US 12,218,937 B2
Packet processing method and apparatus, device, and computer-readable storage medium
Shiguang Li, Beijing (CN)
Assigned to HUAWEI TECHNOLOGIES CO., LTD., Shenzhen (CN)
Filed by Huawei Technologies Co., Ltd., Shenzhen (CN)
Filed on Apr. 28, 2022, as Appl. No. 17/731,893.
Application 17/731,893 is a continuation of application No. PCT/CN2020/117875, filed on Sep. 25, 2020.
Claims priority of application No. 201911057490.8 (CN), filed on Oct. 31, 2019.
Prior Publication US 2022/0263823 A1, Aug. 18, 2022
Int. Cl. G06F 7/04 (2006.01); G06F 15/16 (2006.01); H04L 9/40 (2022.01); H04L 29/06 (2006.01)
CPC H04L 63/0876 (2013.01) 20 Claims
OG exemplary drawing
 
1. A packet processing method implemented by a protection device, the packet processing method comprising:
configuring the protection device to protect a server;
receiving from a terminal device a first access request packet comprising a packet that is communicated based on Transmission Control Protocol/Internet Protocol (TCP/IP) and that is destined for the server;
extracting a first fingerprint feature from a transport-layer packet header and/or a network-layer packet header of the first access request packet, wherein the first fingerprint feature corresponds to a first operating system (OS) type of the terminal device;
recognizing the first fingerprint feature based on a fingerprint feature database to determine whether to allow the first access request packet to access the server, wherein the fingerprint feature database comprises a second fingerprint feature corresponding to a second OS type of the terminal device that is allowed to access the server;
determining whether the fingerprint feature database comprises the first fingerprint feature;
allowing, when the fingerprint feature database comprises the first fingerprint feature, the first access request packet to access the server;
disallowing, when the fingerprint feature database does not comprise the first fingerprint feature, the first access request packet to access the server;
allowing, when the first access request packet is allowed to access the server, the first access request packet to pass through; and
blocking, when the first access request packet is not allowed to access the server, the first access request packet.