CN106793167A - VPN traffic support method and device under a kind of mobile network environment - Google Patents

VPN traffic support method and device under a kind of mobile network environment Download PDF

Info

Publication number
CN106793167A
CN106793167A CN201710048163.0A CN201710048163A CN106793167A CN 106793167 A CN106793167 A CN 106793167A CN 201710048163 A CN201710048163 A CN 201710048163A CN 106793167 A CN106793167 A CN 106793167A
Authority
CN
China
Prior art keywords
vpn
network
event
state
recorded
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201710048163.0A
Other languages
Chinese (zh)
Inventor
王佰玲
傅春乐
何清刚
刘扬
陈彬
张昭
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Harbin Institute of Technology Weihai
Original Assignee
Harbin Institute of Technology Weihai
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Harbin Institute of Technology Weihai filed Critical Harbin Institute of Technology Weihai
Publication of CN106793167A publication Critical patent/CN106793167A/en
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W76/00Connection management
    • H04W76/20Manipulation of established connections
    • H04W76/25Maintenance of established connections
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W76/00Connection management
    • H04W76/10Connection setup
    • H04W76/19Connection re-establishment

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

Disclose VPN traffic support method and device under a kind of mobile network environment.Wherein, methods described includes:The current network state of real-time monitoring mobile terminal;Current network change events are determined with pre-recorded previous network state according to current network state;The subsequent work event of VPN is determined with the previous working condition of pre-recorded VPN according to current network change events.The present invention can be carried out " courtesy are suspended, intelligent restoration " when network access mode changes by above step to VPN services, and then improve the robustness and stability of mobile VPN service, it is ensured that good Consumer's Experience.

Description

VPN traffic support method and device under a kind of mobile network environment
Technical field
The present invention relates to the VPN traffic indemnifying party under technical field of information communication, more particularly to a kind of mobile network environment Method and device.
Background technology
With the fast development of intelligent mobile terminal and mobile network, the safety problem of mobile network is increasingly highlighted.Virtually Special network technology (VPN, Virtual Private Network) is a kind of important technical of the communication that guarantees network security. Traditional VPN is operated in the form of software service on PC, routing gateway, server, its network environment for facing Stablize relatively.Therefore, traditional VPN only need between a client and a server take periodically transmission, receive the mode of heartbeat packet Network Abnormal can be excluded, it is ensured that the stabilized communication of both sides.
Compared with traditional VPN, what the network environment that mobile VPN faces will be complicated is more.On the one hand, the network of mobile terminal connects Connect mode various.Such as, the conventional internetwork connection mode of mobile terminal has 2G, 3G, 4G and Wi-Fi network etc..On the other hand, move The internetwork connection mode of dynamic terminal is often because human factor or non-artificial factor change.Wherein, human factor includes using Householder moves opening network, closes network, handover network.Caused by non-artificial factor is typically by external environment condition, including honeycomb is moved Interruption, the decay or interruption of wireless network signal of dynamic network signal.
Just because of the complexity of mobile network environment, the mode that mobile VPN cannot only rely only on heartbeat packet maintains communication Stabilization.First, it is impossible to recover the proper communication of VPN for network switching problem caused by artificial or non-artificial factor.For example, working as When mobile terminal starts mobile VPN service using the access way of wireless network, mobile terminal is caused because customer location changes New Wi-Fi Hotspot is accessed so that the network configuration of mobile terminal changes, VPN cannot proper communication.Second, it is impossible to Recover the proper communication of VPN for network closing problem caused by non-artificial factor.For example:When mobile terminal using 2G, 3G or When the access way of the cellular mobile network of 4G starts mobile VPN service, because user's communication causes cellular mobile network to disconnect, Mobile device network recovery after end of conversation but VPN traffic but cannot normally recover.3rd, it is impossible to for human factor Caused network opens the proper communication that problem recovers VPN.For example:When mobile terminal is using the cellular mobile network of 2G, 3G or 4G When the access way of network starts mobile VPN service, because user has accessed Wi-Fi Hotspot, communication of mobile terminal preferentially chooses nothing Gauze network carries out network service, causes the VPN cannot proper communication.
For the complex environment of mobile network, the present invention proposes a kind of VPN traffic suitable under mobile network environment Support method and device, with when mobile terminal network access way changes, make VPN services can carry out " courtesy suspend, Intelligent restoration ", and then improve the robustness and stability of mobile VPN service, it is ensured that good Consumer's Experience.
The content of the invention
It is an object of the invention to propose VPN traffic support method and device under a kind of mobile network environment, to move When dynamic terminal network access way changes, VPN services are made to carry out " courtesy are suspended, intelligent restoration ", and then improve shifting The robustness and stability of dynamic VPN services, it is ensured that good Consumer's Experience.
The invention discloses the VPN traffic support method under a kind of mobile network environment, including:
The current network state of step S1, real-time monitoring mobile terminal;
Step S2, current network change events are determined with pre-recorded previous network state according to current network state;
It is step S3, next with the previous working condition decision-making VPN of pre-recorded VPN according to current network change events Work event.
Preferably, network state includes:Without network insertion state, cellular mobile network state, wireless communication status;Network Change events include:Network interruption event, network switching event, network recovery event;
And, in step s 2, current network change events are determined according to equation below:
InterruptEvent=(x, y) | x ∈ cmNet ∪ wNet, y ∈ noNet } (1)
SwitchEvent=(x, y) | x, y ∈ cmNet ∪ wNet, x ≠ y } (2)
RecoverEvent=(x, y) | x ∈ noEvent, y ∈ cmNet ∪ wNet } (3)
In formula, x is pre-recorded previous network state, and y is current network state, and interruptEvent is in network Disconnected event, switchEvent is network switching event, and recoverEvent is network recovery event, and cmNet is cellular mobile network Network state, wNet is wireless communication status, and noWet is without network state.
Preferably, step S3 includes:
If current network change events are startup for the previous working condition of network interruption event and pre-recorded VPN State, then the subsequent work event of VPN is suspending event;
If current network change events are pause for the previous working condition of network recovery event and pre-recorded VPN State, then the subsequent work event of VPN is reboot event;
If current network change events are startup for the previous working condition of network switching event and pre-recorded VPN State, then the subsequent work event of VPN is reboot event.
Preferably, methods described also includes:After it is determined that the subsequent work event of VPN is suspending event, monitoring VPN's Halted state duration t;Also, exceed predetermined threshold value T in the halted state duration t of VPN0When, terminate VPN services.
Preferably, methods described also includes:Record the network configuration information of VPN;Also, when restarting to VPN, root Recover VPN according to the network configuration information of the VPN of record to service;Wherein, the network configuration information of the VPN includes:Mobile terminal User profile, virtual network address, routing configuration information.
Present invention also offers the VPN traffic ensuring equipment under a kind of mobile network environment, including:
Network Expert Systems device, for the current network state of real-time monitoring mobile terminal;
VPN connects controller, for being remembered in advance according to the current network state and VPN Configuration Control Unit The previous network state of record determines current network change events;
VPN operation state controllers, for advance with VPN Configuration Control Unit according to the current network change events The subsequent work event of the previous working condition decision-making VPN of the VPN of record;
VPN Configuration Control Unit, for recording the network state of mobile terminal and the working condition of VPN.
Preferably, network state includes:Without network insertion state, cellular mobile network state, wireless communication status;Network Change events include:Network interruption event, network switching event, network recovery event;
And, VPN connects controller and determines current network change events according to following rule:
InterruptEvent=(x, y) | x ∈ cmNet ∪ wNet, y ∈ noNet } (1)
SwitchEvent=(x, y) | x, y ∈ cmNet ∪ wNet, x ≠ y } (2)
RecoverEvent=(x, y) | x ∈ noEvent, y ∈ cmNet ∪ wNet } (3)
In formula, x is pre-recorded previous network state, and y is current network state, and interruptEvent is in network Disconnected event, switchEvent is network switching event, and recoverEvent is network recovery event, and cmNet is cellular mobile network Network state, wNet is wireless communication status, and noWet is without network state.
Preferably, the subsequent work event of VPN operation state controllers decision-making VPN, including:
If current network change events are startup for the previous working condition of network interruption event and pre-recorded VPN State, then the subsequent work event of the VPN of VPN operation state controllers decision-making is suspending event;
If current network change events are pause for the previous working condition of network recovery event and pre-recorded VPN State, then the subsequent work event of the VPN of VPN operation state controllers decision-making is reboot event;
If current network change events are startup for the previous working condition of network switching event and pre-recorded VPN State, then the subsequent work event of the VPN of VPN operation state controllers decision-making is reboot event.
Preferably, described device also includes:Timer, for decision-making VPN subsequent work event for suspending event it Afterwards, the halted state duration t of VPN is monitored;Also, exceed predetermined threshold value T in the halted state duration t of VPN0When, Terminate VPN services.
Preferably, network configuration controller is additionally operable to:Record the network configuration information of VPN;And, weight is being carried out to VPN The network configuration information of Qi Shi, the VPN according to record recovers VPN services;Wherein, the network configuration information of the VPN includes:Move Dynamic information of terminal user, virtual network address, routing configuration information.
As can be seen from the above technical solutions, the VPN traffic support method under the mobile network environment in the present invention is main Comprise the following steps:Monitor the current network state of mobile terminal;Previous network state based on current network state with record Can determine current network change events;Previous working condition decision-making VPN based on current network change events with the VPN of record Subsequent work event.The present invention by above step, can when network access mode changes intelligent decision VPN next work Make event, and then VPN services can be carried out " courtesy are suspended, intelligent restoration ", improve the robustness of mobile VPN service and steady It is qualitative, it is ensured that good Consumer's Experience.Further, by recording the network configuration information of current VPN when VPN suspends, And VPN services are recovered according to the network configuration information for retaining when VPN is restarted, so as to repeat to lead to when VPN is restarted Letter consults interactive with subscriber authentication etc., improves the resume speed of VPN services.
Brief description of the drawings
By the specific embodiment part of offer referring to the drawings, the features and advantages of the present invention will become more It is readily appreciated that, in the accompanying drawings:
Fig. 1 is VPN working conditions transition diagram of the invention;
Fig. 2 is the network state transition diagram of mobile terminal of the invention;
Fig. 3 is the VPN traffic support method flow chart under the mobile network environment of the embodiment of the present invention;
Fig. 4 is the VPN traffic ensuring equipment composition frame chart under the mobile network environment of the embodiment of the present invention;
101st, Network Expert Systems device;102nd, VPN connection controller;103rd, VPN operation state controllers;104、 VPN Configuration Control Unit.
Specific embodiment
Illustrative embodiments of the invention are described in detail with reference to the accompanying drawings.Illustrative embodiments are retouched State merely for the sake of demonstration purpose, and be definitely not to the present invention and its application or the limitation of usage.
In the prior art, when the network access mode of mobile terminal changes, it is likely that cause mobile VPN service Cannot proper communication.In consideration of it, the present inventor proposes a kind of VPN traffic guarantee suitable under mobile network environment Method and apparatus, with the subsequent work event of the intelligent decision VPN when network access mode changes, and then improve mobile VPN The robustness and stability of service, it is ensured that good Consumer's Experience.
Before the VPN traffic support method and device in specifically introducing the embodiment of the present invention, inventor is proposed first VPN working conditions model and the network state model of mobile VPN be introduced.
Traditional VPN service only has " start, terminate " two kinds of working conditions, and " start, terminate " two kinds of work events. In order to ensure the proper communication of VPN when network access mode changes, the present inventor proposes a kind of new VPN work State model.In the model, " pause, exception " both working conditions, and " suspend, restart " both work be increased Event.Wherein, " pause " state is directed to the mutability proposition of network connection, and "abnormal" state is directed to mobile VPN in net Network configuration, physical link are abnormal or the proposition of other program exceptions.Specifically, VPN working conditions model proposed by the present invention A receiver Mathematical Modeling for five-tuple, i.e. (Σ, S, S can be used0, δ, F) describe.Wherein, Σ is input alphabet, i.e., The work event of VPN;S is the nonempty finite set of state, the i.e. working condition of VPN, S0It is original state set, i.e. VPN Starting state;δ is the working condition transfer function of VPN;F is end-state set, i.e. the final state of VPN.Fig. 1 shows this The corresponding state transition graph of VPN working condition models.It can be seen from figure 1 that the conversion of working condition needs corresponding work event Triggering.For example, being transformed into halted state by starting state needs the triggering of suspending event, needed by halted state to starting state The triggering of reboot event, the triggering of anomalous event is needed by starting state to abnormality.
In addition, in view of the network type of mobile VPN is complex, network state of the present inventor to mobile VPN Model is studied.In the model, networking state includes:Cellular mobile network state, wireless communication status, without network-like State.Wherein, cellular mobile network state includes:2G, 3G, 4G network.Network change event includes:Network interruption event, network Recovery event, network switching event.Specifically, the network state model of mobile VPN proposed by the present invention can with one it is hexa-atomic The converter of group, i.e. (Σ, Γ, S, S0, δ, ω) describe.Wherein, Σ is input alphabet, i.e. network change event;Γ is It is input into the work event of alphabet, i.e. mobile VPN;S is the nonempty finite set of state, i.e. network state;S0It is original state Set, i.e., initial network state;δ is network state transfer function, i.e. S × Σ → S;ω is output function, i.e. S × Σ → Γ.Fig. 2 shows the corresponding state transition graph of network state model of the VPN.As it is clear from fig. 2 that becoming when from wireless communication status Change to during without network state, there occurs network interruption event, the VPN work events for now exporting are suspending events;When from without net When network state transformation is to wireless communication status, network recovery event is there occurs, the VPN work events for now exporting are to restart thing Part;When from cellular mobile network state transformation to wireless communication status, network switching event is there occurs, the VPN for now exporting Work event is reboot event.Again such as, when 3G network state is transformed to by 2G network states, there occurs network switching thing Part, the VPN work events for now exporting are reboot events.
Network state model based on above VPN working conditions model and mobile VPN, the present inventor proposes one Plant the VPN traffic support method under mobile network environment.As shown in figure 3, the main following steps of VPN traffic support method:
In step sl, the current network state of real-time monitoring mobile terminal.
In the specific implementation, when mobile VPN service starts, synchronous triggering is to the real-time of mobile terminal current network state Monitoring.Wherein, the current network state of mobile terminal is probably cellular mobile network state (such as 2G nets, 3G nets, 4G nets), nothing Line network state or without network state.
In step s 2, determine that current network changes thing according to current network state and pre-recorded previous network state Part.Wherein, network change event includes:Network interruption event, network switching event, network recovery event.
In the specific implementation, current network change events can be determined according to equation below:
InterruptEvent=(x, y) | x ∈ cmNet ∪ wNet, y ∈ noNet } (1)
SwitchEvent=(x, y) | x, y ∈ cmNet ∪ wNet, x ≠ y } (2)
RecoverEvent=(x, y) | x ∈ noEvent, y ∈ cmNet ∪ wNet } (3)
In formula, x is pre-recorded previous network state, and y is current network state, and interruptEvent is in network Disconnected event, switchEvent is network switching event, and recoverEvent is network recovery event, and cmNet is cellular mobile network Network state, wNet is wireless communication status, and noWet is without network state.Be can be seen that by formula (1) to (3), previous network-like State is cellular mobile network state or wireless communication status and when current network state is without network state, can determine whether current Network change event is network interruption event;When previous network state is 2G nets and current network state is netted for 3G, can determine whether Current network change events are network switching event;When previous network state is 4G nets and current network state is wireless network, Can determine whether that current network change events are network switching event;It is without network state and current network shape in previous network state When state is cellular mobile network or wireless communication status, can determine whether that current network change events are network recovery event.
In step s3, according to current network change events with the previous working condition decision-making VPN's of pre-recorded VPN Subsequent work event.
Specifically, if the current network change events determined in step S2 are network interruption event and pre-recorded The previous working condition of VPN is starting state, then the subsequent work event of VPN is suspending event.Then, touched according to suspending event Hair VPN services transform to halted state by starting state.In a preferred embodiment, it is determined that the subsequent work thing of VPN Part be suspending event after, the halted state duration t of VPN can be also monitored.If the halted state duration of VPN T exceedes predetermined threshold value T0When, then it is automatic to terminate VPN services.Wherein, T0Value can be configured as needed, such as can be by T0 It is set to 1h.Serviced into auto-line-ending by VPN for a long time placed in a suspend state, be easy to communicating pair saving to communicate and provide Source, reduces the electric quantity consumption of mobile terminal, and makes CPU, internal memory and bandwidth money that VPN services can in time needed for releasing session Source.
If the current network change events determined in step S2 are previous for network recovery event and pre-recorded VPN's Working condition is halted state, then the subsequent work event of VPN is reboot event.Then, VPN services are triggered according to reboot event Starting state is transformed to by halted state.
If additionally, the current network change events determined in step S2 are network switching event and pre-recorded VPN Previous working condition is starting state, then the subsequent work event of VPN is reboot event.Then, VPN is triggered according to reboot event Service is restarted so that VPN by starting state, transform to halted state and transform to starting state again.
In embodiments of the present invention, by step S1 to step S3, can in VPN runnings real-time monitoring VPN Working condition and network state, and automatic when can break in a network, intelligently pause VPN services, in network recovery or net Automatically VPN services are restarted when network switches, intelligently.So, VPN services in the prior art are efficiently solved due to network Access way changes and is unable to the problem of proper communication, improves the robustness and stability of VPN services.
In a preferred embodiment, VPN traffic support method also includes:Record the network configuration information of VPN;With And, when restarting to VPN, the network configuration information of the VPN according to record recovers VPN services;Wherein, the net of the VPN Network configuration information includes:Mobile terminal subscriber information, virtual network address, routing configuration information.By the net for retaining mobile VPN Network configuration information, can when VPN is restarted directly use retain configuration information, and without be repeated before each VPN traffic into The interaction such as row communication negotiation, authentication, improves the resume speed of VPN services.
The invention allows for the VPN traffic ensuring equipment under a kind of mobile network environment.As shown in figure 4, the VPN traffic Ensuring equipment is specifically included:Network Expert Systems device 101, VPN connection controller 102, VPN operation state controllers 103, VPN Configuration Control Unit 104.Wherein, Network Expert Systems device 101 is connected controller 102 with VPN and is connected, VPN Connection controller 102 is also respectively connected with VPN operation state controllers 103, VPN Configuration Control Unit 104, VPN work shapes State controller 103 is also connected with VPN Configuration Control Unit 104.
Network Expert Systems device 101, it is for the current network state of real-time monitoring mobile terminal and current by what is monitored Network state is sent to VPN connection controller 102.In the specific implementation, can VPN service start when synchronous averaging network State monitor 101.When real-time monitoring is carried out, the current network state of mobile terminal is probably without network insertion state, honeybee Nest mobile network state (such as 2G nets, 3G nets, 4G nets) or wireless communication status.
VPN connects controller 102, for according to current network state and VPN the configuration control for monitoring The pre-recorded previous network state of device 104 determines current network change events.Specifically, VPN connection controller 102 Current network change events can be determined according to formula (1) to (3):
InterruptEvent=(x, y) | x ∈ cmNet ∪ wNet, y ∈ noNet } (1)
SwitchEvent=(x, y) | x, y ∈ cmNet ∪ wNet, x ≠ y } (2)
RecoverEvent=(x, y) | x ∈ noEvent, y ∈ cmNet ∪ wNet } (3)
In formula, x is pre-recorded previous network state, and y is current network state, and interruptEvent is in network Disconnected event, switchEvent is network switching event, and recoverEvent is network recovery event, and cmNet is cellular mobile network Network state, wNet is wireless communication status, and noWet is without network state.Be can be seen that by formula (1) to (3), be honeycomb in x When mobile network's state or wireless communication status and y are without network state, VPN connection controller 102 judges current net Network change events are network interruption event;When x is 2G nets and y is netted for 3G, VPN connection controller 102 judges current net Network change events are network switching event;When x is 4G nets and y is wireless network, VPN connection controller 102 judges currently Network change event is network switching event;When it without network state and y is cellular mobile network or wireless communication status that x is, VPN connection controller 102 judges that current network change events are network recovery event.
VPN operation state controllers 103, for connecting the current network change thing that controller 102 is exported according to VPN The subsequent work event of the previous working condition decision-making VPN of part and the pre-recorded VPN of VPN Configuration Control Unit 104.
Specifically, if VPN connection controller 102 determine current network change events for network interruption event, And VPN Configuration Control Unit 104 record VPN previous working condition be starting state when, VPN operation state controllers The subsequent work event that 103 decision-makings go out VPN is suspending event.Then, VPN operation state controllers 103 are touched according to suspending event Hair VPN service pauses.If the current network change events that VPN connection controller 102 determines for network recovery event and The previous working condition of the record of VPN Configuration Control Unit 104 is halted state, then the decision-making of VPN operation state controllers 103 goes out The subsequent work event of VPN is reboot event.Then, VPN operation state controllers 103 trigger VPN services according to reboot event Restarting.If the current network change events that VPN connection controller 102 determines are network switching event and VPN The previous working condition of the VPN of the record of Configuration Control Unit 104 is starting state, then the decision-making of VPN operation state controllers 103 goes out The subsequent work event of VPN is reboot event.Then, VPN operation state controllers 103 trigger VPN services according to reboot event Restarting.
VPN Configuration Control Unit 104, for recording the network state of mobile terminal and the working condition of VPN.Preferably , VPN Configuration Control Unit 104 is additionally operable to record the network configuration information of VPN, and, when restarting to VPN, root Recover VPN according to the network configuration information of the VPN of record to service.Wherein, the network configuration information of the VPN includes:Mobile terminal User profile, virtual network address, routing configuration information.Retain the network of mobile VPN by VPN Configuration Control Unit 104 Configuration information, can directly use the network configuration information for retaining when VPN is restarted, and without being repeated before each VPN traffic The interaction such as communication negotiation, authentication is carried out, the resume speed of VPN services is improve.
In embodiments of the present invention, by setting comprising Network Expert Systems device, VPN connection controller, VPN work The device of state controller, VPN Configuration Control Unit, can in VPN runnings the working condition of real-time monitoring VPN and Network state, and automatic when can break in a network, intelligently pause VPN services, in network recovery or network switching certainly Move, intelligently restart VPN services.So, VPN services in the prior art are efficiently solved because network access mode changes Become and be unable to the problem of proper communication, improve the robustness and stability of VPN services.
In addition, in a preferred embodiment, VPN traffic ensuring equipment also includes:Timer.The timer, uses In after it is determined that the subsequent work event of VPN is suspending event, the halted state duration t of VPN is monitored;Also, in VPN Halted state duration t exceed predetermined threshold value T0When, terminate VPN services.By setting the timer, can to it is long when Between VPN placed in a suspend state service into auto-line-ending, be easy to communicating pair to save the communication resource, reduce the electricity of mobile terminal Amount consumption, and make CPU, internal memory and bandwidth resources that VPN services can in time needed for releasing session.
Although with reference to illustrative embodiments, invention has been described, but it is to be understood that the present invention does not limit to The specific embodiment that Yu Wenzhong is described in detail and shown, in the case of without departing from claims limited range, this Art personnel can make various changes to the illustrative embodiments.

Claims (10)

1. VPN traffic support method under a kind of mobile network environment, it is characterised in that
The current network state of step S1, real-time monitoring mobile terminal;
Step S2, current network change events are determined with pre-recorded previous network state according to current network state;
Step S3, the subsequent work according to current network change events and the previous working condition decision-making VPN of pre-recorded VPN Event.
2. the method for claim 1, it is characterised in that network state includes:Without network insertion state, cellular mobile network Network state, wireless communication status;Network change event includes:Network interruption event, network switching event, network recovery event;
And, in step s 2, current network change events are determined according to equation below:
InterruptEvent={ (x, y) x ∈ cmNet ∪ wNet, y ∈ noNet } (1)
SwitchEvent=(x, y) | x, y ∈ cmNet ∪ wNet, x ≠ y } (2)
RecoverEvent=(x, y) | x ∈ noEvent, y ∈ cmNet ∪ wNet } (3)
In formula, x is pre-recorded previous network state, and y is current network state, and interruptEvent is network interruption thing Part, switchEvent is network switching event, and recoverEvent is network recovery event, and cmNet is cellular mobile network shape State, wNet is wireless communication status, and noWet is without network state.
3. method as claimed in claim 2, it is characterised in that step S3 includes:
If current network change events are starting state for the previous working condition of network interruption event and pre-recorded VPN, Then the subsequent work event of VPN is suspending event;
If current network change events are halted state for the previous working condition of network recovery event and pre-recorded VPN, Then the subsequent work event of VPN is reboot event;
If current network change events are starting state for the previous working condition of network switching event and pre-recorded VPN, Then the subsequent work event of VPN is reboot event.
4. method as claimed in claim 3, it is characterised in that methods described also includes:
After it is determined that the subsequent work event of VPN is suspending event, the halted state duration t of VPN is monitored;Also, The halted state duration t of VPN exceedes predetermined threshold value T0When, terminate VPN services.
5. the method as described in claim 3 or 4, it is characterised in that methods described also includes:
Record the network configuration information of VPN;Also, when restarting to VPN, the network configuration information of the VPN according to record Recover VPN services;
Wherein, the network configuration information of the VPN includes:Mobile terminal subscriber information, virtual network address, routing configuration letter Breath.
6. the VPN traffic ensuring equipment under a kind of mobile network environment, it is characterised in that described device includes:
Network Expert Systems device, for the current network state of real-time monitoring mobile terminal;
VPN connects controller, for pre-recorded according to the current network state and VPN Configuration Control Unit Previous network state determines current network change events;
VPN operation state controllers, for pre-recorded with VPN Configuration Control Unit according to the current network change events VPN previous working condition decision-making VPN subsequent work event;
VPN Configuration Control Unit, for recording the network state of mobile terminal and the working condition of VPN.
7. device as claimed in claim 6, it is characterised in that network state includes:Without network insertion state, cellular mobile network Network state, wireless communication status;Network change event includes:Network interruption event, network switching event, network recovery event;
And, VPN connects controller and determines current network change events according to following rule:
InterruptEvent={ (x, y) x ∈ cmNet ∪ wNet, y ∈ noNet } (1)
SwitchEvent=(x, y) | x, y ∈ cmNet ∪ wNet, x ≠ y } (2)
RecoverEvent={ (x, y) x ∈ noEvent, y ∈ cmNet ∪ wNet } (3)
In formula, x is pre-recorded previous network state, and y is current network state, and interruptEvent is network interruption thing Part, switchEvent is network switching event, and recoverEvent is network recovery event, and cmNet is cellular mobile network shape State, wNet is wireless communication status, and noWet is without network state.
8. device as claimed in claim 7, it is characterised in that the subsequent work thing of VPN operation state controller decision-makings VPN Part, including:
If current network change events are starting state for the previous working condition of network interruption event and pre-recorded VPN, Then the subsequent work event of the VPN that VPN operation state controllers determine is suspending event;
If current network change events are halted state for the previous working condition of network recovery event and pre-recorded VPN, Then the subsequent work event of the VPN that VPN operation state controllers determine is reboot event;
If current network change events are starting state for the previous working condition of network switching event and pre-recorded VPN, Then the subsequent work event of the VPN that VPN operation state controllers determine is reboot event.
9. device as claimed in claim 8, it is characterised in that described device also includes:
Timer, when the halted state for after it is determined that the subsequent work event of VPN is suspending event, monitoring VPN continues Between t;Also, exceed predetermined threshold value T in the halted state duration t of VPN0When, terminate VPN services.
10. device as claimed in claim 8 or 9, it is characterised in that network configuration controller is additionally operable to:Record the network of VPN Configuration information;And, when restarting to VPN, the network configuration information of the VPN according to record recovers VPN services;
Wherein, the network configuration information of the VPN includes:Mobile terminal subscriber information, virtual network address, routing configuration letter Breath.
CN201710048163.0A 2016-04-01 2017-01-20 VPN traffic support method and device under a kind of mobile network environment Pending CN106793167A (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN2016102029554 2016-04-01
CN201610202955 2016-04-01

Publications (1)

Publication Number Publication Date
CN106793167A true CN106793167A (en) 2017-05-31

Family

ID=58941429

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710048163.0A Pending CN106793167A (en) 2016-04-01 2017-01-20 VPN traffic support method and device under a kind of mobile network environment

Country Status (1)

Country Link
CN (1) CN106793167A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108924889A (en) * 2018-08-10 2018-11-30 哈尔滨工业大学(威海) A kind of network aware and seamless handover method suitable for IOS VPN
CN109495889A (en) * 2018-12-20 2019-03-19 中山大学新华学院 Heterogeneous mobile network access control method based on mutual confidence-building mechanism
CN112398718A (en) * 2020-11-20 2021-02-23 北京达佳互联信息技术有限公司 Network transmission method and device, electronic equipment and storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060089121A1 (en) * 2004-10-27 2006-04-27 Hani Elgebaly Method and apparatus for automatic connecting of virtual private network clients to a network
CN101248615A (en) * 2005-08-05 2008-08-20 施克莱无线公司 Suspension and resumption of secure data connection session
CN102316092A (en) * 2010-06-30 2012-01-11 丛林网络公司 The VPN networking client that connects again fast that has that is used for mobile device
US20160036780A1 (en) * 2014-05-21 2016-02-04 Fortinet, Inc. Automated configuration of endpoint security management

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060089121A1 (en) * 2004-10-27 2006-04-27 Hani Elgebaly Method and apparatus for automatic connecting of virtual private network clients to a network
CN101248615A (en) * 2005-08-05 2008-08-20 施克莱无线公司 Suspension and resumption of secure data connection session
CN102316092A (en) * 2010-06-30 2012-01-11 丛林网络公司 The VPN networking client that connects again fast that has that is used for mobile device
US20160036780A1 (en) * 2014-05-21 2016-02-04 Fortinet, Inc. Automated configuration of endpoint security management

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108924889A (en) * 2018-08-10 2018-11-30 哈尔滨工业大学(威海) A kind of network aware and seamless handover method suitable for IOS VPN
CN108924889B (en) * 2018-08-10 2020-11-13 哈尔滨工业大学(威海) Network sensing and seamless switching method suitable for IOS VPN
CN109495889A (en) * 2018-12-20 2019-03-19 中山大学新华学院 Heterogeneous mobile network access control method based on mutual confidence-building mechanism
CN109495889B (en) * 2018-12-20 2022-01-04 中山大学新华学院 Heterogeneous mobile network access control method based on mutual trust mechanism
CN112398718A (en) * 2020-11-20 2021-02-23 北京达佳互联信息技术有限公司 Network transmission method and device, electronic equipment and storage medium

Similar Documents

Publication Publication Date Title
CN105159816B (en) A kind of method, mobile terminal and system reducing equipment power dissipation
CN103312543B (en) A kind of intelligence speed-raising client and intelligent accelerating method thereof
US9568989B2 (en) Method for acting as service agent, modem, and terminal by establishing a heartbeat connection with an application server
CN103200618B (en) Wireless local area network WLAN hotspot function control processing method and device
CN103379593B (en) A kind of terminal power saving method and terminal power saving device and network side battery saving arrangement
WO2015131679A1 (en) Task process processing method and device
CN102883464B (en) Gx interface resource releasing method and device
CN104904309B (en) A kind of method and mobile terminal sending heartbeat message
CN107204999B (en) Method and device for realizing heartbeat
CN109151913A (en) A kind of control method and relevant apparatus of service quality
CN102891877B (en) Realize the Online Processing System and method of terminal applies
CN106793167A (en) VPN traffic support method and device under a kind of mobile network environment
CN106879007A (en) Method and device for controlling working state of wireless equipment
CN103313427A (en) Method and device for starting data network of mobile terminal and mobile terminal
CN103002426A (en) Method and device for controlling PCC (policy control and charging) rules in Preload mode
CN102801734B (en) Access control method of intelligent machine data network
CN102694910A (en) Mobile communication terminal and communication limiting and monitoring method based on mobile communication terminal
CN104243259B (en) Collaboration method and system in distributed elastic network interconnection system
CN107769946B (en) Network configuration method and network equipment
CN104469970A (en) Method and device for reconnecting data network
WO2016045525A1 (en) Method and apparatus for processing state of terminal
CN105760777B (en) A kind of safety information management method and system based on intelligent platform
CN104717375B (en) A kind of method and apparatus for realizing saving power for terminal
CN104914976A (en) Data processing method, data processing device and terminal
CN112333849B (en) Equipment connection disconnection processing method and device, mobile terminal and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20170531

RJ01 Rejection of invention patent application after publication