CN107888328A - information processing method - Google Patents

Abstract

The present invention provides an information processing method, the method comprising: extracting a first code group from original information according to the extraction feature; converting the first code group into a second code group according to a predetermined conversion rule; converting the second code group according to a decoding rule group to decode to get the target information. Therefore, the original information can be efficiently processed to obtain the target information.

Description

information processing method

technical field

The present invention relates to information processing methods.

Background technique

Industrial equipment such as electrical equipment can be connected to a network such as the Internet, and communicate according to a predetermined protocol, for example, send the operation log of the industrial equipment in the form of packets according to a predetermined communication protocol. Such packets are usually in hexadecimal format. In order to read the content in the package, the user needs to manually perform the following operations: convert the package in hexadecimal format to binary format; Divide the packet in binary format into different fields; finally, interpret or analyze these fields according to the RFC document to obtain the required information. For example, when an Internet Protocol Security (Internet Protocol Security, IPsec) security protocol is used for communication, both parties communicating with each other may send respective configuration information to each other. Such configuration information may include, for example, information related to the encryption algorithm of the Advanced Encryption Standard (Advanced Encryption Standard, AES), information related to the key length of 128 bits (bit), information related to, for example, the Secure Hash Algorithm (SecureHash Algorithm) , SHA) verification algorithm-related information, such as pre-shared key (Pre-Shared Key, PSK) authentication method-related information. These information can be used to verify whether the operator's configuration in the equipment is consistent with the actual operation of the equipment. However, such manual packet processing is inefficient and has a high error rate.

Contents of the invention

The purpose of the present invention is to solve the above-mentioned and/or other technical problems. To this end, exemplary embodiments provide an information processing method that can efficiently process original information to obtain target information.

In an exemplary embodiment, an information processing method is provided, the method comprising: extracting a first code group from original information according to the extraction feature; converting the first code group into a second code group; The second code group is decoded to obtain the target information.

Therefore, the original information can be processed automatically, so that the target information can be efficiently obtained, and errors caused by manual processing of the original information can be reduced or prevented.

The method further includes: determining the extraction features according to the original information. When the original information is the information contained in the log file sent by the industrial equipment, the step of determining the extraction feature includes: determining the extraction feature according to the communication protocol used to send the log file.

Therefore, an appropriate extraction feature can be automatically selected according to the original information to extract the first code group, thereby efficiently processing the original information.

The first code group includes a plurality of bytes in hexadecimal, and the step of converting the first code group into a second code group includes: grouping a plurality of bytes in the first code group into a plurality of byte groups; Adding a guide mark to each byte group in the plurality of byte groups; combining the plurality of byte groups added with the guide mark to obtain a second code group. The step of grouping the plurality of bytes in the first code group into a plurality of byte groups includes: after removing the bytes corresponding to the placeholders from the plurality of bytes, the byte order remaining is grouped as Multiple byte groups. Each byte group in the plurality of byte groups includes the same number of N bytes, and the step of obtaining the second code group also includes: when the number of bytes grouped into the last byte group When it is less than N, add at least one padding byte in the last byte group. The step of adding a guide mark for each byte group in the plurality of byte groups includes: adding a guide mark indicating the position of the byte group in the code group before the first byte of each byte group .

Therefore, the first code group can be automatically converted into the second code group, thereby improving the efficiency and accuracy of information processing. In addition, the second code group thus obtained can be directly input into the existing "Wireshark" series software, so that target information can be obtained simply and efficiently.

The method further includes: determining a decoding rule according to the original information. 9. The method according to claim 8, wherein the original information is the information contained in the log file sent by the industrial equipment, and the step of determining the decoding rule comprises: determining the decoding rule according to the communication protocol used to send the log file. 10. The method according to claim 9, wherein the decoding rule includes a request annotation file corresponding to the communication protocol used to send the log file, and the decoding rule includes the step of obtaining target information including: In the request annotation file corresponding to the communication protocol, the bytes at different positions in the second code group are decoded to obtain the target information corresponding to the bytes in the second code group.

Therefore, the second code group can be automatically decoded to obtain the target information, thereby reducing or preventing errors caused by manual operations.

Description of drawings

The following drawings are only intended to schematically illustrate and explain the exemplary embodiments, and do not limit the scope of the present invention. in,

FIG. 1 is a flowchart illustrating an information processing method according to an exemplary embodiment;

FIG. 2 is a diagram illustrating an example of original information according to an exemplary embodiment;

FIG. 3 is a diagram illustrating an example of a second code group according to an exemplary embodiment;

FIG. 4 is a diagram illustrating an example of target information according to an exemplary embodiment.

Detailed ways

In order to have a clearer understanding of the technical features, purposes and effects of the present invention, the specific implementation manners of the present invention will now be described with reference to the accompanying drawings.

FIG. 1 is a flowchart illustrating an information processing method according to an exemplary embodiment. As shown in FIG. 1, in operation S110, the first code group may be extracted from the original information according to the extracted features. Here, the original information may be information contained in a log file sent by an industrial device such as an electric device. For example, the original information can be the information contained in the general packet radio service (General Packet Radio Service, GPRS) communication log of the Siemens remote control device CP-8022, for example, the current state of the GPRS module (for example, whether to obtain an address, whether there is an error etc.), message records flowing into the GPRS module, and status information such as operator number and time returned by the operator base station. Such system log files may be sent in packets using a peer-peer protocol (Peer-Peer Protocol, PPP).

The extracted feature may be a feature indicating a start position of the first code group. According to an exemplary embodiment, the extracted features may be determined according to raw information. For example, the extraction feature can be determined according to the communication protocol employed as the original information of the packet.

FIG. 2 is a diagram illustrating an example of a part of original information according to an exemplary embodiment. The original information shown in FIG. 2 may be the information included in the packet using the PPP protocol. According to an exemplary embodiment, the extraction feature may be determined as "c021" according to the PPP protocol adopted by the original information. Here, the extracted feature "c021" in the original information may indicate that the communication protocol used to send the original information is the PPP protocol. When other communication protocols are used to send the original information, the extracted features may be different.

When the extraction feature is determined, the first code group can be extracted from the original information according to the determined extraction feature. For example, as shown in FIG. 2, the extracted feature may be determined as "c021" according to the PPP protocol. Then, the codes c0217d21-7d207d20-... that start with the extracted feature "c021" can be found in the original information. Here, the code c0217d21-7d207d20-7d387d21-7d247d29-607d227d-267d207d-2a7d207d-207d257d-267d23c5-6b6d7d27-7d227d28-7d2251767e from the start to the end of feature extraction can be extracted as the first code group.

Referring back to FIG. 1, after the first code group is obtained, in step S130, the first code group may be converted into a second code group.

For example, in the above embodiment, the first code group c0217d21-7d207d20-7d387d21-7d247d29-607d227d-267d207d-2a7d207d-207d257d-267d23c5-6b6d7d27-7d227d28-7d225 extracted from the original information as shown in Figure 2 may include Multiple hexadecimal bytes, for example, c0, 21, 7d, 21, 7d, 20, 7d, 20, .... Therefore, these bytes can first be grouped into groups of bytes. Multiple bytes can be processed in the process of grouping them into groups of bytes. For example, bytes such as 7d here can represent placeholders. Therefore, the byte 7d corresponding to the placeholder can be removed from the plurality of bytes. The remaining bytes c0, 21, 21, 20, 20, . . . can be obtained after removing the bytes corresponding to the placeholders. Then, "20", which represents "0" according to the ASCII encoding rules, can be subtracted from the remaining bytes. Through such operations, c0, 21, 01, 00, 00, ... can be obtained. Finally, the obtained bytes c0, 21, 01, 00, 00, ... can be sequentially grouped into groups of bytes:

Here, each byte group may include the same number N of bytes, for example, each may include 8 bytes. In an exemplary embodiment, when the number of bytes grouped into the last byte group is less than N, at least one padding byte may be added to the last byte group, so that the last byte group The number of bytes in is equal to N. In the above example, the padding byte can be a space character "□".

Then, guide markers can be added to each byte group. For example, the first byte of each group of bytes can be preceded by a guide mark indicating the position of the group of bytes in the second code group:

Here, the index mark can adopt hexadecimal system. For example, "000000" indicates that the first byte c0 in the byte group of the line is in the 1st position in the second code group, and "000008" indicates that the first byte in the byte group of the line 09 is located at the 9th position in the second code group, "000010" indicates that the first byte in the byte group located in this line 05 is located in the 17th position in the second code group, and "000018" indicates the byte located in the line The first byte 08 in the byte group is at position 25 in the second code group.

Then, the byte groups added with the index marks can be combined to obtain the second code group. FIG. 3 is a diagram illustrating an example of a second code group according to the current exemplary embodiment.

Referring back to FIG. 1, after the second code group is obtained, in operation S150, the second code group may be decoded according to a decoding rule, so that target information may be obtained. FIG. 4 is a diagram illustrating an example of target information according to an exemplary embodiment.

Here, the decoding rule can be determined according to the original information. For example, the decoding rules may be determined using the Internet communication protocol used to transmit the original information. Therefore, the decoding rule may include a Request For Comments (RFC) file corresponding to the communication protocol used to send the log file. The RFC file may be a single file or a plurality of files in which detailed specifications of Internet communication protocols such as the PPP protocol are written. RFC files can be arranged by number, and RFC files with different numbers can describe different protocols. For example, the original information shown in FIG. 2 may be the information contained in the packet sent using the PPP protocol. Therefore, the RFC file describing the PPP protocol may be determined and selected as the decoding rule used here.

After the decoding rule is determined, the target information can be obtained according to the determined decoding rule. For example, as shown in FIG. 4 , according to the determined decoding rule, the code 01 04 09 60 in the second code group can be decoded to obtain the target information Maximum Receive Unit: 2400 (maximum reception unit: 2400).

The method for processing original information to obtain target information according to specific embodiments has been described above. However, exemplary embodiments are not limited thereto, and in some exemplary embodiments, all or a part of steps in the method may be automatically performed by dedicated or general-purpose software or hardware. For example, operations S110-S150 may be accomplished by dedicated or general-purpose software or hardware. In another example, operation S150 may be performed using existing "Wireshark" series software. In this example, the second code group can be input into the "Wireshark" series of software, so that the decoding rules can be automatically determined and the target information can be obtained through the software. Here, the "Wireshark" series of software can call the pre-stored RFC file corresponding to it according to the communication protocol used to send the original information, and can use the called RFC file as a decoding rule to decode the second code group to obtain the target information . Since the "Wireshark" series of software is known, a specific description related thereto is omitted here.

As shown above, according to exemplary embodiments, original information can be simply and accurately processed to obtain target information. Therefore, the processing time required to obtain the target information can be greatly shortened, and errors caused by the user's manual conversion of information and codes can be prevented.

It should be understood that although this description is described according to various embodiments, not each embodiment only includes an independent technical solution, and this description of the description is only for clarity, and those skilled in the art should take the description as a whole , the technical solutions in the various embodiments can also be properly combined to form other implementations that can be understood by those skilled in the art.

The above descriptions are only illustrative specific implementations of the present invention, and are not intended to limit the scope of the present invention. Any equivalent changes, modifications and combinations made by those skilled in the art without departing from the concept and principle of the present invention shall fall within the protection scope of the present invention.

Claims (10)

1. An information processing method, characterized in that the method comprises:

extracting a first code group from the original information according to the extraction characteristics;

converting the first code-group to a second code-group;

and decoding the second code group according to the decoding rule so as to obtain the target information.

2. The method of claim 1, wherein the method further comprises:

and determining the extracted features according to the original information.

3. The method of claim 2, wherein the raw information is information contained in a log file transmitted by the industrial equipment, and the step of determining the extracted features comprises:

the extracted features are determined according to the communication protocol used to transmit the log file.

4. The method of claim 1, wherein the first code-group comprises a plurality of bytes in 16-ary, and the step of converting the first code-group into the second code-group comprises:

grouping a plurality of bytes in the first code group into a plurality of byte groups;

adding a direction flag for each tuple in the plurality of tuples;

combining the plurality of tuples with the index markers added to obtain a second set of codes.

5. The method of claim 4, wherein grouping the plurality of bytes in the first group of bytes into a plurality of groups of bytes comprises:

bytes remaining after removing bytes corresponding to placeholders from the plurality of bytes are sequentially grouped into a plurality of tuples.

6. The method of claim 5, wherein each tuple in the plurality of tuples comprises a same number N of bytes, the step of obtaining a second tuple further comprising:

adding at least one complementary byte in the last tuple when the number of bytes grouped into the last tuple is less than N.

7. The method of claim 6, wherein the step of adding a direction flag for each tuple in the plurality of tuples comprises:

a guide mark indicating the position of each tuple in the code set is added before the first byte of the tuple.

8. The method of claim 1, wherein the method further comprises:

the decoding rules are determined from the original information.

9. The method of claim 8, wherein the raw information is information contained in a log file transmitted by the industrial device, and the step of determining the decoding rule comprises:

the decoding rules are determined according to the communication protocol used to transmit the log file.

10. The method of claim 9, wherein the decoding rule includes a request annotation file corresponding to a communication protocol used to transmit the log file, the step of decoding the rule including obtaining the target information comprising:

and decoding the bytes at different positions in the second code group according to the request annotation file corresponding to the communication protocol adopted for sending the log file so as to obtain the target information corresponding to the bytes in the second code group.