Chinese Academy of Sciences

Jindi Liu

Peng Zeng

Dong Li

Haibin Yu

Zhibo Li

Xueting Yu

Ming Yang

Jianming Zhao

Wenli Shang

Ming Wan

The present invention discloses a data forwarding unit based on a Handle identifier, comprising a dynamic configuration module, a Handle identifier data identification module and a matching-forwarding module. The system of the present invention is applied to network devices such as switches and routers, and supports dynamic configuration of data packet analysis, matching and forwarding rules through data interaction with network systems such as SDN managers, so that the network devices can identify data packets based on the Handle identifier and perform the specified operation on the designated data packets with the Handle identifier according to the rules of dynamic configuration.

Data forwarding unit based on handle identifier

The present invention discloses a method for controlling transmission security of an industrial communication flow based on an SDN architecture. The method comprises: designing a flow security control module in a management controller, performing in-depth parsing on industrial communication flow data, matching the parsing result with each preset industrial rule policy, and executing a control processing operation of the industrial rule policy, to implement transmission control of an industrial communication flow. The management controller comprises an industrial rule policy database used for storing all industrial rule policies set by a user. An SDN switch maintains a structure of a flow table, and an industrial communication flow is forwarded according to the flow table. The flow table comprises a security control identifier used for indicating whether security transmission of this communication flow needs to be controlled. The present invention can detect the legality of an industrial communication data flow, to control access of industrial communication that does not conform to an industrial rule policy, so that the security and reliability of industrial control systems based on an SDN architecture are guaranteed.

Method for controlling transmission security of industrial communications flow based on SDN architecture

The present invention provides an AP handover method based on double wireless network interface cards. A mobile terminal actively scans the signal strength of an AP, compares the scanned signal strength with the signal strength of a currently accessed AP, and if the signal strength is greater than the signal strength of the current AP, starts handover; otherwise, continuously scans till the handover succeeds. To reduce the handover delay and in accordance with the characteristic that the moving paths are basically fixed in industrial application scenarios, the present invention provides a pre-learning mechanism, that is, before formal application, information such as the location of the AP and the handover sequence in the application scenario is learned and stored in a terminal node, so that specific scanning and handover can be implemented in formal application. The present invention solves the problem of rapid AP handover in the industrial mobile network scenario, the double wireless network interface cards are used to achieve handover without interruption, and the pre-learning mechanism is used in specific industrial application scenarios, so the scanning delay is further reduced.

AP handover method in industrial mobile network based on double wireless network interface cards

The present invention discloses a method and system for realizing Open vSwitch that supports 802.1p. The method comprises: a priority mode configuration stage: the switch receiving a priority configuration statement of a user and parsing the configuration statement; a configuration storage stage: storing the parsed configuration information into a switch database; and a priority-based data forwarding stage: the switch putting a received data packet into a corresponding priority queue according to said configuration information and a flow table so as to forward the data packet. The system comprises a configuration module, a configuration information storage module and a priority-based forwarding module, wherein the data priority-based forwarding module comprises a configuration reading unit, a traffic control setting unit, a flow table storage unit, a data packet parsing unit, a flow table matching unit, a flow table executing unit, a scheduling unit, priority queues, a sending unit, etc.

Growing community of inventors

Liaoning, China

Jindi Liu