7 results about "Source address" patented technology

The invention provides a message transmission method and a message transmission device. The message transmission method comprises the steps that: a first edge device receives a message from a second edge device; the first edge device extracts a source address and a destination address from the message, and the first edge device extracts an identifier of a network to which the second edge device belongs from the message by utilizing default offset if the first edge device comprises a tunnel corresponding to the source address and the destination address; the first edge device matches the identifier of the network to which the second edge device belongs with an identifier (associated with the tunnel) of a network to which the first edge device belongs; and the first edge device sends other content except content corresponding to preset first length in the message to equipment corresponding to the identifier of the network to which the second edge device belongs if the matching is successful. By adopting the message transmission method and the message transmission device, the availability of the edge devices can be improved, and normal transmission of messages can be ensured.

The invention provides a node protection method, a packet filtering device and a virtual network system. The node protection method comprises the following steps: capturing a message transmitted to a first node by the packet filtering device of a first node, and carrying out security verification on the message according to a pre-stored authorized address list and the source address of the message; if the message passes the security verification is detected to be a connection request message, adding a second node address carried by the connection request message to the authorized address list so that a message from the second node address can pass the security verification, wherein the first node is a node requested by the connection request, and the second node is a request initiating node for initiating the connection request. The node protection method, the packet filtering device and the virtual network system are capable of providing effective and reliable protection for the nodes while guaranteeing the network performance.

Exemplary embodiments of a system and method enable application of policy using Layer 2 fields for a data frame, simplified data structures, or both. In accordance with one aspect of the present invention, a policy may be based upon a destination address (DA), a source address (SA), or a virtual local area network identification (VID) associated with a data frame.

The invention discloses a multidimensional-similarity-based personalized news recommendation method. The method comprises the following steps of: extracting a set time record from a news log, capturing news and extracting a title and a text according to a news source address, performing word segmentation and noun extraction on the title and the text, and analyzing a noun sequence by using a subject model to acquire a subject feature character of the news; constructing a user model and a news model respectively according to the subject feature vector of the news and user behavior data; computing the content similarity and behavior similarity of users and the news respectively according to the user model, the news model and a time feature, computing final user similarity and final news similarity according to the content similarity and behavior similarity of the users and the news, and extracting a plurality of users and news which are most similar respectively; and generating user-based personalized recommendation results according to a latest news log record and a plurality of similar users which are most similar to a set user; or generating news-based personalized recommendation results according to the news on which the set user behaves and the news which is most similar to the news.

The invention discloses a service message processing method and equipment based on a network address translation protocol, which are used for solving the technical problem that network address translation loopback can be realized only by carrying out an exchange chip flow twice through an internal loopback port in the existing message translation. The method comprises the following steps: receiving a service message from a host and/or a server of a local network through a switch; according to the first access control list rule, carrying out the source address conversion on the service message, obtaining a corresponding next skip list index through a routing table, and according to the second access control list rule, carrying out the destination address conversion on the service message to obtain a corresponding next skip list index; and determining an exit corresponding to the next hop address according to the next hop list index corresponding to the second access control list rule, thereby realizing forwarding of the service message. According to the method, access control list rules are inquired in parallel in a plurality of blocks of the access control list, so source address translation and destination address translation are performed at the same time.