CN109743265A - A kind of method and apparatus obtaining certificate information - Google Patents

Abstract

A kind of method and device obtaining certificate information, applied in view networking, there is view networking protocol depending on operation in networking, includes the first view networked terminals and the second view networked terminals depending on networking, receive the certificate information acquisition instruction that the first view networked terminals are sent based on view networking protocol；Using the second downstream communications link configured in advance to the second view networked terminals, certificate information acquisition instruction is sent to the second view networked terminals；Receive the certificate information that the second view networked terminals are directed to the acquisition of certificate information acquisition instruction；Using the first downstream communications link configured in advance to the first view networked terminals, certificate information is sent to the first view networked terminals.Invention applies the characteristics of view networking, independent of traditional internet, without IP address, interchanger used in network transmission, router and gateway etc., the acquisition, transmission and the displaying that carry out high-speed, high safety and low latency to long-range certificate information can be achieved, the simplicity of operation can be greatly improved.

Description

A kind of method and apparatus obtaining certificate information

Technical field

The present invention relates to view networking technology fields, demonstrate,prove more particularly to a kind of method for obtaining certificate information and a kind of acquisition The device of part information.

Background technique

With the fast development of the network technology, certificate information the life of user, work, in terms of it is widely available.

In communication process, is needing to authenticate, sign etc. in application scenarios, generally requiring the certificate information of acquisition user.

Currently, the process of acquisition certificate information needs to pass through by intermediate equipment, such as interchanger, router and gateway Complicated operation is just able to achieve long-range certificate information collection and display, and there may be safety or networks during transmission The problem of packet loss caused by obstruction and delay.

Summary of the invention

In view of the above problems, it proposes the embodiment of the present invention and overcomes the above problem or at least partly in order to provide one kind A kind of method of the acquisition certificate information to solve the above problems and a kind of corresponding device for obtaining certificate information.

To solve the above-mentioned problems, the embodiment of the invention discloses a kind of method for obtaining certificate information, the method is answered Described to have view networking protocol depending on operation in networking for regarding in networking, the view networking includes the first view networked terminals and second Depending on networked terminals, the method includes:

Receive the certificate information acquisition instruction that the first view networked terminals are sent based on the view networking protocol；

Using to the second downstream communications link of the second view networked terminals configuration, the networking of the view of Xiang Suoshu second is eventually in advance End sends the certificate information acquisition instruction；

Receive the certificate information that the second view networked terminals are directed to certificate information acquisition instruction acquisition；

Using the first downstream communications link configured in advance to the first view networked terminals, the certificate information is sent To the first view networked terminals.

Preferably, certificate information identification code is included at least in the certificate information acquisition instruction；

It is described to use in advance to the first downstream communications link of the first view networked terminals configuration, by the certificate information Be sent to described first includes: depending on networked terminals step

According to the certificate information identification code, judge whether the received certificate information refers to certificate information acquisition Order matches；

If matching, using the first downstream communications link configured in advance to the first view networked terminals, by the card Part information is sent to the first view networked terminals.

Preferably, described second the certificate information is acquired in the following manner depending on networked terminals:

When receiving the certificate information acquisition instruction, the certificate letter is extracted from the certificate information acquisition instruction Cease identification code；

Obtain certificate information reader；

The certificate information corresponding with the certificate information identification code is acquired using the certificate information reader.

It preferably, include the termination number of the second view networked terminals in the certificate information acquisition instruction；

It is described to use in advance to the second downstream communications link of the second view networked terminals configuration, the view connection of Xiang Suoshu second Network termination send the certificate information acquisition instruction the step of include:

The corresponding second view networked terminals are searched according to the termination number；

Using to the second downstream communications link of the second view networked terminals configuration, the networking of the view of Xiang Suoshu second is eventually in advance End sends the certificate information acquisition instruction.

Preferably, the certificate information includes:

Certificate information image data and/or certificate information encryption data.

To solve the above-mentioned problems, the embodiment of the invention also discloses a kind of device for obtaining certificate information, described devices Applied in view networking, operation has a view networking protocol in the view networking, and the view networking regards networked terminals and the including first Two view networked terminals, the device include:

Command reception module, the certificate letter sent for receiving the first view networked terminals based on the view networking protocol Cease acquisition instruction；

Instruction sending module, for using the second downstream communications link configured in advance to the second view networked terminals, The certificate information acquisition instruction is sent to the second view networked terminals；

Data reception module, for receiving the second view networked terminals for certificate information acquisition instruction acquisition Certificate information；

Data transmission blocks, for using the first downstream communications link configured in advance to the first view networked terminals, The certificate information is sent to the first view networked terminals.

Preferably, certificate information identification code is included at least in the certificate information acquisition instruction；

The data transmission blocks include at least:

Judging submodule, for according to the certificate information identification code, judge the received certificate information whether with institute It states certificate information acquisition instruction to match, if matching, using in advance to the first downlink of the first view networked terminals configuration The certificate information is sent to the first view networked terminals by communication link.

Preferably, the second view networked terminals acquire the certificate information by calling with lower module:

Parsing module, for when receiving the certificate information acquisition instruction, from the certificate information acquisition instruction Extract the certificate information identification code；

Acquisition module, for obtaining certificate information reader, using certificate information reader acquisition and the certificate The corresponding certificate information of message identification code.

It preferably, include the termination number of the second view networked terminals in the certificate information acquisition instruction；

Described instruction sending module includes at least:

Submodule is searched, for searching the corresponding second view networked terminals according to the termination number, and is used In advance to the second downstream communications link of the second view networked terminals configuration, Xiang Suoshu second regards networked terminals and sends the card The instruction of part acquisition of information.

Preferably, the certificate information includes:

Certificate information image data and/or certificate information encryption data.

The embodiment of the present invention includes following advantages:

Firstly, the embodiment of the present invention apply view networking characteristic, first view networked terminals be based on view networking protocol send out Certificate information acquisition instruction is sent, and is not based on Internet protocol；Secondly, second is by being pre-configured with depending on networked terminals The second downstream communications link receive certificate information acquisition instruction, the second view networked terminals are directed to certificate information acquisition instruction and adopt The certificate information of collection is to be sent to the first view networked terminals, this all mistake by preconfigured first downstream communications link Journey is not necessarily to IP address, interchanger, router and gateway used in network transmission etc. independent of traditional internet, because This needs not move through complicated operation, also there is no safety or network congestion problem, it can be achieved that long-range certificate information into Row high-speed, the acquisition of high safety and low latency, transmission and displaying, can greatly improve the simplicity of operation.

Detailed description of the invention

Fig. 1 is a kind of networking schematic diagram of view networking of the invention；

Fig. 2 is a kind of hardware structural diagram of node server of the invention；

Fig. 3 is a kind of hardware structural diagram of access switch of the invention；

Fig. 4 is the hardware structural diagram that a kind of Ethernet association of the invention turns gateway；

Fig. 5 is a kind of step flow chart of the embodiment of the method for certificate information of the invention；

Fig. 6 is a kind of operation example figure of certificate information of the invention；

Fig. 7 is the step flow chart of the embodiment of the method for another certificate information of the invention；

Fig. 8 is the step flow chart of the embodiment of the method for another certificate information of the invention；

Fig. 9 is a kind of structural block diagram of the Installation practice of certificate information of the invention.

Specific embodiment

In order to make the foregoing objectives, features and advantages of the present invention clearer and more comprehensible, with reference to the accompanying drawing and specific real Applying mode, the present invention is described in further detail.

It is the important milestone of network Development depending on networking, is a real-time network, can be realized HD video real-time Transmission, Push numerous Internet applications to HD video, high definition is face-to-face.

Real-time high-definition video switching technology is used depending on networking, it can be such as high in a network platform by required service Clear video conference, Intellectualized monitoring analysis, emergency command, digital broadcast television, delay TV, the Web-based instruction, shows video monitoring Field live streaming, VOD program request, TV Mail, individual character records (PVR), Intranet (manages) channel by oneself, intelligent video Broadcast Control, information publication All be incorporated into a system platform etc. services such as tens of kinds of videos, voice, picture, text, communication, data, by TV or Computer realizes that high-definition quality video plays.

Embodiment in order to enable those skilled in the art to better understand the present invention is introduced to depending on networking below:

Depending on networking, applied portion of techniques is as described below:

Network technology (Network Technology)

Traditional ethernet (Ethernet) is improved depending on the network technology innovation networked, with potential huge on network Video flow.(Circuit is exchanged different from simple network packet packet switch (Packet Switching) or lattice network Switching), Streaming demand is met using Packet Switching depending on networking technology.Has grouping depending on networking technology Flexible, the simple and low price of exchange, is provided simultaneously with the quality and safety assurance of circuit switching, it is virtually electric to realize the whole network switch type The seamless connection of road and data format.

Switching technology (Switching Technology)

Two advantages of asynchronous and packet switch that Ethernet is used depending on networking eliminate Ethernet under the premise of complete compatible and lack It falls into, has the end-to-end seamless connection of the whole network, direct user terminal, directly carrying IP data packet.User data is in network-wide basis It is not required to any format conversion.It is the more advanced form of Ethernet depending on networking, is a real-time exchange platform, can be realized at present mutually The whole network large-scale high-definition realtime video transmission that networking cannot achieve pushes numerous network video applications to high Qinghua, unitizes.

Server technology (Server Technology)

It is different from traditional server, its Streaming Media depending on the server technology in networking and unified video platform Transmission be built upon it is connection-oriented on the basis of, data-handling capacity is unrelated with flow, communication time, single network layer energy Enough transmitted comprising signaling and data.For voice and video business, handled depending on networking and unified video platform Streaming Media Complexity many simpler than data processing, efficiency substantially increase hundred times or more than traditional server.

Reservoir technology (Storage Technology)

The ultrahigh speed reservoir technology of unified video platform in order to adapt to the media content of vast capacity and super-flow and Using state-of-the-art real time operating system, the programme information in server instruction is mapped to specific hard drive space, media Content is no longer pass through server, and moment is directly delivered to user terminal, and user waits typical time less than 0.2 second.It optimizes Sector distribution greatly reduces the mechanical movement of hard disc magnetic head tracking, and resource consumption only accounts for the 20% of the internet ad eundem IP, but The concurrent flow greater than 3 times of traditional disk array is generated, overall efficiency promotes 10 times or more.

Network security technology (Network Security Technology)

Depending on the structural design networked by servicing independent licence system, equipment and the modes such as user data is completely isolated every time The network security problem that puzzlement internet has thoroughly been eradicated from structure, does not need antivirus applet, firewall generally, has prevented black The attack of visitor and virus, structural carefree secure network is provided for user.

It services innovative technology (Service Innovation Technology)

Business and transmission are fused together by unified video platform, whether single user, private user or a net The sum total of network is all only primary automatic connection.User terminal, set-top box or PC are attached directly to unified video platform, obtain rich The multimedia video service of rich colorful various forms.Unified video platform is traditional to substitute with table schema using " menu type " Complicated applications programming, considerably less code, which can be used, can be realized complicated application, realize the new business innovation of " endless ".

Networking depending on networking is as described below:

It is a kind of central controlled network structure depending on networking, which can be Tree Network, Star network, ring network etc. class Type, but centralized control node is needed to control whole network in network on this basis.

As shown in Figure 1, being divided into access net and Metropolitan Area Network (MAN) two parts depending on networking.

The equipment of access mesh portions can be mainly divided into 3 classes: node server, access switch, terminal (including various machines Top box, encoding board, memory etc.).Node server is connected with access switch, and access switch can be with multiple terminal phases Even, and it can connect Ethernet.

Wherein, node server is the node that centralized control functions are played in access net, can control access switch and terminal. Node server can directly be connected with access switch, can also directly be connected with terminal.

Similar, the equipment of metropolitan area mesh portions can also be divided into 3 classes: metropolitan area server, node switch, node serve Device.Metropolitan area server is connected with node switch, and node switch can be connected with multiple node servers.

Wherein, node server is the node server for accessing mesh portions, i.e. node server had both belonged to access wet end Point, and belong to metropolitan area mesh portions.

Metropolitan area server is the node that centralized control functions are played in Metropolitan Area Network (MAN), can control node switch and node serve Device.Metropolitan area server can be directly connected to node switch, can also be directly connected to node server.

It can be seen that be entirely a kind of central controlled network structure of layering depending on networking network, and node server and metropolitan area The network controlled under server can be the various structures such as tree-shaped, star-like, cyclic annular.

Visually claim, access mesh portions can form unified video platform (part in virtual coil), and multiple unified videos are flat Platform can form view networking；Each unified video platform can be interconnected by metropolitan area and wide area depending on networking.

Classify depending on networked devices

1.1 embodiment of the present invention can be mainly divided into 3 classes: server depending on the equipment in networking, interchanger (including ether Net gateway), terminal (including various set-top boxes, encoding board, memory etc.).Depending on networking can be divided on the whole Metropolitan Area Network (MAN) (or National net, World Wide Web etc.) and access net.

1.2 equipment for wherein accessing mesh portions can be mainly divided into 3 classes: node server, access switch (including ether Net gateway), terminal (including various set-top boxes, encoding board, memory etc.).

The specific hardware structure of each access network equipment are as follows:

Node server:

As shown in Fig. 2, mainly including Network Interface Module 201, switching engine module 202, CPU module 203, disk array Module 204；

Wherein, Network Interface Module 201, the Bao Jun that CPU module 203, disk array module 204 are come in enter switching engine Module 202；Switching engine module 202 look into the operation of address table 205 to the packet come in, to obtain the navigation information of packet； And the packet is stored according to the navigation information of packet the queue of corresponding pack buffer 206；If the queue of pack buffer 206 is close It is full, then it abandons；All pack buffer queues of 202 poll of switching engine mould, are forwarded: 1) port if meeting the following conditions It is less than to send caching；2) the queue package counting facility is greater than zero.Disk array module 204 mainly realizes the control to hard disk, including The operation such as initialization, read-write to hard disk；CPU module 203 is mainly responsible between access switch, terminal (not shown) Protocol processes, to address table 205 (including descending protocol packet address table, uplink protocol package address table, data packet addressed table) Configuration, and, the configuration to disk array module 204.

Access switch:

As shown in figure 3, mainly including Network Interface Module (downstream network interface module 301, uplink network interface module 302), switching engine module 303 and CPU module 304；

Wherein, the packet (upstream data) that downstream network interface module 301 is come in enters packet detection module 305；Packet detection mould Whether mesh way address (DA), source address (SA), type of data packet and the packet length of the detection packet of block 305 meet the requirements, if met, It then distributes corresponding flow identifier (stream-id), and enters switching engine module 303, otherwise abandon；Uplink network interface mould The packet (downlink data) that block 302 is come in enters switching engine module 303；The data packet that CPU module 204 is come in enters switching engine Module 303；Switching engine module 303 look into the operation of address table 306 to the packet come in, to obtain the navigation information of packet； If the packet into switching engine module 303 is that downstream network interface is gone toward uplink network interface, in conjunction with flow identifier (stream-id) packet is stored in the queue of corresponding pack buffer 307；If the queue of the pack buffer 307 is close full, It abandons；If the packet into switching engine module 303 is not that downstream network interface is gone toward uplink network interface, according to packet Navigation information is stored in the data packet queue of corresponding pack buffer 307；If the queue of the pack buffer 307 is close full, Then abandon.

All pack buffer queues of 303 poll of switching engine module, are divided to two kinds of situations in embodiments of the present invention:

If the queue is that downstream network interface is gone toward uplink network interface, meets the following conditions and be forwarded: 1) It is less than that the port sends caching；2) the queue package counting facility is greater than zero；3) token that rate control module generates is obtained；

If the queue is not that downstream network interface is gone toward uplink network interface, meets the following conditions and is forwarded: 1) it is less than to send caching for the port；2) the queue package counting facility is greater than zero.

Rate control module 208 is configured by CPU module 204, to all downlink networks in programmable interval Interface generates token toward the pack buffer queue that uplink network interface is gone, to control the code rate of forwarded upstream.

CPU module 304 is mainly responsible for the protocol processes between node server, the configuration to address table 306, and, Configuration to rate control module 308.

Ethernet association turns gateway:

As shown in figure 4, mainly including Network Interface Module (downstream network interface module 401, uplink network interface module 402), switching engine module 403, CPU module 404, packet detection module 405, rate control module 408, address table 406, Bao Huan Storage 407 and MAC adding module 409, MAC removing module 410.

Wherein, the data packet that downstream network interface module 401 is come in enters packet detection module 405；Packet detection module 405 is examined Ethernet mac DA, ethernet mac SA, Ethernet length or frame type, the view networking mesh way address of measured data packet DA, whether meet the requirements depending on networking source address SA, depending on networking data Packet type and packet length, corresponding stream is distributed if meeting Identifier (stream-id)；Then, MAC DA, MAC SA, length or frame type are subtracted by MAC removing module 410 (2byte), and enter corresponding receive and cache, otherwise abandon；

Downstream network interface module 401 detects the transmission caching of the port, according to the view of packet networking mesh if there is Bao Ze Address D A knows the ethernet mac DA of corresponding terminal, adds the ethernet mac DA of terminal, Ethernet assists the MAC for turning gateway SA, Ethernet length or frametype, and send.

The function that Ethernet association turns other modules in gateway is similar with access switch.

Terminal:

It mainly include Network Interface Module, Service Processing Module and CPU module；For example, set-top box mainly connects including network Mouth mold block, video/audio encoding and decoding engine modules, CPU module；Encoding board mainly includes Network Interface Module, video encoding engine Module, CPU module；Memory mainly includes Network Interface Module, CPU module and disk array module.

The equipment of 1.3 metropolitan area mesh portions can be mainly divided into 2 classes: node server, node switch, metropolitan area server. Wherein, node switch mainly includes Network Interface Module, switching engine module and CPU module；Metropolitan area server mainly includes Network Interface Module, switching engine module and CPU module are constituted.

2, networking data package definition is regarded

2.1 access network data package definitions

Access net data packet mainly include following sections: destination address (DA), source address (SA), reserve bytes, payload(PDU)、CRC。

As shown in the table, the data packet for accessing net mainly includes following sections:

DA

SA

Reserved

Payload

CRC

Wherein:

Destination address (DA) is made of 8 bytes (byte), and first character section indicates type (such as the various associations of data packet Discuss packet, multicast packet, unicast packet etc.), be up to 256 kinds of possibility, the second byte to the 6th byte is metropolitan area net address, Seven, the 8th bytes are access net address；

Source address (SA) is also to be made of 8 bytes (byte), is defined identical as destination address (DA)；

Reserve bytes are made of 2 bytes；

The part payload has different length according to the type of different datagrams, is if it is various protocol packages 64 bytes are 32+1024=1056 bytes if it is single group unicast packets words, are not restricted to above 2 kinds certainly；

CRC is made of 4 bytes, and calculation method follows the Ethernet CRC algorithm of standard.

2.2 Metropolitan Area Network (MAN) packet definitions

The topology of Metropolitan Area Network (MAN) is pattern, may there is 2 kinds, connection even of more than two kinds, i.e. node switching between two equipment It can all can exceed that 2 kinds between machine and node server, node switch and node switch, node switch and node server Connection.But the metropolitan area net address of metropolitan area network equipment is uniquely, to close to accurately describe the connection between metropolitan area network equipment System, introduces parameter in embodiments of the present invention: label, uniquely to describe a metropolitan area network equipment.

(Multi-Protocol Label Switch, multiprotocol label are handed over by the definition of label and MPLS in this specification Change) label definition it is similar, it is assumed that between equipment A and equipment B there are two connection, then data packet from equipment A to equipment B just There are 2 labels, data packet also there are 2 labels from equipment B to equipment A.Label is divided into label, outgoing label, it is assumed that data packet enters The label (entering label) of equipment A is 0x0000, and the label (outgoing label) when this data packet leaves equipment A may reform into 0x0001.The networking process of Metropolitan Area Network (MAN) is to enter network process under centralized control, also means that address distribution, the label of Metropolitan Area Network (MAN) Distribution be all to be dominated by metropolitan area server, node switch, node server be all passively execute, this point with The label distribution of MPLS is different, and the distribution of the label of MPLS is the result that interchanger, server are negotiated mutually.

As shown in the table, the data packet of Metropolitan Area Network (MAN) mainly includes following sections:

DA

SA

Reserved

Label

Payload

CRC

That is destination address (DA), source address (SA), reserve bytes (Reserved), label, payload (PDU), CRC.Its In, the format of label, which can refer to, such as gives a definition: label is 32bit, wherein high 16bit retains, only with low 16bit, its position Set is between the reserve bytes and payload of data packet.

Based on the above-mentioned characteristic of view networking, one of the core concepts of the embodiments of the present invention is proposed, it then follows regard the association of networking View, the certificate information acquired from the first view networked terminals (such as end PC) to server request the second view networked terminals.

Referring to Fig. 5, a kind of step flow chart of the embodiment of the method for acquisition certificate information of the invention, this method are shown It can be applied in view networking, described to have view networking protocol depending on operation in networking, the view networking includes the first view networked terminals With the second view networked terminals, it can specifically include following steps:

Step 501, the certificate information acquisition instruction that the first view networked terminals are sent based on view networking protocol is received；

In the concrete realization, first networked terminals are regarded and second to regard networked terminals can be the end PC, the first view networking is eventually End, which is provided with, can send certificate information acquisition instruction and show that the view network remote of certificate information bids to host platform, the second view networking Terminal can connect a certificate information reader, and for acquiring certificate information, certificate information here can be to be able to carry out The certificate information image data of displaying and/or the certificate information encryption data that cannot be shown.

In practical applications, user can be by some operations in menu (gtml) file, for example obtain certificate letter Breath, storage gateway server of the first view networked terminals of triggering into view networking sends certificate information acquisition instruction, to request to regard Networked server obtains its certificate information acquired depending on networked terminals from second.

For example, as shown in fig. 6, user can be by being arranged first depending on long-range in networked terminals (being not shown in Fig. 6) It bids to host platform and sends the request for obtaining certificate information to the storage gateway server of view networking, so that storage gateway server passes through Certificate information acquisition instruction is sent depending on networked terminals (being denoted as terminal device in Fig. 6) to second depending on networking, the second view networking is eventually After end obtains certificate information by the certificate information reader of connection, certificate information is sent to storage gateway server, so that depositing Certificate information can be sent to long-range platform of bidding to host and is shown by storage gateway server.

In view networking, first can generate certificate information by 8e01 agreement on platform remotely bidding to host depending on networked terminals The specification of acquisition instruction, the 8e01 agreement can be as shown in the table:

In the embodiment of the present application, depending on the storage gateway server in networking after receiving certificate information acquisition instruction, also Application response message can be returned to the first view networked terminals, service request instruction has been received in expression.

In view networking, application response message can be generated by 8e02 agreement depending on networked server, the 8e02 agreement Specification can be as shown in the table:

In this practical application, networking is regarded as the network with centralized control functions, including main control server and undernet Equipment, which includes terminal, and one of the core idea depending on networking is, by notifying to exchange by main control server Equipment is directed to when time downstream communications link of service matches table, and the table for being then based on the configuration carries out the transmission of data packet.

That is, including: depending on the communication means in networking

Main control server configuration is when time downstream communications link of service；

Work as time data packet of service for what source terminal was sent, is sent to target terminal (such as according to the downstream communications link First view networked terminals).

In embodiments of the present invention, it includes: notice when the downlink of secondary service is logical that time downstream communications link of service is worked as in configuration Believe that switching equipment involved in link matches table；

It furthermore, include: the configured table of inquiry according to downstream communications link transmission, switching equipment is received to institute Data packet is transmitted by corresponding port.

In the concrete realization, service includes unicast communication service and Multicast Communication Service.I.e. either cast communication is still Unicast communication can realize the communication in view networking using the above-mentioned core idea with table-table.

As previously mentioned, view networking net includes access mesh portions, in access net, which is node server, Undernet equipment includes access switch and terminal.

For the unicast communication service in access net, the main control server configuration is when time downlink communication chain of service The step of road, may comprise steps of:

Sub-step S11, the service request protocol package that main control server is initiated according to source terminal are obtained when time downlink of service Communication link information, downstream communications link information include participating in when time downlink of the main control server of service and access switch Communication port information；

Sub-step S12, downstream communication ports information of the main control server according to control server, data packet inside it The downlink port that setting is oriented to when time data packet of service in the table of location；And believe according to the downstream communication ports of access switch Breath, to corresponding access switch sending port configuration order；

Sub-step S13, access switch according in port configuration command data packet addressed table inside it, setting when time The downlink port that the data packet of service is oriented to.

For the Multicast Communication Service (as bid to host things) in access net, main control server is obtained when under time service The step of row communication link information may include following sub-step:

Sub-step S21, main control server obtain the service request agreement for the application Multicast Communication Service that target terminal is initiated It wraps, includes the access net address of service type information, service content information and target terminal in service request protocol package；Wherein, It include service number in service content information；

Sub-step S22, main control server according to the service number in preset content-address mapping table, extraction source The access net address of terminal；

Sub-step S23, main control server obtains the corresponding multicast address of source terminal, and distributes to target terminal；And according to According to the access net address of service type information, source terminal and target terminal, the communication link information when time multicast services is obtained.

After first receives application response message depending on networked terminals, to think received depending on networked server and agree to obtain Take certificate information.

Step 502, using the second downstream communications link configured in advance to the second view networked terminals, eventually to the second view networking End sends certificate information acquisition instruction；

After receiving certificate information acquisition instruction depending on the storage gateway server in networking, according to the second view networked terminals Second downstream communications link of configuration sends the certificate information acquisition instruction to the second view networked terminals.

Here the second downstream communications link and the downlink for working as secondary service for the main control server configuration being outlined above are logical Believe that link is similar, details are not described herein again.

Step 503, the certificate information that the second view networked terminals are directed to the acquisition of certificate information acquisition instruction is received；

In the embodiment of the present application, second depending on networked terminals after receiving certificate information acquisition instruction, can pass through Certificate information reader collection in worksite certificate information, for example information, or the person of passing through are demonstrate,proved by card reader of ID card captured identity Work card card reader acquires employee information, can also search whether and the certificate information acquisition instruction from the data that itself is stored Corresponding certificate information, after collecting certificate information or finding certificate information, second can be by certificate depending on networked terminals Information is sent to the storage gateway server in view networking.

Step 504, using the first downstream communications link configured in advance to the first view networked terminals, by the certificate Information is sent to the first view networked terminals.

Depending on the storage gateway server in networking after the certificate information for receiving the second view networked terminals, by received card Part information is sent to the first view networked terminals.

Here the second downstream communications link and the downlink for working as secondary service for the main control server configuration being outlined above are logical Believe that link is similar, details are not described herein again.

In the embodiment of the present application, platform is bid to host by view network remote, clicks and obtains certificate information, based on view networking protocol It sends certificate information acquisition instruction and gives storage gateway server, storage gateway server forwards this instruction to send by view networking To corresponding view networked terminals, after terminal receives instruction, certificate information is acquired using the certificate information reader for being connected to terminal Image, then certificate information image is passed through and is sent to storage gateway server depending on networking, platform reading, which is bid to host, depending on network remote deposits Certificate information picture on storage gateway server is shown on platform.This certificate information collection based on view networking protocol Technology bids to host platform by view network remote, view networked terminals certificate information image can be used under LAN environment.Together When, based on the certificate information collection technology that view networking is realized, the biography of data is carried out using two layers of link layer protocol of network It is defeated, the problem of reducing loss of data or delay of the data in two layers or more transmission processes, in view networked terminals and long-range Shen Doing on platform certificate information to acquisition and can also be optimized and be encrypted to the process of transmission data using newest algorithm Processing makes more rapidly and more safely to obtain certificate information, can realize quickly under complicated Multi net voting under environmental pattern, Safety, highly reliable, low latency, acquisition, transmission and the display of the certificate information of low packet loss.

Referring to Fig. 7, the step flow chart of another embodiment of the method for obtaining certificate information of the invention, the party are shown Method can be applied in view networking, described to have view networking protocol depending on running in networking, and the view networking includes that the first view networking is whole End and the second view networked terminals, can specifically include following steps:

It in embodiments of the present invention, include the termination number of the second view networked terminals in the certificate information acquisition instruction；

Then on the basis of foregoing invention embodiment, step 502 may include following sub-step in embodiments of the present invention:

Sub-step S5021 searches the corresponding second view networked terminals according to the termination number.

In embodiments of the present invention, corresponding second view networking can be searched by termination number eventually depending on networked server End.

Sub-step S5022, using in advance to the second downstream communications link of the second view networked terminals configuration, Xiang Suoshu Second view networked terminals send the certificate information acquisition instruction.

In view networking, it can be sent out by 8785 agreements to the second view networked terminals depending on the storage gateway server in networking Certificate information acquisition instruction is sent, the specification of 8785 agreement can be as shown in the table:

8785 agreements can be the service operations order of view networked server, be issued by server, and length is the short message of 32W It enables, makes some specified operations (including acquisition certificate information etc.) depending on networked terminals depending on networked server order second.

In view networking, if second receives data packet depending on networked terminals, the 0th can be read from the protocol package of data packet Field number, if the 0th field number is " 8785 ", characterizing the protocol package is characterization certificate information acquisition instruction, can be from 3- 30 field numbers read instruction code.

In the embodiment of the present application, described second depending on networked terminals after receiving certificate information acquisition instruction, Ke Yitong It crosses following manner and acquires the certificate information:

When receiving the certificate information acquisition instruction, the certificate letter is extracted from the certificate information acquisition instruction Cease identification code；

Obtain certificate information reader；

The certificate information corresponding with the certificate information identification code is acquired using the certificate information reader.

In the concrete realization, second can be used for believing according to the certificate information acquisition instruction by certificate depending on networked terminals Breath reader acquires certificate information in real time, for example demonstrate,proves information by card reader of ID card captured identity, or pass through employee job card Card reader acquires employee information.

In embodiments of the present invention, corresponding second view networked terminals are searched by termination number depending on networked server, so Afterwards using to the second downstream communications link of the second view networked terminals configuration, Xiang Suoshu second regards networked terminals and sends in advance The certificate information acquisition instruction can be targetedly selected depending on networked terminals second in this way, convenient for according to terminal Number selects the acquisition of corresponding second view networked terminals progress certificate information.

Referring to Fig. 8, shows another of the invention and obtain the step flow chart of the embodiment of the method for certificate information, the party Method can be applied in view networking, described to have view networking protocol depending on running in networking, and the view networking includes that the first view networking is whole End and the second view networked terminals, can specifically include following steps:

In embodiments of the present invention, certificate information identification code is included at least in the certificate information acquisition instruction；

Then on the basis of foregoing invention embodiment, step 504 may include following sub-step in embodiments of the present invention:

Sub-step S5041, according to the certificate information identification code, judge the received certificate information whether with the card The instruction of part acquisition of information matches；

Sub-step S5042, if matching, using in advance to the first downlink communication chain of the first view networked terminals configuration The certificate information is sent to the first view networked terminals by road.

In the embodiment of the present application, the certificate of the certificate information identification code and acquisition only in certificate information acquisition instruction When information matches, the certificate information of acquisition is just sent to the first view networked terminals, can prevent from revealing in this way, is further protected Demonstrate,prove the safety of certificate information.

It should be noted that for simple description, therefore, it is stated as a series of action groups for embodiment of the method It closes, but those skilled in the art should understand that, embodiment of that present invention are not limited by the describe sequence of actions, because according to According to the embodiment of the present invention, some steps may be performed in other sequences or simultaneously.Secondly, those skilled in the art also should Know, the embodiments described in the specification are all preferred embodiments, and the related movement not necessarily present invention is implemented Necessary to example.

Referring to Fig. 9, a kind of structural block diagram of the Installation practice of acquisition certificate information of the invention is shown, which can To be applied in view networking, following module can specifically include:

Command reception module 901, the card sent for receiving the first view networked terminals based on the view networking protocol The instruction of part acquisition of information；

Instruction sending module 902, for using in advance to the second downlink communication chain of the second view networked terminals configuration Road, Xiang Suoshu second regard networked terminals and send the certificate information acquisition instruction；

Information receiving module 903 is adopted depending on networked terminals for the certificate information acquisition instruction for receiving described second The certificate information of collection；

Information sending module 904, for using in advance to the first downlink communication chain of the first view networked terminals configuration The certificate information is sent to the first view networked terminals by road.

In one preferred embodiment of the invention, certificate information is included at least in the certificate information acquisition instruction to identify Code；

The information sending module 904 includes at least:

Judging submodule, for according to the certificate information identification code, judge the received certificate information whether with institute It states certificate information acquisition instruction to match, if matching, using in advance to the first downlink of the first view networked terminals configuration The certificate information is sent to the first view networked terminals by communication link.

In one preferred embodiment of the invention, it described second can be acquired depending on networked terminals by calling with lower module The certificate information:

Parsing module, for when receiving the certificate information acquisition instruction, from the certificate information acquisition instruction Extract the certificate information identification code；

Acquisition module, for obtaining certificate information reader, using certificate information reader acquisition and the certificate The corresponding certificate information of message identification code.

It in one preferred embodiment of the invention, include the second view networked terminals in the certificate information acquisition instruction Termination number；

Described instruction sending module 902 includes at least:

Submodule is searched, for searching the corresponding second view networked terminals according to the termination number, and is used In advance to the second downstream communications link of the second view networked terminals configuration, Xiang Suoshu second regards networked terminals and sends the card The instruction of part acquisition of information.

In the embodiment of the present application, the certificate information includes: certificate information image data and/or certificate information encryption number According to.

For device embodiment, since it is basically similar to the method embodiment, related so being described relatively simple Place illustrates referring to the part of embodiment of the method.

All the embodiments in this specification are described in a progressive manner, the highlights of each of the examples are with The difference of other embodiments, the same or similar parts between the embodiments can be referred to each other.

It should be understood by those skilled in the art that, the embodiment of the embodiment of the present invention can provide as method, apparatus or calculate Machine program product.Therefore, the embodiment of the present invention can be used complete hardware embodiment, complete software embodiment or combine software and The form of the embodiment of hardware aspect.Moreover, the embodiment of the present invention can be used one or more wherein include computer can With in the computer-usable storage medium (including but not limited to magnetic disk storage, CD-ROM, optical memory etc.) of program code The form of the computer program product of implementation.

The embodiment of the present invention be referring to according to the method for the embodiment of the present invention, terminal device (system) and computer program The flowchart and/or the block diagram of product describes.It should be understood that flowchart and/or the block diagram can be realized by computer program instructions In each flow and/or block and flowchart and/or the block diagram in process and/or box combination.It can provide these Computer program instructions are set to general purpose computer, special purpose computer, Embedded Processor or other programmable data processing terminals Standby processor is to generate a machine, so that being held by the processor of computer or other programmable data processing terminal devices Capable instruction generates for realizing in one or more flows of the flowchart and/or one or more blocks of the block diagram The device of specified function.

These computer program instructions, which may also be stored in, is able to guide computer or other programmable data processing terminal devices In computer-readable memory operate in a specific manner, so that instruction stored in the computer readable memory generates packet The manufacture of command device is included, which realizes in one side of one or more flows of the flowchart and/or block diagram The function of being specified in frame or multiple boxes.

These computer program instructions can also be loaded into computer or other programmable data processing terminal devices, so that Series of operation steps are executed on computer or other programmable terminal equipments to generate computer implemented processing, thus The instruction executed on computer or other programmable terminal equipments is provided for realizing in one or more flows of the flowchart And/or in one or more blocks of the block diagram specify function the step of.

Although the preferred embodiment of the embodiment of the present invention has been described, once a person skilled in the art knows bases This creative concept, then additional changes and modifications can be made to these embodiments.So the following claims are intended to be interpreted as Including preferred embodiment and fall into all change and modification of range of embodiment of the invention.

Finally, it is to be noted that, herein, relational terms such as first and second and the like be used merely to by One entity or operation are distinguished with another entity or operation, without necessarily requiring or implying these entities or operation Between there are any actual relationship or orders.Moreover, the terms "include", "comprise" or its any other variant meaning Covering non-exclusive inclusion, so that process, method, article or terminal device including a series of elements not only wrap Those elements are included, but also including other elements that are not explicitly listed, or further includes for this process, method, article Or the element that terminal device is intrinsic.In the absence of more restrictions, being wanted by what sentence "including a ..." limited Element, it is not excluded that there is also other identical elements in process, method, article or the terminal device for including the element.

Above to it is provided by the present invention it is a kind of obtain certificate information method and it is a kind of obtain certificate information device, into It has gone and has been discussed in detail, used herein a specific example illustrates the principle and implementation of the invention, the above implementation The explanation of example is merely used to help understand method and its core concept of the invention；Meanwhile for the general technology people of this field Member, according to the thought of the present invention, there will be changes in the specific implementation manner and application range, in conclusion this explanation Book content should not be construed as limiting the invention.

Claims (10)

1. a kind of method for obtaining certificate information, which is characterized in that the method is applied in view networking, described depending on transporting in networking Row has view networking protocol, and the view networking includes the first view networked terminals and the second view networked terminals, and the method includes:

Receive the certificate information acquisition instruction that the first view networked terminals are sent based on the view networking protocol；

Using to the second downstream communications link of the second view networked terminals configuration, Xiang Suoshu second regards networked terminals hair in advance Send the certificate information acquisition instruction；

Receive the certificate information that the second view networked terminals are directed to certificate information acquisition instruction acquisition；

Using the first downstream communications link configured in advance to the first view networked terminals, the certificate information is sent to institute State the first view networked terminals.

2. believing the method according to claim 1, wherein including at least certificate in the certificate information acquisition instruction Cease identification code；

It is described to use in advance to the first downstream communications link of the first view networked terminals configuration, the certificate information is sent Include: depending on networked terminals step to described first

According to the certificate information identification code, judge the received certificate information whether with the certificate information acquisition instruction phase Matching；

If matching, using the first downstream communications link configured in advance to the first view networked terminals, the certificate is believed Breath is sent to the first view networked terminals.

3. according to the method described in claim 2, it is characterized in that, described second acquires institute depending on networked terminals in the following manner State certificate information:

When receiving the certificate information acquisition instruction, the certificate information is extracted from the certificate information acquisition instruction and is known Other code；

Obtain certificate information reader；

The certificate information corresponding with the certificate information identification code is acquired using the certificate information reader.

4. method according to claim 1 or 2 or 3, which is characterized in that include second in the certificate information acquisition instruction Depending on the termination number of networked terminals；

Described to use in advance to the second downstream communications link of the second view networked terminals configuration, the view networking of Xiang Suoshu second is whole End send the certificate information acquisition instruction the step of include:

The corresponding second view networked terminals are searched according to the termination number；

Using to the second downstream communications link of the second view networked terminals configuration, Xiang Suoshu second regards networked terminals hair in advance Send the certificate information acquisition instruction.

5. method according to claim 1 or 2 or 3, which is characterized in that the certificate information includes:

Certificate information image data and/or certificate information encryption data.

6. a kind of device for obtaining certificate information, which is characterized in that described device is applied in view networking, described depending on transporting in networking Row has view networking protocol, and the view networking includes the first view networked terminals and the second view networked terminals, and the device includes:

Command reception module is obtained depending on networked terminals based on the certificate information sent depending on networking protocol for receiving described first Instruction fetch；

Instruction sending module, for using in advance to the second downstream communications link of the second view networked terminals configuration, to institute It states the second view networked terminals and sends the certificate information acquisition instruction；

Data reception module, the certificate for being directed to certificate information acquisition instruction acquisition for receiving the second view networked terminals Information；

Data transmission blocks, for using in advance to the first downstream communications link of the first view networked terminals configuration, by institute It states certificate information and is sent to the first view networked terminals.

7. device according to claim 6, which is characterized in that include at least certificate in the certificate information acquisition instruction and believe Cease identification code；

The data transmission blocks include at least:

Judging submodule, for according to the certificate information identification code, judge the received certificate information whether with the card The instruction of part acquisition of information matches, if matching, using in advance to the first downlink communication of the first view networked terminals configuration The certificate information is sent to the first view networked terminals by link.

8. device according to claim 7, which is characterized in that described second is adopted depending on networked terminals by calling with lower module Collect the certificate information:

Parsing module, for being extracted from the certificate information acquisition instruction when receiving the certificate information acquisition instruction The certificate information identification code；

Acquisition module, for obtaining certificate information reader, using certificate information reader acquisition and the certificate information The corresponding certificate information of identification code.

9. method described according to claim 6 or 7 or 8, which is characterized in that include second in the certificate information acquisition instruction Depending on the termination number of networked terminals；

Described instruction sending module includes at least:

Submodule is searched, for searching the corresponding second view networked terminals according to the termination number, and using preparatory To the second downstream communications link of the second view networked terminals configuration, Xiang Suoshu second regards networked terminals and sends the certificate letter Cease acquisition instruction.

10. device described according to claim 6 or 7 or 8, which is characterized in that the certificate information includes:

Certificate information image data and/or certificate information encryption data.