CN104601541A

CN104601541A - Data transmission method, server and user equipment

Info

Publication number: CN104601541A
Application number: CN201410736781.0A
Authority: CN
Inventors: 孟斌
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2014-12-05
Filing date: 2014-12-05
Publication date: 2015-05-06
Anticipated expiration: 2034-12-05
Also published as: CN104601541B

Abstract

An embodiment of the invention discloses a data transmission method, a server and user equipment. The method comprises that the server sends a first connection identifier to the user equipment after a first connection between the server and the user equipment is established, wherein the first connection identifier is used for identifying the first connection; the server receives requirement information for establishing transmission control protocol (TCP) connection, which is sent by the user equipment, wherein the TCP connection requirement information is used for requiring for establishing a second connection between the user equipment and the server, the second connection is the TCP connection, and the TCP connection requirement information carries the first connection identifier; the server establishes the second connection after receiving the TCP connection requirement information according to the first connection identifier; the server performs data transmission between the user equipment through the second connection. By means of the embodiment, mistaken killing of the TCP anti-attacking function can be prevented, and the legal user experience is improved.

Description

The method of transfer of data, server and subscriber equipment

Technical field

The present invention relates to the communications field, particularly a kind of method of transfer of data, server and subscriber equipment.

Background technology

The process that existing transmission control protocol (Transmission Control Protocol, TCP) connects, comprises the process of following three-way handshake, 1 first subscriber equipment to server send set up TCP connect request; 2 servers are receiving the handshake of client, after synchronizing signal (synchronous, SYN) request, are this request dispatching resource, and request are put into " half linked queue ".Last server is to client computer loopback synchronizing signal acknowledge character (synchronous Acknowledgement, SYNACK) message.If a request exceedes expection in the time of half linked queue stop, the Resources allocation of this request and correspondence thereof can be released.After 3 client computer receive SYN ACK message, to server response acknowledge character (Acknowledgement, ACK) message.Corresponding connection request, after receiving ACK message, is deleted by server from " half linked queue ".So far just these link transmit-receive data can be used between client-server.

The attack of TCP refers to and sends a large amount of TCP connection request forged, thus makes by the attack pattern of attacker's resource exhaustion (CPU at full capacity or low memory).The existing application connected based on TCP all must consider the attack protection of TCP.Foremost in the many attack patterns of TCP is transmission control protocol synchronizing signal mighty torrent (Transmission Control Protocol synchronous Flood, TCP SYNFlood) attack, what TCP SYN Flood attacked utilization is that SYN request is put into the feature of half linked queue by server, send a large amount of false SYN request bag at short notice to server, cause the half-connection queue of TCP server to be overworked or cause very large burden to server, finally causing server cisco unity malfunction.In order to prevent TCP from attacking, so server also can be taked together to take current limiting measures usually.These current limiting measures are the true and false TCP requests of None-identified, and be only carry out upper limit control to the request flow of the system of entering, guarantee system is not collapsed.

The attack protection function of existing server end is that None-identified goes out this request from a normal users equipment or the subscriber equipment that connected, and therefore the request of this subscriber equipment may be dropped when server faces attack, affects Consumer's Experience.

Summary of the invention

Embodiments provide a kind of method for transfer of data, server and subscriber equipment, can prevent TCP from attacking, promote Consumer's Experience.

First aspect, provides a kind of method of transfer of data, comprising: after the first connection establishment between server and subscriber equipment, this server sends the first connection identifier to this subscriber equipment, and this first connection identifier is for identifying this first connection; This server receives the request message setting up transmission control protocol TCP connection that this subscriber equipment sends, this request message setting up TCP connection is connected for asking to set up second between this subscriber equipment with this server, this second connection is TCP connection, and this request message setting up TCP connection carries this first connection identifier; This server receive this set up TCP connect request message after, according to this first connection identifier, set up this second connect; This server carries out transfer of data by this second connection with this subscriber equipment.

In conjunction with first aspect, in the implementation that the first is possible, this server receive this set up TCP connect request message after, according to this first connection identifier, set up this second connection, comprising: this server determines that a connection identifier in this first connection identifier and connection identifier database matches; This server receive this set up TCP connect request message after, to this subscriber equipment send response message; This server receives the acknowledge message that this subscriber equipment sends.

In conjunction with first aspect or the first possible implementation, in the implementation that the second is possible, this server sends the first connection identifier to this subscriber equipment, comprise: this server sends this first connection identifier by 200OK response message to this subscriber equipment, wherein, this first connection identifier is positioned at the header field of this 200OK response message.

In conjunction with any one the possible implementation in the implementation that first aspect, the first to the second are possible, in the implementation that the third is possible, this server receive this set up TCP connect request message after, according to this first connection identifier, after setting up this second connection, also comprise: this server sends the second connection identifier to this subscriber equipment, this second connection identifier is used for setting up the 3rd between this subscriber equipment with this server and is connected.

In conjunction with first aspect, first to any one the possible implementation in the third possible implementation, in the 4th kind of possible implementation, this first connection is TCP connection, this server carries out transfer of data by this second connection with this subscriber equipment, comprising: this server is in this second business connecting recovery or continue based on this first connection.

In conjunction with any one the possible implementation in first aspect, first to fourth kind of possible implementation, in the 5th kind of possible implementation, this first connection is UDP connection, this server carries out transfer of data by this second connection with this subscriber equipment, comprise: this server receives the message data that this subscriber equipment sends in this second connection, wherein, the capacity of this message data is greater than the threshold value of default message data.

Second aspect, provides a kind of method of transfer of data, comprising: after the first connection establishment between subscriber equipment and server, and this subscriber equipment receives the first connection identifier that this server sends, and this first connection identifier is for identifying this first connection; This subscriber equipment sends the request message set up TCP and connect to this server, set up and be connected with second between this server, wherein, this request message setting up TCP connection carries this first connection identifier, this request message setting up TCP connection is connected for asking to set up second between this subscriber equipment with this server, and this second connection is that TCP connects; This subscriber equipment carries out transfer of data by this second connection with this server.

In conjunction with second aspect, in the implementation that the first is possible, the first connection identifier that this subscriber equipment reception server sends, comprising: this subscriber equipment receives the 200OK response message that this server sends, wherein, this first connection identifier is positioned at the header field of this 200OK response message.

In conjunction with the first possible implementation of second aspect or second aspect, in the implementation that the second is possible, this first connection is TCP connection, this subscriber equipment carries out transfer of data by this second connection with this server, comprising: this subscriber equipment is in this second business connecting recovery or continue based on this first connection.

In conjunction with the first possible implementation of second aspect or second aspect, in the implementation that the third is possible, this first connection is UDP connection, this subscriber equipment carries out transfer of data by this second connection with this server, comprise: this subscriber equipment sends message data to this server in this second connection, wherein, this message data capacity is greater than the threshold value of default message data.

In conjunction with second aspect, second aspect first to any one the possible implementation in the third possible implementation, in the 4th kind of possible implementation, send the request message set up TCP and connect to this server at this subscriber equipment, set up after being connected with second between this server, also comprise: this subscriber equipment receives the second connection identifier that this server sends, this second connection identifier is used for setting up the 3rd between this subscriber equipment with this server and is connected.

The third aspect, provides a kind of server, comprising: the first transmitting element, after the first connection establishment between server and subscriber equipment, sends the first connection identifier to this subscriber equipment, and this first connection identifier is for identifying this first connection; Receiving element, for receiving the request message setting up transmission control protocol TCP connection that this subscriber equipment sends, this request message setting up TCP connection is connected for asking to set up second between this subscriber equipment with this server, this second connection is TCP connection, and this request message setting up TCP connection carries this first connection identifier; Response unit, sets up for this reception according to this first connection identifier and this receiving element the request message that TCP is connected, and sets up this and second to connect; Transmission unit, carries out transfer of data for this second connection of being set up by this response unit with this subscriber equipment.

In conjunction with the third aspect, in the implementation that the first is possible, this response unit determines that a connection identifier in this first connection identifier and connection identifier database matches, receiving element receive this set up TCP connect request message after, send response message to this subscriber equipment, and receive the acknowledge message of this subscriber equipment transmission.

In conjunction with the first possible implementation of the third aspect or the third aspect, in the implementation that the second is possible, this first transmitting element sends this first connection identifier by 200OK response message to this subscriber equipment, and wherein, this connection identifier is positioned at the header field of this 200OK response message.

In conjunction with any one the possible implementation in the implementation that the first to the second of the third aspect, the third aspect is possible, in the implementation that the third is possible, also comprise: the second transmitting element, the request message that TCP is connected is set up for this reception according to this first connection identifier and this receiving element at this response unit, after setting up this second connection, send the second connection identifier to this subscriber equipment, this second connection identifier is used for setting up the 3rd between this subscriber equipment with this server and is connected.

In conjunction with the third aspect, the third aspect first to any one the possible implementation in the third possible implementation, in the 4th kind of possible implementation, this first connection is TCP connection, this second business connecting recovery or continue based on this first connection that this transmission unit is set up at this response unit.

In conjunction with any one the possible implementation in the third aspect, first to fourth kind of the third aspect possible implementation, in the 5th kind of possible implementation, this first connection is UDP connection, this transmission unit set up at this response unit this second connect the message data receiving this subscriber equipment and send, wherein, the capacity of this message data is greater than the threshold value of default message data.

Fourth aspect, provides a kind of subscriber equipment, comprising: the first receiving element, after the first connection establishment between this subscriber equipment and server, receives the first connection identifier that this server sends, and this first connection identifier is for identifying this first connection; Transmitting element, for sending the request message set up TCP and connect to this server, set up and be connected with second between this server, wherein, this request message setting up TCP connection carries this first connection identifier, this request message setting up TCP connection is connected for asking to set up second between this subscriber equipment with this server, and this second connection is that TCP connects; Transmission unit, for carrying out transfer of data by this second connection with this server.

In conjunction with fourth aspect, in the implementation that the first is possible, this first receiving element receives the 200OK response message that this server sends, and wherein, this first connection identifier is positioned at the header field of this 200OK response message.

In conjunction with the first possible implementation of fourth aspect or fourth aspect, in the implementation that the second is possible, this first connects for TCP connects, and this transmission unit second connects the business recovered or continue based on this first connection at this.

In conjunction with the first possible implementation of fourth aspect or fourth aspect, in the implementation that the third is possible, this first connection is UDP connection, this transmission unit sends message data to this server in this second connection, wherein, this message data capacity is greater than the threshold value of default message data.

In conjunction with fourth aspect, fourth aspect first to any one the possible implementation in the third possible implementation, in the 4th kind of possible implementation, also comprise: the second receiving element, for sending the request message set up TCP and connect to this server at this transmitting element, set up after being connected with second between this server, receive the second connection identifier that this server sends, this second connection identifier is used for setting up the 3rd between this subscriber equipment with this server and is connected.

Therefore, the embodiment of the present invention carries by setting up in the request message of TCP connection of sending at subscriber equipment the first connection identifier that server is subscriber equipment transmission, this server is according to this first connection identifier and the request message set up TCP and be connected, set up TCP to connect, the embodiment of the present invention can prevent manslaughtering of TCP attack protection function, promotes the experience of validated user.

Accompanying drawing explanation

In order to be illustrated more clearly in the technical scheme of the embodiment of the present invention, be briefly described to the accompanying drawing used required in the embodiment of the present invention below, apparently, accompanying drawing described is below only some embodiments of the present invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these accompanying drawings.

Fig. 1 is the method flow schematic diagram of transfer of data according to an embodiment of the invention.

Fig. 2 is the method flow schematic diagram of transfer of data according to another embodiment of the present invention.

Fig. 3 is the method flow schematic diagram of transfer of data according to another embodiment of the present invention.

Fig. 4 is the method flow schematic diagram of transfer of data according to another embodiment of the present invention.

Fig. 5 is the method flow schematic diagram of transfer of data according to another embodiment of the present invention.

Fig. 6 is the schematic block diagram of server according to an embodiment of the invention.

Fig. 7 is the schematic block diagram of server according to another embodiment of the present invention.

Fig. 8 is the schematic block diagram of subscriber equipment according to an embodiment of the invention.

Fig. 9 is the schematic block diagram of subscriber equipment according to another embodiment of the present invention.

Figure 10 is the schematic block diagram of server according to another embodiment of the present invention.

Figure 11 is the schematic block diagram of subscriber equipment according to another embodiment of the present invention.

Embodiment

Below in conjunction with the accompanying drawing in the embodiment of the present invention, be clearly and completely described the technical scheme in the embodiment of the present invention, obviously, described embodiment is a part of embodiment of the present invention, instead of whole embodiment.Based on the embodiment in the present invention, the every other embodiment that those of ordinary skill in the art obtain under the prerequisite not making creative work, all should belong to the scope of protection of the invention.

Should understand, technical scheme of the present invention can be applied to various communication system, such as: global system for mobile telecommunications (Global System of Mobile communication, GSM) system, code division multiple access (CodeDivision Multiple Access, CDMA) system, Wideband Code Division Multiple Access (WCDMA) (Wideband CodeDivision Multiple Access, WCDMA) system, GPRS (General PacketRadio Service, GPRS), Long Term Evolution (Long Term Evolution, LTE) system, advanced Long Term Evolution (Advanced long term evolution, LTE-A) system, universal mobile telecommunications system (Universal Mobile Telecommunication System, UMTS) etc.

Will also be understood that, in embodiments of the present invention, subscriber equipment (UE, User Equipment) include but not limited to travelling carriage (MS, Mobile Station), mobile terminal (Mobile Terminal), mobile phone (Mobile Telephone), mobile phone (handset) and portable equipment (portable equipment) etc., this subscriber equipment can through wireless access network (RAN, Radio Access Network) communicate with one or more core net, such as, subscriber equipment can be mobile phone (or being called " honeycomb " phone), there is the computer etc. of radio communication function, subscriber equipment can also be portable, pocket, hand-hold type, built-in computer or vehicle-mounted mobile device.

Should also be understood that the server in the embodiment of the present invention can be understood as network equipment and network side server, wherein, network equipment can comprise intermediate node.Will also be understood that, in embodiments of the present invention, intermediate node can be gateway (Gateway, referred to as " GW ") equipment, can also be any equipment with similar gateway function, it can be such as switch, router, and the equipment such as proxy server and SBC, should understand, in the communications field, mobile terminal is the business request information being used for requested service service by intermediate node (gateway or base station) to network side server transmission, correspondingly, server also sends service response message by corresponding intermediate node to terminal, can be understood as, terminal carries out communicating with server by the gateway device (intermediate node) of correspondence.

Fig. 1 is that real one of the present invention executes the routine method flow schematic diagram for transfer of data, and method is as shown in Figure 1 performed by server, and particularly, the method, comprises

110, after the first connection establishment between server and subscriber equipment, server sends the first connection identifier to subscriber equipment, and the first connection identifier is for identifying the first connection.

In other words, after the first connection establishment between server and subscriber equipment, server can generate the first connection identifier, connect by first and send the first connection identifier to subscriber equipment, wherein, the first connection identifier can represent the first connection, or may be used for representing that subscriber equipment is for set up the first connection, wherein, first connects and can connect or User Datagram Protocol (User DatagramProtocol, UDP) connection for TCP.

Particularly, after the first connection set up by subscriber equipment, in other words after subscriber equipment logs in application, server can distribute the first unique connection identifier for this subscriber equipment (first connects), wherein, first connection identifier can be a long character string generating of server or a random number etc., and the embodiment of the present invention does not limit this.

120, the request message setting up TCP connection of server receives user equipment transmission, the request message setting up TCP connection is connected for asking to set up second between subscriber equipment with server, and the second connection is that TCP connects, and the request message setting up TCP connection carries the first connection identifier.

Particularly, when subscriber equipment again initiate TCP connect or set up a new TCP connect time, can receive to server the request message sending and set up TCP and connect.Such as, the request message setting up TCP connection can comprise SYN request message and the first connection identifier, or the request message setting up TCP connection can for carrying the SYN request message of the first connection identifier.

Should also be understood that subscriber equipment can adopt form expressly to send the first connection identifier, also can send after the first connection identifier encryption, the embodiment of the present invention does not limit this.

130, server according to the first connection identifier, sets up the second connection after receiving the request message setting up TCP connection.

In other words, after server receives the request message setting up TCP connection, can according to the first connection identifier, preferential answering sets up the request message that TCP connects, and sets up the second connection.

Particularly, server can according to the first connection identifier determination subscriber equipment with set up first between server and be connected, in other words after server identification first connection identifier, server can determine that subscriber equipment is logged in or online legitimate user equipment, the request message that TCP connects is set up in server priority response, by the three-way handshake process between subscriber equipment, set up the second connection.

140, server connects by second and subscriber equipment carries out transfer of data.

Therefore, the embodiment of the present invention sets up in the request message of TCP connection by what send at subscriber equipment the first connection identifier carrying server and send to subscriber equipment, server is according to the first connection identifier and the request message set up TCP and be connected, set up TCP to connect, the embodiment of the present invention can prevent manslaughtering of TCP attack protection function, promotes the experience of validated user.

Should be understood that the connection identifier in the embodiment of the present invention also can be called identify label (Identity, ID), such as, the first connection identifier also can be called an ID.Second connection identifier also can be called the 2nd ID.

Further, when the first connection connects for TCP, when the embodiment of the present invention is subject to TCP attack while Refresh Services, also normally can sets up TCP and connect, prevent TCP attack protection and normal users refreshed web page from occurring conflicting.When the first connection connects for UDP, TCP falling (for back) can be carried out according to business demand, normally can set up TCP and connect, enough prevent TCP from attacking, promote Consumer's Experience.

Alternatively, as another embodiment, in 130, server determines that a connection identifier in the first connection identifier and connection identifier database matches; After server receives the request message setting up TCP connection, send response message to subscriber equipment; The acknowledge message that server receives user equipment sends.

Should be understood that connection identifier database comprises the connection identifier connected, particularly, after subscriber equipment connects with server, the connection identifier that this is connected can be stored in connection identifier database by server.Should also be understood that response message can be SYN ACK message, acknowledge message can be ACK message, and the embodiment of the present invention does not limit this.

Specifically, a kind of situation, after server determines that a connection identifier in the first connection identifier and connection identifier database matches, the request message set up TCP and connect will be responded, response message is sent to subscriber equipment, so that after subscriber equipment receives response message, send acknowledge message to server; The acknowledge message that server receives user equipment sends.By above process implementation server and the three-way handshake carrying out normal TCP between subscriber equipment and be connected, without the need to the flow process preventing TCP from attacking through Flow Control and cookie etc., complete the second establishment of connection between server and subscriber equipment.

Another kind of situation, server determines that a connection identifier in the first connection identifier and connection identifier database matches, and wherein connection identifier database comprises the connection identifier that server is the user equipment allocation having set up the first connection; Servers installed sets up the first processing priority of the request message that TCP connects, and wherein, the first processing priority is higher than second processing priority setting up the request message that TCP connects of not carrying connection identifier; Server, according to request message and the first processing priority of setting up TCP connection, sends request acknowledge message to subscriber equipment; The acknowledge message that server receives user equipment sends, sets up the second connection.

Specifically, after server determines that a connection identifier in the first connection identifier and connection identifier database matches, can arrange this request message setting up TCP connection is the first processing priority, wherein, the first processing priority is higher than second processing priority setting up the request message that TCP connects of not carrying connection identifier; Server, according to request message and the first processing priority of setting up TCP connection, preferentially sends response message to subscriber equipment, after subscriber equipment reception response message, to send acknowledge message to server; The acknowledge message that server receives user equipment sends.By above process implementation server and the three-way handshake carrying out normal TCP between subscriber equipment and be connected, without the need to the flow process preventing TCP from attacking through Flow Control and cookie etc., complete the second establishment of connection between server and subscriber equipment.

Therefore, in the embodiment of the present invention, server is first after receiving the request message setting up TCP connection, first determines that a connection identifier in the first connection identifier and connection identifier database matches; Then response message is sent to subscriber equipment, the acknowledge message of server receives user equipment transmission afterwards.By above process implementation server and the three-way handshake carrying out normal TCP between subscriber equipment and be connected, complete the second establishment of connection between server and subscriber equipment, without the need to the flow process preventing TCP from attacking through Flow Control and cookie etc., promote Consumer's Experience.

Alternatively, as another embodiment, server sends connection identifier by 200OK response message to subscriber equipment, and wherein, connection identifier is positioned at the header field of 200OK response message.

Alternatively, as another embodiment, after 130, embodiment of the present invention method can also comprise:

Server sends the second connection identifier to subscriber equipment, and the second connection identifier is used for setting up the 3rd between subscriber equipment with server and is connected.

In other words, server generates the second connection identifier, and server sends the second connection identifier to subscriber equipment, so that subscriber equipment sets up the 3rd link between server according to the second connection identifier.Wherein the second connection identifier is for representing that this subscriber equipment is for set up the second connection, and the 3rd connection can be that TCP connects.

Particularly, after server has been set up and has been connected with the TCP between subscriber equipment, the second connection identifier can be sent to subscriber equipment, concrete, when subscriber equipment adopts form expressly to send the first connection identifier, first connection identifier is easily stolen, after having set up the second connection, first connection identifier is deleted by server immediately, such as server connects first to be deleted from connection identifier database, second connection identifier is sent to subscriber equipment, and the second connection identifier is stored in connection identifier database, the situation that the first connection identifier can be prevented so stolen occurs, if when invalid user stealing first connection identifier request TCP connects, because the first connection identifier is deleted by server, according to the first connection identifier, server cannot determine that this request is from the subscriber equipment setting up the first connection, need to carry out this request of attack protection flow processing, avoid or effectively processed the stolen situation of the first connection identifier, promote Consumer's Experience.

Alternatively, as another embodiment, connect for TCP connects first, in 140, server connects the business recovering or continue to connect based on first second.

Such as, at webpage real time communication (Web Real-Time Communication, WebRTC) in scene, after subscriber equipment logs in application, when subscriber equipment needs to re-establish TCP connection, such as, when carrying out refresh process to web browser, server again can be asked to set up TCP and be connected (second connects), and connects recovery set up second or continue the first business connected.

Alternately, as another embodiment, connect for UDP connects first, in 140, server connects the message data receiving subscriber equipment and send second, wherein, message data capacity is greater than the threshold value of default message data.

Particularly, the threshold value of the message data preset can be default value, and can be also the value determined according to actual conditions, the embodiment of the present invention limit this, and such as, the threshold value of the message data preset can be 1300 bytes.At procotol (Internet Protocol, IP) IP multimedia subsystem, IMS (IPMultimedia Subsystem, IMS) in scene, according to third generation partner program (3rdGeneration Partnership Project, definition 3Gpp), when UE is greater than 1300 byte to the infomational message that server sends, need to adopt TCP link to send.If be that is that UDP is connected with what set up between server before UE, in signalling interactive process all so later, if signaling message super large, a newly-built TCP is then needed to connect, wherein, this new TCP connection is the second connection, and after having set up the second connection, subscriber equipment can connect second send this large signaling message.

Above composition graphs 1 is from the method for transfer of data describing the embodiment of the present invention of the angle of server, describes the method for transfer of data of the embodiment of the present invention below in conjunction with Fig. 2 from the angle of number of users equipment.

Fig. 2 is that real another of the present invention executes the routine method flow schematic diagram for transfer of data, and the method shown in Fig. 2 is performed by subscriber equipment, and particularly, as shown in Figure 2, the method comprises:

210, after the first connection establishment between subscriber equipment and server, the first connection identifier that subscriber equipment reception server sends, the first connection identifier is for identifying the first connection.

In other words, the first connection identifier of the subscriber equipment that subscriber equipment reception server sends, the first connection identifier may be used for representing that the first connection set up by subscriber equipment, and wherein, first connects for TCP connects or UDP connection.

Particularly, after the first connection set up by subscriber equipment, in other words after subscriber equipment logs in, server can generate the first connection identifier, for this subscriber equipment (first connects) distributes the first unique connection identifier, wherein, the first connection identifier can be a long character string generating of server or a random number etc., and the embodiment of the present invention does not limit this.

220, subscriber equipment sends the request message set up TCP and connect to server, set up and be connected with second between server, wherein, the request message setting up TCP connection carries the first connection identifier, the request message setting up TCP connection is connected for asking to set up second between subscriber equipment with server, and the second connection is that TCP connects.

Particularly, when subscriber equipment again initiate TCP connect or set up a new TCP connect time, can receive to server the request message sending and set up TCP and connect.Such as, the request message setting up TCP connection can comprise SYN request message and the first connection identifier, or the request message setting up TCP connection can for carrying the SYN request message of the first connection identifier.Server can according to the first connection identifier determination subscriber equipment with set up first between server and be connected, in other words after server identification first connection identifier or after server determines that in the first connection identifier and connection identifier database one is marking matched, server can determine that subscriber equipment is for setting up the first connection, logging in or online legitimate user equipment, server priority response TCP establishes the link request, and server generates request acknowledge message according to the request message setting up TCP connection; Then, subscriber equipment reception server send according to the request acknowledge message of request message set up TCP and connect; End user device-to-server sends confirmation and to disappear reception, and the three-way handshake between completing user equipment and server, sets up the second connection.

Should be understood that subscriber equipment can adopt form expressly to send the first connection identifier, also can send after the first connection identifier encryption, the embodiment of the present invention does not limit this.

230, subscriber equipment connects by second and server carries out transfer of data.

Therefore, therefore, the embodiment of the present invention carries by setting up in the request message of TCP connection of sending at subscriber equipment the first connection identifier that server is subscriber equipment transmission, server is according to the first connection identifier, request can be established the link by preferential answering TCP, set up TCP to connect, the embodiment of the present invention can prevent manslaughtering of TCP attack protection function, promotes the experience of validated user.

Further, when the first connection connects for TCP, when the embodiment of the present invention is subject to TCP attack while Refresh Services, also normally can set up TCP to connect, prevent TCP attack protection and normal users refreshed web page from occurring conflicting, when the first connection connects for UDP, TCP falling can be carried out according to business demand, normally can set up TCP to connect, enough prevent manslaughtering of TCP attack protection function, particularly, be after the subscriber equipment having set up the first connection at server determination subscriber equipment, the three-way handshake that normal TCP is connected is carried out between subscriber equipment with server, without the need to the flow process preventing TCP from attacking through Flow Control and cookie etc., lifting validated user is experienced.

Should be understood that connection identifier database comprises the connection identifier connected, particularly, after subscriber equipment connects with server, the connection identifier that this is connected can be stored in connection identifier database by server.

Specifically, in 220, a kind of situation, subscriber equipment sends the request message set up TCP and connect to server, server receives the request message set up TCP and connect, after the connection identifier determining in the first connection identifier and connection identifier database matches, the request message set up TCP and connect will be responded, send response message to subscriber equipment, after subscriber equipment receives response message, send acknowledge message to server; The acknowledge message that server receives user equipment sends.By above process implementation server and the three-way handshake carrying out normal TCP between subscriber equipment and be connected, without the need to the flow process preventing TCP from attacking through Flow Control and cookie etc., complete the second establishment of connection between server and subscriber equipment.

Another kind of situation, subscriber equipment sends the request message set up TCP and connect to server, server determines that a connection identifier in the first connection identifier and connection identifier database matches, and wherein connection identifier database comprises the connection identifier that server is the user equipment allocation having set up the first connection; Servers installed sets up the first processing priority of the request message that TCP connects, and wherein, the first processing priority is higher than second processing priority setting up the request message that TCP connects of not carrying connection identifier; Server, according to request message and the first processing priority of setting up TCP connection, sends request acknowledge message to subscriber equipment; The acknowledge message that server receives user equipment sends, sets up the second connection.

Specifically, after server determines that a connection identifier in the first connection identifier and connection identifier database matches, can arrange this request message setting up TCP connection is the first processing priority, wherein, the first processing priority is higher than second processing priority setting up the request message that TCP connects of not carrying connection identifier; Server, according to request message and the first processing priority of setting up TCP connection, preferentially sends response message to subscriber equipment, after subscriber equipment receives response message, sends acknowledge message to server; The acknowledge message that server receives user equipment sends.By above process implementation server and the three-way handshake carrying out normal TCP between subscriber equipment and be connected, without the need to the flow process preventing TCP from attacking through Flow Control and cookie etc., complete the second establishment of connection between server and subscriber equipment.

Alternatively, as another embodiment, in 210, the 200OK response message that subscriber equipment reception server sends, wherein, the first connection identifier is positioned at the header field of 200OK response message.

Particularly, can define a field in 200OK message, the first connection identifier (field) is positioned at the header field of 200OK response message.

Alternatively, as another embodiment, when the first connection connects for TCP, in 230, subscriber equipment connects the business recovering or continue to connect based on first second.

Such as, in WebRTC scene, after subscriber equipment logs in application, when subscriber equipment needs to re-establish TCP connection, such as, when carrying out refresh process to web browser, server again can be asked to set up TCP and be connected (second connects), and connects recovery set up second or continue the first business connected.

Alternatively, as another embodiment, when the first connection connects for UDP, in 230, subscriber equipment connects the message data sent to server second, wherein, message data capacity is greater than the threshold value of default message data.

Particularly, the threshold value of the message data preset can be default value, and as 1300 bytes, can be also the value determined according to actual conditions, the embodiment of the present invention limit this.In IMS scene, according to the definition of 3Gpp, when UE is greater than 1300 byte to the infomational message that server sends, need to adopt TCP link to send.If be that is that UDP is connected with what set up between server before UE, in signalling interactive process all so later, if signaling message super large, a newly-built TCP is then needed to connect, wherein, this new TCP connection is the second connection, and after having set up the second connection, subscriber equipment can connect second send this large signaling message.

Alternatively, as another embodiment, after 220, embodiment of the present invention method can also comprise:

The second connection identifier that subscriber equipment reception server sends, the second connection identifier is used for setting up the 3rd between subscriber equipment with server and is connected.

Concrete, when subscriber equipment adopts form expressly to send the first connection identifier, this first connection identifier is easily stolen, after having set up the second connection, first connection identifier is deleted by server immediately, such as connect first and delete from connection identifier database, and generate the second connection identifier, second connection identifier is sent to subscriber equipment, and the second connection identifier is stored in connection identifier database, wherein the second connection identifier is for representing that this subscriber equipment is for set up the second connection, and the 3rd connection can be that TCP connects.The situation that the first connection identifier can be prevented so stolen occurs, if when invalid user stealing first connection identifier request TCP connects, because the first connection identifier is deleted by server, according to the first connection identifier, server cannot determine that this request is from the subscriber equipment setting up the first connection, need to carry out this request of attack protection flow processing, avoid or effectively processed the stolen situation of the first connection identifier, promoting Consumer's Experience.

Above composition graphs 1 is from the method for transfer of data describing the embodiment of the present invention of the angle of server, and composition graphs 2 describes the method for transfer of data of the embodiment of the present invention from the angle of number of users equipment.The method for transfer of data of the embodiment of the present invention is described in detail below in conjunction with the example that Fig. 3 and Fig. 4 is concrete.

It should be noted that the example of Fig. 1 to Fig. 2 is only used to help skilled in the art to understand the embodiment of the present invention, and the embodiment of the present invention have to be limited to illustrated concrete numerical value or concrete scene.Those skilled in the art, according to the example of given Fig. 1 to Fig. 2, obviously can carry out amendment or the change of various equivalence, and such amendment or change also fall in the scope of the embodiment of the present invention.

Should be understood that the size of the sequence number of above-mentioned each process and do not mean that the priority of execution sequence, the execution sequence of each process should be determined with its function and internal logic, and should not form any restriction to the implementation process of the embodiment of the present invention.

Fig. 3 is that real another of the present invention executes the routine method flow schematic diagram for transfer of data, and method as shown in Figure 3 comprises:

310, the first connection identifier of the subscriber equipment that subscriber equipment reception server sends.

Particularly, the first connection identifier is for representing that subscriber equipment is the subscriber equipment having set up the first connection, and first connects for TCP connects or UDP connection.Particularly, after the first connection establishment between subscriber equipment and server, in other words after subscriber equipment logs in, server can be that this first connection distributes the first unique connection identifier, wherein, first connection identifier can be a long character string generating of server or a random number etc., and the embodiment of the present invention does not limit this.

320, subscriber equipment sends the request message set up TCP and connect to server.

Particularly, the request message setting up TCP connection carries the first connection identifier.When subscriber equipment again initiate TCP connect or set up a new TCP connect time, can receive to server the request message sending and set up TCP and connect.Such as, the request message setting up TCP connection can comprise SYN request message and the first connection identifier.

Should also be understood that subscriber equipment can adopt form expressly to send the first connection identifier, also can send to server by after the first connection identifier encryption, the embodiment of the present invention does not limit this.

330, server is set up according to the request message setting up TCP connection and is connected with second between subscriber equipment.

Particularly, such as, server is the subscriber equipment having set up the first connection according to the first connection identifier determination subscriber equipment of the subscriber equipment set up in the request message of TCP connection, such as, first connection identifier mates with the connection identifier stored in database by server, after the match is successful, determines that this subscriber equipment is the subscriber equipment having set up the first connection, server can priority treatment this set up TCP connect request message, server sends request notification message to subscriber equipment; Subscriber equipment sends a notification message to server, sets up and is connected with second between subscriber equipment.

340, server carries out and transfer of data with being connected by second between equipment.

Therefore, the embodiment of the present invention carries by setting up in the request message of TCP connection of sending at subscriber equipment the first connection identifier that server is subscriber equipment transmission, server is according to the first connection identifier, request can be established the link by preferential answering TCP, set up TCP to connect, the embodiment of the present invention can prevent manslaughtering of TCP attack protection function, promotes the experience of validated user.

Fig. 4 is that real another of the present invention executes the routine method flow schematic diagram for transfer of data.Only giving one in the specific embodiment of Fig. 4 is applied in WebRTC scene, server in Fig. 4 can comprise the example of SBC, particularly, give in Fig. 4 example and set up the process of the first connection (TCP connection) and the login process of WebRTC, and set up the process of the second connection (TCP connection).Method shown in Fig. 4 comprises:

401, subscriber equipment sends SYN request message to server.

402, server sends SYN ACK message to subscriber equipment.

403, subscriber equipment sends ACK message to server.

Should be understood that 401 to 403 first processes connected need through TCPCookie and Flow Control process to prevent TCP from attacking.

404, subscriber equipment sends HTTP authentication request message to server.

405, server sends HTTP request response message to subscriber equipment.

406, subscriber equipment carries out WebRTC login.

407, server passes through 200OK message to user equipment allocation first connection identifier.

408, subscriber equipment sends SYN request message to server.

Concrete, this SYN request message carries the first connection identifier of subscriber equipment.Such as, subscriber equipment, after WebRTC logs in, makes subscriber equipment send to server the request that SYN request message initiates the 2nd PCT connection by refreshing browser.

409, server sends SYN ACK message to subscriber equipment.

Particularly, server takes out the first connection identifier from SYN request message, judges that whether the first connection identifier is effective.Namely this first connection identifier mates with the connection identifier of distribution in connection identifier database by server.If the match is successful (there is occurrence), server determines that TCP connection request is from online user's equipment, then can walk around the attack protection flow processs such as TCP Cookie and Flow Control, sends SYN ACK message to subscriber equipment.

410, subscriber equipment sends ACK message to server.

Wherein, 408 to 410 the process setting up the second connection is described.

411, subscriber equipment sends HTTP authentication request message to server.

412, server sends HTTP request response message to subscriber equipment.

413, server passes through 200OK message to user equipment allocation second connection identifier.

Particularly, after server has been set up and has been connected with the TCP between subscriber equipment, first connection identifier can be deleted from connection identifier database, and can send the second connection identifier to subscriber equipment, wherein the second connection identifier is for representing that this subscriber equipment is the subscriber equipment having set up the second connection.

Concrete, when subscriber equipment adopts form expressly to send the first connection identifier, this first connection identifier is easily stolen, after having set up the second connection, second connection identifier is sent to subscriber equipment by server immediately, the situation that the first connection identifier can be prevented stolen occurs, and promotes Consumer's Experience.

Particularly, subscriber equipment obtains from service layer the first connection identifier that current TCP links corresponding application, and in SYN request message, the first connection identifier is passed to server.Server is judging that according to the first connection identifier linking request is carried out online user and then can be walked around the attack protection flow processs such as TCP Cookie and Flow Control, the 2nd TCP link between foundation and subscriber equipment.Simultaneously at the date restoring of finishing service aspect or after continuing, delete the first connection identifier immediately, and generate the second connection identifier for user.Wherein the second connection identifier is for representing that this subscriber equipment is the subscriber equipment having set up the second connection.Finally by the second connection identifier notifying user equipment.

Fig. 5 is that real another of the present invention executes the routine method flow schematic diagram for transfer of data, only giving one in the specific embodiment of Fig. 5 is applied in the scene of IMS field, particularly, server in Fig. 5 can comprise the example of SBC, gives the process and the process setting up the second connection (TCP is connected) of setting up the first connection (UDP connection) in Fig. 5 example.Method shown in Fig. 5 comprises:

501, subscriber equipment sends SIP login request message to server.

502, server sends 401 authentication messages comprising certification random number to subscriber equipment.

503, subscriber equipment sends the SIP login request message comprising summary random number to server.

504, server passes through 200OK message to user equipment allocation first connection identifier.

505, subscriber equipment sends SYN request message to server.

Concrete, this SYN request message carries the first connection identifier of subscriber equipment.

506, server sends SYN ACK message to subscriber equipment.

Particularly, server takes out the first connection identifier information from SYN request message, judges that whether the first connection identifier is effective.Namely this first connection identifier mates with the connection identifier of distribution in connection identifier database by server.If the match is successful (there is occurrence), server determines that TCP connection request is from online user's equipment, then can walk around that TCP Cookie and Flow Control etc. are anti-attacks 50 and hit flow process, sends SYN ACK message to subscriber equipment.

507, subscriber equipment sends ACK message to server.

Wherein, 505 to 507 the process setting up the second connection is described.

508, subscriber equipment sends the large message of SIP.

Particularly, in IMS scene, according to the definition of 3Gpp, when UE is greater than 1300 byte to the infomational message that server sends, need to adopt TCP link to send.If be that is that UDP is connected with what set up between server before UE, in signalling interactive process all so later, if signaling message super large, a newly-built TCP is then needed to connect, wherein, this new TCP connection is the second connection, and after having set up the second connection, subscriber equipment can connect second send this large signaling message.

509, server passes through 200OK message to user equipment allocation second connection identifier.

Particularly, server is user equipment allocation first connection identifier, and carries the first connection identifier in 200OK message.Subscriber equipment falls after rise when TCP connection is set up in request at TCP and carries this connection identifier, and server is judging that according to connection identifier linking request there occurs TCP and falls after rise, the 2nd TCP link between foundation and subscriber equipment.Delete the first connection identifier immediately, and generate the second connection identifier for user.Wherein the second connection identifier is for representing that this subscriber equipment is the subscriber equipment having set up the second connection.Finally by the second connection identifier notifying user equipment.

Above, composition graphs 1 to Fig. 5 describes the method for the transfer of data of the embodiment of the present invention in detail, describes the equipment of transfer of data of the invention process below in conjunction with Fig. 6 to Figure 11 in detail.

Fig. 6 is the schematic block diagram of server according to an embodiment of the invention.Server as shown in Figure 6 comprises: the first transmitting element 610, receiving element 620, response unit 630 and transmission unit 640.

Particularly, after first connection establishment of the first transmitting element 610 user between server and subscriber equipment, send the first connection identifier to subscriber equipment, the first connection identifier is for identifying the first connection; The request message setting up transmission control protocol TCP connection that receiving element 620 sends for receiving subscriber equipment, the request message setting up TCP connection is connected for asking to set up second between subscriber equipment with server, second connects for TCP connects, and the request message setting up TCP connection carries the first connection identifier; Response unit 630 sets up for what receive according to the first connection identifier and receiving element the request message that TCP is connected, and sets up the second connection; Transmission unit 640 carries out transfer of data for second connection of being set up by response unit with subscriber equipment.

Therefore, the embodiment of the present invention carries by setting up in the request message of TCP connection of sending at subscriber equipment the first connection identifier that server is subscriber equipment transmission, server is according to the first connection identifier and the request message set up TCP and be connected, set up TCP to connect, the embodiment of the present invention can prevent manslaughtering of TCP attack protection function, promotes the experience of validated user.

Alternatively, as another embodiment, response unit described in response unit 630 determines that a connection identifier in described first connection identifier and connection identifier database matches, receiving element receive described set up TCP connect request message after, send response message to described subscriber equipment, and receive the acknowledge message of described subscriber equipment transmission.

Alternatively, as another embodiment, the first transmitting element 610 sends the first connection identifier by 200OK response message to subscriber equipment, and wherein, the first connection identifier is positioned at the header field of 200OK response message.

Alternatively, as another embodiment, the server of the embodiment of the present invention can also comprise: the second transmitting element, and particularly, server as shown in Figure 7 comprises:

First transmitting element 710, receiving element 720, response unit 730, transmission unit 740 and the second transmitting element 750.

Particularly, the first transmitting element 610, receiving element 620, response unit 630 and transmission unit 640 are corresponding with the first transmitting element 710, receiving element 720, response unit 730 and transmission unit 740 respectively, for avoiding repetition, repeat no more.Second transmitting element 750 sets up for what receive according to the first connection identifier and receiving element at response unit the request message that TCP is connected, after setting up the second connection, send the second connection identifier to subscriber equipment, the second connection identifier is used for setting up the 3rd between subscriber equipment with server and is connected.

Alternatively, as another embodiment, the first connection is TCP connection, the second business connecting recovery or continue based on the first connection that transmission unit 640 is set up at response unit.

Alternatively, as another embodiment, first connect for UDP connect, transmission unit 640 response unit sets up second connection on receive subscriber equipment transmission message data, wherein, the capacity of message data is greater than the threshold value of default message data.

Alternatively, as another embodiment, the first connection identifier is character string or random number etc.

Should be understood that the server shown in Fig. 6 and Fig. 7 can realize relating in Fig. 1 to Fig. 5 embodiment of the method each process of server, for avoiding repetition, repeating no more.

Fig. 8 is the schematic block diagram of subscriber equipment according to an embodiment of the invention.Subscriber equipment as shown in Figure 8 comprises: the first receiving element 810, transmitting element 820 and transmission unit 830.

Particularly, the first receiving element 810 for after the first connection establishment between subscriber equipment and server, reception server send the first connection identifier, the first connection identifier is for identifying the first connection; Transmitting element 820 is for sending the request message set up TCP and connect to server, set up and be connected with second between server, wherein, the request message setting up TCP connection carries the first connection identifier, the request message setting up TCP connection is connected for asking to set up second between subscriber equipment with server, and the second connection is that TCP connects; Transmission unit 830 carries out transfer of data for connecting by second with server.

Alternatively, as another embodiment, the 200OK response message that the first receiving element 810 reception server sends, wherein, the first connection identifier is positioned at the header field of 200OK response message.

Alternatively, as another embodiment, first connects for TCP connects, and transmission unit 830 connects the business recovering or continue to connect based on first second.

Alternatively, as another embodiment, first connects for UDP connects, and transmission unit 830 connects second to server transmission message data, and wherein, message data capacity is greater than the threshold value of default message data.

Alternatively, as another embodiment, subscriber equipment can also comprise: the second receiving element.Particularly, subscriber equipment as shown in Figure 9 comprises: the first receiving element 910, transmitting element 920, transmission unit 930 and the second receiving element 940.

Particularly, first receiving element 910, transmitting element 920 and transmission unit 930 are corresponding with the first receiving element 810, transmitting element 820 and transmission unit 820 respectively, second receiving element 940 is for sending the request message set up TCP and connect to server at transmitting element, set up after being connected with second between server, the second connection identifier that reception server sends, the second connection identifier is used for setting up the 3rd between subscriber equipment with server and is connected.

Should be understood that the subscriber equipment shown in Fig. 8 and Fig. 9 can realize relating in Fig. 1 to Fig. 5 embodiment of the method each process of subscriber equipment, for avoiding repetition, repeating no more.

Figure 10 is the schematic block diagram of server according to another embodiment of the present invention.Server as shown in Figure 10 comprises processor 1010, memory 1020, bus system 1030 and transceiver 1040.

Concrete, after first connection establishment of transceiver 1040 between server and subscriber equipment, send the first connection identifier first connection identifier for identifying the first connection to subscriber equipment; Receive the request message setting up transmission control protocol TCP connection that subscriber equipment sends, the request message setting up TCP connection is connected for asking to set up second between subscriber equipment with server, second connects for TCP connects, and the request message setting up TCP connection carries the first connection identifier; Processor 1010 calls the code be stored in memory 1020 by bus system 1030, what receive according to the first connection identifier and transceiver 1040 sets up the request message that TCP is connected, and sets up the second connection; The second connection that transceiver 1040 is set up by processor 1010 carries out transfer of data with subscriber equipment.

The method that the invention described above embodiment discloses can be applied in processor 1010, or is realized by processor 1010.Processor 1010 may be a kind of integrated circuit (IC) chip, has the disposal ability of signal.In implementation procedure, each step of said method can be completed by the instruction of the integrated logic circuit of the hardware in processor 1010 or software form.Above-mentioned processor 1010 can be general processor, digital signal processor (English Digital Signal Processor, be called for short DSP), application-specific integrated circuit (ASIC) (English Application Specific Integrated Circuit, be called for short ASIC), ready-made programmable gate array (English Field Programmable Gate Array, be called for short FPGA) or other programmable logic devices, discrete gate or transistor logic, discrete hardware components.Can realize or perform disclosed each method, step and the logic diagram in the embodiment of the present invention.The processor etc. of general processor can be microprocessor or this processor also can be any routine.Step in conjunction with the method disclosed in the embodiment of the present invention directly can be presented as that hardware decoding processor is complete, or combines complete by the hardware in decoding processor and software module.Software module can be positioned at random access memory (English Random Access Memory, be called for short RAM), in the storage medium of this area maturation such as flash memory, read-only memory (English Read-OnlyMemory, be called for short ROM), programmable read only memory or electrically erasable programmable memory, register.This storage medium is positioned at memory 1020, processor 1010 reads the information in memory 1020, complete the step of said method in conjunction with its hardware, this bus system 1030, except comprising data/address bus, can also comprise power bus, control bus and status signal bus in addition etc.But for the purpose of clearly demonstrating, in the drawings various bus is all designated as bus system 1030.

Alternatively, as another embodiment, processor 1010 determines that a connection identifier in described first connection identifier and connection identifier database matches, transceiver 1040 receive described set up TCP connect request message after, transceiver 1040 sends response message to described subscriber equipment, and receives the acknowledge message of described subscriber equipment transmission.

Alternatively, as another embodiment, transceiver 1040 sends the first connection identifier by 200OK response message to subscriber equipment, and wherein, the first connection identifier is positioned at the header field of 200OK response message.

Alternatively, as another embodiment, after the second connection set up by processor 1040, transceiver 1040 sends the second connection identifier to subscriber equipment, and the second connection identifier is used for setting up the 3rd between subscriber equipment with server and is connected.

Alternatively, as another embodiment, the first connection is TCP connection, the second business connecting recovery or continue based on the first connection that transceiver 1040 is set up at processor 1010.

Alternatively, as another embodiment, first connects for UDP connects, transceiver 1040 processor 1010 set up second connect on receive subscriber equipment send message data, wherein, the capacity of message data is greater than predetermined threshold value, and predetermined threshold value can be 1300 bytes.

Should be understood that the server shown in Figure 10 can realize relating in Fig. 1 to Fig. 5 embodiment of the method each process of server, for avoiding repetition, repeating no more.

Figure 11 is the schematic block diagram of subscriber equipment according to another embodiment of the present invention.Subscriber equipment as shown in figure 11 comprises processor 1110, memory 1120, bus system 1130 and transceiver 1140.

Particularly, after first connection establishment of transceiver 1140 between subscriber equipment and server, the first connection identifier that reception server sends, the first connection identifier is for identifying the first connection; The request message set up TCP and connect is sent to server, processor 1110 calls the code be stored in memory 1120 by bus system 1130, set up and be connected with second between server, wherein, the request message setting up TCP connection carries the first connection identifier, the request message setting up TCP connection is connected with second between server for user equipment requests foundation, and the second connection is that TCP connects; The second connection that transceiver 1140 is set up by processor 1110 carries out transfer of data with server.

The method that the invention described above embodiment discloses can be applied in processor 1110, or is realized by processor 1110.Processor 1110 may be a kind of integrated circuit (IC) chip, has the disposal ability of signal.In implementation procedure, each step of said method can be completed by the instruction of the integrated logic circuit of the hardware in processor 1110 or software form.Above-mentioned processor 1110 can be general processor, digital signal processor (English Digital Signal Processor, be called for short DSP), application-specific integrated circuit (ASIC) (English Application Specific Integrated Circuit, be called for short ASIC), ready-made programmable gate array (English Field Programmable Gate Array, be called for short FPGA) or other programmable logic devices, discrete gate or transistor logic, discrete hardware components.Can realize or perform disclosed each method, step and the logic diagram in the embodiment of the present invention.The processor etc. of general processor can be microprocessor or this processor also can be any routine.Step in conjunction with the method disclosed in the embodiment of the present invention directly can be presented as that hardware decoding processor is complete, or combines complete by the hardware in decoding processor and software module.Software module can be positioned at random access memory (English Random Access Memory, be called for short RAM), in the storage medium of this area maturation such as flash memory, read-only memory (English Read-OnlyMemory, be called for short ROM), programmable read only memory or electrically erasable programmable memory, register.This storage medium is positioned at memory 1120, processor 1110 reads the information in memory 1120, complete the step of said method in conjunction with its hardware, this bus system 1130, except comprising data/address bus, can also comprise power bus, control bus and status signal bus in addition etc.But for the purpose of clearly demonstrating, in the drawings various bus is all designated as bus system 1130.

Alternatively, as another embodiment, the 200OK response message that transceiver 1140 reception server sends, wherein, the first connection identifier is positioned at the header field of 200OK response message.

Alternatively, as another embodiment, first connect for TCP connect, transceiver 1140 processor 1110 sets up second connect on recover or continuation first connection business.

Alternatively, as another embodiment, first connect for UDP connect, transceiver 1140 processor 1110 sets up second connection on to server transmission message data, wherein, message data capacity is greater than predetermined threshold value, and predetermined threshold value can be 1300 bytes.

Alternatively, as another embodiment, after the second connection set up by processor 1110, the second connection identifier that transceiver 1140 reception server sends, the second connection identifier is used for setting up the 3rd between subscriber equipment with server and is connected.

Alternatively, as another embodiment, the first connection identifier is character string or random number.

Should be understood that the subscriber equipment shown in Figure 11 can realize relating in Fig. 1 to Fig. 5 embodiment of the method each process of subscriber equipment, for avoiding repetition, repeating no more.

Should be understood that during specification in the whole text that " embodiment " or " embodiment " mentioned means that the special characteristic relevant with embodiment, structure or characteristic comprise at least one embodiment of the present invention.Therefore, " in one embodiment " or " in one embodiment " that occur everywhere at whole specification does not necessarily refer to identical embodiment.In addition, these specific feature, structure or characteristics can combine in one or more embodiments in any suitable manner.Should understand, in various embodiments of the present invention, the size of the sequence number of above-mentioned each process does not also mean that the priority of execution sequence, and the execution sequence of each process should be determined with its function and internal logic, and should not form any restriction to the implementation process of the embodiment of the present invention.

In addition, term " system " and " network " are often used interchangeably in this article herein.Term "and/or" herein, being only a kind of incidence relation describing affiliated partner, can there are three kinds of relations in expression, and such as, A and/or B, can represent: individualism A, exists A and B simultaneously, these three kinds of situations of individualism B.In addition, character "/" herein, general expression forward-backward correlation is to the relation liking a kind of "or".

Should be understood that in embodiments of the present invention, " B corresponding to A " represents that B and A is associated, and can determine B according to A.But should also be understood that and determine B and do not mean that only to determine B according to A according to A, B can also be determined according to A and/or out of Memory.

Those of ordinary skill in the art can recognize, in conjunction with unit and the algorithm steps of each example of embodiment disclosed herein description, can realize with electronic hardware, computer software or the combination of the two, in order to the interchangeability of hardware and software is clearly described, generally describe composition and the step of each example in the above description according to function.These functions perform with hardware or software mode actually, depend on application-specific and the design constraint of technical scheme.Professional and technical personnel can use distinct methods to realize described function to each specifically should being used for, but this realization should not thought and exceeds scope of the present invention.

Those skilled in the art can be well understood to, and for convenience of description and succinctly, the specific works process of the system of foregoing description, device and unit, with reference to the corresponding process in preceding method embodiment, can not repeat them here.

In several embodiments that the application provides, should be understood that disclosed system, apparatus and method can realize by another way.Such as, device embodiment described above is only schematic, such as, the division of described unit, be only a kind of logic function to divide, actual can have other dividing mode when realizing, such as multiple unit or assembly can in conjunction with or another system can be integrated into, or some features can be ignored, or do not perform.In addition, shown or discussed coupling each other or direct-coupling or communication connection can be indirect coupling by some interfaces, device or unit or communication connection, also can be electric, machinery or other form connect.

The described unit illustrated as separating component or can may not be and physically separates, and the parts as unit display can be or may not be physical location, namely can be positioned at a place, or also can be distributed in multiple network element.Some or all of unit wherein can be selected according to the actual needs to realize the object of embodiment of the present invention scheme.

In addition, each functional unit in each embodiment of the present invention can be integrated in a processing unit, and also can be that the independent physics of unit exists, also can be that two or more unit are in a unit integrated.Above-mentioned integrated unit both can adopt the form of hardware to realize, and the form of SFU software functional unit also can be adopted to realize.

Through the above description of the embodiments, those skilled in the art can be well understood to the present invention can use hardware implementing, or firmware realizes, or their compound mode realizes.When implemented in software, above-mentioned functions can be stored in computer-readable medium or as the one or more instruction on computer-readable medium or code and transmit.Computer-readable medium comprises computer-readable storage medium and communication media, and wherein communication media comprises any medium being convenient to transmit computer program from a place to another place.Storage medium can be any usable medium that computer can access.Be not limited to as example: computer-readable medium can comprise RAM, ROM, EEPROM, CD-ROM or other optical disc storage, magnetic disk storage medium or other magnetic storage apparatus or can be used in carrying or storing the expectation with instruction or data structure form program code and can by any other medium of computer access.In addition.Any connection can be suitable become computer-readable medium.Such as, if software be use coaxial cable, optical fiber cable, twisted-pair feeder, Digital Subscriber Line (DSL) or such as infrared ray, radio and microwave and so on wireless technology from website, server or other remote source, so the wireless technology of coaxial cable, optical fiber cable, twisted-pair feeder, DSL or such as infrared ray, wireless and microwave and so on be included in affiliated medium fixing in.As used in the present invention, dish (Disk) and dish (disc) comprise compression laser disc (CD), laser dish, laser disc, Digital Versatile Disc (DVD), floppy disk and Blu-ray Disc, the copy data of the usual magnetic of its mid-game, dish then carrys out the copy data of optics with laser.Combination above also should be included within the protection range of computer-readable medium.

In a word, the foregoing is only the preferred embodiment of technical solution of the present invention, be not intended to limit protection scope of the present invention.Within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. a method for transfer of data, is characterized in that, comprising:

After the first connection establishment between server and subscriber equipment, described server sends the first connection identifier to described subscriber equipment, and described first connection identifier connects for identifying described first;

Described server receives the request message setting up transmission control protocol TCP connection that described subscriber equipment sends, the request message that the described TCP of foundation connects is connected for asking to set up second between described subscriber equipment with described server, described second connects for TCP connects, and the request message that the described TCP of foundation connects carries described first connection identifier;

Described server receive described set up TCP connect request message after, according to described first connection identifier, set up described second connect;

Described server connects by described second and described subscriber equipment carries out transfer of data.

2. method according to claim 1, is characterized in that, described server receive described set up TCP connect request message after, according to described first connection identifier, set up described second connect, comprising:

Described server determines that a connection identifier in described first connection identifier and connection identifier database matches;

Described server receive described set up the request message that TCP connects after, send response message to described subscriber equipment;

Described server receives the acknowledge message that described subscriber equipment sends.

3. method according to claim 1 and 2, is characterized in that, described server sends the first connection identifier to described subscriber equipment, comprising:

Described server sends described first connection identifier by 200OK response message to described subscriber equipment, and wherein, described first connection identifier is positioned at the header field of described 200OK response message.

4. according to the method in any one of claims 1 to 3, it is characterized in that, described server receive described set up TCP connect request message after, according to described first connection identifier, set up described second connect after, also comprise:

Described server sends the second connection identifier to described subscriber equipment, and described second connection identifier is used for setting up the 3rd between described subscriber equipment with described server and is connected.

5. method according to any one of claim 1 to 4, is characterized in that, described first connects for TCP connects, and described server connects by described second and described subscriber equipment carries out transfer of data, comprising:

Described server connects the business recovering or continue to connect based on described first described second.

6. the method according to Claims 1-4, is characterized in that, described first connects for user datagram protocol UDP connects, and described server connects by described second and described subscriber equipment carries out transfer of data, comprising:

Described server connects the message data receiving described subscriber equipment and send described second, wherein, the capacity of described message data is greater than the threshold value of default message data.

7. a method for transfer of data, is characterized in that, comprising:

After the first connection establishment between subscriber equipment and server, described subscriber equipment receives the first connection identifier that described server sends, and described first connection identifier connects for identifying described first;

Described subscriber equipment sends the request message set up TCP and connect to described server, set up and be connected with second between described server, wherein, the request message that the described TCP of foundation connects carries described first connection identifier, the request message that the described TCP of foundation connects is connected for asking to set up second between described subscriber equipment with described server, and described second connects for TCP connects;

Described subscriber equipment connects by described second and described server carries out transfer of data.

8. method according to claim 7, is characterized in that, the first connection identifier that described subscriber equipment reception server sends, and comprising:

Described subscriber equipment receives the 200OK response message that described server sends, and wherein, described first connection identifier is positioned at the header field of described 200OK response message.

9. the method according to claim 7 or 8, is characterized in that, described first connects for TCP connects, and described subscriber equipment connects by described second and described server carries out transfer of data, comprising:

Described subscriber equipment connects the business recovering or continue to connect based on described first described second.

10. the method according to claim 7 or 8, is characterized in that, described first connects for UDP connects, and described subscriber equipment connects by described second and described server carries out transfer of data, comprising:

Described subscriber equipment connects described second to described server transmission message data, and wherein, described message data capacity is greater than the threshold value of default message data.

11. methods according to any one of claim 7 to 10, is characterized in that, send the request message set up TCP and connect, set up after being connected with second between described server, also comprise at described subscriber equipment to described server:

Described subscriber equipment receives the second connection identifier that described server sends, and described second connection identifier is used for setting up the 3rd between described subscriber equipment with described server and is connected.

12. 1 kinds of servers, is characterized in that, comprising:

First transmitting element, after the first connection establishment between server and subscriber equipment, sends the first connection identifier to described subscriber equipment, and described first connection identifier connects for identifying described first;

Receiving element, for receiving the request message setting up transmission control protocol TCP connection that described subscriber equipment sends, the request message that the described TCP of foundation connects is connected for asking to set up second between described subscriber equipment with described server, described second connects for TCP connects, and the request message that the described TCP of foundation connects carries described first connection identifier;

Response unit, the request message that the described TCP of foundation for receiving according to described first connection identifier and described receiving element is connected, sets up described second and connects;

Transmission unit, carries out transfer of data for described second connection of being set up by described response unit with described subscriber equipment.

13. servers according to claim 12, it is characterized in that, described response unit determines that a connection identifier in described first connection identifier and connection identifier database matches, receiving element receive described set up TCP connect request message after, send response message to described subscriber equipment, and receive the acknowledge message of described subscriber equipment transmission.

14. servers according to claim 12 or 13, it is characterized in that, described first transmitting element sends described first connection identifier by 200OK response message to described subscriber equipment, and wherein, described connection identifier is positioned at the header field of described 200OK response message.

15., according to claim 12 to the server according to any one of 14, is characterized in that, also comprise:

Second transmitting element, for the request message be connected according to the described TCP of foundation that described first connection identifier and described receiving element receive at described response unit, after setting up described second connection, send the second connection identifier to described subscriber equipment, described second connection identifier is used for setting up the 3rd between described subscriber equipment with described server and is connected.

16., according to claim 12 to the server according to any one of 15, is characterized in that, described first connect for TCP connect, described transmission unit described response unit set up described second connect on recover or continue based on described first connection business.

17. according to claim 12 to the server described in 15, it is characterized in that, described first connects for UDP connects, described transmission unit described response unit set up described second connect on receive described subscriber equipment send message data, wherein, the capacity of described message data is greater than the threshold value of default message data.

18. 1 kinds of subscriber equipmenies, is characterized in that, comprising:

First receiving element, after the first connection establishment between described subscriber equipment and server, receives the first connection identifier that described server sends, and described first connection identifier connects for identifying described first;

Transmitting element, for sending the request message set up TCP and connect to described server, set up and be connected with second between described server, wherein, the request message that the described TCP of foundation connects carries described first connection identifier, the request message that the described TCP of foundation connects is connected for asking to set up second between described subscriber equipment with described server, and described second connects for TCP connects;

Transmission unit, carries out transfer of data for connecting by described second with described server.

19. subscriber equipmenies according to claim 18, is characterized in that, described first receiving element receives the 200OK response message that described server sends, and wherein, described first connection identifier is positioned at the header field of described 200OK response message.

20. subscriber equipmenies according to claim 18 or 19, is characterized in that, described first connects for TCP connects, and described transmission unit connects the business recovered or continue based on described first connection described second.

21. subscriber equipmenies according to claim 18 or 19, it is characterized in that, described first connects for UDP connects, and described transmission unit connects to described server transmission message data described second, wherein, described message data capacity is greater than the threshold value of default message data.

22., according to claim 18 to the subscriber equipment described in 21 any one, is characterized in that, also comprise:

Second receiving element, for sending the request message set up TCP and connect to described server at described transmitting element, set up after being connected with second between described server, receive the second connection identifier that described server sends, described second connection identifier is used for setting up the 3rd between described subscriber equipment with described server and is connected.