CN104486226B - A kind of message processing method and device - Google Patents

A kind of message processing method and device Download PDF

Info

Publication number
CN104486226B
CN104486226B CN201410812475.0A CN201410812475A CN104486226B CN 104486226 B CN104486226 B CN 104486226B CN 201410812475 A CN201410812475 A CN 201410812475A CN 104486226 B CN104486226 B CN 104486226B
Authority
CN
China
Prior art keywords
message
business board
fragment
cryptographic hash
sent
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201410812475.0A
Other languages
Chinese (zh)
Other versions
CN104486226A (en
Inventor
陈旭
李团营
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Topsec Technology Co Ltd
Beijing Topsec Network Security Technology Co Ltd
Beijing Topsec Software Co Ltd
Original Assignee
Beijing Topsec Technology Co Ltd
Beijing Topsec Network Security Technology Co Ltd
Beijing Topsec Software Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Topsec Technology Co Ltd, Beijing Topsec Network Security Technology Co Ltd, Beijing Topsec Software Co Ltd filed Critical Beijing Topsec Technology Co Ltd
Priority to CN201410812475.0A priority Critical patent/CN104486226B/en
Publication of CN104486226A publication Critical patent/CN104486226A/en
Application granted granted Critical
Publication of CN104486226B publication Critical patent/CN104486226B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Abstract

The present invention provides a kind of message processing method and device, to solve the problems, such as not can guarantee the fragment message of same five-tuple to message shunting mode under current distributed structure/architecture and non-fragment message is assigned to same business board, wherein, message processing method, include: distributed system business board when receiving message, judge whether message is fragment message;If so, handling message by business board, if not, recombinating to message, the purpose business board of message is determined according to the five-tuple information of the message after recombination;Message is sent to purpose business board, the program ensure that fragment message and non-fragment message based on same five-tuple under distributed structure/architecture are assigned to uniform block business board.

Description

A kind of message processing method and device
Technical field
The present invention relates to communication fields, more particularly to message processing method and device.
Background technique
In an ip network, when message length is more than MTU (Maximum Transmission Unit, maximum transmission unit) When, data sending terminal needs to transmit message fragment, after data receiver receives fragment, according to the offset information weight of fragment Group goes out complete message.Fragment passes through the gateway based on connection status, firewall such as based on state-detection, with NAT When the router of (Network Address Translation, network address translation) function, it is also desirable to be carried out to fragment message Recombination, could finishing service processing.
With the expansion of network size, web database technology is continuously increased, in order to improve the processing capacity of gateway, more It is designed to distributed structure/architecture come more high-end gateways.Distributed structure/architecture generally includes master control borad, interface board and business Plate is communicated by internal bus between these boards, and as shown in FIG. 1, FIG. 1 is the distributed structure/architecture gateways of the relevant technologies The schematic diagram of system composition.Wherein, master control node of the master control borad as system, interface board external connection to network, business board pair Flow into system carries out business processing.When IP packet reaches interface board, interface board according to the five-tuple information of message (i.e. Source IP, destination IP, protocol number, source port, destination port) cryptographic Hash is calculated, and be diverted to message according to the cryptographic Hash Purpose business board.For a size is more than MTU and the IP package of fragment transmission, only first fragment message has included Whole five-tuple information, remaining fragment only include source IP, destination IP and protocol number, do not include source port and destination port, interface Plate can not will be shunted according to five-tuple shunting information according to the binary group information of message.It is based on five-tuple and binary as a result, The hash algorithm that group shunts not can guarantee the fragment message of same connection and non-fragment message calculates identical cryptographic Hash, thus Cause fragment and non-fragment message based on same five-tuple information that may be divided to different business boards.
Summary of the invention
It is same the technical problem to be solved by the present invention is to not can guarantee under current distributed structure/architecture to the mode of message shunting The problem of fragment message of five-tuple and non-fragment message are assigned to same business board is based on the problem, the present invention provides A kind of message processing method and device.
According to an aspect of the invention, there is provided a kind of message processing method, comprising: the business board of distributed system exists When receiving message, judge whether message is fragment message;If not, message is handled by business board, if so, carrying out to message Recombination, the purpose business board of message is determined according to the five-tuple information of the message after recombination;Message is sent to purpose business board.
Wherein, the purpose business board of message is determined according to the five-tuple information of the message after recombination, comprising: after recombination Message five-tuple information carry out Hash calculation, obtain the first cryptographic Hash;Corresponding purpose industry is searched according to the first cryptographic Hash Business plate.
Further, the above method further include: distributed system business board before receiving message, distribution system Whether the message that the interface board judgement of system receives is fragment message, if so, carrying out Hash according to the binary group information of message It calculates, obtains the second cryptographic Hash, the message received is sent to by corresponding business board according to the second cryptographic Hash, if it is not, then Hash calculation is carried out according to the five-tuple information of message, obtains third cryptographic Hash, the message that will be received according to third cryptographic Hash It is sent to corresponding business board.
Wherein, the binary group information of fragment message includes: the source IP address and purpose IP address of fragment message.
Further, the above method further include: before message is sent to purpose business board, carry purpose in messages The identification information of business board;When message reaches business board, purpose business panel sign is deleted.
According to another aspect of the present invention, a kind of message process device is provided, comprising: first judgment module is used for The business board of distributed system judges whether message is fragment message when receiving message;Determining module, for sentencing first When the judging result of disconnected module is no, message is handled by business board, when the judging result of first judgment module is to be, to message It is recombinated, the purpose business board of message is determined according to the five-tuple information of the message after recombination;Sending module is used for message It is sent to purpose business board.
Wherein it is determined that module includes: computing unit, by being carried out based on Hash according to the five-tuple information of the message after recombination It calculates, obtains the first cryptographic Hash;Searching unit, for searching corresponding purpose business board according to the first cryptographic Hash.
Wherein, device further include: the second judgment module, for the business board in distributed system receive message it Before, whether the message that the interface board judgement of distributed system receives is fragment message;Sending module is used for: judging mould second The judging result of block is to carry out Hash calculation when being according to the binary group information of message, obtain the second cryptographic Hash, breathe out according to second The message received is sent to corresponding business board by uncommon value, when the judging result of the second judgment module is no, then according to report The five-tuple information of text carries out Hash calculation, obtains third cryptographic Hash, is sent to the message received according to third cryptographic Hash Corresponding business board.
Wherein, the binary group information of fragment message includes: the source IP address and purpose IP address of fragment message.
Further, above-mentioned apparatus further include: mark module, for before message is sent to purpose business board, The identification information of purpose business board is carried in message;Removing module, for deleting purpose business board when message reaches business board Mark.
The scheme of the embodiment of the present invention, after the business board of distributed system receives message, the five-tuple based on message Information determines purpose business board, can guarantee that the fragment message based on same five-tuple and non-fragment message are assigned to uniform block industry Business plate.
Detailed description of the invention
Fig. 1 is the schematic diagram that the distributed structure/architecture gateway system of the relevant technologies forms;
Fig. 2 is the flow chart of the packet message processing method of the embodiment of the present invention;
Fig. 3 is the flow chart of the message processing method of the embodiment of the present invention 3;
Fig. 4 is the flow chart of the message processing method of the embodiment of the present invention 4;
Fig. 5 is the structural block diagram of the message process device of the embodiment of the present invention;
Fig. 6 is the Message processing schematic diagram of the embodiment of the present invention.
Specific embodiment
In order to solve not can guarantee the shunting mode of message based on same five-tuple under prior art distributed structure/architecture The problem of fragment message and non-fragment message are arrived uniform block business board, the present invention provides a kind of message processing method and dresses It sets, below in conjunction with attached drawing and embodiment, the present invention will be described in further detail.It should be appreciated that tool described herein Body embodiment is only used to explain the present invention, does not limit the present invention.
Embodiment 1
Fig. 2 is the flow chart of the packet message processing method of the embodiment of the present invention.As shown in Fig. 2, this method includes following Step:
Step 201: the business board of distributed system receives message;
Step 202: judging whether message is fragment message, if so, step 204 is executed, if not, executing step 203;
Step 203: message is handled by the business board;Step 204: message being recombinated, according to the message after recombination Five-tuple information determines the purpose business board of message;
Step 205: message is sent to purpose business board.
Judge current business plate whether be purpose business board operation, can specifically be carried out as follows:
Wherein, the purpose business board of message is determined according to the five-tuple information of the message after recombination, comprising: after recombination Message five-tuple information carry out Hash calculation, obtain the first cryptographic Hash;Corresponding purpose industry is searched according to the first cryptographic Hash Business plate.
Further, on the basis of above-mentioned steps 201 to step 205, the above method can also include: to be in distribution For the business board of system before receiving message, whether the message that the interface board judgement of distributed system receives is fragment message, If so, carrying out Hash calculation according to the binary group information of message, the second cryptographic Hash is obtained, will be received according to the second cryptographic Hash Message be sent to corresponding business board, if it is not, then according to the five-tuple information of message carry out Hash calculation, obtain third Kazakhstan Uncommon value, is sent to corresponding business board for the message received according to third cryptographic Hash, wherein the binary group information packet of fragment message It includes: the source IP address and purpose IP address of fragment message.
Identification for the ease of purpose business board to message, can be before to be forwarded to purpose business board, in messages Add business board mark, further, the above method can also include: before message is sent to purpose business board, The identification information of purpose business board is carried in message;When message reaches business board, purpose business panel sign is deleted.
Embodiment 2
The processing that the present embodiment carries out the message received with business board of the specific example to distributed system Shunting is illustrated, it should be noted that the example is only a preferred embodiment of the present invention, is not made to of the invention It is limited at unique.
In this embodiment, the business board of distributed system recombinates the fragment received, and after the completion of judging recombination Message whether should be handled by this business board, for the message that should not be handled by this plate, it is redirected, by its turn It is dealt into correct purpose business board, so that the fragment message and non-fragment message of realizing same connection are at same business board Reason.
Fig. 3 is the flow chart of the message processing method of the embodiment of the present invention 3.As shown in figure 3, this method includes following place Reason:
The business board of S301, distributed system receive message;
S302 judges whether message includes purpose business board label, if so, being transferred to S303;Otherwise, it is transferred to S304;
S303 forwards the packet to purpose business board and marks corresponding business board, and process terminates;
S304 judges whether message is fragment message, if so, being transferred to S306;Otherwise, it is transferred to S305;
S305 calculates cryptographic Hash according to the five-tuple information of message;
S306 calculates cryptographic Hash according to the binary group information of message;
S307 forwards the packet to corresponding business board according to the cryptographic Hash of calculating, and process terminates.
Embodiment 3
The processing that the present embodiment carries out the message received with business board of the specific example to distributed system Shunting is illustrated, it should be noted that the example is only a preferred embodiment of the present invention, is not made to of the invention It is limited at unique.
Fig. 4 is the flow chart of the message processing method of the embodiment of the present invention 4.As shown in figure 4, this method includes following place Reason:
The business board of S401, distributed system receive message;
S402 judges whether message includes purpose business board label, if so, being transferred to S403;Otherwise, it is transferred to S404;
S403 deletes the purpose business board label of message;
S404 judges whether message is fragment message, if so, being transferred to S406;Otherwise, it is transferred to S405;
S405 gives message to Service Processing Module processing, and process terminates;
S406 calls kernel recombination module to be recombinated;
S407, judges whether kernel recombination module completes recombination, if so, being transferred to S408;Otherwise, process terminates;
S408 calculates message using hash algorithm identical with interface board according to the five-tuple information of message after recombination Cryptographic Hash;
S409, according to the cryptographic Hash of calculating, whether message should be handled by this business board after judging recombination, if so, turning Enter S405;Otherwise, it is transferred to S410;
S410, to the corresponding purpose business board label of one cryptographic Hash of addition in message after recombination, and forward the packet to Purpose business board, process terminate.
Embodiment 4
To the device for realizing message processing method into description, which can be is set in business board the present embodiment Module, i.e. the above method can realize by business board.Fig. 5 is the structural frames of the message process device of the embodiment of the present invention Figure, as shown in figure 5, the device 50 includes following component part:
First judgment module 51, the business board for distributed system judge whether message is point when receiving message Piece message;
Determining module 52, for the judging result in first judgment module be it is no when, message is handled by business board, first The judging result of judgment module is when being, to recombinate to message, determine message according to the five-tuple information of the message after recombination Purpose business board;
Sending module 53, for message to be sent to purpose business board.
Wherein, above-mentioned determining module 52 includes: computing unit, for being carried out according to the five-tuple information of the message after recombination Hash calculation obtains the first cryptographic Hash;Searching unit, for searching corresponding purpose business board according to the first cryptographic Hash.
Further, above-mentioned apparatus 50 further include: the second judgment module is being received for the business board in distributed system To before message, whether the message that the interface board judgement of distributed system receives is fragment message;Based on this, above-mentioned transmission mould Block 53 is used for: when the judging result of the second judgment module is to be, being carried out Hash calculation according to the binary group information of message, is obtained The message received is sent to corresponding business board according to the second cryptographic Hash, in sentencing for the second judgment module by the second cryptographic Hash When disconnected result is no, then Hash calculation is carried out according to the five-tuple information of message, third cryptographic Hash is obtained, according to third cryptographic Hash The message received is sent to corresponding business board.
Wherein, the binary group information of above-mentioned fragment message includes: the source IP address and purpose IP address of fragment message.
Further, above-mentioned apparatus further include: mark module, for before message is sent to purpose business board, The identification information of purpose business board is carried in message;Removing module, for deleting purpose business board when message reaches business board Mark.Fig. 6 is the Message processing schematic diagram of the embodiment of the present invention, below in conjunction with the figure in Message processing process, Message processing The function of each section of device is introduced:
As shown in fig. 6, have in business board 1 and business board 2 receiving module, again diverter module, internal forwarding module, Service Processing Module, herein, it can be understood as, the message process device 40 in above-mentioned business board has these modules, wherein connecing A part that module is specifically as follows above-mentioned first judgment module is received, again at diverter module, internal forwarding module and business A part that module can be above-mentioned processing module is managed, for realizing the partial function of processing module.
Diverter module, for non-fragment message 1 and message 3, according to the five-tuple information of message (i.e. source IP, destination IP, Protocol number, source port, destination port) cryptographic Hash is calculated, and corresponding purpose is sent for message according to calculated cryptographic Hash Business board;For fragment message, 2 fragment 1 of message and 2 fragment 2 of message as shown in FIG. 6, according to the binary group information of message (i.e. source IP, destination IP) calculates cryptographic Hash, and sends corresponding purpose business board for message.
Business board receiving module is judged after receiving a message, if message is non-fragment message, by message Service Processing Module processing is given, if message is fragment message, gives again message to diverter module processing.Again it shunts Module recombinates fragment message, and carries out Hash fortune to the message after recombination using Diffluence Algorithm identical with interface board Calculate, if Hash operation the result is that message should be handled by this business board, give message to Service Processing Module processing;Such as Fruit Hash operation the result is that message should be handled by other business boards, then internal forwarding module gives message to add corresponding purpose After business board label, forward the packet away.The internal receipt module of corresponding purpose business board receives the message of forwarding, deletes The purpose business board of message marks, and gives message to Service Processing Module processing.
The scheme of the embodiment of the present invention, after the business board of distributed system receives message, the five-tuple based on message Information determines purpose business board, can guarantee that the fragment message based on same five-tuple and non-fragment message are assigned to uniform block industry Business plate.
Although for illustrative purposes, the preferred embodiment of the present invention has been disclosed, those skilled in the art will recognize It is various improve, increase and replace be also it is possible, therefore, the scope of the present invention should be not limited to the above embodiments.

Claims (6)

1. a kind of message processing method characterized by comprising
The business board of distributed system judges whether the message is fragment message when receiving message;
If not, the message is handled by the business board, if so, recombinating to the message, according to the report after recombination The five-tuple information of text determines the purpose business board of the message;
The message is sent to the purpose business board;
Distributed system business board before receiving message, the message that the judgement of the interface board of distributed system receives is No is fragment message, if so, the second cryptographic Hash is obtained according to the binary group information of message progress Hash calculation, according to The message received is sent to corresponding business board by the second cryptographic Hash, if it is not, then according to the five-tuple information of the message Hash calculation is carried out, third cryptographic Hash is obtained, the message received is sent to by corresponding business board according to third cryptographic Hash;
The five-tuple information according to the message after recombination determines the purpose business board of the message, comprising:
Hash calculation is carried out according to the five-tuple information of the message after recombination, obtains the first cryptographic Hash;
Corresponding purpose business board is searched according to first cryptographic Hash.
2. the method as described in claim 1, which is characterized in that the binary group information of the fragment message includes:
The source IP address and purpose IP address of the fragment message.
3. method according to claim 1 or 2, which is characterized in that the method also includes:
Before the message is sent to purpose business board, the identification information of purpose business board is carried in the message;
When the message reaches the business board, the purpose business panel sign is deleted.
4. a kind of message process device characterized by comprising
First judgment module, the business board for distributed system judge whether the message is fragment when receiving message Message;
When determining module for the judging result in the first judgment module is no, the message is handled by the business board, When the judging result of the first judgment module is to be, the message is recombinated, according to five of the message after recombination yuan Group information determines the purpose business board of the message;
Sending module, for the message to be sent to the purpose business board;
Second judgment module, for the business board in distributed system before receiving message, the interface board of distributed system Judge whether the message received is fragment message;
The sending module is used for: when the judging result of second judgment module is to be, according to the binary group of the message Information carries out Hash calculation, obtains the second cryptographic Hash, the message received is sent to corresponding business according to the second cryptographic Hash Plate then carries out Hash calculation according to the five-tuple information of the message when the judging result of second judgment module is no, Third cryptographic Hash is obtained, the message received is sent to by corresponding business board according to third cryptographic Hash;
The determining module includes:
Computing unit obtains the first cryptographic Hash for carrying out Hash calculation according to the five-tuple information of the message after recombination;
Searching unit, for searching corresponding purpose business board according to first cryptographic Hash.
5. device as claimed in claim 4, which is characterized in that the binary group information of the fragment message includes:
The source IP address and purpose IP address of the fragment message.
6. device as described in claim 4 or 5, which is characterized in that described device further include:
Mark module, for carrying purpose business board in the message before the message is sent to purpose business board Identification information;
Removing module, for deleting the purpose business panel sign when the message reaches the business board.
CN201410812475.0A 2014-12-23 2014-12-23 A kind of message processing method and device Active CN104486226B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410812475.0A CN104486226B (en) 2014-12-23 2014-12-23 A kind of message processing method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410812475.0A CN104486226B (en) 2014-12-23 2014-12-23 A kind of message processing method and device

Publications (2)

Publication Number Publication Date
CN104486226A CN104486226A (en) 2015-04-01
CN104486226B true CN104486226B (en) 2019-04-05

Family

ID=52760732

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410812475.0A Active CN104486226B (en) 2014-12-23 2014-12-23 A kind of message processing method and device

Country Status (1)

Country Link
CN (1) CN104486226B (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106878179B (en) * 2016-12-14 2020-10-09 新华三技术有限公司 Message forwarding method and device
CN113489659A (en) * 2021-06-30 2021-10-08 新华三信息安全技术有限公司 Message processing method and device
CN113923046B (en) * 2021-11-04 2023-11-10 北京天融信网络安全技术有限公司 Method and system for realizing distributed firewall secure communication
CN115277213B (en) * 2022-07-29 2023-07-14 北京天融信网络安全技术有限公司 Message transfer board processing method and device

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1592215A (en) * 2003-08-27 2005-03-09 中兴通讯股份有限公司 Method for partitioned document recombination and service distribution
CN102104544A (en) * 2011-01-25 2011-06-22 无锡网芯科技有限公司 Order preserving method for fragmented message flow in IP (Internet Protocol) tunnel of multi-nuclear processor with accelerated hardware

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7480308B1 (en) * 2004-03-29 2009-01-20 Cisco Technology, Inc. Distributing packets and packets fragments possibly received out of sequence into an expandable set of queues of particular use in packet resequencing and reassembly
EP2110998A1 (en) * 2008-04-16 2009-10-21 Nokia Siemens Networks Oy Method for intermediate flow management enabled nodes to cope with IPv6 fragment packet filtering
CN101447930B (en) * 2008-12-25 2011-01-05 华为技术有限公司 Message processing method and device thereof

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1592215A (en) * 2003-08-27 2005-03-09 中兴通讯股份有限公司 Method for partitioned document recombination and service distribution
CN102104544A (en) * 2011-01-25 2011-06-22 无锡网芯科技有限公司 Order preserving method for fragmented message flow in IP (Internet Protocol) tunnel of multi-nuclear processor with accelerated hardware

Also Published As

Publication number Publication date
CN104486226A (en) 2015-04-01

Similar Documents

Publication Publication Date Title
EP3082309A1 (en) Sdn controller, data centre system and router connection method
CN104486226B (en) A kind of message processing method and device
CN105610632A (en) Virtual network device and related method
CN104506408A (en) Data transmission method and device based on SDN
CN105099921B (en) A kind of fastext processing method and device based on user
CN107078948A (en) A kind of method and apparatus for generating service path
CN104580550A (en) Method and equipment for NAT (network address translation) processing during distribution of multiple service boards in distributed system
CN105939297A (en) TCP message reassembling method and TCP message reassembling device
CN102075438A (en) Unicast data frame transmission method and device
CN105939291A (en) Message processing unit and network device
CN111193756B (en) VXLAN tunnel load balancing method and related equipment
CN107948087A (en) A kind of method and apparatus of load balancing
CN104468371A (en) Multicast service message processing method and device
CN111654437B (en) Message forwarding method and device based on data center
CN106330762A (en) Method of switch to accelerate data processing, CPU core for carrying out acceleration processing on data and switch
CN106534048A (en) Method of preventing SDN denial of service attack, switch and system
CN106341249A (en) Redundant port switching method and device
CN111224901B (en) Data association method, device and distributed system
CN104780165B (en) A kind of message enters the safe verification method and equipment of label
CN102739462B (en) Test message sending method and device
CN108400911A (en) A kind of device and method for realizing Micro-BFD agreements
CN106656760A (en) Message passing method and system based on message queue
CN102917386B (en) Device and method for consistency protocol verification of interfaces S1 of LTE (Long Term Evolution) wireless network
CN107995199A (en) The port speed constraint method and device of the network equipment
CN104243319A (en) Neighbor discovering method and device thereof

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
CB02 Change of applicant information

Address after: 100086, Room 301, north 3, building 1, East Road, Haidian District, Beijing

Applicant after: BEIJING TOPSEC TECHNOLOGY CO., LTD.

Applicant after: Beijing Topsec Network Safety Technology Co., Ltd.

Applicant after: BEIJING TOPSEC SOFTWARE CO., LTD.

Address before: 100086, Room 301, north 3, building 1, East Road, Haidian District, Beijing

Applicant before: Beijing heaven melts letter Science Technologies Co., Ltd.

Applicant before: Beijing Topsec Network Safety Technology Co., Ltd.

Applicant before: BEIJING TOPSEC SOFTWARE CO., LTD.

COR Change of bibliographic data
CB02 Change of applicant information
CB02 Change of applicant information

Address after: Room 301, North Side of No. 3 Building, No. 1 Shangdi East Road, Haidian District, Beijing 100086

Applicant after: Beijing heaven melts letter Science Technologies Co., Ltd.

Applicant after: Beijing Topsec Network Safety Technology Co., Ltd.

Applicant after: BEIJING TOPSEC SOFTWARE CO., LTD.

Address before: Room 301, North Side of No. 3 Building, No. 1 Shangdi East Road, Haidian District, Beijing 100086

Applicant before: BEIJING TOPSEC TECHNOLOGY CO., LTD.

Applicant before: Beijing Topsec Network Safety Technology Co., Ltd.

Applicant before: BEIJING TOPSEC SOFTWARE CO., LTD.

GR01 Patent grant
GR01 Patent grant