset sales region when the network edge device leaves a factory, and if not, it indicates that a goods-fleeing behavior exists, for example, the network edge device acquires current regional information as a region a through the positioning module, but a sales region preset when the network edge device leaves the factory is a region B, it indicates that tampering has occurred. However, in the solution of the prior art, the additional location module increases the cost of the network edge device, and if the network edge device is located indoors, the function of the location module will be affected, which may result in abnormal operation.
With reference to fig. 1B, fig. 1B is an example of an application scenario of the embodiment of the present application, as shown in fig. 1B, a region planned to be sold by the optical network terminal 2 when leaving factory is a region a, if a third party sells the optical network terminal 2 to the region B, for example, the region planned to be sold by the optical network terminal 2 when leaving factory is shanghai, and if the third party sells the optical network terminal 2 to shenzhen, the optical network terminal may perform a corresponding anti-falsification operation, so that the optical network terminal cannot normally operate in the region B, and further protect a right of a manufacturer.
Referring to fig. 2, a flow of the method for preventing the channel conflict according to the embodiment of the present application is described as follows:
201. the network edge device obtains an Internet Protocol (IP) address of the domain name server.
At the beginning, the network edge device may obtain the IP addresses of the domain name servers in a corresponding manner, and the domain name server is the domain name server in a region where the network edge device is located, for example, the network edge device is deployed in shenzhen, and then the network edge device may obtain the IP addresses of the domain name servers also deployed in shenzhen, where it needs to be noted that the IP address may be the IP address of one domain name server or the IP addresses of multiple domain name servers.
202. The network edge device determines the area information of the network edge device according to the IP address of the domain name server and the corresponding relation between the IP address of the domain name server and the area information of the area where the network edge device is located.
After acquiring the IP address of the domain name server, the network edge device may determine the area information of the network edge device according to the IP address of the domain name server and the corresponding relationship between the IP address of the domain name server and the area information of the area where the network edge device is located, specifically, the area information of the network edge device is the information of the area where the network edge device is currently located, e.g., shenzhen or shanghai, the operator will assign a specific domain name server address to a specific region, for example, the domain name server of zone a is configured with domain name server address a, the domain name server of zone B is configured with domain name server address B, therefore, the network edge device can determine the area information of the network edge device according to the IP address of the domain name server and the corresponding relation between the IP address of the domain name server and the area information of the area where the network edge device is located.
203. And the network edge equipment determines that the area information of the network edge equipment is inconsistent with the preset area information, and executes the anti-channel conflict operation.
After the network edge device determines the region information of the network edge device, the network edge device may compare the region information of the network edge device with preset region information, it should be noted that the preset region information is set in the network edge device before the network edge device leaves a factory, and if the region information of the network edge device is inconsistent with the preset region information, the network edge device may perform a tamper-proof operation, for example, the network edge device determines that the region information of the network edge device is shanghai, and the preset region information of the network edge device is Shenzhen, the network edge device performs a tamper-proof operation, and specifically, the tamper-proof operation may be a stop operation or a warning.
In the embodiment of the application, after the network edge device acquires the IP address of the domain name server, the area information of the network edge device is determined according to the IP address of the domain name server and the corresponding relation between the IP address of the domain name server and the area information of the area where the network edge device is located, and if the area information of the area where the network edge device is located is inconsistent with the preset area information, the anti-channel conflict operation is executed.
In the above, the method for preventing a channel conflict in the embodiment of the present application is described in more general terms, and referring to fig. 3, a detailed process of the method for preventing a channel conflict in the embodiment of the present application is described below:
301. the network edge device acquires the preset area information.
Before leaving the factory, preset region information is written in the network edge device, where the preset region information is a region that a manufacturer plans to sell the network edge device, for example, the preset region information may be shanghai or shenzhen, and is not specifically limited herein, and after leaving the factory and being put into use, the network edge device may obtain the preset region information locally, it should be noted that the preset region information may also be encrypted and signed, and after obtaining the preset region information, the network edge device may decrypt and verify the preset region information.
302. The network edge device dials a point-to-point protocol over ethernet (PPPOE) or a Dynamic Host Configuration Protocol (DHCP) on the router ethernet.
The three-layer device works in a network layer and can determine the forwarding address of the message according to different IP addresses. If the network edge device is used as a three-layer device, the network edge device may first initiate PPPOE dialing or DHCP dialing to the router.
303. The network edge device receives the message from the router.
The network edge device may receive a packet from the router after initiating PPPOE dialing or DHCP dialing to the router, where the packet may carry an IP address of a domain name server in a region where the network edge device is currently located, it should be noted that the IP address may be an IP address of one domain name server or may be IP addresses of multiple domain name servers, for example, if multiple domain name servers are deployed in shenzhen, the network edge device may obtain IP addresses corresponding to the multiple domain name servers through different packets, and if only one domain name server is deployed in shenzhen, the network edge device may only obtain an IP address of the one domain name server.
304. The network edge device determines the area information of the network edge device according to the IP address of the domain name server and the corresponding relation between the IP address of the domain name server and the area information of the area where the network edge device is located.
After obtaining the IP address of the domain name server, the network edge device may determine the region information of the network edge device according to the IP address of the domain name server and a corresponding relationship between the IP address of the domain name server and the region information of the region where the network edge device is located, specifically, the region information of the network edge device is the information of the region where the network edge device is currently located, for example, shenzhen or shanghai, an operator may allocate a specific domain name server address to a specific region, for example, configure a domain name server address a for the domain name server in the region a, configure a domain name server address B for the domain name server in the region B, and a corresponding relationship between the IP address of the domain name server and the region information of the region where the network edge device is located may specifically include an IP address set, where the IP address set may include the IP addresses of domain name servers that have already been put into operation, each IP address in the IP address set and each area information in the area information set have a corresponding relationship, for example, please refer to table 1:
TABLE 1 set of IP addresses
| Internet protocol address aggregation | Regional information collection |
| Domain name server internet protocol address A | Beijing |
| Domain name server internet protocol address B | Shanghai province |
| Domain name server internet protocol address C | Shenzhen (Shenzhen medicine) |
The IP address set comprises a domain name server IP address A, a domain name server IP address B and a domain name server IP address C, and due to the configuration of an operator, the domain name server IP address A can correspond to Beijing, the domain name server IP address B can correspond to Shanghai, and the domain name server IP address C can correspond to Shenzhen.
It should be noted that the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be written in the network edge device before the network edge device leaves the factory, or may be obtained by downloading from a remote server by the network edge device after the network edge device is put into use, which is not limited herein.
305. And the network edge equipment determines that the area information of the network edge equipment is inconsistent with the preset area information, and executes the anti-channel conflict operation.
After the network edge device determines the region information of the network edge device, the network edge device may compare the region information of the network edge device with preset region information, it should be noted that the preset region information is set in the network edge device before the network edge device leaves a factory, and if the region information of the network edge device is inconsistent with the preset region information, the network edge device may perform a tamper-proof operation, for example, the network edge device determines that the region information of the network edge device is shanghai, and the preset region information of the network edge device is Shenzhen, the network edge device performs a tamper-proof operation, and specifically, the tamper-proof operation may be a stop operation or a warning.
In the embodiment of the application, even if the network edge equipment is indoors, the network edge equipment can acquire the IP address of the domain name server through the message from the router, and can determine the area information of the network edge equipment through the corresponding relation between the IP address of the domain name server and the area information of the area where the network edge equipment is located, so as to determine whether the channel conflict behavior exists or not according to the comparison between the area information of the network edge equipment and the preset area information, and if so, the channel conflict prevention operation is executed, so that the benefit of a manufacturer is ensured.
In the above description, referring to fig. 4, a flow of the anti-channel conflict method according to the embodiment of the present application is described, and another flow of the anti-channel conflict method is described in detail as follows:
401. the network edge device acquires the preset area information.
Before leaving the factory, preset region information is written in the network edge device, where the preset region information is a region that a manufacturer plans to sell the network edge device, for example, the preset region information may be shanghai or shenzhen, and is not specifically limited herein, and after leaving the factory and being put into use, the network edge device may obtain the preset region information locally, it should be noted that the preset region information may also be encrypted and signed, and after obtaining the preset region information, the network edge device may decrypt and verify the preset region information.
402. The network edge device obtains a domain name server request message according to a known Transmission Control Protocol (TCP) port number or a known User Datagram Protocol (UDP) port number.
Specifically, when the two-layer device receives the message, the two-layer device reads a source MAC address in the message first, then reads a destination MAC address in the message, and searches for a corresponding port number in an address table, and if the port number corresponding to the destination MAC address exists, forwards the message to the port number. In a specific implementation, if the network edge device is used as a two-layer device, the network edge device forwards a domain name server request packet of an off-hook device of the network edge device to the domain name server, so that the network edge device may obtain the domain name server request packet sent to the domain name server by the user by using a known TCP port number or a UDP port number as an access control list, specifically, the port number may be a known TCP port number 53 or a known UDP port number 53.
403. And the network edge equipment acquires the IP address of the domain name server according to the domain name server request message.
After acquiring the domain name server request message, the network edge device may parse the domain name server request message, thereby obtaining the destination IP address in the domain name server request message, namely the IP address of the domain name server, in practical implementation, the network edge device may also store the acquired IP addresses of the multiple domain name servers, so as to perform subsequent comparison with the IP address set, and it should be noted that, the IP address may be the IP address of one domain name server or the IP addresses of multiple domain name servers, e.g., if a plurality of domain name servers are deployed in Shenzhen, the network edge device will acquire the IP addresses corresponding to the plurality of domain name servers through different domain name server request messages, if only one domain name server is deployed in Shenzhen, the network edge device can only acquire the IP address of the domain name server.
404. The network edge device determines the area information of the network edge device according to the IP address of the domain name server and the corresponding relation between the IP address of the domain name server and the area information of the area where the network edge device is located.
After obtaining the IP address of the domain name server, the network edge device may determine the region information of the network edge device according to the IP address of the domain name server and a corresponding relationship between the IP address of the domain name server and the region information of the region where the network edge device is located, specifically, the region information of the network edge device is the information of the region where the network edge device is currently located, for example, shenzhen or shanghai, an operator may allocate a specific domain name server address to a specific region, for example, configure a domain name server address a for the domain name server in the region a, configure a domain name server address B for the domain name server in the region B, and a corresponding relationship between the IP address of the domain name server and the region information of the region where the network edge device is located may specifically include an IP address set, where the IP address set may include the IP addresses of domain name servers that have already been put into operation, for example, referring to table 1, as shown in table 1, the IP address set includes a domain name server IP address a, a domain name server IP address B, and a domain name server IP address C, and due to configuration of an operator, the domain name server IP address a may correspond to beijing, the domain name server IP address B may correspond to shanghai, and the domain name server IP address C may correspond to shenzhen, so that after acquiring the IP address of the domain name server, the network edge device may compare the IP address of the domain name server with the IP address set, thereby determining the region information of the network edge device.
It should be noted that the correspondence between the IP address of the domain name server and the area information of the area where the network edge device is located may be written in the network edge device before the network edge device leaves the factory, or may be obtained by downloading from a remote server by the network edge device after the network edge device is put into use, which is not limited herein.
405. And the network edge equipment determines that the area information of the network edge equipment is inconsistent with the preset area information, and executes the anti-channel conflict operation.
After the network edge device determines the region information of the network edge device, the network edge device may compare the region information of the network edge device with preset region information, it should be noted that the preset region information is set in the network edge device before the network edge device leaves a factory, and if the region information of the network edge device is inconsistent with the preset region information, the network edge device may perform a tamper-proof operation, for example, the network edge device determines that the region information of the network edge device is shanghai, and the preset region information of the network edge device is Shenzhen, the network edge device performs a tamper-proof operation, and specifically, the tamper-proof operation may be a stop operation or a warning.
In the embodiment of the application, even if the network equipment is indoors, the network edge equipment can also obtain the IP address of the domain name server according to the obtained domain name server request message, and can determine the area information of the network edge equipment according to the corresponding relation between the IP address of the domain name server and the area information of the area where the network edge equipment is located, so as to determine whether the channel conflict behavior exists or not according to the comparison between the area information of the network edge equipment and the preset area information, and if so, the channel conflict prevention operation is executed, so that the benefit of a manufacturer is ensured.
The above description is made on the anti-channel conflict method in the embodiment of the present application, and the following description is made on the network edge device in the embodiment of the present application:
referring to fig. 5, a network edge device 500 in the embodiment of the present application includes an obtaining unit 501, a determining unit 502, and an executing unit 503.
An obtaining unit 501, configured to obtain an IP address of a domain name server, where the domain name server is a domain name server corresponding to an area where the network edge device is located.
The determining unit 502 is configured to determine the area information of the area where the network edge device is located according to the IP address of the domain name server and a corresponding relationship between the IP address and the area information of the area where the network edge device is located.
An executing unit 503, configured to execute a tamper-proof operation if the area information is inconsistent with preset area information of the network edge device, where the preset area information is set in the network edge device before the network edge device leaves a factory.
In the embodiment of the application, after the network edge device acquires the IP address of the domain name server, the area information of the network edge device is determined according to the IP address of the domain name server and the corresponding relation between the IP address of the domain name server and the area information of the area where the network edge device is located, and if the area information of the area where the network edge device is located is inconsistent with the preset area information, the anti-channel conflict operation is executed.
Based on the network edge device 500 shown in figure 5 above,
the obtaining unit 501 is specifically configured to initiate PPPOE dialing or DHCP dialing to a router.
The obtaining unit 501 is further configured to receive a packet from a router, where the packet carries an IP address of a domain name server.
Or,
based on the network edge device 500 shown in figure 5 above,
the obtaining unit 501 is specifically configured to obtain a domain name server request packet according to a well-known TCP port number or a well-known UDP port number, where the domain name server request packet is sent to a domain name server by a network edge device after being sent to the network edge device by a drop device of the network edge device.
The obtaining unit 501 is further configured to obtain an IP address of the domain name server according to the domain name server request packet.
Based on the network edge device 500 shown in figure 5 described above,
the obtaining unit 501 is further configured to obtain preset area information, where the preset area information is subjected to encryption and signature processing.
The obtaining unit 501 is further configured to perform decryption and verification processing on the preset area information.
In the embodiment of the application, the network edge device can decrypt and verify the preset area information, so that the safety and reliability of the preset area information are ensured.
Based on the network edge device 500 shown in figure 5 above,
the correspondence between the IP address of the domain name server and the zone information of the zone where the network edge device is located is obtained locally by the network edge device 500.
In the embodiment of the application, the network edge equipment can obtain the corresponding relation locally, so that the efficiency of preventing the channel conflict is improved.
Or,
based on the network edge 500 shown in fig. 5, the corresponding relationship between the IP address of the domain name server and the zone information of the zone where the network edge is located is obtained by the network edge 500 from a remote server.
In the embodiment of the application, the network edge device acquires the corresponding relation from the remote server, so that the flexibility of the scheme is improved.
Fig. 6 is a schematic structural diagram of a network edge device according to an embodiment of the present disclosure, where the network edge device 600 may include one or more Central Processing Units (CPUs) 601 and a memory 605, where the memory 605 stores one or more applications or data.
The memory 605 may be volatile storage or persistent storage, among other things. The program stored in memory 605 may include one or more modules, each of which may include a sequence of instructions operating on a server. Still further, the central processor 601 may be configured to communicate with the memory 605 to execute a series of instruction operations in the memory 605 on the network edge device 600.
The network edge device 600 may also include one or more power supplies 602, one or more wired or wireless network interfaces 603, one or more input-output interfaces 604, and/or one or more operating systems, such as Windows Server, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM, etc.
The central processor 601 may perform the operations of the network edge devices in the embodiments shown in fig. 2 to fig. 4, which are not described herein again.
It can be clearly understood by those skilled in the art that, for convenience and simplicity of description, the specific working processes of the above-described systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the several embodiments provided in the present application, it should be understood that the disclosed system, apparatus and method may be implemented in other manners. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit may be implemented in the form of hardware, or may also be implemented in the form of a software functional unit.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application may be substantially implemented or contributed to by the prior art, or all or part of the technical solution may be embodied in a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a read-only memory (ROM), a Random Access Memory (RAM), a magnetic disk, an optical disk, or other various media capable of storing program codes.
Claims (15)
1. A method of preventing tampering, comprising:
the method comprises the steps that network edge equipment obtains an Internet Protocol (IP) address of a domain name server, wherein the domain name server is a domain name server corresponding to an area where the network edge equipment is located;
the network edge device determines the area information of the area where the network edge device is located according to the IP address of the domain name server and the corresponding relation between the IP address and the area information of the area where the network edge device is located;
and if the area information is inconsistent with the preset area information of the network edge equipment, the network edge equipment executes anti-channel conflict operation, wherein the preset area information is set in the network edge equipment before the network edge equipment leaves a factory.
2. The method of claim 1, wherein the network edge device obtaining the IP address of the domain name server comprises:
the network edge equipment initiates point-to-point protocol PPPOE dialing or dynamic host configuration protocol DHCP dialing on the Ethernet to the router;
and the network edge equipment receives a message from a router, wherein the message carries the IP address of the domain name server.
3. The method of claim 1, wherein the network edge device obtaining the IP address of the domain name server comprises:
the network edge device acquires a domain name server request message according to a known Transmission Control Protocol (TCP) port number or a known User Datagram Protocol (UDP) port number, and the domain name server request message is sent to the domain name server by the network edge device after being sent to the network edge device by a down-hanging device of the network edge device;
and the network edge equipment acquires the IP address of the domain name server according to the domain name server request message.
4. The method according to any one of claims 1 to 3, wherein before the network edge device obtains the IP address of the domain name server, the method further comprises:
the network edge equipment acquires the preset area information from the local, and the preset area information is encrypted and signed;
and the network edge equipment decrypts and verifies the preset area information.
5. The method of any of claims 1 to 3, wherein the correspondence between the IP address and the area information of the area where the network edge device is located is obtained locally by the network edge device.
6. The method of any of claims 1 to 3, wherein the correspondence between the IP address and the area information of the area where the network edge device is located is obtained by the network edge device from a remote server.
7. The method of any one of claims 1 to 3, wherein the tamper-proof operation comprises stopping work or issuing a warning.
8. A network edge device, comprising:
an obtaining unit, configured to obtain an internet protocol IP address of a domain name server, where the domain name server is a domain name server corresponding to an area where the network edge device is located;
a determining unit, configured to determine, according to the IP address of the domain name server and a correspondence between the IP address and area information of an area where the network edge device is located, area information of the area where the network edge device is located;
and the execution unit is used for executing the anti-channel conflict operation if the area information is inconsistent with the preset area information of the network edge equipment, wherein the preset area information is set in the network edge equipment before the network edge equipment leaves the factory.
9. The network edge device of claim 8,
the acquiring unit is specifically configured to initiate a point-to-point protocol over ethernet (PPPOE) dialing or a Dynamic Host Configuration Protocol (DHCP) dialing to the router;
the acquiring unit is further configured to receive a packet from a router, where the packet carries the IP address of the domain name server.
10. The network edge device of claim 8,
the acquiring unit is specifically configured to acquire a domain name server request packet according to a known Transport Control Protocol (TCP) port number or a known User Datagram (UDP) protocol port number, where the domain name server request packet is sent to the network edge device by a drop device of the network edge device and then sent to the domain name server by the network edge device;
the obtaining unit is further configured to obtain the IP address of the domain name server according to the domain name server request packet.
11. The network edge device of any of claims 8 to 10,
the acquisition unit is further configured to acquire the preset area information, and the preset area information is subjected to encryption and signature processing;
the obtaining unit is further configured to decrypt and verify the preset region information.
12. The network edge device of any of claims 8 to 10, wherein the correspondence between the IP address and the zone information of the zone where the network edge device is located is obtained locally by the network edge device.
13. The network edge device of any of claims 8 to 10, wherein the correspondence between the IP address and the zone information of the zone where the network edge device is located is obtained by the network edge device from a remote server.
14. A network edge device, the network edge device comprising:
a processor, a memory, an input-output device, and a bus;
the processor, the memory and the input and output equipment are connected with the bus;
the processor is configured to perform the method of any one of claims 1 to 7.
15. A computer-readable storage medium, characterized in that a program is stored in the computer-readable storage medium, which, when executed by the computer, performs the method according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110075438.6A CN114785754B (en) | 2021-01-20 | 2021-01-20 | Method for preventing goods from being fleed and related device thereof |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110075438.6A CN114785754B (en) | 2021-01-20 | 2021-01-20 | Method for preventing goods from being fleed and related device thereof |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114785754A true CN114785754A (en) | 2022-07-22 |
| CN114785754B CN114785754B (en) | 2023-12-15 |
Family
ID=82407683
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110075438.6A Active CN114785754B (en) | 2021-01-20 | 2021-01-20 | Method for preventing goods from being fleed and related device thereof |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114785754B (en) |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20030065571A1 (en) * | 1999-10-14 | 2003-04-03 | Rabindranath Dutta | System, method, and program for determining the jurisdiction of a product delivery location by using the ip address of the client while selling items via electronic commerce over the internet |
| CN103759393A (en) * | 2014-01-21 | 2014-04-30 | 广东美的制冷设备有限公司 | Air conditioner, wireless air conditioner controller, system and control method of air conditioner |
| CN105046391A (en) * | 2015-04-13 | 2015-11-11 | 青岛海尔智能家电科技有限公司 | Method and apparatus for discovering cross-boundary selling of household electrical appliances of Internet of Things, and household electrical appliances of Internet of Things |
| CN105321084A (en) * | 2014-06-11 | 2016-02-10 | 珠海格力电器股份有限公司 | Household appliance anti-channel conflict operation control method and household appliance system |
| CN105744003A (en) * | 2016-04-29 | 2016-07-06 | 珠海格力电器股份有限公司 | Identification method, identification device and identification system for region to which household appliance belongs |
| CN105844441A (en) * | 2016-04-01 | 2016-08-10 | 广东美的暖通设备有限公司 | Household electrical appliance anti-channel conflict management method, anti-channel conflict management device and server |
| CN107590666A (en) * | 2017-08-24 | 2018-01-16 | 深圳创维－Rgb电子有限公司 | A kind of falsifying recognition methods of electric equipment and system |
| CN109658116A (en) * | 2018-12-26 | 2019-04-19 | 奥克斯空调股份有限公司 | A kind of method for goods anti-forge and air conditioner |
-
2021
- 2021-01-20 CN CN202110075438.6A patent/CN114785754B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20030065571A1 (en) * | 1999-10-14 | 2003-04-03 | Rabindranath Dutta | System, method, and program for determining the jurisdiction of a product delivery location by using the ip address of the client while selling items via electronic commerce over the internet |
| CN103759393A (en) * | 2014-01-21 | 2014-04-30 | 广东美的制冷设备有限公司 | Air conditioner, wireless air conditioner controller, system and control method of air conditioner |
| CN105321084A (en) * | 2014-06-11 | 2016-02-10 | 珠海格力电器股份有限公司 | Household appliance anti-channel conflict operation control method and household appliance system |
| CN105046391A (en) * | 2015-04-13 | 2015-11-11 | 青岛海尔智能家电科技有限公司 | Method and apparatus for discovering cross-boundary selling of household electrical appliances of Internet of Things, and household electrical appliances of Internet of Things |
| CN105844441A (en) * | 2016-04-01 | 2016-08-10 | 广东美的暖通设备有限公司 | Household electrical appliance anti-channel conflict management method, anti-channel conflict management device and server |
| CN105744003A (en) * | 2016-04-29 | 2016-07-06 | 珠海格力电器股份有限公司 | Identification method, identification device and identification system for region to which household appliance belongs |
| CN107590666A (en) * | 2017-08-24 | 2018-01-16 | 深圳创维－Rgb电子有限公司 | A kind of falsifying recognition methods of electric equipment and system |
| CN109658116A (en) * | 2018-12-26 | 2019-04-19 | 奥克斯空调股份有限公司 | A kind of method for goods anti-forge and air conditioner |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114785754B (en) | 2023-12-15 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107547565B (en) | Network access authentication method and device | |
| CN104981784A (en) | Software deployment and control method and system | |
| EP3203645B1 (en) | Information processing method and nfc terminal | |
| WO2018165886A1 (en) | Advertisement monitoring method, device and system | |
| WO2020107446A1 (en) | Method and apparatus for obtaining attacker information, device, and storage medium | |
| US20140164258A1 (en) | Mobile station apparatus and communication method thereof | |
| EP3163530A1 (en) | Financial products trading system and financial products trading control method | |
| US11937084B2 (en) | Secure attestation packages for devices on a wireless network | |
| CN111355708A (en) | Equipment password resetting method and device | |
| CN106507383B (en) | Real name auditing method, equipment and system | |
| CN105656684B (en) | Failure simulation method and device | |
| CN103532985A (en) | Communication method, equipment and system between virtual machines | |
| CN115086208A (en) | Network card detection method and device, electronic equipment and storage medium | |
| CN114785754B (en) | Method for preventing goods from being fleed and related device thereof | |
| US11108588B2 (en) | Configuration information to an internet of things multiplexer | |
| CN106685708B (en) | Method, device and system for determining service relationship | |
| CN105592049A (en) | Attack defense rule opening method and device | |
| CN110602693B (en) | Networking method and equipment of wireless network | |
| US20180268058A1 (en) | Triggered scanning based on network available data change | |
| CN208656807U (en) | A kind of system for branch access general headquarters | |
| KR101473607B1 (en) | Apparatus and Method for Access Control in a Virtual Private Network | |
| US9756078B2 (en) | Proactive internet connectivity probe generator | |
| CN111884837B (en) | Migration method and device of virtual encryption machine and computer storage medium | |
| US10732591B2 (en) | Apparatus and method for establishing communication between an operation terminal and a controller when only one controller is connected | |
| CN113806179A (en) | Out-of-band information management device and method for machine room server and machine room |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |