CN112671890A - Network connection device and network system - Google Patents
Network connection device and network system Download PDFInfo
- Publication number
- CN112671890A CN112671890A CN202011524500.7A CN202011524500A CN112671890A CN 112671890 A CN112671890 A CN 112671890A CN 202011524500 A CN202011524500 A CN 202011524500A CN 112671890 A CN112671890 A CN 112671890A
- Authority
- CN
- China
- Prior art keywords
- network
- message
- unit
- connection
- receiving
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Abstract
The application belongs to the technical field of networking, and particularly relates to a network connection device and a network system, wherein the network connection device comprises: one or both of the first connecting unit and the first accepting unit; the first connecting unit is provided with a plurality of first connecting ends; the first receiving unit is provided with a plurality of first receiving ends; the plurality of first connection ends are used for initiating a network connection request to a second receiving end of a second network and establishing a first communication link between the first network and the second network; the plurality of first receiving ends are used for receiving a network connection request initiated by a second connecting end of the second network and establishing a second communication link between the first network and the second network; the application of the first network can be developed without customizing the network boundary based on different safety mechanisms, so that the development difficulty of application products can be reduced, the maintenance cost of the application products can be reduced, and the standardization of the application products can be promoted.
Description
Technical Field
The application belongs to the technical field of networking, and particularly relates to a network connection device and a network system.
Background
With the increasing requirement on the security of the internet, network boundaries are set in some network fields with higher security requirements, such as police video image networks, public security networks, government affair networks, company core data networks, and the like, so as to guarantee the security of communication.
However, the network boundaries of different security mechanisms may bring more communication restrictions to application products that need to perform message transmission between different networks, which is not favorable for development and maintenance of the application products.
Disclosure of Invention
The embodiment of the application provides a network connection device and a network system, which can reduce the development difficulty of application products, reduce the maintenance cost of the application products and promote the standardization of the application products.
A first aspect of the embodiments of the present application provides a network connection device, configured in a first network, where the network connection device includes one or both of a first connection unit and a first receiving unit;
the first connecting unit is provided with a plurality of first connecting ends; at least two or more first connecting ends in the plurality of first connecting ends have different corresponding connecting modes;
the first receiving unit is provided with a plurality of first receiving ends; at least two or more first receiving ends in the plurality of first receiving ends have different corresponding connection modes;
the plurality of first connection ends are used for initiating a network connection request to a second receiving end of a second network and establishing a first communication link between the first network and the second network;
the plurality of first receiving ends are used for receiving a network connection request initiated by a second connecting end of the second network and establishing a second communication link between the first network and the second network; the second network is one or more networks capable of establishing the first connection path or the second connection path with the first network.
Optionally, the network connection device further includes a message sending and receiving unit and a message scheduling management unit;
the message receiving and sending unit is used for receiving a message to be transmitted sent by the application of the first network and sending the message to be transmitted to the message scheduling management unit;
the message scheduling management unit is used for receiving the message to be transmitted and sending the message to be transmitted to the first connection unit and the first receiving unit;
the first connection unit is further configured to send the message to be transmitted to a second receiving end of the second network based on the first communication link;
the first receiving unit is further configured to send the message to be transmitted to a second connection end of the second network based on the second communication link.
Optionally, the first connection unit is further configured to receive, based on the first communication link, a message to be received sent by an application of a sender network, and send the message to be received to the message scheduling management unit;
the first receiving unit is further configured to receive a message to be received sent by an application of the sender network based on the second communication link, and send the message to be received to the message scheduling management unit; the sender network is any one of the second networks;
the message scheduling management unit is further configured to send the message to be received to the messaging unit, and the messaging unit sends the message to be received to the application of the first network.
Optionally, the message scheduling management unit is further configured to send the message to be received to the first connection unit and the first receiving unit;
the first connection unit and the first receiving unit are used for sending the message to be received to a receiving party network based on the first communication link or the second communication link; the network of the receiving party is a network in the second network except the network of the sending party.
Optionally, the message to be received carries identification information of a sender network;
the first connection unit is further configured to detect whether the receiver network is the same as the sender network according to identification information of the sender network carried by the message to be received when the message to be received is sent to the receiver network;
and if the receiver network and the sender network are the same network, stopping sending the message to be received to the receiver network.
A second aspect of an embodiment of the present application provides a network system, including: a plurality of sub-networks; at least one of the plurality of sub-networks is provided with the network connection device of the first aspect.
In the embodiment of the application, a first connection unit of a network connection device has a plurality of first connection ends, and a first receiving unit has a plurality of first receiving ends; the connection modes corresponding to at least two or more first connection ends in the plurality of first connection ends are different, and the connection modes corresponding to at least two or more first receiving ends in the plurality of first receiving ends are different; the network connection device can establish a first communication link or a second communication link respectively by utilizing each first connection end or first receiving end containing different connection modes and a second network with network boundaries with different safety mechanisms, so that the application of the first network can transmit messages based on the communication links and the second network, communication constraints brought by different network boundaries are eliminated, and network boundaries based on different safety mechanisms are not required to be customized and developed, thereby reducing the development difficulty of application products, reducing the maintenance cost of the application products and promoting the standardization of the application products.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings that are required to be used in the embodiments will be briefly described below, it should be understood that the following drawings only illustrate some embodiments of the present application and therefore should not be considered as limiting the scope, and for those skilled in the art, other related drawings can be obtained from the drawings without inventive effort.
Fig. 1 is a schematic diagram of a first structure of a network connection device according to an embodiment of the present application;
fig. 2 is a schematic diagram of a first structure in which a network connection device of a first network establishes a first communication link with a second network according to an embodiment of the present application;
fig. 3 is a second structural diagram of a network connection device according to an embodiment of the present application;
fig. 4 is a schematic structural diagram illustrating a network connection device of a first network establishing a second communication link with a second network according to an embodiment of the present application;
fig. 5 is a schematic diagram of a third structure of a network connection device according to an embodiment of the present application;
fig. 6 is a schematic second structural diagram of a network connection device of a first network establishing a first communication link with a second network according to an embodiment of the present application;
fig. 7 is a fourth structural diagram of a network connection device according to an embodiment of the present application;
fig. 8 is a schematic structural diagram of message transmission between a first network and a second network according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the present application is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application.
The described embodiments are only some embodiments of the present application and not all embodiments. The components of the embodiments of the present application, generally described and illustrated in the figures herein, can be arranged and designed in a wide variety of different configurations.
Thus, the following detailed description of the embodiments of the present application, presented in the accompanying drawings, is not intended to limit the scope of the claimed application, but is merely representative of selected embodiments of the application. All other embodiments, which can be derived by a person skilled in the art from the embodiments of the present application without making any creative effort, shall fall within the protection scope of the present application.
It will be understood that the terms "comprises" and/or "comprising," when used in this specification and the appended claims, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.
It is also to be understood that the terminology used in the description of the present application is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. Meanwhile, in the description of the present application, the terms "first", "second", and the like are used only for distinguishing the description, and are not to be construed as indicating or implying relative importance.
From the birth of the network, the interconnection of the network is generated, and the network boundaries are generated by connecting the networks with different security levels. In order to prevent intrusion from outside the network, it is often necessary to establish reliable security precautions at the network boundaries, i.e. to set the network boundaries based on some security mechanism.
In practical application, the first network and the second network on both sides of the network boundary may establish a communication link in a unidirectional connection manner, a bidirectional connection manner, or a bidirectional simplex connection manner, and perform message transmission based on the communication link, or perform message transmission in a network boundary file ferrying manner.
The unidirectional connection mode refers to a network connection mode in which a first network can initiatively initiate a network connection request to a second network to establish a communication link between the first network and the second network, and the second network cannot initiatively initiate the network connection request to the first network; or, the connection direction is opposite, the second network may actively initiate the network connection request to the first network, and the first network may not actively initiate the network connection request to the second network.
The bidirectional connection mode means that the first network can actively initiate a network connection request to the second network, the second network can also actively initiate a network connection request to the first network, a communication link between the first network and the second network is established, and the first network and the second network can perform message transmission based on one of communication protocols such as tcp/udp/ftp/http and the like, so as to improve communication safety.
The bidirectional simplex connection mode means that the first network can actively initiate a network connection request to the second network, and meanwhile, the first network creates a receiving end for receiving the network connection request initiated by the second network to the first network and a message sent by the second network; or, the connection direction is opposite, the second network may actively initiate a network connection request to the first network, and meanwhile, the second network creates a receiving end, which is used to receive the network connection request initiated by the first network to the second network and the sent message.
The network boundary file ferrying mode means that a first network and a second network cannot be directly connected through a network, and data exchange is carried out in a file ferrying mode, namely, an application of the first network stores a data packet in a specified directory in a file form, a network boundary transfers the data packet to a path specified by the second network, the data packet is read in the specified path by the application of the second network, and data transmission from the first network to the second network is completed; and vice versa.
Therefore, it can be seen that the first network and the second network may establish the communication link in different network connection manners, that is, the first network may initiate a network connection request to the second network, the second network may also initiate a network connection request to the first network, or the first network and the second network may initiate a network connection request to each other, so as to establish the communication link between the first network and the second network.
Moreover, because different networks have different requirements on communication security, there is a diversity of security restrictions corresponding to different networks, that is, security mechanisms of network boundaries of different networks are different.
However, the network boundaries of different security mechanisms may impose more communication limitations on application products that require message transmission between different networks.
In order to get rid of communication constraints brought by different network boundaries, application products are generally customized and developed for different network boundaries, so that a large development cost is generated, and deployment, operation and maintenance of the application products become more complicated, which is not beneficial to standardization of the application products.
Based on this, the embodiment of the application provides a network connection device and a network system, which can reduce the development difficulty of application products, reduce the maintenance cost of the application products, and promote the standardization of the application products.
Specifically, a first connection unit of the network connection device provided in the embodiment of the present application has a plurality of first connection ends, and a first receiving unit has a plurality of first receiving ends; the connection modes corresponding to at least two or more first connection ends in the plurality of first connection ends are different, and the connection modes corresponding to at least two or more first receiving ends in the plurality of first receiving ends are different; the network connection device can establish a first communication link or a second communication link respectively by utilizing each first connection end or first receiving end containing different connection modes and a second network with network boundaries with different safety mechanisms, so that the application of the first network can transmit messages based on the communication links and the second network, communication constraints brought by different network boundaries are eliminated, and customized development based on the network boundaries with different safety mechanisms is not needed, therefore, the development difficulty of application products can be reduced, the maintenance cost of the application products is reduced, and the standardization of the application products is promoted.
In order to explain the technical means of the present application, the following description will be given by way of specific examples.
The embodiment of the present application provides a network connection device, which may be implemented in a software manner, a hardware manner, or a combination of software and hardware, and the present application does not limit this.
Also, the network connection device may include one or both of a first connection unit and a first reception unit. That is, the network connection apparatus may include only the first connection unit, or only the first reception unit, or both the first connection unit and the first reception unit.
Alternatively, in the first embodiment of the present application, a network connection device 10 is provided, as shown in fig. 1, the network connection device 10 may include only the first connection unit 11.
The first connection unit 11 may have a plurality of first connection ends, for example, the first connection unit 11 may have a first connection end 1, a first connection end 2, …, and a first connection end N, where N is an integer greater than or equal to 2; and at least two or more first connecting ends in the N first connecting ends have different corresponding connecting modes. That is, the first connection end of the first connection unit 11 may have two or more connection manners.
In addition, the first connection end may refer to a network connection end for initiating a network connection request to a second receiving end of a second network adjacent to the first network to establish a first communication link between the first network and the second network.
The second receiving end of the second network may be a network receiving end configured to receive a network connection request initiated by the first connection end and establish a first communication link between the first network and the second network. Also, the second network may be provided with a network connection device corresponding to the network connection device of the first network.
Likewise, the network connection device of the second network may also comprise only the second receiving unit, or both the second connecting unit and the second receiving unit. The second receiving unit may have one or more second receiving terminals. The second connection unit may have one or more second connection ends. The second receiving end is used for receiving the network connection request initiated by the first connecting end and establishing a first communication link between the first network and the second network.
For example, as shown in fig. 2, the second network may be configured with a network connection device 10 ' corresponding to the network connection device of the first network, and the network connection device 10 ' may include only the second accepting unit 11 ', and the second accepting unit 11 ' may have a plurality of second accepting terminals, for example, the second accepting unit 11 ' has the second accepting terminal 1, the second accepting terminal 2, …, the second accepting terminal N, for a total of N second accepting terminals. The first connection end of the first network initiates a network connection request (as shown by a dotted arrow in fig. 2) to a second receiving end of a second network adjacent to the first network, and establishes a first communication link between the first network and the second network.
Therefore, when the network connection device only comprises the first connection unit, the network connection device can respectively initiate network connection requests to a plurality of second networks adjacent to the first network through a plurality of first connection ends of the first connection unit, and establish a first communication link between the first network and the second network having network boundaries with different security mechanisms, so that the application of the first network can perform message transmission with the second network based on the communication link, and the customized development based on the network boundaries with different security mechanisms is not required, thereby reducing the development difficulty of application products and reducing the maintenance cost of the application products.
It should be noted that, in this embodiment of the application, the second network is a network adjacent to the first network, that is, the second network is all networks capable of establishing the first connection path or the second connection path with the first network, and the second network does not only include one network.
For example, if the first network is network a, the second network may be network B, network C, network D, network E, … … that can establish the first connection path or the second connection path with the first network. In addition, in this embodiment, only one of the first connection terminals of the first network may establish a communication link with the second receiving terminal of a certain second network, so that establishment of a message path between the first network and the second network may be completed, and it is not necessary that all the first connection terminals of the first network establish a communication link with the second receiving terminal of the second network.
Alternatively, in the second embodiment of the present application, a network connection device 30 is provided, as shown in fig. 3, the network connection device 30 may include only the first receiving unit 31.
The first receiving unit 31 may have a plurality of first receiving terminals, for example, the first receiving unit 31 has a first receiving terminal 1, a first receiving terminal 2, …, a first receiving terminal N, N being an integer greater than or equal to 2; and at least two or more first receiving terminals in the N first receiving terminals have different corresponding connection modes. That is, the first receiving end of the first receiving unit 31 may have two or more connection manners.
Optionally, the first receiving end may refer to a network receiving end configured to receive a network connection request initiated by a second connection end of the second network adjacent to the first network, so as to establish a second communication link between the first network and the second network.
The second connection end of the second network may be a network connection end for initiating a network connection request to the first receiving end of the first network and establishing a second communication link between the first network and the second network. Also, the second network may be provided with a network connection device corresponding to the first network.
Likewise, the network connection device of the second network may also comprise only the second connection unit or both the second connection unit and the second receiving unit. The second connection unit may have one or more second connection ends. The second receiving unit may have one or more second receiving ends, and the second connecting end is configured to initiate a network connection request to the first receiving end of the first network, and establish a second communication link between the first network and the second network.
For example, as shown in fig. 4, the second network may be configured with a network connection device 31 ' corresponding to the first network, and the network connection device 31 ' may include only the second connection unit 31 ', and the second connection unit 31 ' may have a plurality of second connections, for example, the second connection unit 31 ' has a second connection terminal 1, a second connection terminal 2, …, a second connection terminal N, for a total of N second connection terminals. The first receiving end of the first network accepts a network connection request (as shown by a dotted arrow in fig. 4) initiated by a second connection end of the second network adjacent to the first network, and establishes a second communication link between the first network and the second network.
Therefore, when the network connection device only comprises the first receiving unit, the network connection device can respectively receive network connection requests initiated by second networks adjacent to the first network through a plurality of first receiving ends of the first receiving unit, and establish a second communication link between the first network and the second network with network boundaries with different security mechanisms, so that the application of the first network can perform message transmission with the second network based on the communication link, and the customized development based on the network boundaries with different security mechanisms is not required, thereby reducing the development difficulty of application products and reducing the maintenance cost of the application products.
It should be noted that, in this embodiment of the application, the second network is a network adjacent to the first network, that is, the second network is all networks capable of establishing the first connection path or the second connection path with the first network, and the second network does not only include one network.
For example, the first network is network a, and the second network may be network B, network C, network D, network E, … … capable of establishing the first connection path or the second connection path with network a. In addition, in this embodiment, a network boundary may be provided between the first network and the second network.
Alternatively, in a third embodiment of the present application, a network connection device 50 is provided, as shown in fig. 5, the network connection device 50 may include a first connection unit 51 and a first receiving unit 52.
The first connection unit 51 may have one or more first connection ends, for example, the first connection unit 51 may have a first connection end 1, a first connection end 2, …, a first connection end M, where M is an integer greater than or equal to 1; when M is greater than or equal to 2, two or more first connection ends of the M first connection ends may have different connection modes. That is, the first connection end of the first connection unit 51 may have one or more connection manners.
The first receiving unit 52 may have one or more first receiving terminals, for example, the first receiving unit 52 has a first receiving terminal 1, a first receiving terminal 2, …, a first receiving terminal M, and a total of M first receiving terminals, where M is an integer greater than or equal to 1; and when M is greater than or equal to 2, two or more first receiving terminals in the M first receiving terminals may have different connection modes. That is, the first receiving end of the first receiving unit 52 may have one or more connection manners.
In addition, the first connection end may refer to a network connection end for initiating a network connection request to a second receiving end of a second network adjacent to the first network to establish a first communication link between the first network and the second network. The first receiving end may refer to a network receiving end configured to receive a network connection request initiated by a second connection end of the second network adjacent to the first network, so as to establish a second communication link between the first network and the second network.
The second receiving end of the second network may be a network receiving end configured to receive a network connection request initiated by the first connection end and establish a first communication link between the first network and the second network. The second connection end of the second network may be a network connection end for initiating a network connection request to the first receiving end of the first network and establishing a second communication link between the first network and the second network. Also, the second network may be provided with a network connection device corresponding to the first network.
For example, as shown in fig. 6, the second network may be configured with a network connection device 50 'corresponding to the network connection device of the first network, and the network connection device 50' may include a second accepting unit 51 'and a second connecting unit 52'. The second accepting unit 51 'may have a plurality of second acceptors, for example, the second accepting unit 51' has a second acceptor 1, a second acceptor 2, …, a second acceptor N, N second acceptors in total; the second connection unit 52 'may have a plurality of second connection terminals, for example, the second connection unit 52' has a second connection terminal 1, a second connection terminal 2, …, a second connection terminal N, for a total of N second connection terminals. A first connection end of a first network may initiate a network connection request (as shown by a dashed arrow in fig. 6) to a second recipient end of a second network adjacent to the first network, and establish a first communication link between the first network and the second network.
In this embodiment, the network connection device may initiate a network connection request to a second network adjacent to the first network through one or more first connection ends of a first connection unit, establish a first communication link between the first network and the second network, and accept, through one or more first receiving ends of a first accepting unit, a network connection request initiated by the second network adjacent to the first network, establish a second communication link between the first network and the second network; and then the application of the first network can respectively transmit messages with a second network with network boundaries with different security mechanisms based on the first communication link or the second communication link, and the customized development based on the network boundaries with different security mechanisms is not needed, namely, the network connection device can provide a standard encryption transmission channel to the outside, abstract the inside into various transmission capacities, adapt to the security restrictions of different network boundaries, so as to reduce the development difficulty of application products and reduce the maintenance cost of application products.
Optionally, in some embodiments of the present application, as shown in fig. 7, the network connection device 70 may further include a message transceiver unit 71 and a message scheduling management unit 72.
When the application of the first network needs to send a message to the second network, the message transceiver unit 71 may be configured to receive a message to be transmitted sent by the application of the first network, and send the message to be transmitted to the message scheduling management unit 72; the message scheduling management unit 72 is configured to receive the message to be transmitted, and send the message to be transmitted to the first connection unit 73 and the first receiving unit 74; the first connection unit 73 is further configured to send the message to be transmitted to a second recipient of the second network based on the first communication link; the first receiving unit 74 is further configured to send the message to be transmitted to the second connection end of the second network based on the second communication link, so as to send the message to be transmitted of the first network to the second network.
It should be noted that, in this embodiment of the application, after the message scheduling management unit sends the message to be transmitted to the first connection unit and the first receiving unit, the message to be transmitted may be sent to all second networks adjacent to the first network via each first communication link and each second communication link established with the first network, so as to implement message sharing.
In some embodiments of the present application, in the process of receiving a message to be transmitted sent by an application of the first network, the messaging unit is further configured to: verifying the validity of the message to be transmitted; and when the message to be transmitted is legal, the message to be transmitted is sent to the message scheduling management unit so as to improve the security between the application of the first network and the network connection device.
For example, as shown in fig. 7, the message transceiver unit obtains a first authorization code SN1 sent by an authorization service component, and compares the first authorization code with a second authorization code SN2 carried by the message to be transmitted; and when the first authorization code SN1 is consistent with the second authorization code SN2, the message to be transmitted is confirmed to be legal, and the message to be transmitted is sent to the message scheduling management unit.
Optionally, in some embodiments of the present application, in a process that the first network receives a message sent by the second network, the first connection unit is further configured to receive a message to be received sent by an application of a sender network based on the first communication link, and send the message to be received to the message scheduling management unit; the first receiving unit is further configured to receive a message to be received sent by an application of the sender network based on the second communication link, and send the message to be received to the message scheduling management unit; the message scheduling management unit is further configured to send the message to be received to the messaging unit, so that the messaging unit sends the message to be received to the application of the first network.
Wherein the sender network is any one of the second networks.
For example, the first network is a network a, the second network includes a network B, a network C, a network D, and a network E that can establish the first connection path or the second connection path with the network a, and the sender network may be any one of the network B, the network C, the network D, and the network E.
In some embodiments of the application, the messaging unit, in sending the message to be received to the application of the first network, is further configured to: receiving a message subscription request sent by an application of the first network, and verifying the validity of the message subscription request; and when the message subscription request is legal, sending the message to be received to the application of the first network.
For example, the message transceiver unit obtains a third authorization code SN3 sent by an authorization service component, and compares the third authorization code SN3 with a fourth authorization code SN4 carried by the message subscription request; and when the third authorization code is consistent with the fourth authorization code, confirming that the message subscription request is legal, and sending the message to be received to the application of the first network.
Optionally, in some embodiments of the present application, the message scheduling management unit is further configured to send the message to be received to the first connection unit and the first receiving unit; the first connection unit and the first receiving unit are used for sending the message to be received to a receiving party network based on the first communication link or the second communication link; the receiving network is a network except the sending network in the second network, so that the forwarding of the message and the multilayer penetration of the network boundary are realized, and the message sharing is further realized.
For example, the first network is a network a, the second network includes a network B, a network C, a network D, and a network E that can establish the first connection path or the second connection path with the network a, and the sender network is the network B, and the receiver network is the network C, the network D, and the network E except the network B among the network B, the network C, the network D, and the network E, so that the message sharing is realized and the message is prevented from being re-sent back to the sender network.
Optionally, in some embodiments of the present application, in order to avoid that the message is sent back to the sender network again, the message to be received may also carry identification information of the sender network; the first connection unit is further configured to detect whether the receiver network is the same as the sender network according to identification information of the sender network carried by the message to be received when the message to be received is sent to the receiver network; and if the receiver network and the sender network are the same network, stopping sending the message to be received to the receiver network.
For example, the first network is a network a, the sender network is a network B, when the network B sends a certain message (to-be-received message) to the network a, the message may carry identification information of the network B, when the network a forwards the message to a second network (receiver network) adjacent to the network a, the network a determines whether the receiver network is the network B according to the identification information carried by the message, and if the receiver network is the network B, the message is stopped from being sent to the receiver network, so as to prevent the message from being sent back to the sender network again.
Specifically, in practical application, as shown in fig. 8, the first network is a network a, the second network is a network B, and a first communication link is established between a first connection unit of the network a and a second reception unit of the network B, and a second communication link is established between the first reception unit of the network a and a second connection unit of the network B, so as to avoid that the message X to be received, which is sent to the network a by the network B through the second communication link, is sent back to the network B through the first communication link, the message X to be received may carry identification information of the network B, when the network a forwards the message X to be received to a second network (receiver network) adjacent to the network a, the network a determines whether the receiver network is the network B according to the identification information carried by the message X to be received, and if the receiver network is the network B, stops sending the message X to be received to the receiver network, to avoid re-sending the message back to the sender network.
It should be understood that, when the network connection device includes only the first connection unit or the first acceptance unit, the message scheduling management unit sends only the message to be transmitted to the first connection unit or the first acceptance unit.
Optionally, in a fourth embodiment of the present application, a network system is provided, where the network system may include: a plurality of sub-networks; at least one of the plurality of sub-networks is provided with the network connection device according to each of the above embodiments.
In the embodiment of the application, a first connection unit of a network connection device has a plurality of first connection ends, and a first receiving unit has a plurality of first receiving ends; the connection modes corresponding to at least two or more first connection ends in the plurality of first connection ends are different, and the connection modes corresponding to at least two or more first receiving ends in the plurality of first receiving ends are different; the network connection device can utilize each first connection end or first receiving end with different connection modes and a second network with different network boundaries with different safety mechanisms to respectively establish a first communication link or a second communication link, so that the application of the first network can transmit messages with the second network based on the communication links without customized development based on the network boundaries with different safety mechanisms, thereby reducing the development difficulty of application products, reducing the maintenance cost of the application products and promoting the standardization of the application products.
It should be noted that, in the embodiment of the present application, when a plurality of sub-networks exist in the network system and the network connection devices described in the above embodiments are configured in the network system, the network system may implement different forms of networking, for example, a network system in a chain structure, a mesh structure, and the like, based on the network connection devices configured in the sub-networks. Messages sent by an application of a certain sub-network in the network system can be received or relayed through the network connection device to realize message cascade transfer until the messages are transmitted to the terminal sub-network.
The network connection device is used for networking, so that the networking system can be built like building blocks, and the networking device has the characteristic of diversity of networking forms; moreover, the number of the first connection ends and the first receiving ends in the network connection device of the present application may be increased or decreased according to actual needs, and the corresponding connection modes of the first connection ends and the first receiving ends in the network connection device may also be combined according to actual needs, so that the flexibility of networking of the network system may be further improved.
It will be apparent to those skilled in the art that, for convenience and brevity of description, only the above-mentioned division of the functional units and modules is illustrated, and in practical applications, the above-mentioned function distribution may be performed by different functional units and modules according to needs, that is, the internal structure of the apparatus is divided into different functional units or modules to perform all or part of the above-mentioned functions.
Each functional unit and module in the embodiments may be integrated in one processing unit, or each unit may exist alone physically, or two or more units are integrated in one unit, and the integrated unit may be implemented in a form of hardware, or in a form of software functional unit. In addition, specific names of the functional units and modules are only for convenience of distinguishing from each other, and are not used for limiting the protection scope of the present application. The specific working processes of the units and modules in the system may refer to the corresponding processes in the foregoing device embodiments, and are not described herein again.
In the above embodiments, the descriptions of the respective embodiments have respective emphasis, and reference may be made to the related descriptions of other embodiments for parts that are not described or illustrated in a certain embodiment.
Those of ordinary skill in the art will appreciate that the elements of the examples described in connection with the embodiments disclosed herein may be implemented as electronic hardware, or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
In the embodiments provided in the present application, it should be understood that the disclosed apparatus may be implemented in other manners. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.
The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, all or part of the functions of the devices according to the embodiments described above may be implemented by a computer program, which may be stored in a computer-readable storage medium and used by a processor to implement the functions of the units described above.
For example, the computer program may be divided into a first connection unit and/or a first receiving unit, and the first connection unit and the first receiving unit may specifically function as follows:
the first connecting unit is provided with a plurality of first connecting ends; at least two or more first connecting ends in the plurality of first connecting ends have different corresponding connecting modes;
the first receiving unit is provided with a plurality of first receiving ends; at least two or more first receiving ends in the plurality of first receiving ends have different corresponding connection modes;
the plurality of first connection ends are used for initiating a network connection request to a second receiving end of a second network and establishing a first communication link between the first network and the second network;
the plurality of first receiving ends are used for receiving a network connection request initiated by a second connecting end of the second network and establishing a second communication link between the first network and the second network; the second network is one or more networks capable of establishing the first connection path or the second connection path with the first network.
For another example, the computer program may be divided into a first connection unit, a first acceptance unit, a messaging unit, and a message schedule management unit; the specific functions of each unit are as follows:
the message receiving and sending unit is used for receiving a message to be transmitted sent by the application of the first network and sending the message to be transmitted to the message scheduling management unit;
the message scheduling management unit is used for receiving the message to be transmitted and sending the message to be transmitted to the first connection unit and the first receiving unit;
the first connection unit is further configured to send the message to be transmitted to a second receiving end of the second network based on the first communication link;
the first receiving unit is further configured to send the message to be transmitted to a second connection end of the second network based on the second communication link.
Optionally, in a process of receiving the message to be transmitted sent by the application of the first network, the message sending and receiving unit is further configured to:
verifying the validity of the message to be transmitted;
and if the message to be transmitted is legal, the message to be transmitted is sent to the message scheduling management unit.
Optionally, in the process of verifying the validity of the message to be transmitted, the message sending and receiving unit is further configured to:
acquiring a first authorization code sent by an authorization service component;
comparing the first authorization code with a second authorization code carried by the message to be transmitted;
and if the first authorization code is consistent with the second authorization code, confirming that the message to be transmitted is legal.
Optionally, the first connection unit is further configured to receive, based on the first communication link, a message to be received sent by an application of a sender network, and send the message to be received to the message scheduling management unit;
the first receiving unit is further configured to receive a message to be received sent by an application of the sender network based on the second communication link, and send the message to be received to the message scheduling management unit; the sender network is any one of the second networks;
the message scheduling management unit is further configured to send the message to be received to the messaging unit, and the messaging unit sends the message to be received to the application of the first network.
Optionally, the message sending and receiving unit is further configured to, in the process of sending the message to be received to the application of the first network:
receiving a message subscription request sent by an application of the first network;
verifying the validity of the message subscription request;
and if the message subscription request is legal, sending the message to be received to the application of the first network.
Optionally, in the process of verifying the validity of the message subscription request, the message sending and receiving unit is further configured to:
acquiring a third authorization code sent by an authorization service component;
comparing the third authorization code with a fourth authorization code carried by the message subscription request;
and if the third authorization code is consistent with the fourth authorization code, confirming that the message subscription request is legal.
Optionally, the message scheduling management unit is further configured to send the message to be received to the first connection unit and the first receiving unit;
the first connection unit and the first receiving unit are used for sending the message to be received to a receiving party network based on the first communication link or the second communication link; the network of the receiving party is a network in the second network except the network of the sending party.
Optionally, the message to be received carries identification information of a sender network;
the first connection unit is further configured to detect whether the receiver network is the same as the sender network according to identification information of the sender network carried by the message to be received when the message to be received is sent to the receiver network;
and if the receiver network and the sender network are the same network, stopping sending the message to be received to the receiver network.
Wherein the computer program comprises computer program code, which may be in the form of source code, object code, an executable file or some intermediate form, etc. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording medium, usb disk, removable hard disk, magnetic disk, optical disk, computer Memory, Read-Only Memory (ROM), Random Access Memory (RAM), electrical carrier wave signals, telecommunications signals, software distribution medium, and the like. It should be noted that the computer readable medium may contain content that is subject to appropriate increase or decrease as required by legislation and patent practice in jurisdictions, for example, in some jurisdictions, computer readable media does not include electrical carrier signals and telecommunications signals as is required by legislation and patent practice.
The above-mentioned embodiments are only used for illustrating the technical solutions of the present application, and not for limiting the same; although the present application has been described in detail with reference to the foregoing embodiments, it should be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not substantially depart from the spirit and scope of the embodiments of the present application and are intended to be included within the scope of the present application.
Claims (10)
1. A network connection device configured in a first network, the network connection device comprising one or both of a first connection unit and a first receiving unit;
the first connecting unit is provided with a plurality of first connecting ends; at least two or more first connecting ends in the plurality of first connecting ends have different corresponding connecting modes;
the first receiving unit is provided with a plurality of first receiving ends; at least two or more first receiving ends in the plurality of first receiving ends have different corresponding connection modes;
the plurality of first connection ends are used for initiating a network connection request to a second receiving end of a second network and establishing a first communication link between the first network and the second network;
the plurality of first receiving ends are used for receiving a network connection request initiated by a second connecting end of the second network and establishing a second communication link between the first network and the second network; the second network is one or more networks capable of establishing the first connection path or the second connection path with the first network.
2. The network connection apparatus of claim 1, wherein the network connection apparatus further comprises a messaging unit and a message schedule management unit;
the message receiving and sending unit is used for receiving a message to be transmitted sent by the application of the first network and sending the message to be transmitted to the message scheduling management unit;
the message scheduling management unit is used for receiving the message to be transmitted and sending the message to be transmitted to the first connection unit and the first receiving unit;
the first connection unit is further configured to send the message to be transmitted to a second receiving end of the second network based on the first communication link;
the first receiving unit is further configured to send the message to be transmitted to a second connection end of the second network based on the second communication link.
3. The network connection apparatus according to claim 2, wherein the messaging unit, in receiving the message to be transmitted sent by the application of the first network, is further configured to:
verifying the validity of the message to be transmitted;
and if the message to be transmitted is legal, the message to be transmitted is sent to the message scheduling management unit.
4. The network connection apparatus of claim 3, wherein the messaging unit, in verifying the validity of the message to be transmitted, is further configured to:
acquiring a first authorization code sent by an authorization service component;
comparing the first authorization code with a second authorization code carried by the message to be transmitted;
and if the first authorization code is consistent with the second authorization code, confirming that the message to be transmitted is legal.
5. The network connection apparatus of claim 2,
the first connection unit is further configured to receive a message to be received sent by an application of a sender network based on the first communication link, and send the message to be received to the message scheduling management unit;
the first receiving unit is further configured to receive a message to be received sent by an application of the sender network based on the second communication link, and send the message to be received to the message scheduling management unit; the sender network is any one of the second networks;
the message scheduling management unit is further configured to send the message to be received to the messaging unit, and the messaging unit sends the message to be received to the application of the first network.
6. The network connection apparatus of claim 5, wherein the messaging unit, in sending the message to be received to the application of the first network, is further configured to:
receiving a message subscription request sent by an application of the first network;
verifying the validity of the message subscription request;
and if the message subscription request is legal, sending the message to be received to the application of the first network.
7. The network connection apparatus of claim 6, wherein the messaging unit, in verifying the validity of the message subscription request, is further configured to:
acquiring a third authorization code sent by an authorization service component;
comparing the third authorization code with a fourth authorization code carried by the message subscription request;
and if the third authorization code is consistent with the fourth authorization code, confirming that the message subscription request is legal.
8. The network connection device of any one of claims 5-7,
the message scheduling management unit is further configured to send the message to be received to the first connection unit and the first receiving unit;
the first connection unit and the first receiving unit are used for sending the message to be received to a receiving party network based on the first communication link or the second communication link; the network of the receiving party is a network in the second network except the network of the sending party.
9. The network connection apparatus of claim 8, wherein the message to be received carries identification information of a sender network;
the first connection unit is further configured to detect whether the receiver network is the same as the sender network according to identification information of the sender network carried by the message to be received when the message to be received is sent to the receiver network;
and if the receiver network and the sender network are the same network, stopping sending the message to be received to the receiver network.
10. A network system, characterized in that the network system comprises:
a plurality of sub-networks;
at least one sub-network of the plurality of sub-networks being configured with a network connection device according to any of claims 1-9.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011524500.7A CN112671890B (en) | 2020-12-21 | 2020-12-21 | Network connection device and network system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011524500.7A CN112671890B (en) | 2020-12-21 | 2020-12-21 | Network connection device and network system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112671890A true CN112671890A (en) | 2021-04-16 |
| CN112671890B CN112671890B (en) | 2023-04-07 |
Family
ID=75407373
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011524500.7A Active CN112671890B (en) | 2020-12-21 | 2020-12-21 | Network connection device and network system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112671890B (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2000031925A1 (en) * | 1998-11-24 | 2000-06-02 | Net Insight Ab | Methods and systems for determining network topology |
| US20100057929A1 (en) * | 2008-08-27 | 2010-03-04 | Motorola, Inc. | Communication network and method of operation therefor |
| JP2017135692A (en) * | 2016-01-27 | 2017-08-03 | 韓國電子通信研究院Ｅｌｅｃｔｒｏｎｉｃｓ ａｎｄ Ｔｅｌｅｃｏｍｍｕｎｉｃａｔｉｏｎｓ Ｒｅｓｅａｒｃｈ Ｉｎｓｔｉｔｕｔｅ | One-way security communication system and method |
| WO2019011144A1 (en) * | 2017-07-11 | 2019-01-17 | 阿里巴巴集团控股有限公司 | Virtual network device, routing device and virtual network connection method |
| US20200259566A1 (en) * | 2017-08-21 | 2020-08-13 | Controlled Interfaces, LLC | Hardware-Enforced One-Way Information Flow Control Device |
| US20200336808A1 (en) * | 2017-08-21 | 2020-10-22 | Jeffrey Charles Menoher | Hardware-Enforced One-Way Information Flow Control Device |
-
2020
- 2020-12-21 CN CN202011524500.7A patent/CN112671890B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2000031925A1 (en) * | 1998-11-24 | 2000-06-02 | Net Insight Ab | Methods and systems for determining network topology |
| US20100057929A1 (en) * | 2008-08-27 | 2010-03-04 | Motorola, Inc. | Communication network and method of operation therefor |
| JP2017135692A (en) * | 2016-01-27 | 2017-08-03 | 韓國電子通信研究院Ｅｌｅｃｔｒｏｎｉｃｓ ａｎｄ Ｔｅｌｅｃｏｍｍｕｎｉｃａｔｉｏｎｓ Ｒｅｓｅａｒｃｈ Ｉｎｓｔｉｔｕｔｅ | One-way security communication system and method |
| WO2019011144A1 (en) * | 2017-07-11 | 2019-01-17 | 阿里巴巴集团控股有限公司 | Virtual network device, routing device and virtual network connection method |
| CN109245983A (en) * | 2017-07-11 | 2019-01-18 | 阿里巴巴集团控股有限公司 | A kind of connection method of virtual network device, routing device and virtual network |
| US20200259566A1 (en) * | 2017-08-21 | 2020-08-13 | Controlled Interfaces, LLC | Hardware-Enforced One-Way Information Flow Control Device |
| US20200336808A1 (en) * | 2017-08-21 | 2020-10-22 | Jeffrey Charles Menoher | Hardware-Enforced One-Way Information Flow Control Device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112671890B (en) | 2023-04-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN100566280C (en) | A kind of method, system and equipment that makes Email system and the intercommunication of IM system | |
| CN101617497B (en) | Method and apparatus to create multicast groups based on proximity | |
| CN103501484A (en) | Methods and apparatus for managing group membership for group communications | |
| EP2449845B1 (en) | Apparatus and methods for transmitting paging messages for peer to peer communication | |
| TW200822659A (en) | A method and apparatus for time synchronization of parameters | |
| CN103535004A (en) | Anonymous signalling | |
| JP2022532061A (en) | Terminal session setting management method and device according to time or service area in mobile communication system | |
| EP2408174A1 (en) | Messaging activity feed | |
| CN103825905A (en) | Method and device for multimedia data exchange | |
| US20080220716A1 (en) | Communication system and handshake method thereof | |
| CN101631127A (en) | File transfer method and clients | |
| KR20090052400A (en) | Proxy smart card applications | |
| US20060089164A1 (en) | Method and system for transmitting MMS notification message | |
| US20150043421A1 (en) | Wireless relay apparatus, communication system, and communication method | |
| KR100842868B1 (en) | Spam short message blocking system using call back short message and spam short message blocking method using the same | |
| CN112671890B (en) | Network connection device and network system | |
| CN115956387A (en) | Method and system for aggregating and exchanging messages in an IoT communication system | |
| CN110572476B (en) | Remote control method, device and equipment | |
| EP2203025A1 (en) | Method for transmitting sms and sms platform | |
| CN101548514A (en) | Method for exchanging messages in a mobile radio network | |
| US20140177575A1 (en) | Method for establishing an application session, device and corresponding notification | |
| EP3203774A1 (en) | Assignment of network resource to a device | |
| KR20220031252A (en) | Method and apparatus for transmitting and receiving data based on blockchain in a wireless communication system | |
| CN109792459B (en) | Method for transmitting data to at least one device, data transmission control server, storage server, processing server and system | |
| CN114679689B (en) | Method and device for forwarding multimedia message |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |