CN117896208A - Processing method and system of network resources, electronic equipment and storage medium - Google Patents

Processing method and system of network resources, electronic equipment and storage medium Download PDF

Info

Publication number
CN117896208A
CN117896208A CN202311863735.2A CN202311863735A CN117896208A CN 117896208 A CN117896208 A CN 117896208A CN 202311863735 A CN202311863735 A CN 202311863735A CN 117896208 A CN117896208 A CN 117896208A
Authority
CN
China
Prior art keywords
server
authorization
network
information
access
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202311863735.2A
Other languages
Chinese (zh)
Inventor
李志明
谢文龙
李阔
杨春晖
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Visionvera Information Technology Co Ltd
Original Assignee
Visionvera Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Visionvera Information Technology Co Ltd filed Critical Visionvera Information Technology Co Ltd
Priority to CN202311863735.2A priority Critical patent/CN117896208A/en
Publication of CN117896208A publication Critical patent/CN117896208A/en
Pending legal-status Critical Current

Links

Abstract

The embodiment of the invention provides a method and a system for processing network resources, wherein the method comprises the following steps: acquiring an access request from a server accessed into a first network environment; and acquiring network connection information according to the access request and transmitting the network connection information to the server, so that the server can access to the network resource data packet of the terminal node in the second network environment according to the network connection information transmission. The embodiment of the invention can help overcome the limitation of the existing video networking, so that the video networking system can process more network resource requests of different types. Regardless of the original communication protocol of the second network environment, the server in the first network environment may transmit network resource data packets in the second network environment, thereby enabling the first network environment to support a large-scale heterogeneous network such as the second network environment.

Description

Processing method and system of network resources, electronic equipment and storage medium
Technical Field
The present invention relates to the field of data processing technologies, and in particular, to a method for processing a network resource, a system for processing a network resource, an electronic device, and a computer readable storage medium.
Background
The development of the video networking has so far been relatively low in popularity and not fully communicated with other networks. The communication protocol running in the internet of vision is proprietary, and although the relative security of the communication can be guaranteed, protocol interfacing is required when communicating with other networks.
Currently, when the internet of view communicates with other networks, the internet of view can be realized through a monitoring access server. However, the existing video networking monitoring access server only supports a small number of video communication protocols, and cannot communicate with a large-scale heterogeneous network, so that the application of the video networking is limited.
Disclosure of Invention
In view of the foregoing, embodiments of the present invention have been made to provide a network resource processing method and a network resource processing system that overcome or at least partially solve the foregoing problems.
In order to solve the above problems, an embodiment of the present invention discloses a method for processing network resources, where the method includes: acquiring an access request from a server accessed into a first network environment; and acquiring network connection information according to the access request and transmitting the network connection information to the server, so that the server can access to the network resource data packet of the terminal node in the second network environment according to the network connection information transmission.
Optionally, the acquiring network connection information according to the access request and transmitting the network connection information to the server, so that the server accesses a network resource data packet of a terminal node in a second network environment according to the network connection information transmission, including: and acquiring and transmitting the network connection information to the second server according to the link request signaling so that the second server transmits the network connection information to the terminal node, and acquiring and forwarding the network resource data packet to the target connection point.
Optionally, before the obtaining the link request signaling from the second server accessing the first network environment, the method further includes: obtaining a connection point list request signaling from the second server, wherein the connection point list request signaling is generated by the second server according to connection point list request information of the terminal node for a connection point list, the connection point list comprises a plurality of target connection points, and the connection point list request information is sent to the second server by calling a list request interface of a first software development kit of the second server for the terminal node; and acquiring and transmitting the connection point list to the second server according to the connection point list request signaling so that the second server transmits the connection point list to the terminal node.
Optionally, before the obtaining the connection point list request signaling from the second server, the method further includes: acquiring an authorization request signaling from the second server, wherein the authorization request signaling is generated by the second server according to the authorization request information of the terminal node, and the authorization request information is sent to the second server by calling an authorization interface of a second software development kit of the second server for the terminal node; and carrying out authorization processing on the terminal node according to the authorization request signaling to obtain an authorization result, and transmitting the authorization result to the second server so that the second server transmits the authorization result to the terminal node.
Optionally, the performing authorization processing for the terminal node according to the authorization request signaling to obtain an authorization result includes: analyzing the authorization request information from the authorization request signaling, and reading out node identification information of the terminal node from the authorization request information; judging whether the node identification information is valid or not; if the node identification information is valid, acquiring contract information corresponding to the node identification information; judging whether the terminal node meets an authorization condition according to the contract information; if the terminal node meets the authorization condition, carrying out authorization processing on the terminal node according to the contract information and the authorization request information to obtain the authorization result; wherein the contract information includes: validity period, number of terminal devices allowed to be accessed, service type allowed to be accessed, and data bandwidth allowed to be accessed, wherein the authorization request information comprises node information of the terminal nodes.
Optionally, after the authorizing processing is performed for the terminal node according to the authorization request signaling to obtain an authorization result, the method further includes: distributing a virtual terminal for the terminal node; generating authorization certificate data according to the terminal information of the virtual terminal and the authorization result; transmitting the authorization certificate data to the second server, so that the second server analyzes the terminal information from the authorization certificate data under the condition that the authorization result indicates that the authorization is successful, and performs network access processing on the virtual terminal in the first network environment according to the terminal information, wherein the virtual terminal after the network access processing is used as a terminal object of the terminal node to be accessed into the first network environment; the second server is further configured to allocate a data access node to the terminal node, generate and transmit encrypted authorization credential data to the terminal node according to the data access point information of the data access node and the authorization credential data, where the data access node is a terminal object that communicates between the terminal node and the second server.
The embodiment of the invention also discloses a processing system of the network resource, which comprises: an access request acquisition module, configured to acquire an access request from a server accessed to a first network environment; and the network resource data packet transmission module is used for acquiring network connection information according to the access request and transmitting the network connection information to the server so that the server can access the network resource data packet of the terminal node in the second network environment according to the network connection information transmission.
Optionally, the access request obtaining module is configured to obtain a link request signaling from a second server that accesses to the first network environment, where the link request signaling is obtained by the second server according to link request information of the terminal node for a target connection point; the target connection point is a terminal device that allows the terminal node to communicate in the first network environment.
Optionally, the network resource data packet transmission module is configured to acquire and transmit the network connection information to the second server according to the link request signaling, so that the second server transmits the network connection information to the terminal node, and acquire and forward the network resource data packet to the target connection point.
Optionally, the system further comprises: a connection point list request signaling acquisition module, configured to acquire connection point list request signaling from a second server in the first network environment before the access request acquisition module acquires link request signaling from the second server, where the connection point list request signaling is generated by the second server according to connection point list request information of the terminal node for a connection point list, the connection point list includes a plurality of target connection points, and the connection point list request information is sent to the second server by calling a list request interface of a first software development kit of the second server for the terminal node; and the connection point list acquisition and transmission module is used for acquiring and transmitting the connection point list to the second server according to the connection point list request signaling so that the second server transmits the connection point list to the terminal node.
Optionally, the system further comprises: an authorization request signaling acquisition module, configured to acquire an authorization request signaling from the second server before the contact list request signaling acquisition module acquires a connection point list request signaling from the second server, where the authorization request signaling is generated by the second server according to authorization request information of the terminal node, and the authorization request information is sent to the second server by calling an authorization interface of a second software development kit of the second server for the terminal node; and the platform authorization module is used for carrying out authorization processing on the terminal node according to the authorization request signaling to obtain an authorization result, and transmitting the authorization result to the second server so that the second server transmits the authorization result to the terminal node.
Optionally, the platform authorization module includes: the authorization request information analysis module is used for analyzing the authorization request information from the authorization request signaling and reading out the node identification information of the terminal node from the authorization request information; the node identification judging module is used for judging whether the node identification information is valid or not; the contract information acquisition module is used for acquiring contract information corresponding to the node identification information if the node identification information is valid; the authorization condition judging module is used for judging whether the terminal node accords with an authorization condition according to the contract information; the authorization result determining module is used for carrying out authorization processing on the terminal node according to the contract information and the authorization request information to obtain the authorization result if the terminal node accords with the authorization condition; wherein the contract information includes: validity period, number of terminal devices allowed to be accessed, service type allowed to be accessed, and data bandwidth allowed to be accessed, wherein the authorization request information comprises node information of the terminal nodes.
Optionally, the system further comprises: the virtual terminal allocation module is used for allocating a virtual terminal for the terminal node after the platform authorization module performs authorization processing on the terminal node according to the authorization request signaling to obtain an authorization result; the authorization certificate generation module is used for generating authorization certificate data according to the terminal information of the virtual terminal and the authorization result; the authorization certificate transmission module is used for transmitting the authorization certificate data to the second server so that the second server analyzes the terminal information from the authorization certificate data under the condition that the authorization result indicates that authorization is successful, and performs network access processing on the virtual terminal in the first network environment according to the terminal information, wherein the virtual terminal after the network access processing is used as the terminal node to be accessed to a terminal object in the first network environment; the second server is further configured to allocate a data access node to the terminal node, generate and transmit encrypted authorization credential data to the terminal node according to the data access point information of the data access node and the authorization credential data, where the data access node is a terminal object that communicates between the terminal node and the second server.
The embodiment of the invention also discloses an electronic device, which comprises: one or more processors; and one or more machine readable media having instructions stored thereon that, when executed by the one or more processors, cause the electronic device to perform the method of processing network resources as described above.
The embodiment of the invention also discloses a computer readable storage medium, and a stored computer program causes a processor to execute the processing method of the network resource.
The embodiment of the invention has the following advantages:
the embodiment of the invention provides a processing scheme of network resources. And acquiring an access request from a server accessed to the first network environment, acquiring network connection information according to the access request, and transmitting the network connection information to the server so that the server can access to the network resource data packet of the terminal node in the second network environment according to the network connection information transmission.
The embodiment of the invention allows flexible transmission of network resources between different network environments, thereby improving flexibility and expandability of cross-network transmission of network resources. By acquiring the access request and transmitting the network connection information, the server in the first network environment can transmit the network connection information to the terminal node in the second network environment, so that data transmission across networks can be realized, network resources can be accessed remotely, and seamless connection across networks can be realized. Due to the different network environments involved, the method allows adaptation to various network technologies and architectures, and facilitates flexible use and transmission of network resources under different conditions.
The embodiment of the invention can help overcome the limitation of the existing video networking, so that the video networking system can process more network resource requests of different types. Regardless of the original communication protocol of the second network environment, the server in the first network environment may transmit network resource data packets in the second network environment, thereby enabling the first network environment to support a large-scale heterogeneous network such as the second network environment. By accurately transmitting the network connection information, the reliability and the accuracy of network resource data packet transmission are ensured, and the risk of communication interruption and error is reduced.
Drawings
FIG. 1 is a flow chart of steps of a method for processing network resources according to an embodiment of the present invention;
FIG. 2 is a schematic diagram of a scheduling scheme for large-scale heterogeneous network resources according to an embodiment of the present invention;
FIG. 3 is a schematic diagram of two third party access platforms communicating via a video network in accordance with an embodiment of the present invention;
fig. 4 is a block diagram of a processing system for network resources according to an embodiment of the present invention.
Detailed Description
In order that the above-recited objects, features and advantages of the present invention will become more readily apparent, a more particular description of the invention will be rendered by reference to the appended drawings and appended detailed description.
The network resource processing scheme provided by the embodiment of the invention aims to solve the problem of communication limitation in the visual networking environment. An access request is obtained from a server in a first network environment, and network connection information is then obtained via the access request. And transmitting the network connection information to a server, so that the network resource data packet of the terminal node in the second network environment can be effectively transmitted according to the network connection information. The embodiment of the invention enables the first network environment to adapt to different network conditions and realizes the data transmission across networks.
In an embodiment of the present invention, the server in the first network environment may include a first server and a second server. The first server and the second server cooperate to support network resource requests in a heterogeneous network environment. First, the first server acquires key information of the communication request, including the target connection point and the communication parameters, from the second server by acquiring link request signaling. Then, the first server can acquire the network connection information by utilizing the key information and transmit the network connection information to the second server, so that the accuracy and the reliability of communication are ensured. The second server is then responsible for retrieving network resource packets from the end nodes (including but not limited to, network resource platforms, network resource terminals) and efficiently transmitting them to the target connection point. When the first server and the second server in the embodiment of the invention are accessed to the video networking environment, the video networking can support more communication protocols and heterogeneous network resources, the flexibility and the efficiency of communication are improved, and the method and the device are beneficial to expanding the functions of video networking application.
When the processing scheme of the network resource is applied to the video networking environment, the first network environment may be the video networking environment. The first server accessing the first network environment may be a service management server deployed in the internet of view, and the second server accessing the first network environment may be a monitoring access server deployed in the internet of view. The second network environment may be a non-visual networking environment, such as any heterogeneous network environment that is heterogeneous to a visual networking environment. The terminal node accessing the second network environment may be a third party access platform deployed in a heterogeneous network environment.
The service management server mainly comprises the following functions: license authorization, access service management of the video network, and service type authority configuration. The license authorization function of the service management server is as follows: and the service management server receives the permission and authorization request of the third-party access platform and acquires the equipment information and the serial number of the third-party access platform by analyzing the permission and authorization request of the third-party access platform. And the service management server verifies the serial number of the third party access platform and judges whether the serial number of the third party access platform is valid or not. If the serial number of the third party access platform is valid, the service management server stores the equipment information of the third party access platform and distributes a virtual terminal of the video network to the third party access platform. And the service management server performs license authorization, saves license authorization information and terminal information of the distributed virtual terminal of the video network into a certificate file, and returns the certificate file to the third party access platform. The service management function of the service management server is as follows: and carrying out access service management on a third party access platform accessed to the video networking. The access service management main functions include: access node allocation, link allocation, traffic type allocation. The access node is allocated to: and allocating the access-allowed nodes in the video network and the nodes outside the video network to a third party access platform accessed into the video network. The link allocation is: allowing the third party access platform to establish a data link with the accessible node. The service type is allocated as follows: the link to the third party access platform in the view network is assigned the allowed service types. The access service types in the video networking include: control type, data type, voice type, video type, audio-video type, full-scale type, etc.
The monitoring access server may treat the third party access platform as a virtual camera of the view networking. The third party access platform is connected to the monitoring access server through a monitoring access software development kit (Software development kit, SDK for short) interface of the monitoring access server, so as to access the video networking.
Referring to fig. 1, a flowchart of steps of a method for processing a network resource according to an embodiment of the present invention is shown. The processing method of the network resource specifically comprises the following steps:
step 101, an access request is obtained from a server accessing a first network environment.
In an embodiment of the invention, an access request is obtained from a server in a first network environment. The access request is typically information indicating the communication request, including the type of request, the target, parameters, etc. The access request contains important information of the communication request and may include the target attachment point and other parameters.
Illustrating: an access request is obtained from a server in the internet of view. The access request is used for requesting a connection between a third party access platform in other network environments and a certain video networking terminal in the video networking. The access request includes an identifier of the video networking terminal, a bandwidth parameter, and the like.
Step 102, obtaining network connection information according to the access request and transmitting the network connection information to the server, so that the server accesses to the network resource data packet of the terminal node in the second network environment according to the network connection information transmission.
In an embodiment of the invention, the access request may be parsed to obtain network connection information about the network connection. The network connection information is then securely transmitted to the server in the first network environment. The network connection information may be created and stored in advance. The network connection information includes parameters required to establish communication, such as an IP address, a port number, a communication protocol, and the like.
The network resource data packet is a data packet sent to the server by the terminal node according to the network connection information. The network resource data packet is the actual communication content, which may be video, audio, file, etc., and needs to be correctly transmitted to the target connection point according to the network connection information.
The embodiment of the invention provides a processing scheme of network resources. And acquiring an access request from a server accessed to the first network environment, acquiring network connection information according to the access request, and transmitting the network connection information to the server so that the server can access to the network resource data packet of the terminal node in the second network environment according to the network connection information transmission.
The embodiment of the invention allows flexible transmission of network resources between different network environments, thereby improving flexibility and expandability of cross-network transmission of network resources. By acquiring the access request and transmitting the network connection information, the server in the first network environment can transmit the network connection information to the terminal node in the second network environment, so that data transmission across networks can be realized, network resources can be accessed remotely, and seamless connection across networks can be realized. Due to the different network environments involved, the method allows adaptation to various network technologies and architectures, and facilitates flexible use and transmission of network resources under different conditions.
The embodiment of the invention can help overcome the limitation of the existing video networking, so that the video networking system can process more network resource requests of different types. Regardless of the original communication protocol of the second network environment, the server in the first network environment may transmit network resource data packets in the second network environment, thereby enabling the first network environment to support a large-scale heterogeneous network such as the second network environment. By accurately transmitting the network connection information, the reliability and the accuracy of network resource data packet transmission are ensured, and the risk of communication interruption and error is reduced.
In an exemplary embodiment of the present invention, one implementation of obtaining an access request from a server accessing to a first network environment is to obtain a link request signaling from a second server accessing to the first network environment, where the link request signaling is generated by the second server according to link request information of a terminal node for a target connection point. The target connection point is a terminal device that allows the terminal nodes to communicate in the first network environment. Such an embodiment involves obtaining link request signaling by a second server to establish a connection between the end node and the target connection point. In the actual application process, the second server acquires link request information, wherein the link request information is a link request of the terminal node to the target connection point. The link request signaling is generated by the second server from the link request information, which may include the address of the target attachment point, the communication protocol, the available bandwidth, etc. According to the received link request signaling, the connection between the terminal node and the target connection point is effectively established, so that the terminal node can communicate with the target connection point in the first network environment.
The embodiment of the invention allows the cross-network access of network resources in different network environments, and promotes the resource sharing in enterprises or among different geographic positions. By obtaining link request signaling, the server can dynamically configure resources, including selecting the best connection point, optimizing bandwidth utilization, etc., thereby improving efficient utilization of resources.
In an exemplary embodiment of the present invention, the network connection information is obtained according to the access request and the network connection information is transmitted to the server, so that the server obtains and transmits the network connection information to the second server according to the link request signaling, and the second server transmits the network connection information to the terminal node and obtains and forwards the network resource data packet to the target connection point according to the network connection information. The end node sends an access request to the server via link request signaling, which contains information about the network connection, such as the address, protocol, port, etc. of the target connection point. And the server acquires the network connection information of the target connection point according to the access request and transmits the network connection information to the second server. This may involve network communications and protocols to ensure secure transmission of information. And after receiving the network connection information, the second server is responsible for transmitting the network connection information to the terminal node so as to establish effective connection between the target connection point and the terminal node. The server may obtain the network resource data packet of the terminal node and forward the network resource data packet to the target connection point, so that the terminal node can access the required network resource.
According to the embodiment of the invention, the network connection information is transmitted to the second server, so that the second server can be entrusted with the connection establishment of the target connection point and the terminal node.
In one exemplary embodiment of the present invention, the connection point list request signaling may be acquired from a second server prior to acquiring the link request signaling from the second server accessing the first network environment. The connection point list request signaling is generated by the second server according to connection point list request information of the terminal node for the connection point list. Wherein the connection point list comprises a plurality of target connection points. The connection point list request information is sent to the second server by calling a list request interface of a first software development kit of the second server for the terminal node. And then, acquiring and transmitting the connection point list of the terminal node to the second server according to the connection point list request signaling so that the second server transmits the connection point list to the terminal node. Attachment point list request signaling is a request to obtain an attachment point list. The connection point list is a list containing a plurality of target connection points, each representing a terminal device available for communication. In the actual application of the video networking, the third party access platform can call a list request interface of the first SDK of the monitoring access server to send connection point list request information to the monitoring access server. After receiving the request information of the connection point list, the monitoring access server analyzes the permission identification and the platform information of the third party access platform. And the monitoring access server generates a connection point list request signaling according to the permission identification and the equipment information, and sends the connection point list request signaling to the service management server. After receiving the request signaling of the connection point list, the service management server analyzes the permission identification and platform information of the third party access platform. The service management server inquires the platform information of the third party access platform stored in the service management server through the permission identification, and compares the inquired platform information with the analyzed platform information. And if the access platform and the internet of view are consistent, the service management server acquires a connection point list in the contract information of the third party access platform and the internet of view through the permission identifier. And the service management server returns the connection point list to the monitoring access server. And after receiving the returned connection point list, the monitoring access server transmits the connection point list to the third party access platform.
The embodiment of the invention can automatically acquire the available connection point list on the network resource platform through the connection point list request signaling without manually configuring, thereby greatly reducing the workload of management and maintenance, and particularly in a large-scale and complex visual networking environment. By checking the permission identification and platform information, the service management server ensures the contract compliance between the third party access platform and the video networking, and is helpful to ensure that only the legally authorized third party access platform can acquire the required connection point list, thereby improving the network security and compliance. The dynamic acquisition and transmission of the connection point list are allowed, and the connection point list can be easily expanded to adapt to the changing network environment and the requirements of a third party access platform. The automated connection point list request and response flow reduces the risk of human error and reduces the need for manual intervention and manual configuration.
In one exemplary embodiment of the invention, the authorization request signaling is obtained from the second server before the connection point list request signaling is obtained from the second server. The authorization request signaling is generated by the second server according to the authorization request information of the terminal node. The authorization request message is sent to the second server for the terminal node to invoke an authorization interface of a second (supervisory access) software development kit of the second server. Then, the first server performs authorization processing for the terminal node according to the authorization request signaling to obtain an authorization result, and transmits the authorization result to the second server, so that the second server transmits the authorization result to the terminal node. In the actual application of the video networking, the third party access platform can read the configuration file of the monitoring access server, so that the connection information of the monitoring access server is obtained. The third party access platform initializes a second SDK of the monitoring access server, and invokes an authorization interface of the second SDK to send authorization request information to the monitoring access server. The monitoring access server receives the authorization request information, generates an authorization request signaling and sends the authorization request signaling to the service management server. And the service management server receives the authorization request signaling, performs authorization processing on the third-party access platform according to the authorization request signaling to obtain an authorization result, and then returns the authorization result to the monitoring access server. And the monitoring access server returns an authorization result to the third party access platform.
The embodiment of the invention allows an automatic authorization request and response flow, and reduces the risk of human errors. The first server can quickly and accurately process the authorization request without manual intervention. The automatic authorization process reduces the workload of the manager without requiring manual review and approval of each authorization request. By transmitting the authorization request and the authorization result, the detailed information of each authorization event can be recorded, thereby improving the supervision capability.
In an exemplary embodiment of the present invention, an implementation manner of performing authorization processing for a terminal node according to an authorization request signaling to obtain an authorization result is that authorization request information is parsed from the authorization request signaling, and node identification information of the terminal node is read from the authorization request information. Then, it is determined whether the node identification information is valid. And if the node identification information is valid, acquiring contract information corresponding to the node identification information. And judging whether the terminal node meets the authorization condition according to the contract information. If the terminal node meets the authorization condition, the terminal node is subjected to authorization processing according to the contract information and the authorization request information to obtain an authorization result. Wherein the contract information includes: validity period, number of the terminal devices allowed to be accessed, service type allowed to be accessed, and data bandwidth allowed to be accessed. The authorization request information contains node information of the terminal node. In the practical application of the video networking, the service management server analyzes the authorization request information of the third party access platform from the authorization request signaling. The service management server obtains the serial number of the third party access platform through the authorization request information of the third party access platform. The service management server judges whether the serial number of the third party access platform is valid. If the service management server is effective, the service management server obtains contract information of the third party access platform accessed to the video network through the serial number of the third party access platform. And the service management server judges whether the third party access platform meets the authorization condition or not through the contract information. And if the authorization condition is met, generating an authorization result through the contract information and the equipment information of the third-party access platform.
The embodiment of the invention allows the network resource platform to be authorized and managed according to the detailed information in the authorization request signaling. By analyzing the platform identification information, the equipment information and the contract information, the first server can accurately judge whether the network resource platform meets the authorization condition, thereby being beneficial to ensuring that only legal network resource platforms can access the video network, and further improving the security of the video network. By verifying the contract information, the third party access platform can be ensured to obey the conditions specified in the contract, such as effective period, the number of terminal nodes allowed to be accessed, service type, data bandwidth and the like, thereby being beneficial to maintaining the integrity and implementation of the contract and ensuring the legal use of the video networking. Since the first server performs multiple layers of verification in the authorization process, including verification of platform identification information, device information, and contract information, the risk of illegal or unauthorized access is reduced, helping to prevent potential security threats.
In an exemplary embodiment of the present invention, after performing authorization processing on a terminal node according to an authorization request signaling to obtain an authorization result, a virtual terminal may be allocated to the terminal node, and authorization credential data is generated according to terminal information and the authorization result of the virtual terminal, and then the authorization credential data is transmitted to a second server, so that the second server analyzes the terminal information from the authorization credential data when the authorization result indicates that authorization is successful, and performs network access processing on the virtual terminal in the first network environment according to the terminal information. The virtual terminal after network access processing is used as a terminal node to access to a terminal object in the first network environment. The second server is further configured to allocate a data access node to the terminal node, and generate and transmit encrypted authorization credential data to the terminal node according to the data access point information and the authorization credential data of the data access node. The data access node is a terminal object for the terminal node to communicate with the second server. In the actual application of the video networking, after the service management server generates an authorization result, a virtual terminal of the video networking is allocated to a third party access platform for communication in the video networking in the future. The service management server generates terminal information and an authorization result of the visual network virtual terminal distributed to the third party access platform as authorization certificate data. The service management server sends the authorization credential data to the monitoring access server. The monitoring access server determines whether the authorization is passed. And if the authorization is passed, the monitoring access server analyzes the authorization certificate data to obtain the terminal information of the virtual terminal of the Internet of view, and the virtual terminal of the Internet of view is accessed to the monitoring access server. And the virtual terminal of the visual network after network access is used as a third party access platform to access to an access point of the visual network. After the network access of the video network virtual terminal distributed to the third party access platform by the service management server is completed, the monitoring access server distributes a data access node connected with the third party access platform, regenerates encrypted authorization certificate data by the data access point information and the authorization certificate data of the data access node, and returns the encrypted authorization certificate data to the third party access platform. And the third party access platform receives the encrypted authorization certificate data and judges whether the authorization is successful or not. If the authorization is successful, the third party access platform stores the encrypted authorization certificate data, and can be stored under the same path as the second SDK.
The embodiment of the invention can dynamically allocate and manage the network resource platform by allocating the virtual terminal and the data access node for the network resource platform. By generating and transmitting encrypted authorization credential data, the security of the communication is enhanced. Only virtual terminals and data access nodes with valid authorization can communicate with resources in the first network environment, thereby reducing potential security risks. By distributing independent virtual terminals and data access nodes for each network resource platform, the isolation and management of resources are realized, the mutual noninterference of the resources among different platforms is ensured, and the stability is improved.
In an exemplary embodiment of the present invention, the link configuration information may be further generated for the target connection point in response to a configuration operation of the administrator before acquiring and transmitting the network connection information of the target connection point to the second server according to the link request signaling. The link configuration information includes: traffic type, link bandwidth, link lifetime, etc. Then, the link configuration information is transmitted to the second server, so that the second server saves the link configuration information. In the actual application of the video networking, after the third party access platform acquires the connection point list, an administrator of the third party access platform is required to select a target connection point to be accessed. After selecting the target connection point, the internet of view link of the target connection point needs to be applied to the internet of view. And the third party access platform calls a link request interface of the monitoring access server through the first SDK to send link request information to the monitoring access server. And the monitoring access server generates a link request signaling according to the link request information and sends the link request signaling to the service management server. An administrator of the service management server needs to audit the applied view networking link. If the administrator of the service management server checks the visual network link applied by the third party access platform, the administrator of the service management server is required to configure the link. After the link configuration is completed, the service management server obtains the network connection information of the target connection point through the connection point identification of the target connection point in the link request signaling. And the service management server replies the link configuration information and the network connection information to the monitoring access server. And the monitoring access server stores the link configuration information and returns the network connection information to the third-party access platform. And the third party access platform stores the network connection information into a dynamic library resource of the first SDK, and completes the request of the link of the video network.
The embodiment of the invention allows an administrator of the first server to perform link configuration operation on the first server, can customize the link configuration information of different target connection points according to the needs, comprises service types, bandwidths, validity periods and the like, and is beneficial to meeting different requirements of different connection points. An administrator reviews and configures the link request, ensures that only authorized and reviewed links can be established, and is beneficial to improving the security of the video networking and preventing unauthorized access. For the third party access platform, the required video networking link can be selected and configured to meet the specific requirements of the third party access platform, and the user experience is improved.
In an exemplary embodiment of the present invention, the network resource data packet is a data packet conforming to a first network environment communication protocol obtained by calling a first (V2V) SDK package for the terminal node. The second server is further configured to determine, according to the link configuration information, that a link exists for the target connection point, determine that the network resource data packet meets a link requirement, and transmit, according to an authorization result, the network resource data packet to the target connection point through the virtual terminal when the terminal node is successfully authorized. In the actual application of the video networking, when the third party access platform sends data to the target connection point, the first SDK can be called to directly package the data to be sent into a video networking data packet. The first SDK sends the packaged video networking data packet to the monitoring access server through a video networking protocol. And after receiving the data packet of the Internet of view sent by the third party access platform, the monitoring access server judges whether the data packet passes the authorization or not through verifying the authorization identifier, and judges whether the link exists or not through verifying the link identifier. If authorization passes and a link exists, it is also necessary to determine whether the traffic type is met, whether the allocated data bandwidth is exceeded, etc. And if all conditions are met, the monitoring access server forwards the video networking data packet sent by the third-party access platform to the target connection point through the video networking virtual terminal distributed to the third-party access platform by the service management server. The third party access platform can communicate with the target connection point normally through the internet of view.
According to the embodiment of the invention, the network resource platform is allowed to communicate by using the data packet conforming to the first network environment communication protocol through the encapsulation of the network resource data packet, so that the interoperability among different platforms is ensured, and the data can be effectively exchanged no matter what communication protocol is used. The second server verifies the existence and validity of the link according to the link configuration information and the authorization result, ensures that only the legal and satisfactory link can transmit the network resource data packet, and improves the security of the video networking. By verifying parameters such as service types, data bandwidths and the like, resource allocation and bandwidth control can be performed, reasonable allocation and optimal use of network resources are ensured, and resource waste and congestion are prevented. The monitoring access server ensures the authorization and compliance of data transmission by verifying the authorization identifier and the link identifier, thereby being beneficial to maintaining the security and compliance of the video networking and preventing unauthorized access.
The main functions of the first SDK include: resource pushing, resource acquisition, video stream calling, video stream sending, monitoring state uploading, data channel, monitoring resource permission application and permission authorization application. The third party access platform and the monitoring access server communicate through a video networking protocol. The video networking protocol includes: protocol header, license information, service type, source information, destination information, data, check, protocol trailer. When the video networking is accessed to the third party platform, access safety problems exist, the internet side needs to be subjected to authority configuration, the video networking side needs to be subjected to authority configuration, and the service type needs to be subjected to authority configuration, so that the resource access safety is ensured.
Based on the above description about an embodiment of a method for processing a network resource, a scheduling scheme for a large-scale heterogeneous network resource is described below. Referring to fig. 2, a schematic diagram of a scheduling scheme for a large-scale heterogeneous network resource according to an embodiment of the present invention is shown. According to the embodiment of the invention, the service management server is deployed in the video networking, and the first SDK of the access server is monitored in the third-party access platform in a butt joint mode. All devices in the video network communicate through video network virtual terminals, and all virtual terminals need to perform network access authentication to a network management server.
The monitoring equipment A1, the monitoring equipment A2 and the monitoring equipment A3 are connected to the third party access platform A, and the monitoring equipment B1, the monitoring equipment B2 and the monitoring equipment B3 are connected to the third party access platform B. The third party access platform A is connected to the monitoring access server JA, and the third party access platform B is connected to the monitoring access server JB. The monitoring access server JA and the monitoring access server JB are connected to the service management server. The above description is of the physical connection manner of the embodiment of the present invention.
After the third party access platform A is started, whether permission authorization is carried out is firstly judged. And if the license authorization is not performed, the third party access platform A calls a second SDK to send authorization request information to the monitoring access server JA through the Internet of view protocol. After receiving the authorization request information, the monitoring access server JA requests permission authorization from the service management server through an authorization request signaling. After the service management server carries out permission authorization, an authorization result is returned to the monitoring access server JA through the visual network signaling. And the monitoring access server JA receives the authorization result and analyzes the terminal information of the virtual terminal of the video network distributed to the third party access platform A by the service management server. The monitoring access server JA distributes the service management server to the virtual terminal of the visual network of the third party access platform A, and the visual network access is carried out on the monitoring access server JA. The virtual terminal of the internet of view serves as an internet of view node for the third access platform a to communicate with other internet of view nodes in the internet of view. After the monitoring access server JA completes network access, the monitoring access server JA can be distributed to a data access node of the third party access platform A. The data access node serves as a data access point for the communication between the third access platform a and the monitoring access server JA. The monitoring access server JA encrypts the data access point information of the data access node and the authorization result and returns the encrypted data access point information and the authorization result to the third party access platform A through a hypertext transfer (Hypertext Transfer Protocol, HTTP for short). And the third party access platform A stores the returned data access point information of the data access point and the authorization result into a certificate file. The third party access platform B is also the same process applying for license authorization.
And after the authorization of the third party access platform A and the third party access platform B is successful, judging whether to apply for the visual networking access link. If not, the third party access platform A and the third party access platform B also need to apply for the visual networking access link.
And the third party access platform A reads the certificate file stored before and acquires the data access point information of the data access point. And the third party access platform A initializes the first SDK through the data access point information of the data access point. After the first SDK is successfully initialized, the third party access platform A calls the first SDK to acquire a connection point list interface, and the first SDK sends connection point list request information to the monitoring access server JA through the Internet of view protocol. After receiving the connection point list request information, the monitoring access server A verifies whether the third party access platform A is authorized. If authorized, the monitoring access server JA sends a request for acquiring the connection point list to the service management server through the connection point list request signaling. And the service management server acquires a connection point list of the third party access platform A through the permission identification. And the service management server returns the acquired connection point list of the third party access platform A to the monitoring access server JA. The monitoring access server JA receives the connection point list of the third party access platform A and returns the connection point list to the third party access platform A through the data access point.
After the third party access platform a successfully acquires the connection point list, an administrator of the third party access platform a is required to select a target connection point to be accessed. After selecting the target connection point, the internet of view link accessing the target connection point needs to be applied to the internet of view. And the third party access platform A calls the visual network link request interface of the monitoring access server JA through the first SDK. And after receiving the video network link request information, the monitoring access server JA sends a video network link request signaling to the service management server. And an administrator of the service management server checks the applied video networking link. If the administrator of the service management server checks the visual network link applied by the third party access platform, the administrator of the service management server is required to configure the link. After the link configuration is completed, the service management server acquires the video networking connection information of the target connection point through the target connection point identifier in the video networking link request. And the service management server sends the video networking connection information and the video networking node information of the third party access platform A to the target connection point. And the target connection point receives the link opening signaling and stores the video networking connection information into an accessible node list. And the service management server replies the link configuration information and the visual network connection information of the target connection point to the monitoring access server JA. The monitoring access server JA stores link configuration information and returns the video networking connection information of the target connection point to the third party access platform A. And the third party access platform A stores the video networking connection information of the target connection point into the first SDK dynamic library resource, and completes the video networking link request.
When the third party access platform A sends network resource data to the third party access platform B, the first SDK of the third party access platform A directly packages the network resource data to be sent into a visual networking data packet. After receiving the data packet of the internet of view sent by the third party access platform A, the monitoring access server JA judges whether the data packet passes the authorization or not through verifying the authorization identification, and judges whether the link exists or not through verifying the link identification. If authorization exists through the link, it is also necessary to determine whether the traffic type is met and whether the allocated data bandwidth is exceeded. If the conditions are met, the monitoring access server JA forwards the video networking data packet sent by the third party access platform A to the target connection point through the video networking virtual terminal distributed to the third party access platform A by the service management server. And after the virtual terminal of the visual network of the third party access platform B receives the visual network data packet, judging whether the virtual terminal is a passable link. If so, forwarding to the third party access platform B. If not, the view networking packet is discarded. The third party access platform can communicate with the target connection point normally through the internet of view.
Based on the above description about an embodiment of a method for processing a network resource, a scheme for two third party access platforms to communicate through the internet of view is described below. Referring to fig. 3, a schematic diagram of two third party access platforms communicating via internet of view according to an embodiment of the present invention is shown. And deploying a service management server in the video networking. The third party access platform interfaces the first SDK and the second SDK of the monitoring access server. All virtual terminals in the video networking need to perform network access authentication to the network management server. The monitoring device a is connected to a third party access platform a. The monitoring device B is connected to a third party access platform B. The third party access platform a is connected to the monitoring access server JA. The third party access platform B is connected to the monitoring access server JB. The monitoring access server JA and the monitoring access server JB are both connected to the service management server.
In an actual application scene, after the third party access platform A is started, judging whether permission authorization is carried out. If license authorization is not required. And the third party access platform A sends authorization request information to the monitoring access server JA by calling the second SDK. After receiving the authorization request information, the monitoring access server JA sends the authorization request signaling to the service management server through the Internet of view signaling. And after receiving the authorization request signaling, the service management server performs authorization processing on the third party access platform A. And after the service management server performs authorization processing on the third party access platform A, a virtual terminal of the video networking is distributed for the third party access platform A. And the service management server replies the authorization result and the terminal information of the distributed visual network virtual terminal to the monitoring access server JA. The monitoring access server JA analyzes and analyzes the terminal information of the virtual terminal of the video network to the third party access platform A. And the monitoring access server JA performs the video networking access to the parsed video networking virtual terminal. The virtual terminal of the video networking is used as a video networking node of the third party access platform A in the video networking. And the monitoring access server JA is distributed to a data access node of the third-party access platform A after the monitoring access server A completes network access. The monitoring access server JA encrypts the authorization result and the node data of the data access node, and replies the encrypted data to the third party access platform A. If the authorization result indicates that the authorization is successful, the third party access platform A stores the returned data into a certificate file. The third party accesses the platform B and also needs to be authorized according to the above steps.
And after the authorization is successful, the third party access platform A and the third party access platform B judge whether to apply for the Internet of view access link. If not, an application for the Internet of view access link is also required. And the third party access platform A reads the certificate file and acquires node information of the data access node. And the third party access platform A initializes the first SDK through node information of the data access node, and calls the first SDK to send connection point list request information to the monitoring access server JA. After receiving the connection point list request information, the monitoring access server JA verifies whether the third party access platform A is authorized. The monitoring access server JA sends a connection point list request signaling to the service management server through the video networking signaling. And after receiving the connection point list request signaling, the service management server acquires the connection point list of the third party access platform A through the authorization identifier. And the service management server returns the acquired connection point list of the third party access platform A to the monitoring access server JA through the video networking signaling. The monitoring access server JA receives the connection point list of the third party access platform A and returns the connection point list to the third party access platform A through the data access node. The administrator of the third access platform a selects the target connection point that needs to be accessed. The third access platform a applies for the view networking link of the target connection point to the view networking. And the third party access platform A calls the visual network link request interface of the monitoring access server JA through the first SDK. And after receiving the video network link request information, the monitoring access server JA sends a video network link request signaling to the service management server. After receiving the request signaling of the video network link, the service management server needs to audit the applied video network link. If the administrator of the service management server applies for the passing of the checking of the visual network link to the third party access platform A, the administrator of the service management server is required to configure the link. After the link configuration is completed, the service management server acquires the video networking connection information of the target connection point through the identification of the target connection point in the video networking link request signaling. And the service management server sends the visual network link configuration information and the visual network node information of the third-party access platform A to the target connection point. And the target connection point receives the link opening signaling and stores the configuration link information into an accessible node list. And the service management server replies the visual network link configuration information and the visual network connection information of the target connection point to the monitoring access server JA. After receiving the video network link request reply, the monitoring access server JA stores the video network link configuration information and returns the video network connection information of the target connection point to the third party access platform A. And after receiving the reply of the video networking link request, the third party access platform A calls the first SDK to store the video networking connection information of the target connection point into a dynamic library resource of the first SDK, and then the video networking link establishment is completed.
And when the third party access platform A sends the network resource data to the third party access platform B, the first SDK is called to directly package the network resource data to be sent into the video networking data packet. The first SDK sends the packaged video networking data packet to the monitoring access server JA through a video networking protocol. After receiving the data packet of the internet of view sent by the third party access platform A, the monitoring access server JA judges whether the data packet passes the authorization or not through verifying the permission authorization identifier, and judges whether the link exists or not through verifying the link identifier. If authorization passes and a link exists, a determination is also made as to whether the traffic type is met and whether the allocated data bandwidth is exceeded. If the conditions are met, the monitoring access server JA forwards the video networking data packet sent by the third party access platform A to the video networking virtual terminal of the third party access platform A through the service management server, and the video networking virtual terminal forwards the video networking data packet to the target connection point. And after the virtual terminal of the visual network of the third party access platform B receives the visual network data packet, judging whether the virtual terminal is a passable link. If so, forwarding to the third party access platform B. If not, the view networking packet is discarded. Thus, the two third party access platforms can normally communicate with the target connection point through the video networking.
In the above-mentioned scheme that two third party access platforms communicate through the internet of view, a service management server may be deployed in the internet of view. The third party access platform interfaces and monitors the access SDK and the V2VSDK. All virtual terminals need to perform network access authentication to the network management server. The monitoring devices A1, A2, A3 are connected to a third party access platform a. The monitoring devices B1, B2, B3 are connected to a third party access platform B. The third party access platform a is connected to the monitoring access server JA. The third party access platform B is connected to the monitoring access server JB. The monitoring access server JA and the monitoring access server JB are connected to the service management server.
After the third party access platform A is started, judging whether permission authorization is performed or not, and if no permission authorization is required. And the third party access platform A sends a license authorization request to the monitoring access server JA by calling the monitoring access SDK. After receiving the license authorization request, the monitoring access server A sends the license authorization request to the service management server through the Internet of things signaling. And after receiving the license authorization request, the service management server performs license authorization on the third-party access platform A. And the service management server distributes a virtual terminal of the video network after the third party access platform A is subjected to permission authorization. And the service management server replies the license authorization information and the information of the distributed virtual terminal of the video network to the monitoring access server JA. The monitoring access server A analyzes terminal information of the virtual terminal of the video network allocated to the third party access platform A. And the monitoring access server A performs the visual networking access to the parsed visual networking virtual terminal, and the visual networking virtual terminal is used as a visual networking node of the third party access platform A in the visual networking. After the virtual terminal of the visual network assigned to the third party access platform A completes network access, the monitoring access server JA assigns a data access point to the third party access platform A. The monitoring access server JA encrypts the license grant data with the data access point data. The monitoring access server JA replies the encrypted data to the third party access platform A. After receiving the license authorization reply, the third party access platform A stores the returned license authorization data into a certificate file if the license authorization is successful. The third party access platform B also needs to perform license authorization according to the above steps.
And after the third party access platform A and the third party access platform B carry out license authorization successfully, judging whether to apply for the Internet of things access link. If not, an application for the Internet of view access link is also required. And the third party access platform A reads the certificate file and acquires the data access point data. The third party access platform a initializes the V2VSDK by data access point data. The third party access platform A calls the V2VSDK and sends a connection point list request to the monitoring access server JA through the Internet of view protocol. After receiving the connection point list request, the monitoring access server JA verifies whether the third party access platform a has passed the license authorization. The monitoring access server JA sends a connection point list request to the service management server through the video networking signaling. And after receiving the connection point list interface request, the service management server acquires the connection point list of the third party access platform A through the permission authorization identifier. And the service management server returns the acquired connection point list data of the third party access platform A to the monitoring access server JA through the visual network signaling. The monitoring access server JA receives the connection point list of the third party access platform A and returns the connection point list to the third party access platform A through the data access point.
The administrator of the third access platform a selects the target connection point that needs to be accessed. The third access platform a applies for a view networking link from the view networking. And the third party access platform A sends a video networking link request to the monitoring access server JA through the V2 VSDK. And after receiving the video network link request, the monitoring access server A sends the video network link request to the service management server. After receiving the request of the visual network link, the service management server needs to audit the applied visual network link. If the administrator of the service management server applies for the passing of the checking of the visual network link to the third party access platform A, the administrator of the service management server is required to configure the link. After the link configuration is completed, the service management server acquires the video networking link information of the target connection point through the identification of the target connection point in the video networking link request. And the service management server sends the visual networking link information and the visual networking virtual node information of the third party access platform A to the target connection point. And the target connection point receives the link opening signaling and stores the information of the video networking link into an accessible node list. And the service management server replies the target connection point visual network link information to the monitoring access server JA. After receiving the video network link request reply, the monitoring access server JA stores the video network link information and returns the target connection point video network link information to the third party access platform A. After receiving the reply of the video networking link request, the third party access platform A stores the video networking link information of the target connection point into the V2VSDK dynamic library resource through the V2VSDK, and then the video networking link request is completed.
When the third party access platform A sends data to the third party access platform B or the target connection point, the V2VSDK directly packages the data to be sent into a video networking data packet. The V2VSDK sends the packaged video networking data packet to the monitoring access server JA through a video networking protocol. After receiving the data packet of the internet of view sent by the third party access platform A, the monitoring access server JA judges whether the data packet passes the authorization or not through verifying the permission authorization identifier, and judges whether the link exists or not through verifying the link identifier. If authorization passes and a link exists, a determination is also made as to whether the traffic type is met and whether the allocated data bandwidth is exceeded. If the conditions are met, the monitoring access server JA forwards the video networking data packet sent by the third party access platform A to the target connection point or the third party access platform B through the video networking virtual terminal distributed to the third party access platform A by the service management server.
And after the virtual terminal of the visual network of the third party access platform B receives the visual network data packet, judging whether a link which can pass through exists. If a passing link exists, forwarding to the third party access platform B. If there is no link passing, the packet is discarded. The embodiment of the invention ensures that the third party access platforms A and B are authorized and checked before accessing the video networking, thereby being beneficial to maintaining the security of the video networking and preventing unauthorized access. Only an authorized third party access platform can obtain the virtual terminal of the video networking, so that the legitimacy and the safety of the video networking are ensured. Reasonable distribution of the resources of the video network and control of the bandwidth are ensured through the authorization and auditing process. The whole process is automatic in networking of the virtual terminal, and manual intervention is not needed. Once the authorization is passed, the virtual terminal can automatically access to the network, so that the management and configuration flow is simplified, and the usability and convenience of the video networking are improved. The third party access platform A and the third party access platform B can freely select the target connection point to be accessed, and apply for the target connection point through the request of the visual network link, so that different requirements are met. Once the link configuration is obtained, the third party access platforms A and B can send the network resource data packet to the target connection point in real time, so that the requirements of instant messaging and data transmission are met.
It should be noted that, for simplicity of description, the method embodiments are shown as a series of acts, but it should be understood by those skilled in the art that the embodiments are not limited by the order of acts, as some steps may occur in other orders or concurrently in accordance with the embodiments. Further, those skilled in the art will appreciate that the embodiments described in the specification are presently preferred embodiments, and that the acts are not necessarily required by the embodiments of the invention.
Referring to FIG. 4, a block diagram of a processing system for network resources is shown, in accordance with an embodiment of the present invention. The processing system of the network resource may specifically comprise the following modules.
An access request acquiring module 41, configured to acquire an access request from a server accessed to the first network environment;
and the network resource data packet transmission module 42 is configured to obtain network connection information according to the access request and transmit the network connection information to the server, so that the server accesses a network resource data packet of a terminal node in the second network environment according to the network connection information transmission.
In an exemplary embodiment of the present invention, the access request obtaining module 41 is configured to obtain, from a second server accessing to the first network environment, a link request signaling, where the link request signaling is generated by the second server according to link request information of the terminal node for a target connection point; the target connection point is a terminal device that allows the terminal node to communicate in the first network environment.
In an exemplary embodiment of the present invention, the network resource data packet transmission module 42 is configured to obtain and transmit the network connection information to the second server according to the link request signaling, so that the second server transmits the network connection information to the terminal node, and obtain and forward the network resource data packet to the target connection point.
In an exemplary embodiment of the invention, the system further comprises:
a connection point list request signaling obtaining module, configured to obtain connection point list request signaling from a second server in the first network environment before the access request obtaining module 41 obtains a link request signaling from the second server, where the connection point list request signaling is obtained by the second server according to connection point list request information of the terminal node for a connection point list, the connection point list includes a plurality of target connection points, and the connection point list request information is sent to the second server by calling a list request interface of a first software development kit of the second server for the terminal node;
and the connection point list acquisition and transmission module is used for acquiring and transmitting the connection point list to the second server according to the connection point list request signaling so that the second server transmits the connection point list to the terminal node.
In an exemplary embodiment of the invention, the system further comprises:
an authorization request signaling acquisition module, configured to acquire an authorization request signaling from the second server before the contact list request signaling acquisition module acquires a connection point list request signaling from the second server, where the authorization request signaling is generated by the second server according to authorization request information of the terminal node, and the authorization request information is sent to the second server by calling an authorization interface of a second software development kit of the second server for the terminal node;
and the platform authorization module is used for carrying out authorization processing on the terminal node according to the authorization request signaling to obtain an authorization result, and transmitting the authorization result to the second server so that the second server transmits the authorization result to the terminal node.
In an exemplary embodiment of the present invention, the platform authorization module includes:
the authorization request information analysis module is used for analyzing the authorization request information from the authorization request signaling and reading out the node identification information of the terminal node from the authorization request information;
The node identification judging module is used for judging whether the node identification information is valid or not;
the contract information acquisition module is used for acquiring contract information corresponding to the node identification information if the node identification information is valid;
the authorization condition judging module is used for judging whether the terminal node accords with an authorization condition according to the contract information;
the authorization result determining module is used for carrying out authorization processing on the terminal node according to the contract information and the authorization request information to obtain the authorization result if the terminal node accords with the authorization condition;
wherein the contract information includes: validity period, number of terminal devices allowed to be accessed, service type allowed to be accessed, and data bandwidth allowed to be accessed, wherein the authorization request information comprises node information of the terminal nodes.
In an exemplary embodiment of the invention, the system further comprises:
the virtual terminal allocation module is used for allocating a virtual terminal for the terminal node after the platform authorization module performs authorization processing on the terminal node according to the authorization request signaling to obtain an authorization result;
the authorization certificate generation module is used for generating authorization certificate data according to the terminal information of the virtual terminal and the authorization result;
The authorization certificate transmission module is used for transmitting the authorization certificate data to the second server so that the second server analyzes the terminal information from the authorization certificate data under the condition that the authorization result indicates that authorization is successful, and performs network access processing on the virtual terminal in the first network environment according to the terminal information, wherein the virtual terminal after the network access processing is used as the terminal node to be accessed to a terminal object in the first network environment;
the second server is further configured to allocate a data access node to the terminal node, generate and transmit encrypted authorization credential data to the terminal node according to the data access point information of the data access node and the authorization credential data, where the data access node is a terminal object that communicates between the terminal node and the second server.
In an exemplary embodiment of the invention, the system further comprises:
a link configuration module, configured to generate link configuration information for the target connection point in response to a configuration operation of an administrator before the network resource packet transmission module 42 obtains and transmits the network connection information to the second server according to the link request signaling, where the link configuration information includes: service type, link bandwidth, link validity period;
And the configuration transmission module is used for transmitting the link configuration information to the second server so that the second server can store the link configuration information.
In an exemplary embodiment of the present invention, the network resource data packet is a data packet, which is obtained by calling the first software development kit for the terminal node and is obtained by encapsulation, and conforms to the first network environment communication protocol;
the second server is further configured to determine, according to the link configuration information, that a link exists for the target connection point, determine that the network resource data packet meets a link requirement, and transmit, according to the authorization result, the network resource data packet to the target connection point through the virtual terminal when the terminal node is successfully authorized.
For system embodiments, the description is relatively simple as it is substantially similar to method embodiments, and reference is made to the description of method embodiments for relevant points. In this specification, each embodiment is described in a progressive manner, and each embodiment is mainly described by differences from other embodiments, and identical and similar parts between the embodiments are all enough to be referred to each other.
It will be apparent to those skilled in the art that embodiments of the present invention may be provided as a method, apparatus, or computer program product. Accordingly, embodiments of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the invention may take the form of a computer program product on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.
Embodiments of the present invention are described with reference to flowchart illustrations and/or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present invention have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. It is therefore intended that the following claims be interpreted as including the preferred embodiment and all such alterations and modifications as fall within the scope of the embodiments of the invention.
Finally, it is further noted that relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or terminal that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or terminal. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article or terminal device comprising the element.
The above description of a network resource processing method and a network resource processing system provided by the present invention applies specific examples to illustrate the principles and embodiments of the present invention, and the above description of the examples is only used to help understand the method and core ideas of the present invention; meanwhile, as those skilled in the art will have variations in the specific embodiments and application scope in accordance with the ideas of the present invention, the present description should not be construed as limiting the present invention in view of the above.

Claims (10)

1. A method for processing network resources, the method comprising:
acquiring an access request from a server accessed into a first network environment;
and acquiring network connection information according to the access request and transmitting the network connection information to the server, so that the server can access to the network resource data packet of the terminal node in the second network environment according to the network connection information transmission.
2. The method of claim 1, wherein the obtaining an access request from a server accessed into the first network environment comprises:
obtaining a link request signaling from a second server accessed to the first network environment, wherein the link request signaling is generated by the second server according to link request information of the terminal node aiming at a target connection point; the target connection point is a terminal device that allows the terminal node to communicate in the first network environment.
3. The method according to claim 2, wherein the obtaining network connection information according to the access request and transmitting the network connection information to the server, so that the server accesses a network resource data packet of a terminal node in a second network environment according to the network connection information transmission, includes:
And acquiring and transmitting the network connection information to the second server according to the link request signaling so that the second server transmits the network connection information to the terminal node, and acquiring and forwarding the network resource data packet to the target connection point.
4. The method of claim 2, wherein prior to the obtaining link request signaling from the second server in the access to the first network environment, the method further comprises:
obtaining a connection point list request signaling from the second server, wherein the connection point list request signaling is generated by the second server according to connection point list request information of the terminal node for a connection point list, the connection point list comprises a plurality of target connection points, and the connection point list request information is sent to the second server by calling a list request interface of a first software development kit of the second server for the terminal node;
and acquiring and transmitting the connection point list to the second server according to the connection point list request signaling so that the second server transmits the connection point list to the terminal node.
5. The method of claim 4, wherein prior to said obtaining connection point list request signaling from said second server, said method further comprises:
acquiring an authorization request signaling from the second server, wherein the authorization request signaling is generated by the second server according to the authorization request information of the terminal node, and the authorization request information is sent to the second server by calling an authorization interface of a second software development kit of the second server for the terminal node;
and carrying out authorization processing on the terminal node according to the authorization request signaling to obtain an authorization result, and transmitting the authorization result to the second server so that the second server transmits the authorization result to the terminal node.
6. The method according to claim 5, wherein said performing authorization processing for the terminal node according to the authorization request signaling to obtain an authorization result includes:
analyzing the authorization request information from the authorization request signaling, and reading out node identification information of the terminal node from the authorization request information;
judging whether the node identification information is valid or not;
If the node identification information is valid, acquiring contract information corresponding to the node identification information;
judging whether the terminal node meets an authorization condition according to the contract information;
if the terminal node meets the authorization condition, carrying out authorization processing on the terminal node according to the contract information and the authorization request information to obtain the authorization result;
wherein the contract information includes: validity period, number of terminal devices allowed to be accessed, service type allowed to be accessed, and data bandwidth allowed to be accessed, wherein the authorization request information comprises node information of the terminal nodes.
7. The method according to claim 5, wherein after said authorizing the terminal node according to the authorization request signaling to obtain an authorization result, the method further comprises:
distributing a virtual terminal for the terminal node;
generating authorization certificate data according to the terminal information of the virtual terminal and the authorization result;
transmitting the authorization certificate data to the second server, so that the second server analyzes the terminal information from the authorization certificate data under the condition that the authorization result indicates that the authorization is successful, and performs network access processing on the virtual terminal in the first network environment according to the terminal information, wherein the virtual terminal after the network access processing is used as a terminal object of the terminal node to be accessed into the first network environment;
The second server is further configured to allocate a data access node to the terminal node, generate and transmit encrypted authorization credential data to the terminal node according to the data access point information of the data access node and the authorization credential data, where the data access node is a terminal object that communicates between the terminal node and the second server.
8. A system for processing network resources, the system comprising:
an access request acquisition module, configured to acquire an access request from a server accessed to a first network environment;
and the network resource data packet transmission module is used for acquiring network connection information according to the access request and transmitting the network connection information to the server so that the server can access the network resource data packet of the terminal node in the second network environment according to the network connection information transmission.
9. An electronic device, comprising:
one or more processors; and
one or more machine readable media having instructions stored thereon, which when executed by the one or more processors, cause the electronic device to perform the method of processing network resources of any of claims 1 to 7.
10. A computer-readable storage medium, characterized in that it stores a computer program causing a processor to execute the processing method of a network resource according to any one of claims 1 to 7.
CN202311863735.2A 2023-12-29 2023-12-29 Processing method and system of network resources, electronic equipment and storage medium Pending CN117896208A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202311863735.2A CN117896208A (en) 2023-12-29 2023-12-29 Processing method and system of network resources, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202311863735.2A CN117896208A (en) 2023-12-29 2023-12-29 Processing method and system of network resources, electronic equipment and storage medium

Publications (1)

Publication Number Publication Date
CN117896208A true CN117896208A (en) 2024-04-16

Family

ID=90646287

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202311863735.2A Pending CN117896208A (en) 2023-12-29 2023-12-29 Processing method and system of network resources, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN117896208A (en)

Similar Documents

Publication Publication Date Title
US10805175B2 (en) Software defined networking system
CN110944330B (en) MEC platform deployment method and device
CN107426339B (en) Access method, device and system of data connection channel
CN110933084B (en) Cross-domain shared login state method, device, terminal and storage medium
CN109474916A (en) A kind of device authentication method, apparatus and machine readable media
CN105071989A (en) Video content distribution quality monitoring system and monitoring method therefor
CN111953656B (en) Method, device, equipment and medium for monitoring video encryption transmission
CN109391503B (en) Network slice management method and device
CN110661673B (en) Heartbeat detection method and device
CN113422768B (en) Application access method and device in zero trust and computing equipment
CN114513829A (en) Network access method, device, core network, server and terminal
US20120300776A1 (en) Method for creating virtual link, communication network element, and ethernet network system
CN112953986B (en) Edge application management method and device
CN115604862B (en) Video streaming transmission method and system
CN117896208A (en) Processing method and system of network resources, electronic equipment and storage medium
CN113472545B (en) Equipment network access method, device, equipment, storage medium and communication system
CN114884771B (en) Identity network construction method, device and system based on zero trust concept
CN110995829A (en) Instance calling method and device and computer storage medium
CN112243026B (en) Railway data interaction system and method
CN110995756B (en) Method and device for calling service
CN114301967A (en) Narrow-band Internet of things control method, device and equipment
CN105191226A (en) Methods and arrangement for adapting quality of service for a private channel based on service awareness
CN117896209A (en) Processing method and system of network resources, electronic equipment and storage medium
RU2005117334A (en) METHOD AND SYSTEM OF INSTALLING CONNECTION BETWEEN NETWORK ELEMENTS
CN105306238A (en) Terminal access method, terminal access device and terminal access system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication