WO2023184264A1 - Traffic proxy methods and apparatuses, electronic device and storage medium - Google Patents

Abstract

The present disclosure relates to traffic proxy methods and apparatuses, an electronic device and a storage medium, belonging to the technical field of Internet of Things. A method comprises: establishing a transmission control protocol (TCP) connection channel with a cloud server; establishing a user datagram protocol (UDP) local transmission channel with one or more terminal devices in the Internet of Things; and by means of the TCP connection channel and the UDP local transmission channel, transmitting data frames required during communication of the terminal device(s) with the cloud server. Therefore, by means of the TCP connection channel and the UDP local transmission channel, the data frames required during communication of the terminal device(s) with the cloud server can be transmitted, thereby achieving proxy for traffics of the terminal device(s), reducing the pressure of TCP connection performed between the terminal device(s) and the cloud server, and improving the network service quality.

Description

A traffic proxy method, device, electronic device and storage medium Technical field

The present disclosure relates to the technical field of the Internet of Things, and in particular, to a traffic proxy method, device, electronic device and storage medium.

Background technique

At present, with the vigorous development of Internet of Things technology, the number of terminal devices connected to the Internet under ordinary home broadband is also increasing.

As the number of terminal devices increases, the network pressure on long TCP (Transmission Control Protocol) connections between terminal devices and cloud servers will increase, which often reduces network service quality.

Contents of the invention

The present disclosure provides a traffic proxy method, device, electronic device and storage medium to at least solve the problem in related technologies that as the number of terminal devices increases, the pressure on TCP connections between terminal devices and cloud servers increases and network services are reduced. Quality issues.

The technical solutions of the present disclosure are as follows:

According to the first aspect of the embodiment of the present disclosure, a traffic proxy method is provided, which is suitable for proxy devices, including: establishing a transmission control protocol TCP connection channel with a cloud server; establishing a user connection with one or more terminal devices in the same Internet of Things Datagram protocol UDP local transmission channel; through the TCP connection channel and the UDP local transmission channel, the data frames required when the terminal device communicates with the cloud server are transmitted.

According to a second aspect of the embodiment of the present disclosure, a traffic proxy method is provided, which is suitable for terminal devices, including: in response to establishing a User Datagram Protocol UDP local transmission channel with a proxy device in the Internet of Things, disconnecting from the cloud server The first TCP connection channel; transmits data frames required for communication with the cloud server through the UDP local transmission channel.

According to a third aspect of the embodiment of the present disclosure, a traffic proxy device is provided, suitable for proxy equipment, including: a connection module configured to establish a transmission control protocol TCP connection channel with a cloud server; a first transmission module configured to Execute the establishment of a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the same Internet of Things; the second transmission module is configured to execute the transmission of the User Datagram Protocol UDP local transmission channel through the TCP connection channel and the UDP local transmission channel. Data frames required when the terminal device communicates with the cloud server.

According to a fourth aspect of the embodiment of the present disclosure, a traffic proxy device is provided, which is suitable for a terminal device and includes: a connection module configured to execute a response to establishing a User Datagram Protocol UDP local transmission channel with a proxy device in the Internet of Things , disconnect the first TCP connection channel with the cloud server; the transmission module is configured to perform transmission of data frames required for communication with the cloud server through the UDP local transmission channel.

According to a fifth aspect of an embodiment of the present disclosure, an electronic device is provided, including: a processor; a memory for storing executable instructions of the processor; wherein the processor is configured to execute the instructions to Implement the traffic proxy method described in the first aspect of this disclosure embodiment or the second aspect of this disclosure embodiment.

According to a sixth aspect of an embodiment of the present disclosure, a computer-readable storage medium is provided, which when instructions in the computer-readable storage medium are executed by a processor of an electronic device, enables the electronic device to execute the steps of the first embodiment of the present disclosure. The traffic proxy method described in one aspect or the second aspect of this disclosure embodiment.

The technical solution provided by the embodiments of the present disclosure at least brings the following beneficial effects: the data frames required when the terminal device communicates with the cloud server can be transmitted through the TCP connection channel and the UDP local transmission channel, realizing the proxy for the terminal device traffic, It reduces the pressure on TCP connections between terminal devices and cloud servers and improves network service quality.

It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only, and do not limit the present disclosure.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the disclosure or the background technology, the drawings required to be used in the embodiments or the background technology of the disclosure will be described below.

Figure 1 is a flow chart of a traffic proxy method according to an exemplary embodiment.

Figure 2 is a schematic diagram of a traffic proxy according to an exemplary embodiment.

Figure 3 is a flow chart of another traffic proxy method according to an exemplary embodiment.

Figure 4 is an interactive diagram illustrating the establishment of a UDP local transmission channel according to an exemplary embodiment.

Figure 5 is a flow chart of another traffic proxy method according to an exemplary embodiment.

Figure 6 is a flow chart of another traffic proxy method according to an exemplary embodiment.

Figure 7 is an interactive diagram illustrating closing a UDP local transmission channel according to an exemplary embodiment.

Figure 8 is a flow chart of another traffic proxy method according to an exemplary embodiment.

Figure 9 is a flow chart of a traffic proxy method according to an exemplary embodiment.

Figure 10 is a block diagram of a traffic proxy device according to an exemplary embodiment.

Figure 11 is a block diagram of another traffic proxy device according to an exemplary embodiment.

FIG. 12 is a block diagram of an electronic device according to an exemplary embodiment.

Detailed ways

In order to allow ordinary people in the art to better understand the technical solutions of the present disclosure, the technical solutions in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the accompanying drawings.

It should be noted that the terms "first", "second", etc. in the description and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It is to be understood that the data so used are interchangeable under appropriate circumstances so that the embodiments of the disclosure described herein can be practiced in sequences other than those illustrated or described herein. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with aspects of the disclosure as detailed in the appended claims.

Figure 1 is a flow chart of a traffic proxy method according to an exemplary embodiment, which is applicable to a proxy device. As shown in Figure 1, the traffic proxy method according to the embodiment of the present disclosure is executed by the proxy device. The method may include the following steps :

S101: Establish a transmission control protocol TCP connection channel with the cloud server.

It should be noted that the execution subject of the traffic proxy method in the embodiment of the present disclosure is a proxy device, where the proxy device includes but is not limited to mobile phones, tablet computers, notebooks, desktop computers, vehicle-mounted terminals, smart home appliances, etc. The traffic proxy method of the embodiment of the present disclosure can be executed by the traffic proxy device of the embodiment of the present disclosure. The traffic proxy device of the embodiment of the present disclosure can be configured in any proxy device to execute the traffic proxy method of the embodiment of the present disclosure.

It can be understood in this field that optical modems or fiber-to-the-home routers need to perform NAT (Network Address Translation) conversion for the TCP connection channels corresponding to all terminal devices connected to the router, and the operator's equipment hardware resources are limited. In smart home scenarios, the more terminal devices users connect to the Internet, the greater the NAT conversion pressure on optical modems or home routers, thereby reducing network quality and affecting users' Internet experience.

Based on this, the embodiment of the present disclosure proposes a traffic proxy method that transmits the data frames required when the terminal device communicates with the cloud server through the TCP connection channel and UDP (User Datagram Protocol, User Datagram Protocol) local transmission channel, which can The terminal device whose traffic is proxied no longer creates a separate TCP connection channel, thereby eliminating the NAT conversion pressure on the operator's equipment, breaking through the limit on the number of terminal devices connected to the network, and improving the quality of network service.

In the embodiment of the present disclosure, the proxy device is a central device that performs traffic proxy for terminal devices in the Internet of Things, and the cloud server is a cloud host that provides basic services and configurations for connected devices. The proxy device and the cloud server can establish transmission control. Protocol TCP connection channel for processing and forwarding of subsequent communication messages, as shown in Figure 2.

S102. Establish a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the same Internet of Things.

In the embodiment of the present disclosure, the terminal device is a device in the Internet of Things, and a User Datagram Protocol UDP local transmission channel is established between the proxy device and the terminal device in the same Internet of Things for subsequent information reception and forwarding. The number of terminal devices may be one or more. It should be noted that the initial state of the proxy device is connected to the cloud server. After the terminal device establishes a UDP local transmission channel with the proxy device, it will disconnect from the cloud server, and then exchange information through the UDP local transmission channel.

It should also be noted that in the embodiments of the present disclosure, the specific categories of terminal devices are not too limited and can be set according to the actual situation. For example, the terminal devices may include but are not limited to air purifiers, curtain controllers, smart phones, etc. Door locks etc.

For example, as shown in Figure 2 above, the terminal device is an Internet of Things WiFi device, which may include but is not limited to air purifiers, smart cameras, curtain motors, etc. On the transmission layer, each terminal device and the agent device establish separate User Datagram Protocol UDP local transmission channel, the terminal device no longer directly establishes a TCP connection channel with the cloud server. All traffic between the terminal device and the cloud server is forwarded by the proxy device. On the application layer, the proxy device and the proxy traffic UDP packets are used to exchange information between terminal devices.

S103: Transmit the data frames required when the terminal device communicates with the cloud server through the TCP connection channel and the UDP local transmission channel.

In the embodiment of the present disclosure, the proxy device proxies the data frames required for communication between the terminal device and the cloud server through the TCP connection channel established in step S101 and the UDP local transmission channel established in step S102. Among them, the data frame is the data unit of communication data between the terminal device and the cloud server.

As a possible implementation method, the terminal device sends the data frames required for communication to the proxy device through the UDP local transmission channel. After the proxy device receives the data frames sent by the terminal device, it sends the data frames through the TCP connection channel established with the cloud server. The data frame is sent to the cloud server. The cloud server receives the data frame sent by the proxy device and returns the corresponding data frame to the proxy device. After receiving the data frame returned by the cloud server, the proxy device sends it to the terminal device, thereby realizing Transmission of data frames required for communication between terminal devices and cloud servers.

In the traffic proxy method provided by the embodiments of the present disclosure, the proxy device establishes a Transmission Control Protocol TCP connection channel with the cloud server, and establishes a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the Internet of Things, through the TCP connection channel and UDP local transmission channel to transmit the data frames required when the terminal device communicates with the cloud server. As a result, the data frames required for communication between the terminal device and the cloud server can be transmitted through the TCP connection channel and the UDP local transmission channel, realizing the proxy for the terminal device traffic and reducing the TCP connection between the terminal device and the cloud server. pressure, improving network service quality.

As a possible implementation method, the proxy device establishes a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the same Internet of Things. The UDP local transmission channel needs to be based on the address information of both devices. to create. In this disclosure, the proxy device can obtain its own first address information, and may also need to obtain the second address information of the terminal device. Based on the known address information of both devices, the UDP link establishment process can be executed to communicate with the terminal device. Establish a UDP local transmission channel between terminal devices. It should be noted that the address information of the present disclosure is optionally IP address information.

In order to ensure the security of data transmission, optionally the proxy device and the terminal device need to establish a UDP local transmission channel based on having the same user ID or bound account. In the present disclosure, the proxy device can also obtain the second user identification bound to the terminal device and the first user identification bound to itself. When the two user identifications are consistent, establish a UDP local connection with the terminal device. transmission channel. Optionally, the terminal device may obtain the first user identification of the proxy device. When the terminal device determines that its second user identification is consistent with the first user identification, it sends the second address information and the second user identification to the proxy device.

In this disclosure, in order to ensure that the data transmission between the proxy device and the terminal device is secure, the proxy device also needs to obtain the key corresponding to the second user identification so that secure transmission with the terminal device can be achieved, that is, in The data transmitted on the UDP local transmission channel is encrypted data based on the key corresponding to the second user ID.

Figure 3 is a flow chart of another traffic proxy method according to an exemplary embodiment. As shown in Figure 3, the traffic proxy method according to the embodiment of the present disclosure is executed by a proxy device. The method may include the following steps:

S301: Establish a transmission control protocol TCP connection channel with the cloud server.

For an introduction to step S301 in this embodiment, please refer to the relevant content recorded in the above embodiment, and will not be described again here.

S302. Periodically broadcast a detection request frame, where the detection request frame includes the first user identification and first address information corresponding to the proxy device.

In the embodiment of the present disclosure, the proxy device periodically broadcasts the detection request frame to the terminal device, where the detection request frame is used by the proxy device to discover the terminal device under the same user name in the local area network and prepare for the establishment of the UDP local transmission channel. A user identification is the UID (User Identity, User Identification Code) of the user account to which the proxy device belongs, and the first address information is the source IP (Internet Protocol, IP address) information of the detection request frame sent by the proxy device. Optionally, the UID of the probe request frame has a byte length of 8.

It should be noted that broadcast refers to one-to-many information exchange. Correspondingly, one-to-one information exchange is unicast. This disclosure does not place too many restrictions on the specific form of periodic broadcast by the agent device, and it can be carried out according to the actual situation. set up. For example, the proxy device can set 1 minute or 5 seconds as a cycle, and send a detection request frame to the terminal device once the set cycle is reached to meet the requirement of scheduled broadcast.

For example, Figure 4 is a schematic diagram of the interaction between the terminal device and the proxy device in the traffic proxy mode. As shown in Figure 4, the probe request frame is probe_request, and the probe response frame is probe_response. The proxy device and the terminal device are initializing, connecting to the cloud server, and After the server establishes the TCP connection channel, the proxy device sends the probe request frame probe_request to the terminal device in the form of a broadcast. Among them, initialization means initializing the parameters of the device and restoring the default state of the device.

Further, after receiving the detection request frame from the proxy device, the terminal device parses the UID field in the detection request frame. If the UID of the proxy device is the same as the UID of the terminal device itself, that is, both belong to the same user account, then the terminal device Record the source IP information of the UDP message of the received detection request frame, and return the detection response frame to the proxy device.

S303. Receive a detection response frame returned by the terminal device, where the detection response frame includes the second user identification and second address information corresponding to the terminal device.

In the detection response frame, the terminal device determines that the first user identity and the second user identity are the same.

In the embodiment of the present disclosure, the second user identification is the UID of the user account to which the terminal device belongs, and the second address information is the source IP information of the detection response frame sent by the terminal device. When the first user of the detection request frame in step S302 When the identification is the same as the second user identification of the detection response frame in this step, that is, when the proxy device and the terminal device are under the same user account, the terminal device determines to return the detection response frame, and the proxy device receives the detection response frame returned by the terminal device, such as As shown in Figure 4, after receiving the probe request frame probe_request sent by the proxy device in the form of broadcast, the terminal device returns the probe response frame probe_response to the proxy device in the form of unicast.

It should be noted that after receiving the detection response frame returned by the terminal device, the proxy device parses the UID field in the detection response frame returned by the terminal device. After confirming that the UID of the proxy device is the same as the UID of the terminal device itself, the proxy device The device records the source IP of the UDP message of the received detection response frame and the unique DID (Device Identity, device identification code) of the terminal device. Optionally, the DID of the probe request frame can be all 0xFF, and the byte length of the DID is 8.

It should be noted that the proxy device can determine the validity of the data frame or detection response frame returned by the terminal device and process it accordingly.

In some embodiments, the proxy device responds to receiving the data frame or the probe response frame, extracts a timestamp from the data frame or the probe response frame, and obtains a time difference based on the timestamp and the current time, in response to the time difference being less than or equal to the window time. , determine the data frame or detection response frame as a valid frame, process or transmit the valid frame; in response to the time difference being greater than the window time, determine the data frame or detection response frame as an invalid frame, and discard the invalid frame. It is not difficult to see that only when the time difference is less than or equal to the window time, the data frame or detection response frame sent by the terminal device received by the proxy device is valid.

Those in the art can understand that timestamps are used to deduplicate messages and prevent replay attacks. Optionally, the timestamp (timestamp, ts for short) can be an international standard UNIX timestamp, and the byte length of the timestamp is 4.

S304: Perform a UDP link establishment process with the terminal device based on the first address information and the second address information to establish a UDP local transmission channel.

In the embodiment of the present disclosure, the proxy device can perform a link establishment process with the terminal device based on the first address information in step S302 and the second address information in step S303, thereby establishing a UDP local transmission channel.

It should be noted that after a round of information exchange between the detection request frame and the detection response frame, the proxy device and the terminal device have obtained each other's address information, that is, the source IP information. Based on the address information of the proxy device and the terminal device, between the proxy device and the terminal device, Establish a UDP local transmission channel between terminal devices.

For example, to describe the establishment process of the local transmission channel, continue as shown in Figure 4 above. After the proxy device successfully obtains the key of the terminal device from the cloud server, it further sends a connection request frame link_request to the terminal device in the form of unicast to request Establish a local transmission channel. After receiving the link_request sent by the proxy device, the terminal device also returns the connection response frame link_response to the proxy device in the form of unicast to express its agreement to establish the local transmission channel to achieve the establishment of the local transmission channel.

Figure 5 is a flow chart of another traffic proxy method according to an exemplary embodiment. As shown in Figure 5, the traffic proxy method according to the embodiment of the present disclosure is executed by a proxy device. The method may include the following steps:

S501: Establish a transmission control protocol TCP connection channel with the cloud server.

S502. Periodically broadcast a detection request frame, where the detection request frame includes the first user identification and first address information corresponding to the proxy device.

For the introduction of steps S501 to 502 in this embodiment, please refer to the relevant content records in the above embodiments, and will not be described again here.

S503. Receive a detection response frame returned by the terminal device, where the detection response frame includes the second user identification and second address information corresponding to the terminal device.

In the detection response frame, the terminal device determines that the first user identity and the second user identity are the same.

For the introduction of steps S501 to 503 in this embodiment, please refer to the relevant content records in the above embodiments, and will not be described again here.

S504: Send a key acquisition request to the cloud server based on the device identification and the second user identification.

In the embodiment of the present disclosure, the detection response frame also includes the first device identification of the terminal device. The device identification is the unique DID (Device Identity, device identification code) of the terminal device. The key is provided by the cloud server when the terminal device binds a user account. To generate and deliver a Token to the terminal device, the proxy device can send a key acquisition request to the cloud server based on the device identification and the second user identification to obtain the key corresponding to the terminal device under the user account. It should be noted that one terminal device has and has only one corresponding key, and different user accounts and/or different terminal devices have different keys.

It should be noted that the proxy device can only obtain the key of the terminal device under the same user account name as the terminal device from the cloud server.

S505. In response to receiving the key corresponding to the second user ID returned by the cloud server, send a channel establishment request to the terminal device in a unicast manner, where the channel establishment request is used to request the establishment of a UDP local transmission channel with the terminal device.

In the embodiment of the present disclosure, after receiving the key corresponding to the second user ID returned by the cloud server, the proxy device sends a channel establishment request to the terminal device in a unicast manner for requesting to establish a UDP local transmission channel with the terminal device.

If the proxy device fails to successfully obtain the key of the terminal device corresponding to the second user ID from the cloud server, for example, the proxy device is not connected to the cloud server, the cloud server fails, etc., the proxy device will not send a channel establishment request (link_request ) to the terminal device, so that the UDP local transmission channel cannot be established. Then the terminal device will connect to the cloud server according to the normal startup process, keeping the original connection logic unchanged.

S506: Perform a UDP link establishment process with the terminal device based on the first address information and the second address information to establish a UDP local transmission channel.

For an introduction to steps S501 to 506 in this embodiment, please refer to the relevant records in the above embodiments and will not be described again here.

After the UDP local transmission channel is established, if one of the IP address information in the proxy device and the terminal device is updated, but the UDP local transmission channel between the two is not updated synchronously, the local communication between the proxy device and the terminal device cannot Doing so often results in data loss.

In this disclosed embodiment, the proxy device needs to update and monitor the first address information and the second address information, promptly discover whether the address information has been updated, and reconstruct the UDP local communication path as soon as possible, which can make data transmission more secure. In response to monitoring the update of the first address and/or the second address information, the UDP local transmission channel is re-established based on the updated address information, that is, the link establishment process of the UDP local transmission channel is re-executed.

As a possible implementation method, after establishing a UDP local transmission channel, the proxy device regularly interacts with the terminal device with detection request frames and detection response frames. Optionally, the address information in the proxy device detection request frame is extracted. The obtained address information of the proxy device is compared with the first address information. If the two comparisons are not consistent, it is determined that an address update has occurred on the proxy device. The proxy device extracts the address information in the detection response frame and compares it with the second location information. If the two comparisons are not consistent, it is determined that the address update of the terminal device has occurred. That is to say, when the comparison of the first address information is not consistent and/or the comparison of the second address information is not consistent, it can be determined that the first address and/or the second address information are updated.

Further, in response to the update of the address information carried by the probe request frame and/or the probe response frame, the UDP local transmission channel is re-established based on the updated address information.

For example, as shown in Figure 4 above, the proxy device always sends the probe request frame probe_request regularly in the form of broadcast in the traffic proxy mode. The terminal device that has established a local transmission channel with the proxy device will also send the probe_request in the form of unicast after receiving the probe_request. The probe response frame probe_response is returned in the form. The proxy device and the terminal device maintain each other's IP address through the interaction of probe_request and probe_response. When the IP address of one party changes, the other party can discover and re-establish the local transmission channel in time.

Figure 6 is a flow chart of another traffic proxy method according to an exemplary embodiment. As shown in Figure 6, the traffic proxy method according to the embodiment of the present disclosure is executed by a proxy device. The method may include the following steps:

S601: Establish a transmission control protocol TCP connection channel with the cloud server.

S602: Establish a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the Internet of Things.

For an introduction to steps S601 to 602 in this embodiment, please refer to the relevant records in the above embodiments and will not be described again here.

S603: In response to receiving the uplink data frame sent by the terminal device through the UDP local transmission channel, send the uplink data frame to the cloud server through the TCP connection channel.

In the embodiment of the present disclosure, after the proxy device receives the uplink data frame sent by the terminal device through the UDP local transmission channel, it sends the uplink data frame to the cloud server through the TCP connection channel between the proxy device and the cloud server. Among them, under normal circumstances, the change of the terminal device's own status will notify the control center (agent device or cloud server). The message reported to the control center by this device notification is called an uplink message. The uplink message here is encrypted by the terminal device. Upward news. It should be noted that when the terminal device sends an uplink message, it uses the key corresponding to the second user ID to encrypt the uplink message, and then packages the uplink message and sends it to the proxy device through the UDP local transmission channel. It should also be noted that the application layer protocol between the proxy device and the cloud server adopts the MQTT over TLS (Transport Layer Secure Message Queuing Telemetry Transmission Standard Protocol) scheme. The definition of the upstream data frame in this scheme is as follows: device/${DID} /up/${method}: Among them, the method is agreed between the cloud server and the agent device. When the DID is the agent device, the message is the uplink message of the agent device itself. When the DID is the terminal device, the message is the agent device. Agents for upstream messages from terminal devices.

It should be noted that this disclosure does not place too many restrictions on the specific way in which the proxy device sends the uplink data frame to the cloud server, and it can be set according to the actual situation.

In some embodiments, the proxy device may determine the key corresponding to the second user identification obtained from the cloud server based on the first device identification, decrypt the encrypted uplink data frame based on the key corresponding to the second user identification, and decrypt the encrypted uplink data frame based on the key corresponding to the second user identification. The agent device's own key encrypts the decrypted uplink message and sends it to the cloud server. After receiving the uplink data frame, the proxy device parses the DID field in the uplink data frame, and uses the key of the corresponding terminal device, that is, the key corresponding to the second user identification, to decrypt the uplink data frame.

S604: In response to receiving the downlink data frame sent by the cloud server through the TCP connection channel, send the downlink data frame to the terminal device through the UDP local transmission channel.

In the embodiment of the present disclosure, after the proxy device receives the downlink data frame sent by the cloud server through the TCP connection channel, it sends the downlink data frame to the terminal device through the UDP local transmission channel. Among them, under normal circumstances, when the user wants to control the terminal device, the control center (agent device or cloud server) will send control instructions to the terminal device. This data frame containing the control instructions is called a downlink data frame. The downlink data here The frame is the downlink data frame encrypted by the cloud server.

It should be noted that the definition of downlink data frames in the MQTT over TLS solution is as follows: device/${DID}/down/${method}: where method is agreed between the cloud server and the proxy device. When DID is the proxy device When the DID is a terminal device, the message is a downlink data frame sent by the cloud server to the proxy device. When the DID is a terminal device, the message is a downlink data frame of other terminal devices that the proxy device needs to process or forward on its behalf.

It should be noted that this disclosure does not place too many restrictions on the way in which the proxy device sends downlink data frames, and it can be set according to actual conditions.

In some embodiments, the proxy device can decrypt the encrypted downlink data frame based on the proxy device's own key, determine the key corresponding to the second user ID obtained from the cloud server based on the first device ID, and determine the key corresponding to the second user ID obtained from the cloud server based on the second user ID. The key corresponding to the identifier encrypts the decrypted downlink data frame and sends it to the terminal device through the UDP local transmission channel.

In the traffic proxy method provided by embodiments of the present disclosure, the proxy device establishes a Transmission Control Protocol TCP connection channel with the cloud server, and establishes a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the Internet of Things. In response to receiving The terminal device sends the uplink data frame message through the UDP local transmission channel, and sends the uplink data frame to the cloud server through the TCP connection channel. In response to receiving the downlink data frame sent by the cloud server through the TCP connection channel, through the UDP local transmission channel, Send the downlink data frame to the terminal device. As a result, the data frames required when the terminal device communicates with the cloud server can be transmitted through the TCP connection channel and the UDP local transmission channel, which can reduce the number of ports used by the cloud server, relieve the TCP connection pressure of the cloud server, and enhance the local The ability to automatically control terminal equipment. At the same time, the data frame is encrypted and decrypted through the key, which improves the security of the transmission and eliminates the risk of privacy leakage.

Furthermore, there are two ways to close the UDP local transmission channel:

1. In response to not receiving the detection response frame returned by the terminal device within the first preset time period, the UDP local transmission channel is closed. For example, as shown in Figure 7, when the proxy device does not receive the probe response frame probe_response returned by the terminal device for a certain period of time, the proxy device considers that the terminal device has been lost, and thus closes the corresponding UDP local transmission channel. It should be noted that the first preset duration is set in advance. This disclosure does not limit this too much and can be set according to actual conditions. For example, the first preset time period can be set to one hour, that is, when the proxy device does not receive a detection response frame returned by the terminal device within one hour, the UDP local transmission channel is closed.

2. In response to the proxy device exiting the proxy mode, broadcast a channel disconnection indication, where the channel disconnection indication is used to inform the terminal device to close the UDP local transmission channel. For example, as shown in Figure 7, after the UDP local transmission channel is established, if the proxy device no longer wants to proxy the data frames of the terminal device, it will exit the proxy mode. For example, when the proxy device is replaced, restarted, or malfunctions, the proxy device will Send unlink_notify in the form of broadcast to inform the terminal device to close the UDP local transmission channel. After receiving the unlink_notify from the proxy device, the terminal device parses the DID and UID fields in it. If the DID and UID are the same as the UDP local transmission channel currently established with the terminal device, If the proxy device matches, the terminal device will close the UDP local transmission channel and stop sending uplink data frames to the proxy device. At the same time, the terminal device will return to the initial state when it was just started and reconnect to the cloud server.

Figure 8 is a schematic flowchart of a traffic proxy method provided by another embodiment of the present disclosure. The traffic proxy method in the embodiment of the present disclosure is executed by the terminal device. The method may include the following steps:

S801: In response to establishing a User Datagram Protocol UDP local transmission channel with the proxy device in the Internet of Things, disconnect the first TCP connection channel with the cloud server.

Specifically, for a detailed introduction to step 801, please refer to the relevant content recorded in the above embodiments, and will not be described again here.

S802, transmit the data frames required for communication with the cloud server through the UDP local transmission channel.

In this disclosed embodiment, a TCP connection channel exists between the proxy device and the cloud server.

The upstream data frames required for communication with the cloud server are transmitted through the UDP local transmission channel, and the proxy device sends the data frames to the cloud server through the TCP connection channel with the cloud server.

As a possible implementation, the terminal device can transmit the uplink data frame to the cloud server through the UDP local transmission channel and the proxy device, and receive the downlink data frame from the cloud server transmitted by the proxy device through the UDP local transmission channel.

In the traffic proxy method provided by the embodiments of the present disclosure, the terminal device establishes a user datagram protocol UDP local transmission channel with the proxy device in the Internet of Things, disconnects the first TCP connection channel with the cloud server, and transmits the data with the cloud server through the UDP local transmission channel. Data frames required for cloud server communication. As a result, the data frames required when the terminal device communicates with the cloud server can be transmitted through the TCP connection channel and the UDP local transmission channel, which can reduce the number of ports used by the cloud server, relieve the TCP connection pressure of the cloud server, and enhance the local The ability to automatically control terminal equipment.

As a possible implementation method, the process of establishing a User Datagram Protocol UDP local transmission channel between a terminal device and a proxy device in the same Internet of Things: The UDP local transmission channel needs to be established based on the address information of both devices. . In this disclosure, the terminal device can obtain its own second address information and also needs to obtain the first address information of the proxy device. Based on the known address information of both devices, the UDP link establishment process can be executed to communicate with the proxy device. Establish a UDP local transmission channel between them.

In order to ensure the security of data transmission, optionally the terminal device and the proxy device need to establish a UDP local transmission channel based on having the same user ID or bound account. In this disclosure, the terminal device can also obtain the second user ID bound to itself and the first user ID bound to the proxy device. When the two user IDs are consistent, establish a UDP local connection with the proxy device. transmission channel. Optionally, the terminal device may obtain the first user identification of the proxy device. When the terminal device determines that its second user identification is consistent with the first user identification, it sends the second address information and the second user identification to the proxy device.

In this disclosure, in order to ensure that the data transmission between the proxy device and the terminal device is secure, the proxy device also needs to obtain the key corresponding to the second user identification so that secure transmission with the terminal device can be achieved, that is, in The data transmitted on the UDP local transmission channel is encrypted data based on the key corresponding to the second user ID. Optionally, before the UDP local transmission channel is established, the terminal device can transfer the key corresponding to the second user ID, the second user ID and the first device of the terminal device based on the first TCP long connection with the cloud server. The identity is synchronously sent to the cloud server, so that the proxy device obtains the key bound to the second user identity from the cloud server based on the above information.

Optionally, the terminal device stores the key corresponding to the bound second user identity. The terminal device can encrypt the uplink data frame and send the encrypted uplink data frame to the proxy device through the UDP local transmission channel. Correspondingly, the proxy device can obtain the key corresponding to the second user identification from the cloud server, and then can decrypt the encrypted uplink data frame according to the key corresponding to the second user identification. Further, the proxy device encrypts the decrypted uplink data frame based on its own key and sends it to the cloud server.

Optionally, the cloud server can send the downlink data frame to the terminal device through the TCP connection channel with the proxy device. In implementation, the cloud server can send the downlink data frame to the terminal device through the TCP connection channel with the proxy device. The proxy device sends downlink data frames to the terminal device through the UDP local transmission channel.

Optionally, in order to ensure communication security, the cloud server encrypts the downlink data frame through the key corresponding to the proxy device, obtains the encrypted downlink data frame, and sends the encrypted downlink data frame to the proxy device. The proxy device performs encryption based on its own key. Decrypt and obtain the decrypted downlink data frame. Further, the decrypted downlink data frame is encrypted based on the key corresponding to the second user identification bound to the terminal device, and is sent to the terminal device through the UDP local transmission channel. Correspondingly, the terminal device receives the encrypted downlink data through the UDP local transmission channel. data frame, and decrypts the encrypted downlink data frame based on the key corresponding to the second user identification bound to the terminal device to obtain the downlink data frame.

In the embodiments of the present disclosure, the terminal device, the proxy device and the cloud server perform corresponding encryption and/or decryption processing on the data frame based on the key corresponding to the second user identification and/or the key of the proxy device itself, thereby improving the efficiency of transmission. Security, eliminating the risk of privacy leaks. In addition, only the proxy device can obtain the key corresponding to the second user ID from the cloud server, which enhances the control capability of the proxy device and further improves the security of transmission.

Figure 9 is a schematic flowchart of a traffic proxy method provided by another embodiment of the present disclosure. As shown in Figure 9, the traffic proxy method according to the embodiment of the present disclosure may specifically include the following steps:

S901: Obtain the detection request frame periodically broadcast by the proxy device.

The detection request frame includes the first user identification and first address information corresponding to the proxy device.

S902: When it is determined that the first user identification and the second user identification corresponding to the terminal device are consistent, return a detection response frame to the proxy device, where the detection response frame includes the second user identification and the second address information of the terminal device.

S903: Based on the first address information and the second address information, perform a UDP link establishment process with the proxy device to establish a UDP local transmission channel.

Regarding the specific process of establishing a UDP local transmission channel between the terminal device and the proxy device, please refer to the relevant records in the above embodiments, and will not be described again here.

Optionally, before establishing a UDP local transmission channel with the proxy device in the same Internet of Things, the terminal device uses the first TCP connection channel to transfer the key corresponding to the second user ID, the second user ID and the first device ID of the terminal device. Synchronously sent to the cloud server.

After the UDP local transmission channel is established, if one of the address information in the proxy device and the terminal device is updated, but the UDP local transmission channel between the two is not updated synchronously, the local communication between the proxy device and the terminal device cannot be carried out. , often leading to data loss.

In this disclosed embodiment, the terminal device needs to update and monitor the first address information and the second address information, promptly discover whether the address information has been updated, and reconstruct the UDP local communication path as soon as possible, which can make data transmission more secure. In response to monitoring the update of the first address and/or the second address information, the UDP local transmission channel is re-established based on the updated address information, that is, the link establishment process of the UDP local transmission channel is re-executed.

As a possible implementation method, after establishing a UDP local transmission channel, the terminal device regularly interacts with the proxy device with detection request frames and detection response frames. Optionally, the address information in the proxy device detection request frame is extracted. The address information of the proxy device is compared with the first address information. If the two comparisons are not consistent, it is determined that the address update of the proxy device has occurred. The proxy device extracts the address information in the detection response frame and compares it with the second location information. If the two comparisons are not consistent, it is determined that the address update of the terminal device has occurred. That is to say, when the comparison of the first address information is not consistent and/or the comparison of the second address information is not consistent, it can be determined that the first address and/or the second address information are updated.

In response to the update of the address information carried in the probe request frame and/or the probe response frame, the UDP local transmission channel is re-established based on the updated address information.

Optionally, in response to the terminal device meeting the closing condition of the UDP local transmission channel, the UDP local transmission channel is closed, and the first TCP connection channel between the terminal device and the cloud server is re-established.

Optionally, the closing condition of the UDP local transmission channel includes at least one of the following: the terminal device does not receive the detection request frame broadcast by the proxy device within a preset time period; the terminal device receives a channel disconnection indication broadcast by the proxy device.

Optionally, the channel disconnection indication includes a second device identification and a third user identification, wherein closing the UDP local transmission channel includes: responding that the second device identification is the first device identification of the terminal device, and the third user identification is The second user ID bound to the terminal device closes the UDP local transmission channel.

It should be noted here that the above explanation of the embodiments of the traffic proxy method also applies to the traffic proxy method of the embodiments of the present disclosure, and the specific process will not be described again here.

In an embodiment of the present disclosure, the terminal device responds to establishing a User Datagram Protocol UDP local transmission channel with the proxy device in the Internet of Things, disconnects the first TCP connection channel with the cloud server, and transmits data to the cloud server through the UDP local transmission channel. Data frames required for communication. Therefore, transmitting the data frames required for communication with the cloud server through the UDP local transmission channel can reduce the number of ports used by the cloud server, relieve the pressure on the cloud server for TCP connections, and improve the quality of network service.

Figure 10 is a block diagram of a traffic proxy device according to an exemplary embodiment. As shown in Figure 10, the traffic proxy device 1000 according to the embodiment of the present disclosure includes a connection module 1001, a first transmission module 1002 and a second transmission module 1003.

The connection module 1001 is configured to establish a transmission control protocol TCP connection channel with the cloud server.

The first transmission module 1002 is configured to establish a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the same Internet of Things.

The second transmission module 1003 is configured to transmit the data frames required when the terminal device communicates with the cloud server through the TCP connection channel and the UDP local transmission channel.

In one embodiment of the present disclosure, the first transmission module 1002 is further configured to: obtain the second address information of the terminal device, and communicate with the terminal device based on the first address information and the second address information of the proxy device itself. UDP link building process to establish UDP local transmission channel.

In one embodiment of the present disclosure, the first transmission module 1002 is further configured to perform: before establishing a UDP local transmission channel with a terminal device, obtain the first device identification of the terminal device and the data bound to the terminal device. the second user identification, and based on the first device identification and the second user identification, obtain the key corresponding to the second user identification from the cloud server.

In one embodiment of the present disclosure, the first transmission module 1002 is further configured to: periodically broadcast a detection request frame, where the detection request frame includes the first user identification and first address information corresponding to the proxy device; receive The detection response frame returned by the terminal device, where the detection response frame includes the second user identification and second address information corresponding to the terminal device; a UDP link establishment process is performed with the terminal device based on the first address information and the second address information to establish UDP local transmission channel.

In one embodiment of the present disclosure, the detection response frame also includes the first device identification of the terminal device, and the first transmission module 1002 is also configured to perform: sending the key to the cloud server based on the first device identification and the second user identification. Obtain the request; in response to receiving the key corresponding to the second user ID returned by the cloud server, send a channel establishment request to the terminal device in a unicast manner, where the channel establishment request is used to request the establishment of a UDP local transmission channel with the terminal device.

In one embodiment of the present disclosure, the second transmission module 1003 is also configured to perform: in response to receiving the uplink data frame sent by the terminal device through the UDP local transmission channel, send the uplink data frame to the cloud through the TCP connection channel. server.

In one embodiment of the present disclosure, the second transmission module 1003 is also configured to: respond to receiving the downlink data frame sent by the cloud server through the TCP connection channel; send the downlink data frame to the terminal through the UDP local transmission channel equipment.

In one embodiment of the present disclosure, the uplink data frame is an encrypted uplink data frame and includes a first device identification of the terminal device, wherein the second transmission module 1003 is further configured to perform: determining from the cloud server based on the first device identification Obtain the key corresponding to the second user ID, and decrypt the encrypted uplink data frame based on the key corresponding to the second user ID; encrypt the decrypted uplink data frame based on the proxy device's own key and send it to the cloud. server.

In one embodiment of the present disclosure, the downlink data frame is an encrypted downlink data frame and includes the first device identification of the terminal device, wherein the second transmission module 1003 is also configured to perform: encryption based on the key pair of the proxy device itself Decrypt the downlink data frame; determine the key corresponding to the second user identification obtained from the cloud server based on the first device identification, and encrypt the decrypted downlink data frame based on the key corresponding to the second user identification, and use UDP to The local transmission channel is sent to the terminal device.

In one embodiment of the present disclosure, the traffic proxy device 1000 further includes: an acquisition module configured to perform, in response to receiving a data frame or a probe response frame, extract a timestamp from the data frame or probe response frame, and extract a timestamp based on the time. stamp and the current time to obtain the time difference; the first determination module is configured to determine that the data frame or detection response frame is a valid frame in response to the time difference being less than or equal to the window time, and process or transmit the valid frame; the second determination module, It is configured to respond to a time difference greater than the window time, determine the data frame or detection response frame as an invalid frame, and discard the invalid frame.

In one embodiment of the present disclosure, the first transmission module 1002 is configured to regularly interact with the terminal device with detection request frames and detection response frames after establishing the UDP local transmission channel;

The update module is configured to update the address information carried by the probe request frame and/or the probe response frame in response to each, and then re-establish the UDP local transmission channel based on the updated address information.

In one embodiment of the present disclosure, the traffic proxy device 1000 further includes: a closing module configured to close the UDP local transmission channel in response to not receiving a detection response frame returned by the terminal device within a first preset time period.

In one embodiment of the present disclosure, the traffic proxy device 1000 further includes: a shutdown module configured to broadcast a channel disconnection indication in response to the proxy device exiting the proxy mode, wherein the channel disconnection indication is used to inform the terminal to close UDP local transmission channel.

Regarding the devices in the above embodiments, the specific manner in which each module performs operations has been described in detail in the embodiments related to the method, and will not be described in detail here.

The traffic proxy device provided by the embodiment of the present disclosure establishes a transmission control protocol TCP connection channel between the proxy device and the cloud server, and establishes a user datagram protocol UDP local transmission channel with one or more terminal devices in the Internet of Things, through the TCP connection channel and UDP local transmission channel to transmit the data frames required when the terminal device communicates with the cloud server. As a result, the data frames required for communication between the terminal device and the cloud server can be transmitted through the TCP connection channel and the UDP local transmission channel, which reduces the pressure on the TCP connection between the terminal device and the cloud server and improves network service quality.

Figure 11 is a block diagram of a traffic proxy device according to an exemplary embodiment. As shown in Figure 11, the traffic proxy device 1100 in the embodiment of the present disclosure includes a connection module 1101 and a transmission module 1102.

The connection module 1101 is configured to perform, in response to establishing a User Datagram Protocol UDP local transmission channel with the proxy device in the Internet of Things, disconnecting the first TCP connection channel with the cloud server.

The transmission module 1102 is configured to transmit data frames required for communication with the cloud server through the UDP local transmission channel.

In one embodiment of the present disclosure, the transmission module 1102 is also configured to perform: transmitting and transmitting uplink data frames from the proxy device to the cloud server through the UDP local transmission channel; receiving data from the cloud server transmitted by the proxy device through the UDP local transmission channel. Downstream data frame.

In one embodiment of the present disclosure, the connection module 1101 is further configured to: obtain the first user identification and first address information corresponding to the proxy device, and determine when the first user identification and the second user identification corresponding to the terminal device are consistent. , sending the second user identification and the second address information of the terminal device to the proxy device; based on the first address information and the second address information, performing a UDP link establishment process with the proxy device to establish a UDP local transmission channel.

In one embodiment of the present disclosure, the connection module 1101 is further configured to: obtain a detection request frame periodically broadcast by the proxy device, where the detection request frame includes the first user identification and first address information corresponding to the proxy device. ; When it is determined that the first user identification and the second user identification corresponding to the terminal device are consistent, return a detection response frame to the proxy device, where the detection response frame includes the second user identification and the second address information of the terminal device; based on the first address information and second address information, and performs the UDP link establishment process with the proxy device to establish a UDP local transmission channel.

In one embodiment of the present disclosure, the traffic proxy device 1100 further includes: a sending module configured to send the password corresponding to the second user ID based on the first TCP connection channel before establishing a UDP local transmission channel with the proxy device. The key, the second user identification and the first device identification of the terminal device are synchronously sent to the cloud server.

In one embodiment of the present disclosure, the transmission module 1102 is also configured to: encrypt the uplink data frame based on the key corresponding to the second user identification bound to the terminal device; and encrypt the encrypted data frame through the UDP local transmission channel. Uplink data frames are sent to the proxy device.

In one embodiment of the present disclosure, the downlink data frame is an encrypted downlink data frame, wherein the transmission module 1102 is further configured to perform: receiving the encrypted downlink data frame through the UDP local transmission channel, and based on the third bound data frame of the terminal device. The key corresponding to the two user IDs decrypts the encrypted downlink data frame.

In one embodiment of the present disclosure, the traffic proxy device 1100 further includes: an acquisition module configured to extract a timestamp from the received data frame or probe request frame every time a data frame or probe request frame is received, And based on the timestamp and the current time, obtain the time difference; the first determination module is configured to execute in response to the time difference being less than or equal to the window time, determine that the data frame or the detection request frame is a valid frame, and process the valid frame; the second determination module The module is configured to determine that the data frame or the detection request frame is an invalid frame in response to the time difference being greater than the window time, and discard the invalid frame.

In one embodiment of the present disclosure, the traffic proxy device 1100 also includes: an interaction module configured to regularly interact with the proxy device with detection request frames and detection response frames after establishing a UDP local transmission channel; an update module, It is configured to update the address information carried in the probe request frame and/or the probe response frame in response to the update, and then re-establish the UDP local transmission channel based on the updated address information.

In one embodiment of the present disclosure, the traffic proxy device 1100 also includes: a shutdown module configured to close the UDP local transmission channel in response to the terminal device meeting the closing conditions of the UDP local transmission channel, and establish a connection with the cloud server. channel between the second TCP connection.

In one embodiment of the present disclosure, the closing condition of the UDP local transmission channel includes at least one of the following: the terminal device does not receive the detection request frame broadcast by the proxy device within a preset period of time; receives the channel disconnection indication broadcast by the proxy device .

In one embodiment of the present disclosure, the channel disconnection indication includes a second device identification and a third user identification, wherein the shutdown module is further configured to perform: in response to the second device identification being the first device identification of the terminal device, If the third user ID is the second user ID bound to the terminal device, the UDP local transmission channel is closed.

Regarding the devices in the above embodiments, the specific manner in which each module performs operations has been described in detail in the embodiments related to the method, and will not be described in detail here.

In the embodiment of the present disclosure, the terminal device establishes a user datagram protocol UDP local transmission channel with the proxy device in the Internet of Things, disconnects the first TCP connection channel with the cloud server, and transmits all communication data with the cloud server through the UDP local transmission channel. required data frame. As a result, the data frames required for communication with the cloud server are transmitted through the UDP local transmission channel, which reduces the pressure on the TCP connection between the terminal device and the cloud server and improves the quality of network service.

FIG. 12 is a block diagram of an electronic device 1200 according to an exemplary embodiment.

As shown in Figure 12, the above-mentioned electronic device 1200 includes:

The memory 1201 and the processor 1202 are connected to the bus 1203 of different components (including the memory 1201 and the processor 1202). The memory 1201 stores a computer program. When the processor 1202 executes the program, the traffic proxy method described above in the embodiment of the present disclosure is implemented.

Bus 1203 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, a graphics accelerated port, a processor, or a local bus using any of a variety of bus structures. For example, these architectures include, but are not limited to, the Industry Standard Architecture (ISA) bus, the Micro Channel Architecture (MAC) bus, the Enhanced ISA bus, the Video Electronics Standards Association (VESA) local bus, and the Peripheral Component Interconnect ( PCI) bus.

Electronic device 1200 typically includes a variety of electronic device-readable media. These media can be any available media that can be accessed by electronic device 1200, including volatile and nonvolatile media, removable and non-removable media.

Memory 1201 may also include computer system-readable media in the form of volatile memory, such as random access memory (RAM) 1204 and/or cache memory 1205 . Electronic device 1200 may further include other removable/non-removable, volatile/non-volatile computer system storage media. By way of example only, storage system 1206 may be used to read and write to non-removable, non-volatile magnetic media (not shown in Figure 12, commonly referred to as a "hard drive"). Although not shown in FIG. 12, a disk drive for reading and writing removable non-volatile disks (e.g., "floppy disks"), and removable non-volatile optical disks (e.g., CD-ROM, DVD-ROM) may be provided. or other optical media) that can read and write optical disc drives. In these cases, each drive may be connected to bus 1203 through one or more data media interfaces. Memory 1201 may include at least one program product having a set of (eg, at least one) program modules configured to perform the functions of embodiments of the present disclosure.

A program/utility 1208 having a set of (at least one) program modules 1207, which may be stored, for example, in the memory 1201, such program modules 1207 including but not limited to an operating system, one or more applications, other programs Modules, as well as program data, each of these examples or some combination may include an implementation of a network environment. Program modules 1212 generally perform functions and/or methods in the embodiments described in this disclosure.

Electronic device 1200 may also communicate with one or more external devices 1209 (e.g., keyboard, pointing device, display 1210, etc.), may also communicate with one or more devices that enable a user to interact with electronic device 1200, and/or with Any device (eg, network card, modem, etc.) that enables the electronic device 1200 to communicate with one or more other computing devices. This communication may occur through an input/output (I/O) interface 1212. Furthermore, the electronic device 1200 may also communicate with one or more networks (eg, a local area network (LAN), a wide area network (WAN), and/or a public network, such as the Internet) through the network adapter 1213. As shown in Figure 12, network adapter 1213 communicates with other modules of electronic device 1200 through bus 1203. It should be understood that, although not shown in the figures, other hardware and/or software modules may be used in conjunction with electronic device 1200, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives And data backup storage system, etc.

The processor 1202 executes various functional applications and data processing by running programs stored in the memory 1201 .

It should be noted that for the implementation process and technical principles of the electronic device in this embodiment, please refer to the aforementioned explanation of the traffic proxy method in the embodiment of the present disclosure, and will not be described again here.

The electronic device provided by the embodiment of the present disclosure can execute the traffic proxy method as described above, establish a transmission control protocol TCP connection channel with the cloud server, and establish a user datagram protocol UDP local with one or more terminal devices in the Internet of Things. Transmission channel, through TCP connection channel and UDP local transmission channel, transmits the data frames required when the terminal device communicates with the cloud server. As a result, the data frames required for communication between the terminal device and the cloud server can be transmitted through the TCP connection channel and the UDP local transmission channel, which reduces the pressure on the TCP connection between the terminal device and the cloud server and improves network service quality.

In order to implement the above embodiments, the present disclosure also proposes a computer-readable storage medium.

Wherein, when the instructions in the computer-readable storage medium are executed by the processor of the electronic device, the electronic device can perform the traffic proxy method as described above. Optionally, the computer-readable storage medium may be ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, etc.

Other embodiments of the disclosure will be readily apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. The present disclosure is intended to cover any variations, uses, or adaptations of the disclosure that follow the general principles of the disclosure and include common common sense or customary technical means in the technical field that are not disclosed in the disclosure. . It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It is to be understood that the present disclosure is not limited to the precise structures described above and illustrated in the accompanying drawings, and various modifications and changes may be made without departing from the scope thereof. The scope of the disclosure is limited only by the appended claims.

Claims (36)

1. A traffic proxy method, characterized in that it is suitable for proxy equipment, and the method includes:

   Establish a Transmission Control Protocol TCP connection channel with the cloud server;

   Establish a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the same Internet of Things;

   Through the TCP connection channel and the UDP local transmission channel, the data frames required when the terminal device communicates with the cloud server are transmitted.
2. The method according to claim 1, characterized in that establishing a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the same Internet of Things includes:

   Obtain the second address information of the terminal device;

   Based on the first address information and the second address information of the proxy device itself, a UDP link establishment process is performed with the terminal device to establish the UDP local transmission channel.
3. The method according to claim 2, characterized in that, based on the first address information and the second address information, performing a UDP link establishment process with the terminal device before establishing the UDP local transmission channel ,Also includes:

   Obtain the first device identification of the terminal device and the second user identification bound to the terminal device;

   Based on the first device identification and the second user identification, obtain a key corresponding to the second user identification from the cloud server.
4. The method according to any one of claims 1 to 3, characterized in that the data frames required when the terminal device communicates with the cloud server are transmitted through the TCP connection channel and the UDP local transmission channel. ,include:

   In response to receiving the uplink data frame sent by the terminal device through the UDP local transmission channel, the uplink data frame is sent to the cloud server through the TCP connection channel.
5. The method according to any one of claims 1 to 3, characterized in that the data frames required when the terminal device communicates with the cloud server are transmitted through the TCP connection channel and the UDP local transmission channel. ,include:

   In response to receiving the downlink data frame sent by the cloud server through the TCP connection channel, the downlink data frame is sent to the terminal device through the UDP local transmission channel.
6. The method according to claim 4, characterized in that the uplink data frame is an encrypted uplink data frame and includes a first device identification of the terminal device, wherein the uplink data frame is transmitted through the TCP connection channel. The message is sent to the cloud server, including:

   Based on the first device identification, determine the key corresponding to the second user identification obtained from the cloud server, and decrypt the encrypted uplink data frame based on the key corresponding to the second user identification;

   The decrypted uplink message is encrypted based on the proxy device's own key and then sent to the cloud server.
7. The method of claim 5, wherein the downlink data frame is an encrypted downlink data frame and includes a first device identification of the terminal device, wherein the UDP local transmission channel is used to transmit the Downlink messages are sent to the terminal device, including:

   Decrypt the encrypted downlink data frame based on the proxy device's own key;

   Determine the key corresponding to the second user identification obtained from the cloud server based on the first device identification, and encrypt the decrypted downlink data frame based on the key corresponding to the second user identification, and Sent to the terminal device through the UDP local transmission channel.
8. The method according to claim 1 or 2, characterized in that, the method further includes:

   In response to receiving the data frame, extract a timestamp from the data frame and obtain a time difference based on the timestamp and the current time;

   In response to the time difference being less than or equal to the window time, determining the data frame to be a valid frame, and processing or transmitting the valid frame;

   In response to the time difference being greater than the window time, it is determined that the data frame is an invalid frame, and the invalid frame is discarded.
9. The method according to any one of claims 1-3, characterized in that the method further includes:

   In response to the proxy device exiting the proxy mode, a channel disconnection indication is broadcast, where the channel disconnection indication is used to inform the terminal device to close the UDP local transmission channel.
10. A traffic proxy method, characterized in that it is suitable for terminal equipment, and the method includes:

    In response to establishing a UDP local transmission channel with the proxy device in the Internet of Things, disconnecting the first TCP connection channel with the cloud server;

    The data frames required for communication with the cloud server are transmitted through the UDP local transmission channel.
11. The method according to claim 10, characterized in that said transmitting the data frames required for communication with the cloud server through the UDP local transmission channel includes:

    Transmit the uplink data frame to the cloud server through the UDP local transmission channel and the proxy device;

    Receive the downlink data frame from the cloud server transmitted by the proxy device through the UDP local transmission channel.
12. The method according to claim 10, characterized in that establishing a UDP local transmission channel with the proxy device includes:

    Obtain the first user identification and first address information corresponding to the proxy device;

    When it is determined that the first user identification and the second user identification corresponding to the terminal device are consistent, send the second user identification and the second address information of the terminal device to the proxy device;

    Based on the first address information and the second address information, a UDP link establishment process is performed with the proxy device to establish the UDP local transmission channel.
13. The method according to claim 12, characterized in that before establishing a UDP local transmission channel with the proxy device, it further includes:

    Based on the first TCP connection channel, the key corresponding to the second user identification, the second user identification and the first device identification of the terminal device are synchronously sent to the cloud server.
14. The method according to claim 10, characterized in that said transmitting the data frames required for communication with the cloud server through the UDP local transmission channel includes:

    Encrypt the uplink data frame based on the key corresponding to the second user identification bound to the terminal device;

    The encrypted uplink data frame is sent to the proxy device through the UDP local transmission channel.
15. The method according to claim 11, wherein the downlink data frame is an encrypted downlink data frame, wherein the downlink data from the cloud server transmitted by the proxy device is received through the UDP local transmission channel. frames, including:

    The encrypted downlink data frame is received through the UDP local transmission channel, and the encrypted downlink data frame is decrypted based on the key corresponding to the second user identification bound to the terminal device.
16. The method according to claim 13 or 14, characterized in that the method further includes:

    In response to receiving the data frame, extract a timestamp from the data frame and obtain a time difference based on the timestamp and the current time;

    In response to the time difference being less than or equal to the window time, determining the data frame to be a valid frame, and processing the valid frame;

    In response to the time difference being greater than the window time, it is determined that the data frame is an invalid frame, and the invalid frame is discarded.
17. The method of claim 10, further comprising:

    In response to the terminal device meeting the closing condition of the UDP local transmission channel, the UDP local transmission channel is closed and the first TCP connection channel with the cloud server is re-established.
18. A traffic proxy device, characterized in that it is suitable for proxy equipment, and the device includes:

    The connection module is configured to establish a transmission control protocol TCP connection channel with the cloud server;

    The first transmission module is configured to establish a User Datagram Protocol UDP local transmission channel with one or more terminal devices in the same Internet of Things;

    The second transmission module is configured to transmit data frames required when the terminal device communicates with the cloud server through the TCP connection channel and the UDP local transmission channel.
19. The device according to claim 18, wherein the first transmission module is further configured to execute:

    Obtain the second address information of the terminal device;

    Based on the first address information and the second address information of the proxy device itself, a UDP link establishment process is performed with the terminal device to establish the UDP local transmission channel.
20. The device according to claim 19, wherein the first transmission module is further configured to execute:

    Obtain the first device identification of the terminal device and the second user identification bound to the terminal device;

    Based on the first device identification and the second user identification, a key corresponding to the second user identification is obtained from the cloud server.
21. The device according to any one of claims 18-20, characterized in that the second transmission module is further configured to execute:

    In response to receiving the uplink data frame sent by the terminal device through the UDP local transmission channel, the uplink data frame is sent to the cloud server through the TCP connection channel.
22. The device according to any one of claims 18-20, characterized in that the second transmission module is further configured to execute:

    In response to receiving the downlink data frame sent by the cloud server through the TCP connection channel, the downlink data frame is sent to the terminal device through the UDP local transmission channel.
23. The apparatus according to claim 21, wherein the uplink data frame is an encrypted uplink data frame and includes a first device identification of the terminal device, wherein the second transmission module is further configured to execute:

    Determine the key corresponding to the second user identification obtained from the cloud server based on the first device identification, and decrypt the encrypted uplink data frame based on the key corresponding to the second user identification;

    The decrypted uplink message is encrypted based on the proxy device's own key and then sent to the cloud server.
24. The apparatus according to claim 22, wherein the downlink data frame is an encrypted downlink data frame and includes the first device identification of the terminal device, wherein the second transmission module is further configured to execute:

    Decrypt the encrypted downlink data frame based on the proxy device's own key;

    Determine the key corresponding to the second user identification obtained from the cloud server based on the first device identification, and encrypt the decrypted downlink data frame based on the key corresponding to the second user identification, and Sent to the terminal device through the UDP local transmission channel.
25. The device according to claim 18 or 19, characterized in that the device further includes:

    An acquisition module configured to perform, in response to receiving the data frame, extract a timestamp from the data frame, and obtain a time difference based on the timestamp and the current time;

    A first determination module configured to determine that the data frame is a valid frame in response to the time difference being less than or equal to the window time, and process or transmit the valid frame;

    The second determination module is configured to determine that the data frame or the detection response frame is an invalid frame in response to the time difference being greater than the window time, and discard the invalid frame.
26. The device according to claim 18 or 20, characterized in that the device further includes:

    A closing module configured to broadcast a channel disconnection indication in response to the proxy device exiting the proxy mode, wherein the channel disconnection indication is used to inform the terminal to close the UDP local transmission channel.
27. A traffic proxy device, characterized in that it is suitable for terminal equipment, and the device includes:

    The connection module is configured to perform, in response to establishing a User Datagram Protocol UDP local transmission channel with the proxy device in the Internet of Things, disconnecting the first TCP connection channel with the cloud server;

    A transmission module configured to transmit data frames required for communication with the cloud server through the UDP local transmission channel.
28. The device according to claim 27, wherein the transmission module is further configured to execute:

    Transmit the uplink data frame to the cloud server through the UDP local transmission channel and the proxy device;

    Receive the downlink data frame from the cloud server transmitted by the proxy device through the UDP local transmission channel.
29. The device according to claim 27, wherein the connection module is further configured to perform:

    Obtain the first user identification and first address information corresponding to the proxy device;

    When it is determined that the first user identification and the second user identification corresponding to the terminal device are consistent, send the second user identification and the second address information of the terminal device to the proxy device;

    Based on the first address information and the second address information, a UDP link establishment process is performed with the proxy device to establish the UDP local transmission channel.
30. The device of claim 29, further comprising:

    The sending module is configured to, before establishing the UDP local transmission channel with the proxy device, based on the first TCP connection channel, send the key corresponding to the second user identification, the second user identification and the The first device identification of the terminal device is synchronously sent to the cloud server.
31. The device according to claim 28, wherein the transmission module is further configured to execute:

    Encrypt the uplink data frame based on the key corresponding to the second user identification bound to the terminal device;

    The encrypted uplink data frame is sent to the proxy device through the UDP local transmission channel.
32. The device according to claim 28, wherein the downlink data frame is an encrypted downlink data frame, and the transmission module is further configured to execute:

    The encrypted downlink data frame is received through the UDP local transmission channel, and the encrypted downlink data frame is decrypted based on the key corresponding to the second user identification bound to the terminal device.
33. The device of claim 27, further comprising:

    An acquisition module configured to perform, in response to receiving the data frame, extract a timestamp from the data frame, and obtain a time difference based on the timestamp and the current time;

    The first determination module is configured to determine that the data frame is a valid frame in response to the time difference being less than or equal to the window time, and process the valid frame;

    The second determination module is configured to determine that the data frame is an invalid frame in response to the time difference being greater than the window time, and discard the invalid frame.
34. The device according to claim 27, characterized in that the device further includes:

    a shutdown module configured to close the UDP local transmission channel and re-establish the first TCP connection with the cloud server in response to the terminal device meeting the closing condition of the UDP local transmission channel. aisle.
35. An electronic device, characterized by including:

    processor;

    memory for storing executable instructions for the processor;

    Wherein, the processor is configured to execute the instructions to implement the method according to any one of claims 1-9, or the method according to any one of claims 10-17.
36. A computer-readable storage medium, characterized in that, when the instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is capable of executing the method described in any one of claims 1-9. Method, or the method according to any one of claims 10-17.

Images