公开(公告)号：US09313225B2

公开(公告)日：2016-04-12

申请号：US14388989

申请日：2013-08-07

Applicant: HUIZHOU TCL MOBILE COMMUNICATION CO., LTD.

Inventor： Jinming Xiang ,  Dan Zhou ,  Xiaofeng Lu ,  Jun Wu

IPC: G06F11/00 ,  H04L29/06 ,  H04L5/00 ,  G06F12/14

CPC classification number: H04L63/1458 ,  H04L5/0055 ,  H04L29/06095 ,  H04L69/16

Abstract: A method for processing packets, an electronic device and a storage medium are proposed. The present invention presets a defense module preventing DoS in the mobile terminal. A connection requesting side establishes connection with the defense module according to three-handshake principle of TCP, and a defense module sends a SYN packet to a mobile terminal as the connection requesting side. When the defense module successfully handshakes with the mobile terminal, connection between the connection requesting side and the mobile terminal is created, so that DoS attack, especially SYN attack can be effectively prevented. When mobile terminals, especially mobile phones are network hotspot, attack on internal mobile terminal from external network can be effectively prevented.

Abstract translation: 提出了一种处理数据包的方法，电子设备和存储介质。 本发明预先设置防止移动终端中的DoS的防御模块。 连接请求方根据TCP的三次握手原则与防御模块建立连接，防御模块作为连接请求方向移动终端发送SYN包。 当防御模块与移动终端成功握手时，创建连接请求方与移动终端之间的连接，从而可以有效地防止DoS攻击，特别是SYN攻击。 当移动终端，特别是移动电话是网络热点时，可以有效地防止外部网络对内部移动终端的攻击。

公开(公告)号：US20150067840A1

公开(公告)日：2015-03-05

申请号：US14388989

申请日：2013-08-07

Applicant: HUIZHOU TCL MOBILE COMMUNICATION CO., LTD.

Inventor： Jinming Xiang ,  Dan Zhou ,  Xiaofeng Lu ,  Jun Wu

IPC: H04L29/06 ,  H04L5/00

CPC classification number: H04L63/1458 ,  H04L5/0055 ,  H04L29/06095 ,  H04L69/16

Abstract: A method for processing packets, an electronic device and a storage medium are proposed. The present invention presets a defense module preventing DoS in the mobile terminal. A connection requesting side establishes connection with the defense module according to three-handshake principle of TCP, and a defense module sends a SYN packet to a mobile terminal as the connection requesting side. When the defense module successfully handshakes with the mobile terminal, connection between the connection requesting side and the mobile terminal is created, so that DoS attack, especially SYN attack can be effectively prevented. When mobile terminals, especially mobile phones are network hotspot, attack on internal mobile terminal from external network can be effectively prevented.

Abstract translation: 提出了一种处理数据包的方法，电子设备和存储介质。 本发明预先设置防止移动终端中的DoS的防御模块。 连接请求方根据TCP的三次握手原则与防御模块建立连接，防御模块作为连接请求方向移动终端发送SYN包。 当防御模块与移动终端成功握手时，创建连接请求方与移动终端之间的连接，从而可以有效地防止DoS攻击，特别是SYN攻击。 当移动终端，特别是移动电话是网络热点时，可以有效地防止外部网络对内部移动终端的攻击。

公开(公告)号：US20150016439A1

公开(公告)日：2015-01-15

申请号：US14369458

申请日：2012-12-25

Applicant: HUIZHOU TCL MOBILE COMMUNICATION CO., LTD.

Inventor： Dan Zhou

IPC: H04W74/00 ,  H04L29/12 ,  H04M1/253 ,  H04L12/743

CPC classification number: H04W74/002 ,  H04L45/7453 ,  H04L61/2007 ,  H04L61/2514 ,  H04L61/255 ,  H04L61/2557 ,  H04L61/256 ,  H04L65/104 ,  H04M1/2535 ,  H04W8/26 ,  H04W84/12

Abstract: A method for a mobile terminal to access a network through a cell phone is provided. The mobile terminal may be connected to a network enabled cell phone via a WIFI (wireless fidelity) connection mode, and the network enabled cell phone may serve as a gateway router. TCP/IP (transmission control protocol/internet protocol) operating principle having element information, such as source address, source port, protocol, destination address and destination port in a data packet, may be processed when a data packet arrives at a network layer of a network enabled cell phone. A Hash table may be dynamically established for searching a network connection, and NAT (network address translation) treatment may be carried out to a data packet, thus, an associated mobile terminal may simultaneously access the network with the network enabled cell phone by the external network IP address of the network enabled cell phone. Because the two devices may share an IP address to access the network, all the network flow may be generated at the gateway cell phone, thus, avoiding cost of other devices. Furthermore, a Hash table may be dynamically established for the data packet in the present invention, which may accelerate search speed of a data packet and processing speed.

Abstract translation: 提供了一种移动终端通过手机接入网络的方法。 移动终端可以经由WIFI（无线保真）连接模式连接到启用网络的手机，并且网络启用的手机可以用作网关路由器。 可以在数据分组到达网络层的网络层时处理具有数据分组中的源地址，源端口，协议，目的地址和目的地端口等元素信息的TCP / IP（传输控制协议/因特网协议）的工作原理 一个启用网络的手机。 可以动态建立哈希表来搜索网络连接，并且可以对数据分组执行NAT（网络地址转换）处理，因此，相关联的移动终端可以通过外部的网络使能的蜂窝电话同时访问网络 网络启用手机的网络IP地址。 因为两个设备可以共享一个IP地址来访问网络，所以可以在网关手机上产生所有的网络流，从而避免了其他设备的成本。 此外，本发明中的数据分组可以动态建立哈希表，这可以加速数据分组的搜索速度和处理速度。

公开(公告)号：US09307555B2

公开(公告)日：2016-04-05

申请号：US14369458

申请日：2012-12-25

Applicant: HUIZHOU TCL MOBILE COMMUNICATION CO., LTD

Inventor： Dan Zhou

IPC: H04W4/00 ,  H04W74/00 ,  H04L29/06 ,  H04L12/743 ,  H04L29/12 ,  H04M1/253 ,  H04W8/26 ,  H04W84/12

CPC classification number: H04W74/002 ,  H04L45/7453 ,  H04L61/2007 ,  H04L61/2514 ,  H04L61/255 ,  H04L61/2557 ,  H04L61/256 ,  H04L65/104 ,  H04M1/2535 ,  H04W8/26 ,  H04W84/12

Abstract: A method for a mobile terminal to access a network through a cell phone is provided. The mobile terminal may be connected to a network enabled cell phone via a WIFI (wireless fidelity) connection mode, and the network enabled cell phone may serve as a gateway router. TCP/IP (transmission control protocol/internet protocol) operating principle having element information, such as source address, source port, protocol, destination address and destination port in a data packet, may be processed when a data packet arrives at a network layer of a network enabled cell phone. A Hash table may be dynamically established for searching a network connection, and NAT (network address translation) treatment may be carried out to a data packet, thus, an associated mobile terminal may simultaneously access the network with the network enabled cell phone by the external network IP address of the network enabled cell phone. Because the two devices may share an IP address to access the network, all the network flow may be generated at the gateway cell phone, thus, avoiding cost of other devices. Furthermore, a Hash table may be dynamically established for the data packet in the present invention, which may accelerate search speed of a data packet and processing speed.

Abstract translation: 提供了一种移动终端通过手机接入网络的方法。 移动终端可以经由WIFI（无线保真）连接模式连接到启用网络的手机，并且网络启用的手机可以用作网关路由器。 可以在数据分组到达网络层的网络层时处理具有数据分组中的源地址，源端口，协议，目的地址和目的地端口等元素信息的TCP / IP（传输控制协议/因特网协议）的工作原理 一个启用网络的手机。 可以动态建立哈希表来搜索网络连接，并且可以对数据分组执行NAT（网络地址转换）处理，因此，相关联的移动终端可以通过外部的网络使能的蜂窝电话同时访问网络 网络启用手机的网络IP地址。 因为两个设备可以共享一个IP地址来访问网络，所以可以在网关手机上产生所有的网络流，从而避免了其他设备的成本。 此外，本发明中的数据分组可以动态建立哈希表，这可以加速数据分组的搜索速度和处理速度。