Patent ID: 11916881
Assignee: HUAWEI TECHNOLOGIES CO., LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 18:
19. A rule detection apparatus, comprising:
at least one processor; and
one or more non-transitory computer readable memories coupled to the at least one processor and storing instructions that, when executed bythe at least one processor, cause the apparatus to:
obtain a first rule for inclusion in an access control list;
obtain a first initial priority corresponding to the first rule, wherein the first rule corresponds to a first node in a Hasse diagram data structure, and wherein the first initial priority is stored in the first node;
obtain, from a second rule of the access control list, a second initial priority corresponding to a second node, wherein the second node is a parent node of the first node in the Hasse diagram data structure, and wherein the second node corresponds to the second rule;
determine a first target node based on the Hasse diagram data structure, wherein a current priority corresponding to the first target node is the same as the first initial priority;

obtain a first target value corresponding to the first initial priority by calculating a sum of packet space sizes corresponding to the first target node, wherein the packet space sizes corresponding to the first target node represent a quantity of non -overlapping elements between the first target node and a descendant node of the first target node;
determine, based on the first initial priority, the second initial priority, and the first target value, whethera rule anomaly occurs between the first rule and the second rule; and
send an alarm to a user in response to determining that the rule anomaly has occurred, wherein the alarm provides rule anomaly information to the user.