CN108228318B - Method, host, system and storage medium for communication between cloud container and management device - Google Patents
Method, host, system and storage medium for communication between cloud container and management device Download PDFInfo
- Publication number
- CN108228318B CN108228318B CN201711483738.8A CN201711483738A CN108228318B CN 108228318 B CN108228318 B CN 108228318B CN 201711483738 A CN201711483738 A CN 201711483738A CN 108228318 B CN108228318 B CN 108228318B
- Authority
- CN
- China
- Prior art keywords
- host
- management unit
- format data
- network protocol
- port
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45545—Guest-host, i.e. hypervisor is an application program itself, e.g. VirtualBox
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- General Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
Abstract
The invention provides a method, a host, a system and a storage medium for communication between a cloud container and a management device, wherein the method comprises the following steps: a sending step, sending the first format data to a predetermined network protocol port; a first conversion step of receiving the first format data from the predetermined network protocol port, converting the first format data into the shared format data, and generating a tag according to the predetermined network protocol port; sharing, namely sharing the sharing format data and the tags to a host management unit, wherein the host management unit is isolated from the cloud container; and a second conversion step, converting the shared format data in the host machine management unit into the first format data, finding out the network protocol address and the port of the management unit according to the label in the host machine management unit, and sending the first format data to the management unit according to the network protocol address and the port.
Description
Technical Field
The invention relates to a method for communicating a cloud container with a management device, a host machine containing the cloud container, a system containing the host machine and the management device and a storage medium.
Background
In a cloud computing multi-user environment, a user may rent software or systems (e.g., databases, middleware, etc.) through a cloud container deployed on a cloud computing operator's host machine (also referred to as a physical machine). A host can simultaneously deploy a plurality of cloud containers for being rented by a plurality of users. Each user rented cloud container is located in a virtual network, and is isolated from each other by SDN (software defined network) technology, and is also isolated from a management device (management network) of a cloud computing operator.
However, for some needs, the software or system in the cloud container needs to access a management unit (e.g., a database module, a data sampling module, etc.) deployed in the management device, thereby creating a need for the cloud container (virtual network) on the host to communicate with the management device (physical network).
There is a method of binding an IP address of a management unit in a management apparatus on a cloud container for lease, which is a management apparatus (management network) that the cloud container for lease can join to a cloud computing operator. However, in this way, the user can access and control the management apparatus of the cloud computing operator through the IP address of the management unit bound to the cloud container, and thus there is a great security risk.
Disclosure of Invention
In order to solve the problems in the prior art, the present invention provides a method of communicating a cloud container with a management apparatus, the cloud container being included in a host, the method including:
a sending step of sending the first format data in the cloud container to a predetermined network protocol port associated with a management unit in the management device;
a first conversion step of receiving the first format data from the predetermined network protocol port, converting the first format data into shared format data, and generating a tag associated with the management unit according to the predetermined network protocol port;
a sharing step, wherein the sharing format data and the label are shared to a host management unit in the host, and the host management unit is isolated from the cloud container;
a second conversion step, converting the shared format data in the host management unit into the first format data, finding out the network protocol address and the port of the management unit according to the label in the host management unit, and sending the first format data to the management unit according to the network protocol address and the port.
Wherein, in the second conversion step, the network protocol address and the port are found from a predetermined table according to the label in the host management unit.
Wherein the host comprises a plurality of cloud containers, and the management device comprises a plurality of management units.
The present invention also provides a host in communication with a management device, the host comprising a cloud container and a host management unit, the host management unit being isolated from the cloud container, wherein,
the cloud container includes:
a transmitting unit that transmits the first format data in the cloud container to a predetermined network protocol port associated with a management unit in the management apparatus;
the first conversion unit is used for receiving the first format data from the preset network protocol port, converting the first format data into shared format data and generating a label associated with the management unit according to the preset network protocol port;
the host management unit includes:
the sharing unit shares the sharing format data and the label to the host machine management unit;
the second conversion unit is used for converting the shared format data in the host machine management unit into the first format data, generating a network protocol address and a port of the management unit according to the label in the host machine management unit, and sending the first format data to the management unit according to the network protocol address and the port.
Further, the present invention also provides a system for enabling a host to communicate with a management device, the system comprising the management device and the host as described above.
Further, the present invention also provides a nonvolatile storage medium having stored thereon a program for causing a cloud container in a host to communicate with a management apparatus, the program being executed by a computer to implement a communication method, the program including:
sending an instruction to send the first format data in the cloud container to a predetermined network protocol port associated with a management unit in the management device;
a first conversion instruction, which is used for converting the first format data into shared format data and generating a label associated with the management unit according to the predetermined network protocol port;
a sharing instruction, which shares the sharing format data and the label to a host management unit in the host, wherein the host management unit is isolated from the cloud container;
and a second conversion instruction, which is used for converting the shared format data in the host machine management unit into the first format data, generating a network protocol address and a port of the management unit according to the label in the host machine management unit, and sending the first format data to the management unit according to the network protocol address and the port.
According to the invention, when a cloud container rented by a user in a host of a cloud computing operator needs to communicate with a management device of the cloud computing operator, the cloud container cannot directly send data in a TCP/IP format to the management device, but sends the data through a host management unit also located in the host. In this way, the cloud container rented by the user cannot directly access the management apparatus, thereby preventing the user from controlling the entire management apparatus. Therefore, the invention can improve the network security, can realize the communication between the cloud container and the management device in a simple and convenient operation mode, and has extremely low research and development and operation costs.
Drawings
FIG. 1 is a block diagram of a system for communicating hosts with a management device in accordance with the present invention;
fig. 2 is a flowchart of a method of communicating a cloud container with a management device according to the present invention.
Detailed Description
Embodiments of the present invention will be described in detail below with reference to the accompanying drawings.
Fig. 1 is a block diagram of a system 1 for communicating hosts with a management apparatus according to the present invention, and as shown in fig. 1, the system 1 includes a cloud computing carrier host 10 and a cloud computing carrier management apparatus 20. The host 10 includes a cloud container 11 and a host management unit 12. Therein, the host 10 may include a plurality of cloud containers 11. Each cloud container 11 includes a sending unit 111 and a first conversion unit 112 the host management unit 12 includes a sharing unit 121 and a second conversion unit 122. The management apparatus 20 of the cloud computing operator includes a management unit 21, wherein the management unit 21 may be a plurality (e.g., a database module, a data sampling module, etc.). In fig. 1, only one cloud container 11 and one management unit 21 are shown for the sake of simplicity.
Wherein the transmitting unit 111 transmits the first format data in the cloud container 11 to a predetermined network protocol port associated with the management unit 21 in the management apparatus 20; the first conversion unit 112 receives the first format data from the predetermined network protocol port, converts the first format data into the shared format data, and generates a tag associated with the management unit 21 according to the predetermined network protocol port; the sharing unit 121 shares the sharing format data and the tag to the host management unit 12; the second conversion unit 122 converts the shared format data in the host management unit 12 into the first format data, generates the network protocol address and the port of the management unit 21 according to the label in the host management unit 12, and sends the first format data to the management unit 21 according to the network protocol address and the port.
Fig. 2 is a flowchart of a method of communicating a cloud container with a management device according to the present invention. An embodiment of the present invention will be described in detail with reference to fig. 1 and 2.
In step S21, the transmission unit 111 in the cloud container 11 transmits the first format data in the cloud container 11 to a predetermined network protocol (IP) port associated with the management unit 21 in the management apparatus 20.
Wherein the first format data is for example data in TCP/IP format, the sending unit 111 sends the data in TCP/IP format to a predetermined IP port, which is for example associated with a managing unit 21 in the managing device 20, which managing unit 21 is for example a database module 21.
In step S22, the first conversion unit 112 receives the first format data from the predetermined IP port, converts the first format data into the shared format data, and generates a tag associated with the management unit 21, for example, associated with the database module 21 in the management apparatus, according to the predetermined IP port.
Here, the first conversion unit 112 receives data in, for example, TCP/IP format from the above-mentioned predetermined IP port, and converts the data in TCP/IP format into shared format data, which is, for example, unix socket file format data. Wherein the predetermined IP port is located in the first conversion unit 112.
In step S23, the sharing unit 121 in the host management unit 12 shares the sharing format data and the tag to the host management unit 12. In this example, for example, the sharing unit 121 is an unix socket file, and the sharing unit 121 shares unix socket file format data and a tag associated with the database module 21 to the host management unit 12.
The cloud container 11 and the host management unit 12 in the host 10 are isolated from each other, and the sharing format data converted by the first conversion unit 112 in the cloud container 11 can be shared with the host management unit 12 by the sharing unit 121 in the host management unit 12, so that the host management unit 12 can receive the sharing format data. The shared format data is not limited to unix socket file format data, but may be other format data that can be shared to the host management unit 12.
In step S24, the second conversion unit 122 in the host management unit 12 converts the shared format data in the host management unit 12 into the first format data, generates the network protocol address and port of the management unit 21 according to the label in the host management unit 12, and sends the first format data to the management unit 21 according to the network protocol address and port.
Here, the second conversion unit 122 converts the unix socket file format data in the host management unit 12 into data in the TCP/IP format, for example. In the second conversion unit 122, a predetermined table is stored, in which correspondence relationships between different tags and network protocol (IP) addresses and ports of different management units 21 are defined, and which is shown in table 1, for example.
TABLE 1
Management unit | Label (R) | IP address and port |
Database module | 1 | IP1, Port 1 |
Data sampling module | 2 | IP1, Port 2 |
Time module | 3 | IP1, Port 3 |
In this example, as described above, the tag shared to the host management unit 12 is associated with the database module 21, and then in connection with table 1, the tag is 1. The second translation unit 122 finds the IP address and port of the corresponding database module from table 1 as "IP 1, port 1" according to tag 1.
The second conversion unit 122 then sends the data in TCP/IP format to the corresponding database module 21 according to the found "IP 1, port 1". In this manner, the cloud container 11 in the host 10 can be made to communicate with the management unit 21 in the management apparatus 20.
In addition, when the management unit 21 needs to transmit data to the cloud container, the data may be transmitted in the reverse path to that described above.
In the invention, when a cloud container rented by a user in a host of a cloud computing operator needs to communicate with a management device of the cloud computing operator, the cloud container can not directly send data in a TCP/IP format to the management device, but sends the data through a host management unit in the host. In this way, the cloud container rented by the user cannot directly access the management apparatus, thereby preventing the user from controlling the entire management apparatus. Therefore, network security can be improved, communication between the cloud container and the management device can be achieved in a simple and convenient operation mode, and research and development and operation costs are extremely low.
Further, although the cloud container 11 and the host management unit 12, which are also in the host 10, are isolated from each other, the cloud container 11 and the host management unit 12 may share data in a local file format. Accordingly, data in the local file format (e.g., unix socket file format data) is mutually transmitted through the first conversion unit 112 and the sharing unit 121, so that the cloud container 11 transmits the data in the TCP/IP format to the corresponding management unit 21 in the management apparatus 20 through the second conversion unit 122 in the host management unit 12. Therefore, the cloud container and the management device can be communicated in a simple and convenient operation mode, and research, development and operation costs are extremely low.
The present invention also provides a nonvolatile storage medium on which a program for causing a cloud container in a host to communicate with a management apparatus is stored, the program being executed by a computer to implement a communication method, the program including:
sending an instruction to send the first format data in the cloud container to a predetermined network protocol port associated with a management unit in the management device;
a first conversion instruction, which is used for converting the first format data into shared format data and generating a label associated with the management unit according to the predetermined network protocol port;
a sharing instruction, which shares the sharing format data and the label to a host management unit in the host, wherein the host management unit is isolated from the cloud container;
and a second conversion instruction, which is used for converting the shared format data in the host machine management unit into the first format data, generating a network protocol address and a port of the management unit according to the label in the host machine management unit, and sending the first format data to the management unit according to the network protocol address and the port.
While the present invention has been described in conjunction with specific embodiments, it is evident that many alternatives, modifications, and variations will be apparent to those skilled in the art in light of the foregoing description. Accordingly, it is intended that such alternatives, modifications, and variations be included within the spirit and scope of the appended claims.
Claims (8)
1. A method for a cloud container to communicate with a management device, the cloud container being included in a host, the method comprising:
a sending step of sending the first format data in the cloud container to a predetermined network protocol port associated with a management unit in the management device;
a first conversion step of receiving the first format data from the predetermined network protocol port, converting the first format data into shared format data, and generating a tag associated with the management unit according to the predetermined network protocol port;
a sharing step, wherein the sharing format data and the label are shared to a host management unit in the host, and the host management unit is isolated from the cloud container;
a second conversion step, converting the shared format data in the host management unit into the first format data, finding out the network protocol address and the port of the management unit according to the label in the host management unit, and sending the first format data to the management unit according to the network protocol address and the port.
2. The method of claim 1, wherein in the second converting step, the network protocol address and the port are found from a predetermined table according to the label in the host management unit.
3. The method of claim 1, wherein the host comprises a plurality of cloud containers and the management device comprises a plurality of management units.
4. A host in communication with a management device, the host comprising a cloud container and a host management unit, the host management unit being isolated from the cloud container, wherein,
the cloud container includes:
a transmitting unit that transmits the first format data in the cloud container to a predetermined network protocol port associated with a management unit in the management apparatus;
the first conversion unit is used for receiving the first format data from the preset network protocol port, converting the first format data into shared format data and generating a label associated with the management unit according to the preset network protocol port;
the host management unit includes:
the sharing unit shares the sharing format data and the label to the host machine management unit;
the second conversion unit is used for converting the shared format data in the host machine management unit into the first format data, generating a network protocol address and a port of the management unit according to the label in the host machine management unit, and sending the first format data to the management unit according to the network protocol address and the port.
5. The host of claim 4, wherein the second translation unit stores a predetermined table, and the second translation looks up the network protocol address and the port from the predetermined table according to the tag in the host management unit.
6. The host of claim 4, wherein the host comprises a plurality of cloud containers and the management apparatus comprises a plurality of management units.
7. A system of hosts communicating with a management device, characterized in that the system comprises the management device and a host according to any of claims 4-6.
8. A non-volatile storage medium on which a program for causing a cloud container in a host to communicate with a management apparatus is stored, the program being executed by a computer to implement a communication method, the program comprising:
sending an instruction to send the first format data in the cloud container to a predetermined network protocol port associated with a management unit in the management device;
a first conversion instruction, which is used for converting the first format data into shared format data and generating a label associated with the management unit according to the predetermined network protocol port;
a sharing instruction, which shares the sharing format data and the label to a host management unit in the host, wherein the host management unit is isolated from the cloud container;
and a second conversion instruction, which is used for converting the shared format data in the host machine management unit into the first format data, generating a network protocol address and a port of the management unit according to the label in the host machine management unit, and sending the first format data to the management unit according to the network protocol address and the port.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711483738.8A CN108228318B (en) | 2017-12-29 | 2017-12-29 | Method, host, system and storage medium for communication between cloud container and management device |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711483738.8A CN108228318B (en) | 2017-12-29 | 2017-12-29 | Method, host, system and storage medium for communication between cloud container and management device |
Publications (2)
Publication Number | Publication Date |
---|---|
CN108228318A CN108228318A (en) | 2018-06-29 |
CN108228318B true CN108228318B (en) | 2021-08-06 |
Family
ID=62646240
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201711483738.8A Active CN108228318B (en) | 2017-12-29 | 2017-12-29 | Method, host, system and storage medium for communication between cloud container and management device |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN108228318B (en) |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN111181992B (en) * | 2020-01-03 | 2022-02-22 | 平安科技(深圳)有限公司 | Communication method, device, equipment and storage medium of nodes and chain codes in block chain |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103152361A (en) * | 2013-03-26 | 2013-06-12 | 华为技术有限公司 | Access control method as well as equipment and system |
CN103368807A (en) * | 2012-04-05 | 2013-10-23 | 思科技术公司 | System and method for migrating application virtual machines in a network environment |
CN103747020A (en) * | 2014-02-18 | 2014-04-23 | 成都致云科技有限公司 | Safety controllable method for accessing virtual resources by public network |
CN105049412A (en) * | 2015-06-02 | 2015-11-11 | 深圳市联软科技有限公司 | Secure data exchange method, device and equipment among different networks |
CN105049450A (en) * | 2015-08-24 | 2015-11-11 | 北京汉柏科技有限公司 | Cloud security system based on virtual network environment and deployment framework of cloud security system |
CN105591820A (en) * | 2015-12-31 | 2016-05-18 | 北京轻元科技有限公司 | Container network management system and method with high scalability |
Family Cites Families (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102307246B (en) * | 2010-09-25 | 2015-12-09 | 广东电子工业研究院有限公司 | Based on the secure communication among virtual machines protection system of cloud computing |
CN103166933B (en) * | 2011-12-15 | 2015-08-19 | 北京天行网安信息技术有限责任公司 | A kind of data security switching system and method |
CN103593246B (en) * | 2012-08-15 | 2017-07-11 | 中国电信股份有限公司 | Communication means, host and dummy machine system between virtual machine and host |
US9253158B2 (en) * | 2013-08-23 | 2016-02-02 | Vmware, Inc. | Remote access manager for virtual computing services |
US11438278B2 (en) * | 2015-06-29 | 2022-09-06 | Vmware, Inc. | Container-aware application dependency identification |
CN106657180B (en) * | 2015-10-29 | 2021-08-24 | 阿里巴巴集团控股有限公司 | Information transmission method and device for cloud service, terminal equipment and system |
CN107508795B (en) * | 2017-07-26 | 2020-03-13 | 中国联合网络通信集团有限公司 | Cross-container cluster access processing device and method |
-
2017
- 2017-12-29 CN CN201711483738.8A patent/CN108228318B/en active Active
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103368807A (en) * | 2012-04-05 | 2013-10-23 | 思科技术公司 | System and method for migrating application virtual machines in a network environment |
CN103152361A (en) * | 2013-03-26 | 2013-06-12 | 华为技术有限公司 | Access control method as well as equipment and system |
CN103747020A (en) * | 2014-02-18 | 2014-04-23 | 成都致云科技有限公司 | Safety controllable method for accessing virtual resources by public network |
CN105049412A (en) * | 2015-06-02 | 2015-11-11 | 深圳市联软科技有限公司 | Secure data exchange method, device and equipment among different networks |
CN105049450A (en) * | 2015-08-24 | 2015-11-11 | 北京汉柏科技有限公司 | Cloud security system based on virtual network environment and deployment framework of cloud security system |
CN105591820A (en) * | 2015-12-31 | 2016-05-18 | 北京轻元科技有限公司 | Container network management system and method with high scalability |
Non-Patent Citations (2)
Title |
---|
To Docker or Not to Docker: A Security Perspective;Theo Combe 等;《IEEE Cloud Computing 》;20161111;第3卷(第5期);54-62 * |
基于容器云平台的网络资源管理与配置系统设计与实现;陈星宇;《中国优秀硕士学位论文全文数据库 信息科技辑》;20160715(第7期);I139-48 * |
Also Published As
Publication number | Publication date |
---|---|
CN108228318A (en) | 2018-06-29 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN114172802B (en) | Container network configuration method, device, computing node, master node and storage medium | |
CN101207604B (en) | Virtual machine system and communication processing method thereof | |
CN100563174C (en) | A kind of method and agent apparatus of managing dynamic address equipment | |
CN104811478A (en) | Remote control system and method of wireless terminal equipment | |
CN102148749A (en) | Method and device for extending switch port | |
US20090204725A1 (en) | Wimax communication through wi-fi emulation | |
CN102523264A (en) | USB (Universal Serial Bus) equipment remote sharing method and system for virtual machine | |
US11496352B2 (en) | Heterogeneous and/or hosted physical layer management system | |
CN104486589A (en) | Assess method and device of GVRP-based video monitoring system | |
CN105162702A (en) | AC current guide method and device | |
CN105554176A (en) | Method and device for sending message and communication system | |
CN107592360B (en) | Internet of things data aggregation method and system based on hybrid cloud | |
CN105450585A (en) | Information transmission method and device | |
CN108228318B (en) | Method, host, system and storage medium for communication between cloud container and management device | |
CN104995610A (en) | Intra-platform networking | |
CN105052106A (en) | Methods and systems for receiving and transmitting internet protocol (ip) data packets | |
CN104571934A (en) | Memory access method, equipment and system | |
CN106100953B (en) | PCIe device shares the generation method of network, apparatus and system | |
EP3629559B1 (en) | Method for configuring forwarding table for user equipment and apparatus | |
CN107231426A (en) | A kind of multiple data centers access method, proxy server and system | |
CN101656722B (en) | Method for generating dynamic host configuration protocol (DHCP) snooping binding information, and device thereof | |
CN102195881A (en) | Method, device and system for updating port information | |
CN102420818A (en) | Network access control method, device and system | |
CN115550313A (en) | Communication method and device of external equipment, electronic equipment and storage medium | |
CN103098025A (en) | Software-loading processing method, apparatus and network system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
CB02 | Change of applicant information |
Address after: 200090 Room 201, 10 B, 619 Longchang Road, Yangpu District, Shanghai. Applicant after: Excellent Polytron Technologies Inc Address before: 200090 Shanghai city Yangpu District road 619 Longchang city concept 10 building B block. Applicant before: SHANGHAI UCLOUD INFORMATION TECHNOLOGY CO., LTD. |
|
CB02 | Change of applicant information | ||
GR01 | Patent grant | ||
GR01 | Patent grant |