CN109787993B

CN109787993B - Method and device for multi-user to access private network

Info

Publication number: CN109787993B
Application number: CN201910100806.0A
Authority: CN
Inventors: 张玉刚; 李红雨; 王艳辉; 杨春晖
Original assignee: Visionvera Information Technology Co Ltd
Current assignee: Visionvera Information Technology Co Ltd
Priority date: 2019-01-31
Filing date: 2019-01-31
Publication date: 2021-04-23
Anticipated expiration: 2039-01-31
Also published as: CN109787993A

Abstract

The embodiment of the application provides a method and a device for accessing a private network by multiple users, wherein the method and the device are applied to a video network, and data exchange between different video clients and different video servers can be realized by binding a plurality of main virtual terminals with a plurality of video clients and a plurality of video servers one by one through a plurality of main virtual terminals in a video network server; the binding relationship is generated between the plurality of first sub-virtual terminals in the FeiMa client and the user terminal respectively, and the binding relationship is generated between the plurality of second sub-virtual terminals in the FeiMa server and the user server respectively, so that the plurality of user terminals can access different IP service private networks, the video networking, the Internet and the like at the same time through one set of network, and the network deployment expense and the resource waste are greatly reduced.

Description

Method and device for multi-user to access private network

Technical Field

The present application relates to the field of video networking technologies, and in particular, to a method and an apparatus for enabling multiple users to access a private network.

Background

With the rapid development of network technologies, bidirectional communications such as video conferences and video teaching are widely popularized in the aspects of life, work, learning and the like of users.

Currently, video networking services are widely popularized nationwide, and high-definition video interaction technology of video networking plays a significant role in government departments and other industries. The video networking adopts the most advanced real-time high-definition video exchange technology in the world, realizes the real-time transmission of the high-definition video in the whole network which can not be realized by the Internet at present, integrates dozens of services such as high-definition video conferences, video monitoring, remote training, intelligent monitoring and analysis, emergency command, video telephones, live broadcast, television mails, information distribution and the like on a system platform, and realizes the real-time interconnection and intercommunication of high-definition quality video communication through various terminal devices. But these applications are limited to video networking.

In the prior art, the video network and the internet are independent, and if a plurality of users want to access IPv4 networks such as the video network, the internet, an IP private network and the like at the same time, a plurality of sets of networks need to be deployed respectively, the deployment is complex, and the waste of resources is caused.

Disclosure of Invention

In view of the above problems, embodiments of the present application are proposed to provide a method for multi-user access to a private network and a corresponding apparatus for multi-user access to a private network, which overcome or at least partially solve the above problems.

In order to solve the above problem, an embodiment of the present application discloses a method for multiple users to access a private network, where the method is applied to a video network, where the video network includes a video network server, multiple video associated cat clients and multiple video associated cat servers respectively connected to the video network server, multiple user terminals connected to the video associated cat clients, and multiple user servers connected to the video associated cat servers, and the method includes:

the client side of the cat watching receives an internet data packet sent by a user terminal through an internet protocol; the Internet data packet comprises first address information of a target user server and a first channel identifier corresponding to the first address information;

the Internet data packet is packaged into a video networking data packet by the video networking client;

the cat watching client determines a first sub-virtual terminal corresponding to the first channel identifier according to the first channel identifier;

the client side of the cat video generates a binding relationship between the first sub-virtual terminal and the data packet of the cat video;

the video networking client sends the video networking data packet to the video networking server by utilizing the first sub-virtual terminal; the video network server is used for determining a target video modem server connected with the target user server according to the first address information and sending the video network data packet to the target video modem server; and the target cat-associated server is used for unpacking and restoring the internet-of-view data packet into an internet data packet and sending the internet data packet to the target user server.

Optionally, the cat viewing client is connected to the plurality of user terminals through a switch; the step that the cat client receives the internet data packet sent by the user terminal through the internet protocol comprises the following steps:

the switch is used for receiving a first internet data packet sent by the user terminal; wherein the first internet data packet includes first address information of a target user server;

the switch is used for adding a first channel identifier corresponding to the first address information to the first internet data packet according to the first address information and generating a second internet data packet;

and the cat watching client receives a second internet data packet sent by the switch through an internet protocol.

Optionally, the step of encapsulating the internet data packet into the internet-of-view data packet by the cat-view client includes:

and the cat client adds a layer of video networking packet header based on a video networking protocol outside the Internet data packet and encapsulates the packet header into a video networking data packet.

Optionally, a first database for managing the plurality of first sub-virtual terminals is arranged in the cat viewing client;

a second database for managing a plurality of second sub virtual terminals is arranged in the cat watching server, and the second sub virtual terminals and one user server are in a binding state;

in the first database, the first sub-virtual terminal is associated with one of the second sub-virtual terminals.

Optionally, the step of determining, by the cat viewing client, a first sub-virtual terminal corresponding to the first channel identifier according to the first channel identifier includes:

the client side of the cat watching determines first address information of a target user server according to the first channel identification;

the FeiMa client determines a target second sub-virtual terminal in a binding state with the target user server according to the first address information;

and the cat watching client determines a first sub-virtual terminal from the first database according to the target second sub-virtual terminal.

Optionally, the first sub-virtual terminal includes two status flag bits, one status flag bit is used to identify an operating status of the first sub-virtual terminal, and the other status flag bit is used to identify a connection status of the first sub-virtual terminal and the video network server; the method further comprises the following steps:

the cat watching client periodically checks the current state of the first sub-virtual terminal; wherein the current state comprises a running state and a connection state;

and the client side of the cat viewed updates the two state flag bits of the first sub-virtual terminal in the first database aiming at the current state.

Optionally, the method further includes:

the cat watching client receives a video networking response data packet sent by the video networking server by using the first sub-virtual terminal; the target cat-in-video server side is used for receiving the internet response data packet, wherein the internet response data packet is formed by packaging the internet response data packet by the target cat-in-video server side; the internet response data packet is returned by the target user server aiming at the internet data packet and comprises second address information of the target user terminal; the video networking server is used for determining a target video networking client connected with the target user terminal according to the second address information;

the client side of the cat video receives the response data packet of the cat video and converts the response data packet of the cat video into an internet response data packet;

and the cat watching client sends the internet response data packet after unpacking and restoring to the target user terminal through an internet protocol.

In order to solve the above problem, the embodiment of the present application further discloses a device for multi-user access private network, the device is applied to the internet of vision, the internet of vision includes the internet of vision server, with a plurality of internet of vision clients and a plurality of internet of vision server that the internet of vision server connects respectively, and, with a plurality of user terminals that the internet of vision client connects, with a plurality of user servers that the internet of vision server connects, the internet of vision client includes:

the Internet data packet receiving module is used for receiving an Internet data packet sent by a user terminal through an Internet protocol; the Internet data packet comprises first address information of a target user server and a first channel identifier corresponding to the first address information;

the Internet data packet packaging module is used for packaging the Internet data packet into a video networking data packet;

a first sub-virtual terminal determining module, configured to determine, according to the first channel identifier, a first sub-virtual terminal corresponding to the first channel identifier;

the binding relation generation module is used for generating a binding relation between the first sub-virtual terminal and the video networking data package;

the video networking data packet sending module is used for sending the video networking data packet to the video networking server by utilizing the first sub-virtual terminal; the video network server is used for determining a target video modem server connected with the target user server according to the first address information and sending the video network data packet to the target video modem server; and the target cat-associated server is used for unpacking and restoring the internet-of-view data packet into an internet data packet and sending the internet data packet to the target user server.

An embodiment of the present application further provides an apparatus, including:

one or more processors; and

one or more machine-readable media having instructions stored thereon, which when executed by the one or more processors, cause the apparatus to perform one or more of the methods of embodiments of the present application.

Embodiments of the present application also provide one or more machine-readable media having instructions stored thereon, which when executed by one or more processors, cause the processors to perform one or more of the methods described in embodiments of the present application.

The embodiment of the application has the following advantages:

the method and the system have the advantages that the characteristics of the video network are applied, and the data exchange between different video clients and different video servers can be realized by binding the plurality of main virtual terminals with the plurality of video clients and the plurality of video servers one by one through the plurality of main virtual terminals in the video network server; the binding relationship is generated between a plurality of first sub-virtual terminals in the FeiMa client and the user terminal respectively, and the binding relationship is generated between a plurality of second sub-virtual terminals in the FeiMa server and the user server respectively, so that a plurality of user terminals can access different IP service private networks, video networking, Internet and the like through one set of network at the same time, and the network deployment expense and the resource waste are greatly reduced;

the method and the device have the advantages that the characteristics of the video network are applied, the first sub-virtual terminal is associated with the second sub-virtual terminal bound with a certain user server, the video network data packet can be directly sent to the user server, and the user server is accessed;

the embodiment of the application applies the characteristics of the video networking, and the video networking client performs data packet conversion, so that the Internet private network can be accessed through the video networking, and the problem that the Internet can not be accessed through the video networking is solved; the video network is used for surfing the internet, so that the utilization rate of the bandwidth of the video network can be improved, the speed of surfing the internet can be greatly improved, and the safety of data transmission in the video network is guaranteed;

the characteristic of this application embodiment application visual networking, visual ally oneself with cat client side and look over periodically the current state at first sub virtual terminal, then aim at the current state in the first database, will first sub virtual terminal two state flag bit updates to this management visual ally oneself with cat client side's fortune dimension personnel can in time know every sub virtual terminal state, and do corresponding processing, ensure that first sub virtual terminal can keep normal operating condition, normal running business, guaranteed that the user visits the communication stability and the real-time of data transmission of internet proprietary gateway through visual ally oneself with cat client side, visual networking server, this visual networking link of visual ally oneself with cat server side.

Drawings

FIG. 1 is a networking schematic of a video network of the present application;

FIG. 2 is a schematic diagram of a hardware architecture of a node server according to the present application;

fig. 3 is a schematic diagram of a hardware architecture of an access switch of the present application;

fig. 4 is a schematic diagram of a hardware structure of an ethernet protocol conversion gateway according to the present application;

fig. 5 is a schematic networking diagram of a system for multi-user access to a private network according to an embodiment of the present application;

FIG. 6 is a flowchart illustrating steps of a method for accessing a private network by multiple users according to an embodiment of the present application;

fig. 7 is a block diagram illustrating a structure of an apparatus for accessing a private network by multiple users according to an embodiment of the present application.

Detailed Description

In order to make the aforementioned objects, features and advantages of the present application more comprehensible, the present application is described in further detail with reference to the accompanying drawings and the detailed description.

The video networking is an important milestone for network development, is a real-time network, can realize high-definition video real-time transmission, and pushes a plurality of internet applications to high-definition video, and high-definition faces each other.

The video networking adopts a real-time high-definition video exchange technology, can integrate required services such as dozens of services of video, voice, pictures, characters, communication, data and the like on a system platform on a network platform, such as high-definition video conference, video monitoring, intelligent monitoring analysis, emergency command, digital broadcast television, delayed television, network teaching, live broadcast, VOD on demand, television mail, Personal Video Recorder (PVR), intranet (self-office) channels, intelligent video broadcast control, information distribution and the like, and realizes high-definition quality video broadcast through a television or a computer.

To better understand the embodiments of the present application, the following description refers to the internet of view:

some of the technologies applied in the video networking are as follows:

network Technology (Network Technology)

Network technology innovation in video networking has improved over traditional Ethernet (Ethernet) to face the potentially enormous video traffic on the network. Unlike pure network Packet Switching (Packet Switching) or network Circuit Switching (Circuit Switching), the Packet Switching is adopted by the technology of the video networking to meet the Streaming requirement. The video networking technology has the advantages of flexibility, simplicity and low price of packet switching, and simultaneously has the quality and safety guarantee of circuit switching, thereby realizing the seamless connection of the whole network switching type virtual circuit and the data format.

Switching Technology (Switching Technology)

The video network adopts two advantages of asynchronism and packet switching of the Ethernet, eliminates the defects of the Ethernet on the premise of full compatibility, has end-to-end seamless connection of the whole network, is directly communicated with a user terminal, and directly bears an IP data packet. The user data does not require any format conversion across the entire network. The video networking is a higher-level form of the Ethernet, is a real-time exchange platform, can realize the real-time transmission of the whole-network large-scale high-definition video which cannot be realized by the existing Internet, and pushes a plurality of network video applications to high-definition and unification.

Server Technology (Server Technology)

The server technology on the video networking and unified video platform is different from the traditional server, the streaming media transmission of the video networking and unified video platform is established on the basis of connection orientation, the data processing capacity of the video networking and unified video platform is independent of flow and communication time, and a single network layer can contain signaling and data transmission. For voice and video services, the complexity of video networking and unified video platform streaming media processing is much simpler than that of data processing, and the efficiency is greatly improved by more than one hundred times compared with that of a traditional server.

Storage Technology (Storage Technology)

The super-high speed storage technology of the unified video platform adopts the most advanced real-time operating system in order to adapt to the media content with super-large capacity and super-large flow, the program information in the server instruction is mapped to the specific hard disk space, the media content is not passed through the server any more, and is directly sent to the user terminal instantly, and the general waiting time of the user is less than 0.2 second. The optimized sector distribution greatly reduces the mechanical motion of the magnetic head track seeking of the hard disk, the resource consumption only accounts for 20% of that of the IP internet of the same grade, but concurrent flow which is 3 times larger than that of the traditional hard disk array is generated, and the comprehensive efficiency is improved by more than 10 times.

Network Security Technology (Network Security Technology)

The structural design of the video network completely eliminates the network security problem troubling the internet structurally by the modes of independent service permission control each time, complete isolation of equipment and user data and the like, generally does not need antivirus programs and firewalls, avoids the attack of hackers and viruses, and provides a structural carefree security network for users.

Service Innovation Technology (Service Innovation Technology)

The unified video platform integrates services and transmission, and is not only automatically connected once whether a single user, a private network user or a network aggregate. The user terminal, the set-top box or the PC are directly connected to the unified video platform to obtain various multimedia video services in various forms. The unified video platform adopts a menu type configuration table mode to replace the traditional complex application programming, can realize complex application by using very few codes, and realizes infinite new service innovation.

Networking of the video network is as follows:

the video network is a centralized control network structure, and the network can be a tree network, a star network, a ring network and the like, but on the basis of the centralized control node, the whole network is controlled by the centralized control node in the network.

As shown in fig. 1, the video network is divided into an access network and a metropolitan network.

The devices of the access network part can be mainly classified into 3 types: node server, access switch, terminal (including various set-top boxes, coding boards, memories, etc.). The node server is connected to an access switch, which may be connected to a plurality of terminals and may be connected to an ethernet network.

The node server is a node which plays a centralized control function in the access network and can control the access switch and the terminal. The node server can be directly connected with the access switch or directly connected with the terminal.

Similarly, devices of the metropolitan network portion may also be classified into 3 types: a metropolitan area server, a node switch and a node server. The metro server is connected to a node switch, which may be connected to a plurality of node servers.

The node server is a node server of the access network part, namely the node server belongs to both the access network part and the metropolitan area network part.

The metropolitan area server is a node which plays a centralized control function in the metropolitan area network and can control a node switch and a node server. The metropolitan area server can be directly connected with the node switch or directly connected with the node server.

Therefore, the whole video network is a network structure with layered centralized control, and the network controlled by the node server and the metropolitan area server can be in various structures such as tree, star and ring.

The access network part can form a unified video platform (the part in the dotted circle), and a plurality of unified video platforms can form a video network; each unified video platform may be interconnected via metropolitan area and wide area video networking.

Video networking device classification

1.1 devices in the video network of the embodiment of the present application can be mainly classified into 3 types: servers, switches (including ethernet gateways), terminals (including various set-top boxes, code boards, memories, etc.). The video network as a whole can be divided into a metropolitan area network (or national network, global network, etc.) and an access network.

1.2 wherein the devices of the access network part can be mainly classified into 3 types: node servers, access switches (including ethernet gateways), terminals (including various set-top boxes, code boards, memories, etc.).

The specific hardware structure of each access network device is as follows:

a node server:

as shown in fig. 2, the system mainly includes a network interface module 201, a switching engine module 202, a CPU module 203, and a disk array module 204;

the network interface module 201, the CPU module 203, and the disk array module 204 all enter the switching engine module 202; the switching engine module 202 performs an operation of looking up the address table 205 on the incoming packet, thereby obtaining the direction information of the packet; and stores the packet in a queue of the corresponding packet buffer 206 based on the packet's steering information; if the queue of the packet buffer 206 is nearly full, it is discarded; the switching engine module 202 polls all packet buffer queues for forwarding if the following conditions are met: 1) the port send buffer is not full; 2) the queue packet counter is greater than zero. The disk array module 204 mainly implements control over the hard disk, including initialization, read-write, and other operations on the hard disk; the CPU module 203 is mainly responsible for protocol processing with an access switch and a terminal (not shown in the figure), configuring an address table 205 (including a downlink protocol packet address table, an uplink protocol packet address table, and a data packet address table), and configuring the disk array module 204.

The access switch:

as shown in fig. 3, the network interface module mainly includes a network interface module (a downlink network interface module 301 and an uplink network interface module 302), a switching engine module 303 and a CPU module 304;

wherein, the packet (uplink data) coming from the downlink network interface module 301 enters the packet detection module 305; the packet detection module 305 detects whether the Destination Address (DA), the Source Address (SA), the packet type, and the packet length of the packet meet the requirements, and if so, allocates a corresponding stream identifier (stream-id) and enters the switching engine module 303, otherwise, discards the stream identifier; the packet (downstream data) coming from the upstream network interface module 302 enters the switching engine module 303; the data packet coming from the CPU module 204 enters the switching engine module 303; the switching engine module 303 performs an operation of looking up the address table 306 on the incoming packet, thereby obtaining the direction information of the packet; if the packet entering the switching engine module 303 is from the downstream network interface to the upstream network interface, the packet is stored in the queue of the corresponding packet buffer 307 in association with the stream-id; if the queue of the packet buffer 307 is nearly full, it is discarded; if the packet entering the switching engine module 303 is not from the downlink network interface to the uplink network interface, the data packet is stored in the queue of the corresponding packet buffer 307 according to the guiding information of the packet; if the queue of the packet buffer 307 is nearly full, it is discarded.

The switching engine module 303 polls all packet buffer queues, which in this embodiment is divided into two cases:

if the queue is from the downlink network interface to the uplink network interface, the following conditions are met for forwarding: 1) the port send buffer is not full; 2) the queued packet counter is greater than zero; 3) obtaining a token generated by a code rate control module;

if the queue is not from the downlink network interface to the uplink network interface, the following conditions are met for forwarding: 1) the port send buffer is not full; 2) the queue packet counter is greater than zero.

The rate control module 208 is configured by the CPU module 204, and generates tokens for packet buffer queues from all downstream network interfaces to upstream network interfaces at programmable intervals to control the rate of upstream forwarding.

The CPU module 304 is mainly responsible for protocol processing with the node server, configuration of the address table 306, and configuration of the code rate control module 308.

Ethernet protocol conversion gateway：

As shown in fig. 4, the apparatus mainly includes a network interface module (a downlink network interface module 401 and an uplink network interface module 402), a switching engine module 403, a CPU module 404, a packet detection module 405, a rate control module 408, an address table 406, a packet buffer 407, a MAC adding module 409, and a MAC deleting module 410.

Wherein, the data packet coming from the downlink network interface module 401 enters the packet detection module 405; the packet detection module 405 detects whether the ethernet MAC DA, the ethernet MAC SA, the ethernet length or frame type, the video network destination address DA, the video network source address SA, the video network packet type, and the packet length of the packet meet the requirements, and if so, allocates a corresponding stream identifier (stream-id); then, the MAC deletion module 410 subtracts MAC DA, MAC SA, length or frame type (2byte) and enters the corresponding receiving buffer, otherwise, discards it;

the downlink network interface module 401 detects the sending buffer of the port, and if there is a packet, obtains the ethernet MAC DA of the corresponding terminal according to the destination address DA of the packet, adds the ethernet MAC DA of the terminal, the MAC SA of the ethernet protocol gateway, and the ethernet length or frame type, and sends the packet.

The other modules in the ethernet protocol gateway function similarly to the access switch.

A terminal:

the system mainly comprises a network interface module, a service processing module and a CPU module; for example, the set-top box mainly comprises a network interface module, a video and audio coding and decoding engine module and a CPU module; the coding board mainly comprises a network interface module, a video and audio coding engine module and a CPU module; the memory mainly comprises a network interface module, a CPU module and a disk array module.

1.3 devices of the metropolitan area network part can be mainly classified into 2 types: node server, node exchanger, metropolitan area server. The node switch mainly comprises a network interface module, a switching engine module and a CPU module; the metropolitan area server mainly comprises a network interface module, a switching engine module and a CPU module.

2. Video networking packet definition

2.1 Access network packet definition

The data packet of the access network mainly comprises the following parts: destination Address (DA), Source Address (SA), reserved bytes, payload (pdu), CRC.

As shown in the following table, the data packet of the access network mainly includes the following parts:

DA

SA

Reserved

Payload

CRC

wherein:

the Destination Address (DA) is composed of 8 bytes (byte), the first byte represents the type of the data packet (such as various protocol packets, multicast data packets, unicast data packets, etc.), there are 256 possibilities at most, the second byte to the sixth byte are metropolitan area network addresses, and the seventh byte and the eighth byte are access network addresses;

the Source Address (SA) is also composed of 8 bytes (byte), defined as the same as the Destination Address (DA);

the reserved byte consists of 2 bytes;

the payload part has different lengths according to different types of datagrams, and is 64 bytes if the datagram is various types of protocol packets, and is 32+1024 or 1056 bytes if the datagram is a unicast packet, of course, the length is not limited to the above 2 types;

the CRC consists of 4 bytes and is calculated in accordance with the standard ethernet CRC algorithm.

2.2 metropolitan area network packet definition

The topology of a metropolitan area network is a graph and there may be 2, or even more than 2, connections between two devices, i.e., there may be more than 2 connections between a node switch and a node server, a node switch and a node switch, and a node switch and a node server. However, the metro network address of the metro network device is unique, and in order to accurately describe the connection relationship between the metro network devices, parameters are introduced in the embodiment of the present application: a label to uniquely describe a metropolitan area network device.

In this specification, the definition of the Label is similar to that of the Label of MPLS (Multi-Protocol Label Switch), and assuming that there are two connections between the device a and the device B, there are 2 labels for the packet from the device a to the device B, and 2 labels for the packet from the device B to the device a. The label is classified into an incoming label and an outgoing label, and assuming that the label (incoming label) of the packet entering the device a is 0x0000, the label (outgoing label) of the packet leaving the device a may become 0x 0001. The network access process of the metro network is a network access process under centralized control, that is, address allocation and label allocation of the metro network are both dominated by the metro server, and the node switch and the node server are both passively executed, which is different from label allocation of MPLS, and label allocation of MPLS is a result of mutual negotiation between the switch and the server.

As shown in the following table, the data packet of the metro network mainly includes the following parts:

DA

SA

Reserved

label (R)

Payload

CRC

Namely Destination Address (DA), Source Address (SA), Reserved byte (Reserved), tag, payload (pdu), CRC. The format of the tag may be defined by reference to the following: the tag is 32 bits with the upper 16 bits reserved and only the lower 16 bits used, and its position is between the reserved bytes and payload of the packet.

Based on the above characteristics of the video networking, one of the core concepts of the embodiments of the present application is provided, and the system, the method, and the apparatus for accessing a private network by multiple users as described in embodiments 1 to 3 are provided in compliance with a protocol of the video networking, so that multiple user terminals can access different private networks for IP services through one set of network at the same time, and the video networking, the internet, and the like can be achieved, thereby greatly reducing the overhead of network deployment and the waste of resources.

Example 1:

as shown in fig. 5, a networking schematic diagram of a system for multiple users to access a private network according to an embodiment of the present application is shown, where the system may be applied to a video network, where the video network includes a video network server 53, multiple video clients 52 and multiple video servers 54 respectively connected to the video network server 53, multiple user terminals 51 connected to the video clients 52, and multiple user servers 55 connected to the video servers 54.

The user terminal 51 in the embodiment of the present application is a terminal, and is a product composed of customized hardware and an operating system and application software running on the customized hardware, and specifically may be a mobile phone, a tablet, a desktop, a notebook computer, and the like.

One cat-view client 52 can be connected to a plurality of user terminals 51 at the same time.

One cat-view server 54 may be connected to a plurality of user servers 55 simultaneously.

The user server 55 is located in the internet and can be regarded as a proprietary gateway for managing the resources of the local area network. For example, the user server 55 may be a private network for judicial services, a private network for public security services, or a private network for national courts.

The video network is located in the second layer of the network protocol layer, is a complete set of network communication protocol system designed for supporting a super-large-scale, high-bandwidth and real-time communication network, can establish addressing and communication between different terminals independently of an IP protocol, realizes a real-time communication network system with quality assurance, and is a large-scale and high-bandwidth real-time switching network communication technology which is in the same level with the IP protocol. The internet of vision is composed of 255 internet of vision servers 53, internet of vision terminals and other auxiliary systems, and the internet of vision client 52 and the internet of vision server 54 must be connected with the internet of vision server 53 to communicate with each other and perform services.

In an optional embodiment of the present application, a possible implementation method for the cat-view client 52 to access the internet of view is shown, where the method specifically includes the following steps:

the client 52 of the cat online receives the network access invitation message sent by the server 53 of the internet of vision; the network access invitation message is generated by the internet of view server 53 when detecting that the client 52 of the cat online accesses, and includes the identification information of the client 52 of the cat online; the internet of vision server 53 is configured to send the network access invitation message to the internet of vision client 52 corresponding to the identification information;

the cat client 52 generates a network access agreement message for the network access invitation message; the network access agreement message comprises a plurality of first sub-virtual terminal numbers, and the first sub-virtual terminal numbers carry identification information of the cat client 52;

the cat watching client 52 sends the network access approval message to the internet of vision server 53; the internet of view server 53 is configured to generate a binding relationship between the internet of view client 52 and a first master virtual terminal in an idle state, generate a successful network access message, and store the plurality of first sub virtual terminal numbers corresponding to the identification information;

and the cat-eye client 52 receives and displays a successful network access message returned by the network access agreement message by the network-based server 53.

After the cat-view client 52 logs in the internet of view, the MAC address and the information of a plurality of internal sub-virtual terminals are recorded in the server 53 of the internet of view, so as to complete the initialization of the cat-view client 52 for accessing the internet.

The way in which the cat-view server 54 logs in the internet of view refers to the way in which the cat-view client 52 accesses the internet, which is not described herein too much.

Example 2:

as shown in fig. 6, a flowchart illustrating steps of a method for multiple users to access a private network according to an embodiment of the present application is shown, where the method is applied to a cat client 52 shown in fig. 5, and the method specifically includes the following steps:

step S601: the client 52 of the cat watching receives an internet data packet sent by the user terminal 51 through an internet protocol; wherein, the internet data packet includes first address information of the target user server 55, and a first channel identifier corresponding to the first address information;

one cat client 52 can be connected to a plurality of user terminals 51 at the same time, and is connected to the plurality of user terminals 51 mainly through a switch. Because the switch can support a plurality of communication ports, the network system can be divided into more physical network segments, so that the whole network system has higher bandwidth, each communication port corresponds to one bridge, each bridge has a unique channel identifier, the user terminal 51 is inserted into the communication port through a network cable, and the communication can be connected through the bridge according to the cat client 52. Therefore, the internet packet sent by the user terminal 51 enters a bridge of the switch, and the channel identifier of the bridge is automatically added.

In the embodiment of the present application, the one cat-view server 54 is also connected to multiple user servers 55 at the same time, and the manner in which the user server 55 is connected to the cat-view server 54 refers to the manner in which the user terminal 51 is connected to the cat-view client 52, which is not described herein for reasons of brevity.

Since one cat viewing client 52 is connected to a plurality of user terminals 51, and one cat viewing server 54 is also connected to a plurality of user servers 55, the plurality of user terminals 51 access the plurality of user servers 55 at the same time, how the cat viewing client 52 forwards the data packets sent by the plurality of user terminals 51 at the same time, and how the cat viewing server 54 sends the data packets to the user server 55 of the correct destination at the same time is a technical problem to be solved by the present application.

In view of the above problem, an alternative embodiment of the present application shows that a first database for managing a plurality of first sub-virtual terminals is provided in the catwalk client 52;

a second database for managing a plurality of second sub virtual terminals is arranged in the associated modem server 54, and the second sub virtual terminals are in a binding state with one user server 55;

In a specific implementation, a plurality of users need to access different websites simultaneously, and variables and rations need to be set, in an optional embodiment of the present application, the rations are that a plurality of user servers 55 accessing one associated cat server 54 are bound with different second virtual terminals in the associated cat server 54, and the second virtual terminals implement data forwarding.

The user is known to have an access destination belonging to a variable according to which user the client 52 of the associated modem is connected to, and the variable also belongs to which first sub-virtual terminal in the client 52 of the associated modem is bound with the user terminal 51, and the correct destination of the data packet transmitted by the user terminal 51 is transmitted. Therefore, in the embodiment of the application, a first sub-virtual terminal in the associated modem client 52 and a second sub-virtual terminal bound with a certain user server 55 are associated with each other, and after the first sub-virtual terminal and the second sub-virtual terminal are recorded in the first database, the communication route between the first sub-virtual terminal and the second sub-virtual terminal becomes quantitative; at the same time, the first address information of a user server 55 is also associated with the first channel identifier of a network bridge and recorded in the first database, so that the variables are controlled only on the user terminal 51 randomly connected to the video network client 52.

Therefore, in step S601, the internet data packet sent by a certain user terminal 51 and received by the cat-view client 52 includes the first address information of the target user server 55 and the first channel identifier corresponding to the first address information; the vty client 52 receives an internet data packet sent by the user terminal 51 through an internet protocol, and in a specific implementation, may include the following sub-steps:

the first substep: the switch is used for receiving a first internet data packet sent by the user terminal; wherein the first internet data packet includes first address information of a target user server;

and a second substep: the switch is used for adding a first channel identifier corresponding to the first address information to the first internet data packet according to the first address information and generating a second internet data packet;

and a third substep: the cat client 52 receives the second internet data packet sent by the switch through an internet protocol.

The channel identifier may be a VLAN identifier.

Step S602: the internet data packet is packaged into a video networking data packet by the video networking client 52;

the steps of receiving the internet data packet by the cat client 52 and packaging the internet data packet into a cat data packet include:

the cat client 52 adds a layer of video network packet header based on a video network protocol outside the internet data packet, and encapsulates the packet header into a video network data packet.

Step S603: the cat watching client determines a first sub-virtual terminal corresponding to the first channel identifier according to the first channel identifier;

next, the cat viewing client 52 needs to find a first sub virtual terminal to send the data packet of the user terminal 51 in the internet of view, but the first sub virtual terminal cannot be found randomly, so according to the above logic, in an optional embodiment of the present application, it is shown that the cat viewing client 52 determines, according to the first channel identifier, a first sub virtual terminal mode corresponding to the first channel identifier, and specifically may include the following sub steps:

and a fourth substep: the cat watching client 52 determines first address information of a target user server 55 according to the first channel identifier;

and a fifth substep: the cat watching client 52 determines a target second sub-virtual terminal in a binding state with the target user server 55 according to the first address information;

and a sixth substep: and the cat watching client 52 determines a first sub-virtual terminal from the first database according to the target second sub-virtual terminal.

Step S604: the client side of the cat video generates a binding relationship between the first sub-virtual terminal and the data packet of the cat video;

for each internet data packet sent by the user terminal 51, after the cat-view client 52 converts the internet data packet into a video-networking data packet, a virtual terminal number of the first sub-virtual terminal is added to each video-networking data packet, so as to generate a binding relationship, so that the video-networking data packet is identified and transmitted by the video-networking server 5353, and the cat-view client 52 replaces the first sub-virtual terminal to complete an actual sending function during specific sending.

Step S605: the video networking client 52 sends the video networking data packet to the video networking server 53 by using the first sub-virtual terminal; the internet of vision server 53 is configured to determine, according to the first address information, a target internet of vision server 54 connected with the target user server 55, and send the internet of vision data packet to the target internet of vision server 54; the target cat-associated server 54 is configured to unpack the internet-of-view data packet to restore the internet-of-view data packet to an internet data packet, and send the internet data packet to the target user server 55.

In addition, since the number of the internet-of-view servers 53 in the internet of view is limited, and the number of the associated cat clients 52 and the associated cat servers 54 is much larger than that of the internet-of-view servers 53, generally, one internet-of-view server 53 needs to complete data forwarding between a plurality of the associated cat clients 52 and the associated cat servers 54 at the same time.

Therefore, in an optional embodiment of the present application, it is shown that the step of the internet of view server 53 determining, according to the first address information, a target internet of view server 54 connected with the target user server 55, and sending the internet of view data packet to the target internet of view server 54 specifically may include:

the first master virtual terminal in the video network server 53 is configured to receive the video network data packet;

the internet of view server 53 is configured to determine, according to the first address information in the internet of view data packet, a target internet of view server 54 connected to the target user server 55; the target cat-watching server 54 is in a binding state with a second master virtual terminal in the internet-of-video server 53;

the first main virtual terminal is used for sending the video networking data packet to the second main virtual terminal;

the second master virtual terminal is configured to send the internet of view data packet to the target internet of view server 54.

As can be seen from the above optional embodiments, in order to avoid data confusion and crosstalk, there are also a plurality of main virtual terminals in the network-of-view server 53, the cat-of-view client 52 generates a binding relationship with a first main virtual terminal in an idle state when accessing the network, and similarly, the cat-of-view server 54 also generates a binding relationship with a second main virtual terminal in an idle state in the network-of-view server 53 when accessing the network, so that cross communication between the plurality of cat-of-view clients 52 and the plurality of cat-of-view servers 54 can be realized inside the network-of-view server 53.

For example, the M cat client 52 accessing A, B, C three user terminals 51 may communicate with the J cat server 54 accessing the corporate management service private network and the public certificate service private network at the same time in a certain period, or communicate with the K cat server 54 accessing the public security service private network and the public certificate service private network at the same time in another period, so that the main virtual terminal in the cat server 53 is used as a transmission tool for the data of the internet of view, and the cross communication between the multiple cat clients 52 and the multiple cat servers 54 is realized.

After receiving the video networking data packet, the target cat-eye server 54 may determine a first sub-virtual terminal according to the virtual terminal number on the video networking data packet without reading the first address information of the target user server 55 in the video networking data packet, so as to determine a second sub-virtual terminal associated with the first sub-virtual terminal, and then directly send the video networking data packet to the second sub-virtual terminal, so that the target cat-eye server 54 may send the video networking data packet to the target user server 55.

In summary, through steps S601 to S605, the embodiment of the present application can implement that a plurality of internet user terminals 51 can access different private IP services, video networks, the internet, and the like at the same time through one set of network by using the above manner, thereby greatly reducing the overhead of network deployment and the waste of resources. Meanwhile, the first sub-virtual terminal and the second sub-virtual terminal bound with the user server 55 are correlated, the video networking data packet can be directly sent to the user server 55, the user server 55 is accessed, and compared with the traditional mode of accessing the user server 55 by using the MAC address of the user server 55, the embodiment of the application reduces the time for disassembling the data packet and extracting the address, reduces the occupation of resources of the modem server 54, shortens the data sending time, greatly improves the transmission efficiency, avoids the problem that the modem server 54 unpacks to obtain the MAC address to send data and data crosstalk easily occurs, and improves the probability of correct transmission of the data packet.

When receiving the internet data packet, the target user server 55 also sequentially passes through a second sub-virtual terminal in the associated cat server 54, the second main virtual terminal bound to the associated cat server 54, and the first main virtual terminal bound to the associated cat client 52 to return a video network response data packet to the target sub-virtual terminal bound to the target user terminal 51 in the associated cat client 52.

The specific implementation mode can comprise the following steps:

the cat watching client 52 receives a response data packet of the internet of vision sent by the server 53 of the internet of vision by using the first sub-virtual terminal; the internet response data packet is formed by packaging the internet response data packet by the target internet modem server 54; the internet response packet is returned by the target user server 55 for the internet packet, including the second address information of the target user terminal 51; the internet of vision server 53 is configured to determine, according to the second address information, a target internet of vision client 52 connected to the target user terminal 51;

the cat client 52 unpacks the internet response data packet and restores the internet response data packet to an internet response data packet;

and the cat-watching client 52 sends the unpacked and restored internet response data packet to the target user terminal 51 through an internet protocol.

The specific steps of the target cat-view server 54 sending the internet response data packet refer to the embodiments of the present application, which are not described herein in detail.

The virtual terminal mentioned in the embodiment of the application comprises: the system comprises a first sub-virtual terminal, a second sub-virtual terminal, a first main virtual terminal and a second main virtual terminal. The virtual terminal is a non-real terminal product, and is a virtual object with some key attributes of the terminal (such as information of model, version, MAC address, NUM number, located domain, and the like), the cat client 52 or the cat server 54 has a plurality of sub-virtual terminals, a first sub-virtual terminal in the cat client 52 is implemented by the cat client 52 for its basic function, and a second sub-virtual terminal in the cat server 54 is implemented by the cat server 54 for its basic function. Similarly, there are a plurality of master virtual terminals in the video network server 53, and the master virtual terminals are implemented by the video network server 53.

In addition, in order to ensure the normal operation of the client 52 of the cat of the internet of view, and the stable transmission and reception of the data packet, the first sub-virtual terminal includes two status flag bits, one status flag bit is used for identifying the operation status of the first sub-virtual terminal, and the other status flag bit is used for identifying the connection status of the first sub-virtual terminal and the server 53 of the internet of view; in a preferred embodiment of the present application, a possible implementation manner of monitoring the operation state and the connection state of a target first sub-virtual terminal in the client 52 of the cat sight is shown, where the implementation steps are as follows:

the cat watching client 52 periodically checks the current state of the first sub-virtual terminal; wherein the current state comprises a running state and a connection state;

the cat watching client 52 updates the two status flag bits of the first sub-virtual terminal in the first database according to the current status.

Through the preferred embodiment, the operation and maintenance personnel managing the cat client 52 can timely know the state of each first sub-virtual terminal and perform corresponding processing to ensure that the sub-virtual terminals can keep normal working state and normal running service, and the communication stability and the real-time performance of data transmission of the internet private gateway accessed by the user through the link of the cat client 52, the server 53 and the cat server 54. In particular implementations, a timer mechanism is provided by the Linux system within the catwalk client 52, such as timed at 1 second intervals, to periodically view the current state of the target child virtual terminal. After the timer is refreshed, the sub-virtual terminal number and the corresponding state are loaded into the first database in the client 52 of the cat viewing system through the socket Netlink channel, and the two state flag bits of the target first sub-virtual terminal are updated.

It should be noted that, for simplicity of description, the method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the embodiments are not limited by the order of acts described, as some steps may occur in other orders or concurrently depending on the embodiments. Further, those skilled in the art will also appreciate that the embodiments described in the specification are presently preferred and that no particular act is required of the embodiments of the application.

Example 3:

as shown in fig. 7, corresponding to the method in embodiment 2, a block diagram of a device for multiple users to access a private network according to an embodiment of the present application is shown, where the device may be applied in a video network, the device is applied in a cat-view client 52 shown in fig. 5, and the cat-view client 52 specifically includes the following modules:

an internet packet receiving module 701, configured to receive an internet packet sent by the user terminal 51 through an internet protocol; wherein, the internet data packet includes first address information of the target user server 55, and a first channel identifier corresponding to the first address information;

an internet data packet encapsulation module 702, configured to encapsulate the internet data packet into a video internet data packet;

a first sub-virtual terminal determining module 703, configured to determine, according to the first channel identifier, a first sub-virtual terminal corresponding to the first channel identifier;

a binding relationship generating module 704, configured to generate a binding relationship between the first sub-virtual terminal and the video networking data package;

a video networking data packet sending module 705, configured to send the video networking data packet to the video networking server 53 by using the first sub virtual terminal; the internet of vision server 53 is configured to determine, according to the first address information, a target internet of vision server 54 connected with the target user server 55, and send the internet of vision data packet to the target internet of vision server 54; the target cat-associated server 54 is configured to unpack the internet-of-view data packet to restore the internet-of-view data packet to an internet data packet, and send the internet data packet to the target user server 55.

Corresponding to the method in embodiment 2 of the present application, the first sub-virtual terminal determining module 703 may specifically include the following sub-modules:

a first address information determination submodule, configured to determine first address information of the target user server 55 according to the first channel identifier;

a target second sub-virtual terminal determining sub-module, configured to determine, according to the first address information, a target second sub-virtual terminal in a binding state with the target user server 55;

and the target first sub-virtual terminal determining submodule is used for determining a first sub-virtual terminal from the first database according to the target second sub-virtual terminal.

Corresponding to the method in embodiment 2 of the present application, the cat-view client 52 may specifically include the following modules:

the current state monitoring module is used for periodically checking the current state of the first sub-virtual terminal; wherein the current state comprises a running state and a connection state;

and a status flag bit updating module, configured to update, in the first database, the two status flag bits of the first sub-virtual terminal according to the current status.

a video networking response data packet receiving module, configured to receive, by using the first sub-virtual terminal, a video networking response data packet sent by the video networking server 53; the internet response data packet is formed by packaging the internet response data packet by the target internet modem server 54; the internet response packet is returned by the target user server 55 for the internet packet, including the second address information of the target user terminal 51; the internet of vision server 53 is configured to determine, according to the second address information, a target internet of vision client 52 connected to the target user terminal 51;

the video networking response data packet reduction module is used for unpacking and reducing the video networking response data packet into an Internet response data packet;

and an internet response data packet sending module, configured to send the depacketized and restored internet response data packet to the target user terminal 51 through an internet protocol.

one or more processors; and

For the device embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.

The embodiments in the present specification are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other.

As will be appreciated by one of skill in the art, embodiments of the present application may be provided as a method, apparatus, or computer program product. Accordingly, embodiments of the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.

Embodiments of the present application are described with reference to flowchart illustrations and/or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing terminal to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing terminal to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing terminal to cause a series of operational steps to be performed on the computer or other programmable terminal to produce a computer implemented process such that the instructions which execute on the computer or other programmable terminal provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

While preferred embodiments of the present application have been described, additional variations and modifications of these embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including the preferred embodiment and all such alterations and modifications as fall within the true scope of the embodiments of the application.

Finally, it should also be noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or terminal that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or terminal. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or terminal that comprises the element.

The method for multi-user access to the private network and the device for multi-user access to the private network provided by the present application are introduced in detail above, and a specific example is applied in the text to explain the principle and the implementation of the present application, and the description of the above embodiment is only used to help understanding the method and the core idea of the present application; meanwhile, for a person skilled in the art, according to the idea of the present application, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present application.

Claims

1. A method for multiple users to access a private network is applied to a video network, wherein the video network comprises a video network server, a plurality of video modem clients and a plurality of video modem servers which are respectively connected with the video network server, a plurality of user terminals connected with the video modem clients and a plurality of user servers connected with the video modem servers, and the method comprises the following steps:

the video networking client sends the video networking data packet to the video networking server by utilizing the first sub-virtual terminal; the video network server is used for determining a target video modem server connected with the target user server according to the first address information and sending the video network data packet to the target video modem server; the target cat-associated server is used for unpacking and restoring the internet-of-view data packet into an internet data packet and sending the internet data packet to the target user server;

a first database for managing a plurality of first sub-virtual terminals is arranged in the combined video client; a second database for managing a plurality of second sub virtual terminals is arranged in the cat watching server, and the second sub virtual terminals and one user server are in a binding state;

in the first database, the first sub-virtual terminal is associated with one of the second sub-virtual terminals;

the step that the cat viewing client determines a first sub-virtual terminal corresponding to the first channel identifier according to the first channel identifier comprises the following steps:

2. The method according to claim 1, wherein the FeiMa client is connected to the plurality of user terminals through a switch; the step that the cat client receives the internet data packet sent by the user terminal through the internet protocol comprises the following steps:

3. The method of claim 1, wherein the step of the FeiMa client encapsulating the Internet data packet into a FeiMa data packet comprises:

4. The method according to claim 1, wherein the first sub-virtual terminal comprises two status flag bits, one status flag bit is used for identifying the operation status of the first sub-virtual terminal, and the other status flag bit is used for identifying the connection status of the first sub-virtual terminal and the video network server; the method further comprises the following steps:

5. The method of claim 1, further comprising:

6. The utility model provides a look allies oneself with cat client, its characterized in that, the video networking includes the video networking server, with a plurality of looks allies oneself with cat client and a plurality of looks allies oneself with cat server that the video networking server connects respectively, and, with a plurality of user terminal that the look allies oneself with cat client is connected, with a plurality of user server that the look allies oneself with cat server is connected, the look allies oneself with cat client includes:

the video networking data packet sending module is used for sending the video networking data packet to the video networking server by utilizing the first sub-virtual terminal; the video network server is used for determining a target video modem server connected with the target user server according to the first address information and sending the video network data packet to the target video modem server; the target cat-associated server is used for unpacking and restoring the internet-of-view data packet into an internet data packet and sending the internet data packet to the target user server;

the first sub-virtual terminal determining module includes:

the first address information determining submodule is used for determining first address information of the target user server according to the first channel identifier;

the target second sub-virtual terminal determining submodule is used for determining a target second sub-virtual terminal in a binding state with the target user server according to the first address information;

7. An apparatus for enabling multiple users to access a private network, comprising:

one or more processors; and

one or more machine-readable media having instructions stored thereon that, when executed by the one or more processors, cause the apparatus to perform the method of any of claims 1-5.

8. One or more machine readable media having instructions stored thereon that, when executed by one or more processors, cause the processors to perform the method of any one of claims 1-5.