-
公开(公告)号:US20190140823A1
公开(公告)日:2019-05-09
申请号:US16222152
申请日:2018-12-17
Applicant: Huawei Technologies Co., Ltd.
Inventor: Yuming Xie , Bo Zhang , Zhigang Huang , Jianjie You , Yang Wang
Abstract: A method for detecting encrypted content and a device, where the method includes receiving, by a middlebox network device using a first secure channel, key information of a Transport Layer Security (TLS) secure channel from a key manager, obtaining, by the middlebox network device based on 5-tuple information of the TLS secure channel, encrypted application data transmitted over the TLS secure channel, decrypting, by the middlebox network device, the encrypted application data using a session key, and detecting decrypted content. Hence, the middlebox network device decrypts the encrypted application data, and detects decrypted application data. In this way, detection of encrypted content does not rely on a TLS proxy server, and detection complexity and detection costs can be reduced.
-
公开(公告)号:US11909657B2
公开(公告)日:2024-02-20
申请号:US17672002
申请日:2022-02-15
Applicant: Huawei Technologies Co., Ltd.
Inventor: Qiandeng Liang , Shunwan Zhuang , Jianjie You
IPC: H04L47/28 , H04L45/00 , H04L47/2483 , H04L9/40 , H04L45/02
CPC classification number: H04L47/28 , H04L45/38 , H04L47/2483 , H04L45/02 , H04L63/1441
Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.
-
公开(公告)号:US20220174019A1
公开(公告)日:2022-06-02
申请号:US17672002
申请日:2022-02-15
Applicant: Huawei Technologies Co., Ltd.
Inventor: Qiandeng Liang , Shunwan Zhuang , Jianjie You
Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.
-
公开(公告)号:US20170279938A1
公开(公告)日:2017-09-28
申请号:US15619218
申请日:2017-06-09
Applicant: Huawei Technologies Co., Ltd.
Inventor: Jianjie You , Haibin Song
IPC: H04L29/06 , H04L12/741
Abstract: A packet processing method and an apparatus are provided. A first SFC proxy of a first SF entity splits a first packet to obtain a first original packet and a first SFC header, and the first SFC proxy sends the first SFC header to a second SFF. The first SF entity processes the first original packet to obtain a second original packet, and sends the second original packet to a service classifier. The service classifier sends, to the second SFF, a second packet that is obtained after the service classifier adds a second SFC header to the second original packet. The second SFF changes the second SFC header in the second packet into the first SFC header. In this way, a first packet carrying a first SFC header can be transmitted in a network architecture in which a legacy SF exists, so that the legacy SF becomes compatible.
-
公开(公告)号:US12010030B2
公开(公告)日:2024-06-11
申请号:US17683778
申请日:2022-03-01
Applicant: HUAWEI TECHNOLOGIES CO., LTD.
Inventor: Qiandeng Liang , Shunwan Zhuang , Nan Wu , Jianjie You
CPC classification number: H04L47/2441 , H04L12/4641 , H04L12/66 , H04L45/04 , H04L45/64 , H04L47/33
Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.
-
公开(公告)号:US11108549B2
公开(公告)日:2021-08-31
申请号:US16212630
申请日:2018-12-06
Applicant: HUAWEI TECHNOLOGIES CO., LTD.
Inventor: Anni Wei , Chunshan Xiong , Jianjie You
IPC: H04L9/08 , H04L29/06 , H04W12/03 , H04W12/041 , H04W12/55 , H04W12/80 , H04W12/0431 , H04W12/0471 , H04L9/14 , H04L9/32
Abstract: The present invention discloses a service processing method and apparatus, and relates to the communications field. The method includes: receiving trigger information sent by an intermediary device; and assisting, based on the trigger information, the intermediary device in negotiating with UE and a network server, to enable the intermediary device to obtain a first key, where the first key is used by the intermediary device to decrypt ciphertexts sent by the UE and the network server, the ciphertext is obtained after the UE or the network server encrypts service information by using a second key, and the first key is corresponding to the second key. The present invention resolves a problem that an intermediary device cannot provide service optimization for user equipment and a network server because the intermediary device cannot decrypt ciphertext, and achieves an effect of expanding a usage scope of service optimization.
-
公开(公告)号:US20200153745A1
公开(公告)日:2020-05-14
申请号:US16709287
申请日:2019-12-10
Applicant: Huawei Technologies Co., Ltd.
Inventor: Qiandeng Liang , Shunwan Zhuang , Jianjie You
IPC: H04L12/841 , H04L12/721
Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.
-
公开(公告)号:US20180131622A1
公开(公告)日:2018-05-10
申请号:US15866080
申请日:2018-01-09
Applicant: Huawei Technologies Co., Ltd.
Inventor: Qiandeng Liang , Shunwan Zhuang , Jianjie You
IPC: H04L12/841
Abstract: A route processing method, a device, and a system, where the method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device. Therefore, limited-time effective information is automatically disseminated, a limited-time effective requirement for a traffic control policy is met, configuration workload is reduced, and maintenance difficulty is lowered.
-
公开(公告)号:US11290386B2
公开(公告)日:2022-03-29
申请号:US17023790
申请日:2020-09-17
Applicant: HUAWEI TECHNOLOGIES CO., LTD.
Inventor: Qiandeng Liang , Shunwan Zhuang , Nan Wu , Jianjie You
IPC: H04L12/851 , H04L12/715 , H04L12/46 , H04L12/66 , H04L12/801 , H04L47/2441 , H04L45/00 , H04L45/64 , H04L47/33
Abstract: The present disclosure discloses a flow specification (FlowSpec) message processing method. In the method, a controller forwards device interface information reported by the forwarding device; selects at least one forwarding device interface to which a FlowSpec rule needs to be applied from the received forwarding device interface information; generates an application interface rule based on the at least one forwarding device interface to which the FlowSpec rule needs to be applied; and sends a FlowSpec message to the forwarding device.
-
公开(公告)号:US11277348B2
公开(公告)日:2022-03-15
申请号:US16709287
申请日:2019-12-10
Applicant: Huawei Technologies Co., Ltd.
Inventor: Qiandeng Liang , Shunwan Zhuang , Jianjie You
IPC: H04L12/841 , H04L47/28 , H04L45/00 , H04L29/06 , H04L45/02
Abstract: A route processing method includes obtaining, by a first network device, a flow effective time parameter and a route related to the flow effective time parameter, processing, by the first network device in the specified time interval, service traffic corresponding to the route related to the flow effective time parameter, generating a route control message, where the route control message carries the flow effective time parameter and the route, and sending, by the first network device, the route control message to a second network device.
-
-
-
-
-
-
-
-
-