IP Library Granted Patent US 12,034,766
Granted Patent B2
US 12,034,766 · App. 17/489,098 · Granted Jul 9, 2024

Method and system for providing edge service, and computing device

Inventors: Nannan Wang (Shenzhen, CN); Boai Yang (Shenzhen, CN); Qing Yin (Xi'an, CN)
Assignee: HUAWEI CLOUD COMPUTING TECHNOLOGIES CO., LTD.
H04L63/1458H04L63/1425
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,034,766
App. No.
17/489,098
Granted
Jul 9, 2024
Kind
B2
Abstract

A method for providing an edge service includes a first security agent that performs data stream transmission with a plurality of endpoint computing devices through an edge link, and each endpoint computing device obtains, using the first security agent, an edge service provided by an edge server. The first security agent determines, based on a data stream transmitted between each endpoint computing device and the first security agent, an abnormal endpoint computing device in the plurality of endpoint computing devices. The first security agent generates link abnormality information, and the link abnormality information includes an address of the abnormal endpoint computing device. The first security agent sends the link abnormality information to the security controller. The security controller receives the link abnormality information, and generates edge link information including an address of a second security agent based on the link abnormality information.

Claims (48)

1. A method for providing an edge service applied to a system, comprising:

communicating, by a first security agent, data streams with a plurality of endpoint computing devices through a first edge link, wherein the system comprises a plurality of edge computing device clusters comprising a first edge computing device cluster, and wherein the first edge computing device cluster comprises the first security agent;

determining, by the first security agent based on the data streams, an abnormal endpoint computing device in the endpoint computing devices;

generating, by the first security agent, link abnormality information comprising a first address of the abnormal endpoint computing device;

sending, by the first security agent, the link abnormality information to a security controller, wherein the system includes the security controller;

receiving, by the security controller, the link abnormality information from the first security agent and the abnormal endpoint computing device;

generating, by the security controller, edge link information based on the link abnormality information; and

sending, by the security controller, the edge link information to a normal endpoint computing device in the endpoint computing devices,

wherein the edge link information comprises a second address of a second security agent.

2. The method of claim 1 , further comprising further determining, by the first security agent based on a parameter of the data streams, an unsecure endpoint computing device in the endpoint computing devices as the abnormal endpoint computing device.

3. The method of claim 1 , wherein after the receiving, the method further comprises handling, by the security controller, an abnormality on the abnormal endpoint computing device based on the link abnormality information.

4. The method of claim 3 , further comprising:

rejecting, by the security controller, a link access request from the abnormal endpoint computing device; and

sending, by the security controller, a network termination request to a telecommunications (telco) server, wherein the network termination request instructs the telco server to stop providing network communication for the abnormal endpoint computing device.

5. The method of claim 1 , further comprising:

establishing, by the normal endpoint computing device, a new edge link with the second security agent based on the edge link information; and

performing, by the normal endpoint computing device, second data stream transmission with the second security agent through the new edge link.

6. The method of claim 1 , further comprising further determining, the abnormal endpoint computing device based on a parameter of the data stream, wherein a quality of a second edge link between the abnormal endpoint computing device and the first security agent is abnormal.

7. The method of claim 1 , further comprising:

sending, by the security controller, the edge link information to the abnormal endpoint computing device;

establishing, by the abnormal endpoint computing device, a new edge link with the second security agent based on the edge link information; and

performing, by the abnormal endpoint computing device, second data stream transmission with the second security agent through the new edge link.

8. A method for providing an edge service implemented by a security controller, wherein the method comprises:

receiving link access requests from a plurality of endpoint computing devices;

sending, to each endpoint computing device of the endpoint computing devices, first edge link information comprising a first address of a first security agent;

receiving, from the first security agent and an abnormal endpoint computing device, link abnormality information comprising a second address of the abnormal endpoint computing device in the endpoint computing devices;

generating, based on the link abnormality information, second edge link information comprising a third address of a second security agent; and

sending the second edge link information to a normal endpoint computing device in the endpoint computing devices.

9. The method of claim 8 , further comprising handling an abnormality on the abnormal endpoint computing device based on the link abnormality information, wherein the abnormal endpoint computing device is an insecure endpoint computing device in the endpoint computing devices.

10. The method of claim 9 , further comprising:

rejecting a link access request from the abnormal endpoint computing device; and

sending a network termination request to a telecommunications (telco) server, wherein the network termination request instructs the telco server to stop providing network communication for the abnormal endpoint computing device.

11. The method of claim 8 , further comprising sending the second edge link information to the abnormal endpoint computing device, wherein a quality of an edge link between the abnormal endpoint computing device and the first security agent is abnormal.

12. A computing device comprising:

a memory configured to store computer executable instructions; and

a processor coupled to the memory, wherein the computer executable instructions that when executed by the processor cause the computing device to be configured to:

receive link access requests from a plurality of endpoint computing devices;

send, to each endpoint computing devices, first edge link information comprising a first address of a first security agent;

receive, from the first security agent and an abnormal endpoint computing device, link abnormality information comprising a second address of the abnormal endpoint computing device in the endpoint computing devices;

generate, based on the link abnormality information, second edge link information comprising a third address of a second security agent; and

send the second edge link information to a normal endpoint computing device in the endpoint computing devices.

13. The computing device of claim 12 , wherein the computer executable instructions further cause the computing device to be configured to handle an abnormality on the abnormal endpoint computing device based on the link abnormality information, and wherein the abnormal endpoint computing device is an insecure endpoint computing device in the endpoint computing devices.

14. The computing device of claim 13 , wherein the computer executable instructions further cause the computing device to be configured to:

reject a link access request from the abnormal endpoint computing device; and

send a network termination request to a telecommunications (telco) server, wherein the network termination request instructs the telco server to stop providing network communication for the abnormal endpoint computing device.

15. The computing device of claim 12 , wherein the computer executable instructions further cause the computing device to be configured to send the second edge link information to the abnormal endpoint computing device, and wherein a quality of an edge link between the abnormal endpoint computing device and the first security agent is abnormal.

16. The computing device of claim 12 , wherein the second security agent is a virtual computing device.

17. The method of claim 1 , wherein the second security agent is a virtual computing device.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 3, 2024
From: WANG, NANNAN; YANG, BOAI; YIN, QING
To: HUAWEI TECHNOLOGIES CO., LTD.
Reel/Frame 067305/0629 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 1, 2022
From: HUAWEI TECHNOLOGIES CO., LTD.
To: HUAWEI CLOUD COMPUTING TECHNOLOGIES CO., LTD.
Reel/Frame 059267/0088 →