公开(公告)号：US20210124820A1

公开(公告)日：2021-04-29

申请号：US17090588

申请日：2020-11-05

Applicant: Huawei Technologies Co., Ltd.

Inventor： Tianfu FU ,  Chong ZHOU

IPC: G06F21/51 ,  G06F21/56 ,  G06F21/57 ,  G06F12/14 ,  H04L9/32 ,  H04L29/06

Abstract: Embodiments of the present disclosure disclose an application program integrity verification method and a network device. The method includes: performing characteristic value calculation on data of an application program when the application program starts, to obtain a first digest of the application program; decrypting a stored digital signature of the application program according to a public key in an embedded key pair to obtain a second digest of the application program, where the digital signature is obtained, according to a private key in the key pair, by signing data of the application program each time the application program is updated, and the key pair is a manufacturer key pair corresponding to the application program; and determining that integrity verification of the application program passes if the first digest and the second digest are the same, otherwise, determining that integrity verification of the application program does not pass.

公开(公告)号：US20170193220A1

公开(公告)日：2017-07-06

申请号：US15461244

申请日：2017-03-16

Applicant: Huawei Technologies Co., Ltd.

Inventor： Chong ZHOU ,  Tianfu FU

IPC: G06F21/52 ,  G06F21/57 ,  G06F21/55

Abstract: Disclosed are a method and an apparatus for trusted measurement, where the method includes: obtaining a first processing result by performing a first-manner processing on a code segment, and using a result obtained by performing a second-manner processing on the first processing result as a reference value; obtaining, at a first moment when the system is running, a second processing result by performing the first-manner processing on the code segment, and obtaining a first measurement value by performing the second-manner processing on the second processing result; and determining whether the first measurement value and the reference value are equal, and when the first measurement value and the reference value are equal, the system is trusted, where the code segment in the memory is a code segment that does not change with normal running of the system during one start-up and a running process of the system.

公开(公告)号：US20170249456A1

公开(公告)日：2017-08-31

申请号：US15594264

申请日：2017-05-12

Applicant: Huawei Technologies Co., Ltd.

Inventor： Tianfu FU ,  Chong ZHOU

IPC: G06F21/51 ,  G06F12/14 ,  H04L29/06 ,  G06F21/56 ,  H04L9/32

CPC classification number: G06F21/51 ,  G06F12/1408 ,  G06F21/56 ,  G06F21/565 ,  G06F21/57 ,  G06F2212/1052 ,  H04L9/3234 ,  H04L9/3247 ,  H04L63/0435 ,  H04L63/0442 ,  H04L63/061 ,  H04L63/123

Abstract: Embodiments of the present disclosure disclose an application program integrity verification method and a network device. The method includes: performing eigenvalue calculation on data of an application program when the application program starts, to obtain a first digest of the application program (101); decrypting a stored digital signature of the application program according to a public key in an embedded key pair to obtain a second digest of the application program, where the digital signature is obtained, according to a private key in the key pair, by signing data of the application program each time the application program is updated (102), and the key pair is a manufacturer key pair corresponding to the application program; and determining that integrity verification of the application program passes if the first digest and the second digest are the same, otherwise, determining that integrity verification of the application program does not pass (103).

公开(公告)号：US20150200857A1

公开(公告)日：2015-07-16

申请号：US14671665

申请日：2015-03-27

Applicant: Huawei Technologies Co., Ltd.

Inventor： Shi TANG ,  Chong ZHOU

IPC: H04L12/803 ,  H04L29/06 ,  H04L12/851

CPC classification number: H04L47/125 ,  H04L45/24 ,  H04L47/2441 ,  H04L69/22

Abstract: A method of load sharing, includes: extracting a factor field capable of distinguishing data flow in a packet header of the classified data flow, and taking the factor field as an input factor of a default load sharing algorithm of a network forwarding device interface, or taking the factor field as an input factor of a load sharing algorithm capable of uniformly allocating the data flows and selected according to the flow characteristic of the data flows, calculating the paths of the data flows, and forwarding the data flows according to respective paths. The method is used for increasing the expansibility of the network forwarding device and achieving load balancing.

Abstract translation: 一种负载共享的方法包括：提取能够区分分类数据流的分组报头中的数据流的因子域，并将因子域作为网络转发设备接口的默认负载分担算法的输入因子，或 将因子域作为能够均匀分配数据流并根据数据流的流特性选择的负载分担算法的输入因子，计算数据流的路径，并根据各自的路径转发数据流。 该方法用于增加网络转发设备的可扩展性，实现负载均衡。