CN117938408A - Method and system for implementing dynamic access control in Android device - Google Patents

Method and system for implementing dynamic access control in Android device Download PDF

Info

Publication number
CN117938408A
CN117938408A CN202211303626.0A CN202211303626A CN117938408A CN 117938408 A CN117938408 A CN 117938408A CN 202211303626 A CN202211303626 A CN 202211303626A CN 117938408 A CN117938408 A CN 117938408A
Authority
CN
China
Prior art keywords
access control
data packet
dynamic access
client
vpn
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202211303626.0A
Other languages
Chinese (zh)
Inventor
崔华俊
张棪
杨慧然
于光喜
杨兴华
王伟平
李杨
张亚文
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Institute of Information Engineering of CAS
Original Assignee
Institute of Information Engineering of CAS
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Institute of Information Engineering of CAS filed Critical Institute of Information Engineering of CAS
Priority to CN202211303626.0A priority Critical patent/CN117938408A/en
Publication of CN117938408A publication Critical patent/CN117938408A/en
Pending legal-status Critical Current

Links

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention relates to a method and a system for implementing dynamic access control in Android equipment. The method comprises the following steps: the VPN client and the dynamic access control client determine a data interaction port and an interest stream through negotiation; the VPN client reads the data packet from the TUN network card for the first time, and forwards the data packet to the dynamic access control client according to the negotiated data interaction port and interest stream; the dynamic access control client performs first encapsulation, and the operation system forwards the encapsulated data packet to the TUN network card; the VPN client reads the data packet from the TUN network card for the second time, encapsulates the data packet for the second time, and the operation system forwards the encapsulated data packet to the physical network card and then sends the encapsulated data packet to the VPN gateway; the VPN gateway forwards the data packet after the first decapsulation to a dynamic access control gateway; and the dynamic access control gateway forwards the data packet after the second decapsulation to the application server. The method and the device can realize dynamic access control under the condition that the virtual network card of the Android device is occupied by the VPN client.

Description

Method and system for implementing dynamic access control in Android device
Technical Field
The invention belongs to the technical field of computers, and particularly relates to a method and a system for implementing dynamic access control in Android equipment.
Background
In the Android system, the existing dynamic access technology is realized based on cooperation of a virtual network card technology and a cloud dynamic access control gateway. As shown in fig. 1, the basic idea is to install a client program in the Android device, establish a data transmission tunnel with the dynamic access control gateway by using the client program, and perform dynamic access control with the tunnel as granularity. The basic principle is that a client program reads data in a TUN virtual network card of an Android system, encapsulates a data packet according to a tunnel encapsulation format, thereby establishing a data transmission tunnel with a dynamic access control gateway, enabling application data in the Android system to be sent to the dynamic access control gateway through the transmission tunnel, and forwarding/proxy the application data to an application server by the dynamic access control gateway.
The basic flow of the existing scheme is as follows:
a) When the system is started, the dynamic access control client starts the TUN network card, binds the network card, and configures a routing table in the operating system to indicate a data packet needing to be routed to the TUN network card;
b) When an application app client initiates service access, a terminal operating system forwards a data packet to a TUN network card according to routing table information;
c) The dynamic access control client monitors the TUN network card and reads the data packet, and encapsulates the data packet according to a communication protocol format between the dynamic access control client and the dynamic access control gateway;
d) The dynamic access control client sends the packaged data packet out again through an operating system protocol stack;
e) The terminal operating system forwards the data packet encapsulated by the dynamic access control client to the physical network card according to the routing information;
f) The data is sent to the dynamic access control gateway through the physical network card;
g) The dynamic access control gateway decapsulates the data packet according to the protocol format, and forwards or proxies the service data to the application server by the dynamic access control gateway.
The existing Android dynamic access control technology cannot work normally under the condition that the TUN network card of the user equipment is occupied by other application programs. Because of the limitation of the Android operating system, only 1 TUN network card can be in a working state on the Android device, if the dynamic access control client starts one TUN network card again, the original TUN network card stops working, and therefore normal operation of the service is affected.
For example, when an Android device uses VPN to remotely access an internal network of an enterprise, the dynamic access control technology cannot normally operate simultaneously with the VPN technology. Because the realization of the VPN technology also depends on the TUN network card, the basic principle is that a VPN client is operated in the Android device, the client reads data in the TUN virtual network card of the Android system, encapsulates the data according to a VPN protocol format, and finally sends the data to a VPN gateway through the physical network card of the Android device, so that a VPN secure transmission channel is established. However, due to the limitation of the Android operating system, the system can only use one TUN network card at the same time, so that dynamic access control cannot be performed in the Android device running the VPN client. However, in the daily production work of an enterprise, because staff may go on business, the scene of accessing the internal network of the enterprise through the internet outside the enterprise by means of VPN technology is quite common, so that the problem that the dynamic access control client and the VPN client work simultaneously needs to be solved.
Disclosure of Invention
The invention aims to solve the problem of how to realize dynamic access control under the condition that a TUN network card is occupied by a VPN client in Android equipment.
The technical scheme adopted by the invention is as follows:
A method for implementing dynamic access control in Android equipment comprises the following steps:
The VPN client negotiates with the dynamic access control client to determine a data interaction port and an interest stream;
The VPN client reads the data packet from the TUN network card for the first time, and forwards the corresponding data packet to the dynamic access control client through the negotiated data interaction port according to the interest stream negotiated with the dynamic access control client;
the dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, and the operating system forwards the data packet after the first encapsulation to the TUN network card according to the routing table information;
The VPN client reads the data packet from the TUN network card for the second time, performs the second encapsulation according to the VPN format, and the operating system forwards the data packet after the second encapsulation to the physical network card according to the routing table information, and sends the data packet after the second encapsulation to the VPN gateway through the physical network card.
Further, the method further comprises the following steps:
After receiving the data packet, the VPN gateway performs a first decapsulation operation, and forwards the data packet after the first decapsulation to the dynamic access control gateway;
and the dynamic access control gateway performs a second decapsulation operation on the data packet and forwards the data packet after the second decapsulation to the application server.
Further, when the dynamic access control client encapsulates the data packet for the first time, filling in the destination address of the data packet as a dynamic access control gateway address, and then sending out the encapsulated data packet through an operating system protocol stack; and after the VPN client encapsulates the data packet for the second time, sending the encapsulated data packet out through an operating system protocol stack.
Further, under the condition that the TUN network card is occupied by the VPN client, the dynamic access control client sequentially encapsulates data packets in a mode that an ordinary user mode App interacts with the VPN client.
Further, the interaction mode between the VPN client and the dynamic access control client is AIDL or local Socket communication, etc.; the information interacted by the VPN client and the dynamic access control client comprises interest streams, data interaction port numbers and dynamic access control gateway IP address information.
Further, the keep-alive mechanism of the VPN client and the dynamic access control client includes: and adding the dynamic access control client into an operating system white list, or checking the service of the dynamic access control client by the VPN client, and if the service does not exist, actively starting the dynamic access control client.
Further, the dynamic access control gateway obtains the environmental state change of the current Android terminal, automatically composes an access control policy, and dynamically blocks the access behavior of the user.
The Android terminal comprises a VPN client, a dynamic access control client, a TUN network card and a physical network card; wherein:
The VPN client negotiates with the dynamic access control client to determine a data interaction port and an interest stream;
The VPN client reads the data packet from the TUN network card for the first time, and forwards the corresponding data packet to the dynamic access control client through the negotiated data interaction port according to the interest stream negotiated with the dynamic access control client;
the dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, and the operating system forwards the data packet after the first encapsulation to the TUN network card according to the routing table information;
The VPN client reads the data packet from the TUN network card for the second time, performs the second encapsulation according to the VPN format, and the operating system forwards the data packet after the second encapsulation to the physical network card according to the routing table information, and sends the data packet after the second encapsulation to the VPN gateway through the physical network card.
A system for implementing dynamic access control in Android equipment comprises an Android terminal, a VPN gateway, a dynamic access control gateway and an application server; the Android terminal comprises a VPN client, a dynamic access control client, a TUN network card and a physical network card; wherein:
The VPN client negotiates with the dynamic access control client to determine a data interaction port and an interest stream;
The VPN client reads the data packet from the TUN network card for the first time, and forwards the corresponding data packet to the dynamic access control client through the negotiated data interaction port according to the interest stream negotiated with the dynamic access control client;
the dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, and the operating system forwards the data packet after the first encapsulation to the TUN network card according to the routing table information;
The VPN client reads the data packet from the TUN network card for the second time, performs the second encapsulation according to the VPN format, and the operating system forwards the data packet after the second encapsulation to the physical network card according to the routing table information, and sends the data packet after the second encapsulation to the VPN gateway through the physical network card;
After receiving the data packet, the VPN gateway performs a first decapsulation operation, and forwards the data packet after the first decapsulation to the dynamic access control gateway;
and the dynamic access control gateway performs a second decapsulation operation on the data packet and forwards the data packet after the second decapsulation to the application server.
The beneficial effects of the invention are as follows:
a) Under the condition that the virtual network card of the Android device is occupied by the VPN client, dynamic access control can be realized in a form of no perception to an upper application client;
b) The method does not change the existing business access mode, does not subvert the existing business docking result, does not change the calling mode of the application client and the application system server for data interaction, does not change the user experience, and is easier for users to use.
C) In the method, the dynamic access control gateway can support deployment in a bypass deployment or tandem mode. The bypass mode does not change the existing equipment deployment mode of the service system, and the system transformation amount is small; the serial deployment can make the dynamic access control gateway an indispensable path of service system data, and further enhance the security of the service system.
Drawings
Fig. 1 is a general architecture diagram of a prior art scheme.
Fig. 2 is a general architecture diagram of the present invention.
Detailed Description
The present invention will be further described in detail with reference to the following examples and drawings, so that the above objects, features and advantages of the present invention can be more clearly understood.
1. Overall workflow
The overall architecture of the invention is shown in fig. 2, on an Android terminal, a VPN client occupies a TUN network card, and a dynamic access control client operates in the form of a common user mode app. At the server, the dynamic access control gateway is placed behind the VPN gateway. The invention discloses a method for implementing dynamic access control in Android equipment, which has the following basic ideas: the VPN client negotiates with the dynamic access control client to determine a data interaction port and an interest stream; the VPN client reads the data packet from the TUN network card for the first time, and forwards the corresponding data packet to the dynamic access control client through the negotiated data interaction port according to the interest stream negotiated with the dynamic access control client; the dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, then sends the data packet after the first encapsulation through an operating system protocol stack, and the operating system forwards the data packet encapsulated for the first time to the TUN network card according to the routing table information; the VPN client reads the data packet from the TUN network card for the second time, encapsulates the data packet for the second time according to the VPN format, then sends the data packet after the second encapsulation through an operating system protocol stack, and the operating system forwards the data packet after the second encapsulation to the physical network card according to the routing table information, and finally sends the data packet after the second encapsulation to the VPN gateway through the physical network card of the Android device; after receiving the data packet, the VPN gateway performs a first decapsulation operation, forwards the data packet after the first decapsulation to the dynamic access control gateway, performs a second decapsulation operation on the data packet by the dynamic access control gateway, and forwards/proxies the data packet after the second decapsulation to the application server.
2. Service access flow
A) When the system is started, the dynamic access control client negotiates with the VPN client, wherein the negotiated contents comprise, but are not limited to, data interaction ports, data packets for which dynamic access control is performed, namely interest flows of dynamic access control, and relevant routing table items of an operating system are configured;
b) The APP client initiates a service access request, and the operating system forwards the data packet to the TUN network card according to the routing table information;
c) The VPN client reads a data packet from the TUN network card (reads the data packet for the first time);
d) The VPN client transmits the data packet meeting the conditions to the dynamic access control client according to the negotiation information in the step a);
e) The dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, fills in the destination address of the data packet as the address of the dynamic access control gateway, and then sends out the data packet through an operating system protocol stack;
f) The operation system forwards the data packet encapsulated for the first time to the TUN network card according to the routing table, the VPN client reads the data packet from the TUN network card again (reads the data packet for the second time), encapsulates the data packet for the second time according to the VPN protocol format, and sends the encapsulated data packet out through an operation system protocol stack; the VPN client and the dynamic access control client do not decide which network card is transmitted, which network card is transmitted and decided by the operating system according to the system routing table;
g) The operating system forwards the data packet in the step f) to the physical network card of the Android device according to the routing table information, and finally the data packet is sent out through the physical network card;
h) The data packet arrives at the VPN gateway, the VPN gateway de-encapsulates the data packet for the first time, and forwards the de-encapsulated data packet to the dynamic access control gateway;
i) And the dynamic access control gateway receives the data packet after the first decapsulation, performs the second decapsulation on the data packet according to the protocol format of the dynamic access control gateway, and forwards or proxies the decapsulated data packet to the application server.
3. Key point of the invention
A) Under the condition that the virtual network card of the Android device is occupied by the VPN client, the dynamic access control client sequentially encapsulates the data packets in a mode of interaction between an common user mode App and the VPN client;
b) The manner in which the VPN client interacts with the dynamic access control client, including but not limited to AIDL, local Socket communications, etc.; information interacted by the VPN client with the dynamic access control client, including but not limited to interest streams, data interaction port numbers, dynamic access control gateway IP address information, and the like;
c) VPN client and dynamic access control client keep-alive mechanism (VPN client and dynamic access control client processes cannot be killed by user), including but not limited to adding dynamic access control client to operating system whitelist, or VPN client checking service of dynamic access control client, if service does not exist, actively starting dynamic access control client, etc.;
d) The dynamic access control gateway can acquire the environmental state change of the current Android terminal such as a mobile phone, automatically arrange an access control strategy and dynamically block the access behavior of the user.
Wherein, the "automatically arranging access control policy, dynamically blocking the access behavior of the user" specifically means: the method comprises the steps of collecting equipment information, user information, security risk information, geographical position information, network connection information and the like of an Android terminal through mobile terminal equipment management (MDM), mobile Application Management (MAM), mobile virus scanning, vulnerability scanning and other modules, uploading the equipment information, the user information, the security risk information, the geographical position information, the network connection information and the like of the Android terminal to an access control policy center working in cooperation with a dynamic access control gateway, arranging an access control policy according to the collected terminal information by the access control policy center, issuing the access control policy to the dynamic access control gateway, and determining whether to block certain user behaviors by the dynamic access control gateway according to the access control policy.
In the invention, the dynamic access control gateway can support two modes of bypass deployment or tandem deployment. The concatenation means that the dynamic access control gateway is deployed on the requisite path of the user access server, and the bypass means that the dynamic access control gateway is not deployed on the requisite path.
Another embodiment of the invention provides an Android terminal, which comprises a VPN client, a dynamic access control client, a TUN network card and a physical network card; wherein:
The VPN client negotiates with the dynamic access control client to determine a data interaction port and an interest stream;
The VPN client reads the data packet from the TUN network card for the first time, and forwards the corresponding data packet to the dynamic access control client through the negotiated data interaction port according to the interest stream negotiated with the dynamic access control client;
the dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, and the operating system forwards the data packet after the first encapsulation to the TUN network card according to the routing table information;
The VPN client reads the data packet from the TUN network card for the second time, performs the second encapsulation according to the VPN format, and the operating system forwards the data packet after the second encapsulation to the physical network card according to the routing table information, and sends the data packet after the second encapsulation to the VPN gateway through the physical network card.
The invention provides a system for implementing dynamic access control in Android equipment, which comprises an Android terminal, a VPN gateway, a dynamic access control gateway and an application server; the Android terminal comprises a VPN client, a dynamic access control client, a TUN network card and a physical network card; wherein:
The VPN client negotiates with the dynamic access control client to determine a data interaction port and an interest stream;
The VPN client reads the data packet from the TUN network card for the first time, and forwards the corresponding data packet to the dynamic access control client through the negotiated data interaction port according to the interest stream negotiated with the dynamic access control client;
the dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, and the operating system forwards the data packet after the first encapsulation to the TUN network card according to the routing table information;
The VPN client reads the data packet from the TUN network card for the second time, performs the second encapsulation according to the VPN format, and the operating system forwards the data packet after the second encapsulation to the physical network card according to the routing table information, and sends the data packet after the second encapsulation to the VPN gateway through the physical network card;
After receiving the data packet, the VPN gateway performs a first decapsulation operation, and forwards the data packet after the first decapsulation to the dynamic access control gateway;
and the dynamic access control gateway performs a second decapsulation operation on the data packet and forwards the data packet after the second decapsulation to the application server.
The above-disclosed embodiments of the present invention are intended to aid in understanding the contents of the present invention and to enable the same to be carried into practice, and it will be understood by those of ordinary skill in the art that various alternatives, variations and modifications are possible without departing from the spirit and scope of the invention. The invention should not be limited to what has been disclosed in the examples of the specification, but rather by the scope of the invention as defined in the claims.

Claims (9)

1. The method for implementing dynamic access control in the Android device is characterized by comprising the following steps:
The VPN client negotiates with the dynamic access control client to determine a data interaction port and an interest stream;
The VPN client reads the data packet from the TUN network card for the first time, and forwards the corresponding data packet to the dynamic access control client through the negotiated data interaction port according to the interest stream negotiated with the dynamic access control client;
the dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, and the operating system forwards the data packet after the first encapsulation to the TUN network card according to the routing table information;
The VPN client reads the data packet from the TUN network card for the second time, performs the second encapsulation according to the VPN format, and the operating system forwards the data packet after the second encapsulation to the physical network card according to the routing table information, and sends the data packet after the second encapsulation to the VPN gateway through the physical network card.
2. The method of claim 1, further comprising the step of:
After receiving the data packet, the VPN gateway performs a first decapsulation operation, and forwards the data packet after the first decapsulation to the dynamic access control gateway;
and the dynamic access control gateway performs a second decapsulation operation on the data packet and forwards the data packet after the second decapsulation to the application server.
3. The method according to claim 1 or 2, wherein when the dynamic access control client encapsulates the data packet for the first time, filling in a destination address of the data packet as a dynamic access control gateway address, and then sending out the encapsulated data packet via an operating system protocol stack; and after the VPN client encapsulates the data packet for the second time, sending the encapsulated data packet out through an operating system protocol stack.
4. The method according to claim 1 or 2, wherein in case the TUN network card is already occupied by the VPN client, the dynamic access control client encapsulates data packets in sequence in a manner that a normal user mode App interacts with the VPN client.
5. The method of claim 1, wherein the manner in which the VPN client interacts with the dynamic access control client is AIDL or local Socket communications; the information interacted by the VPN client and the dynamic access control client comprises interest streams, data interaction port numbers and dynamic access control gateway IP address information.
6. The method of claim 1, wherein the keep-alive mechanism for the VPN client and the dynamic access control client comprises: and adding the dynamic access control client into an operating system white list, or checking the service of the dynamic access control client by the VPN client, and if the service does not exist, actively starting the dynamic access control client.
7. The method according to claim 1, wherein the dynamic access control gateway obtains an environmental state change of a current Android terminal, automatically orchestrates access control policies, and dynamically blocks user access behaviors.
8. The Android terminal is characterized by comprising a VPN client, a dynamic access control client, a TUN network card and a physical network card; wherein:
The VPN client negotiates with the dynamic access control client to determine a data interaction port and an interest stream;
The VPN client reads the data packet from the TUN network card for the first time, and forwards the corresponding data packet to the dynamic access control client through the negotiated data interaction port according to the interest stream negotiated with the dynamic access control client;
the dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, and the operating system forwards the data packet after the first encapsulation to the TUN network card according to the routing table information;
The VPN client reads the data packet from the TUN network card for the second time, performs the second encapsulation according to the VPN format, and the operating system forwards the data packet after the second encapsulation to the physical network card according to the routing table information, and sends the data packet after the second encapsulation to the VPN gateway through the physical network card.
9. The system for implementing dynamic access control in the Android device is characterized by comprising an Android terminal, a VPN gateway, a dynamic access control gateway and an application server; the Android terminal comprises a VPN client, a dynamic access control client, a TUN network card and a physical network card; wherein:
The VPN client negotiates with the dynamic access control client to determine a data interaction port and an interest stream;
The VPN client reads the data packet from the TUN network card for the first time, and forwards the corresponding data packet to the dynamic access control client through the negotiated data interaction port according to the interest stream negotiated with the dynamic access control client;
the dynamic access control client encapsulates the data packet for the first time according to the communication protocol format of the dynamic access control client and the dynamic access control gateway, and the operating system forwards the data packet after the first encapsulation to the TUN network card according to the routing table information;
The VPN client reads the data packet from the TUN network card for the second time, performs the second encapsulation according to the VPN format, and the operating system forwards the data packet after the second encapsulation to the physical network card according to the routing table information, and sends the data packet after the second encapsulation to the VPN gateway through the physical network card;
After receiving the data packet, the VPN gateway performs a first decapsulation operation, and forwards the data packet after the first decapsulation to the dynamic access control gateway;
and the dynamic access control gateway performs a second decapsulation operation on the data packet and forwards the data packet after the second decapsulation to the application server.
CN202211303626.0A 2022-10-24 2022-10-24 Method and system for implementing dynamic access control in Android device Pending CN117938408A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202211303626.0A CN117938408A (en) 2022-10-24 2022-10-24 Method and system for implementing dynamic access control in Android device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202211303626.0A CN117938408A (en) 2022-10-24 2022-10-24 Method and system for implementing dynamic access control in Android device

Publications (1)

Publication Number Publication Date
CN117938408A true CN117938408A (en) 2024-04-26

Family

ID=90765178

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202211303626.0A Pending CN117938408A (en) 2022-10-24 2022-10-24 Method and system for implementing dynamic access control in Android device

Country Status (1)

Country Link
CN (1) CN117938408A (en)

Similar Documents

Publication Publication Date Title
EP1437020B1 (en) System and method for enabling mobile edge services
US20180270660A1 (en) Method and system for peer-to-peer enforcement
US10454880B2 (en) IP packet processing method and apparatus, and network system
US11824685B2 (en) Method for implementing GRE tunnel, access point and gateway
CN103441996A (en) Method and system for transmitting files in concurrent mode
US8817815B2 (en) Traffic optimization over network link
US20150381563A1 (en) Relay system for transmitting ip address of client to server and method therefor
CN103023898A (en) Method and device for accessing intranet resource of virtual private network (VPN) server
US8396027B2 (en) Communication control system, communication system and communication control method
JP2001308935A (en) Communication system, communication method and communication apparatus
CN105765919A (en) Methods and systems for transmitting and receiving packets
CN103125141A (en) Aggregation of mobile broadband network interfaces
CN105637819A (en) Methods and systems for transmitting broadcast data
WO2020048348A1 (en) Data transmission method and system
CN102612033B (en) Mobile phone with thin wireless access point and communication method for mobile phone
US20200322418A1 (en) Secure remote computer network
CN106416146B (en) Communication apparatus, communication method, and communication system
CN117938408A (en) Method and system for implementing dynamic access control in Android device
CN101465858A (en) Method for implementing private network penetration of monitoring business, network appliance and server
CN110266715A (en) Strange land accesses method, apparatus, equipment and computer readable storage medium
CN117439815B (en) Intranet penetration system and method based on reverse transparent bridging
JP5947763B2 (en) COMMUNICATION SYSTEM, COMMUNICATION METHOD, AND COMMUNICATION PROGRAM
CN117938409A (en) Method and system for realizing dynamic access control in Android system without depending on virtual network card
TW512263B (en) On-demand system and method for access repeater used in Virtual Private Network
WO2014205806A1 (en) Inter-network device communication method, related device and system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination