WO2017124965A1

WO2017124965A1 - Network access method for multiple operating system terminal and multiple operating system terminal

Info

Publication number: WO2017124965A1
Application number: PCT/CN2017/071012
Authority: WO
Inventors: 王永辉
Original assignee: 深圳前海达闼云端智能科技有限公司
Priority date: 2016-01-19
Filing date: 2017-01-12
Publication date: 2017-07-27
Also published as: CN105516397B; CN105516397A

Abstract

The present invention provides a network access method for a multiple operating system terminal and a multiple operating system terminal, and belongs to the technical field of virtualization. The method comprises: an operating system sends, using a corresponding virtual network access module, a network access request to a virtual network agent module; after receiving the network access request, the virtual network agent module allocates a first IP address to the operating system, and sends the first IP address to the operating system by using the virtual network access module, wherein first IP addresses allocated by the virtual network agent module to different operating systems are different from each other; and the operating system accesses the network according to the first IP address. In the present invention, after a network access request from an operating system is received, an IP address is allocated to the operating system, and the IP address is sent to the operating system. IP addresses allocated by the virtual network agent module to different operating systems are different from each other, allowing multiple operating systems to simultaneously access a network by use of different IP addresses.

Description

Method for multi-operating system terminal accessing network and multi-operating system terminal

Technical field

The present invention relates to the field of virtualization technologies, and in particular, to a method for accessing a network by a multi-operating system terminal and a multi-operating system terminal.

Background technique

Virtualization technology is a resource management technology that can break the uncuttable barrier between physical structures and enable users to apply various physical resources in the computer in a better way than the original configuration. Since the virtual part of various physical resources in the computer is not limited by the way of existing resources, geographical or physical configuration, virtualization technology has received more and more attention.

In the field of intelligent terminals, the requirements of users who run multiple operating systems on one intelligent terminal can be realized through virtualization technology. Although the implementation of the requirement can bring about a better user experience, how to access multiple networks through the same network connection device of multiple operating system terminals becomes an urgent problem to be solved.

The existing network access mode is as follows: Since one terminal has only one network access device, and one network access device corresponds to one IP (Internet Protocol) address, multiple operating systems share the IP address. Specifically, after obtaining the network access request of the operating system A, it is determined whether the IP address is occupied by other operating systems. If no operating system occupies the IP address, the IP address is sent to the operating system A, so that the operating system A accesses the network through the IP address. If the operating system B occupies the IP address, the occupation of the operating system B is interrupted, and the IP address is sent to the operating system A, so that the operating system A accesses the network through the IP address.

In the above manner, although multiple operating systems can perform network access, network access cannot be performed at the same time.

Summary of the invention

To solve the above problem, an embodiment of the present invention provides a method for a multi-operating system terminal to access a network and a multi-operating system terminal.

In a first aspect, an embodiment of the present invention provides a method for a multi-operating system terminal to access a network, where the method includes:

The operating system sends a network access request to the virtual network proxy module through the corresponding virtual network access module;

After acquiring the network access request, the virtual network proxy module allocates a first Internet Protocol IP address to the operating system, and sends the first IP address to the operating system by using the virtual network access module. The first IP address allocated by the virtual network proxy module for different operating systems is different;

The operating system accesses the network according to the first IP address.

Optionally, the allocating the first Internet Protocol IP address to the operating system includes:

Determining a second IP address of the multi-operating system terminal accessing the network;

Assigning a first IP address to the operating system according to a preset network security policy and the second IP address.

Optionally, the determining the second IP address of the multiple operating system terminal accessing the network includes:

Determining, according to the network driver of the multi-operating system terminal, the public network IP address of the multi-operating system terminal accessing the network, and using the public network IP address as the second IP address.

Optionally, the assigning the first IP address to the operating system according to the preset network security policy and the second IP address, including:

Determining a type of network accessed by the operating system;

If the network type is a private network, converting the second IP address to a third IP address according to a preset network security policy and a preset private network protocol stack, and the third IP address As the first IP address;

The third IP address is a virtual IP address associated with the second IP address.

Optionally, the using the third IP address as the first IP address includes:

Subnetting the third IP address;

Select an IP address from the divided subnets as the first IP address.

Optionally, the private network is a virtual private network VPN.

Optionally, after the determining the type of the network accessed by the operating system, the method further includes:

If the network type is a public network, the second IP address is subnet-divided according to a preset network security policy, and an IP address is selected from the divided subnets as the first IP address.

In a second aspect, the embodiment of the present invention provides a multi-operating system terminal, where the multi-operating system terminal includes: multiple operating systems, a virtual network access module, and a virtual network proxy module;

Each operating system corresponds to a virtual network access module;

The operating system is configured to send a network access request to the virtual network proxy module by using the virtual network access module, and obtain the first Internet allocated by the virtual network proxy module by using the virtual network access module a protocol IP address, accessing the network according to the first IP address;

The virtual network access module is configured to send a network access request of the operating system to the virtual network proxy module, and send the first IP address allocated by the virtual network proxy module to the operating system;

The virtual network proxy module is configured to allocate a first IP address to the operating system after acquiring the network access request, and send the first IP address to the operation by using the virtual network access module. The first IP address assigned by the virtual network proxy module to different operating systems is different.

Optionally, the virtual network proxy module is configured to determine a second IP address of the multi-operating system terminal accessing the network; and according to the preset network security policy and the second IP address, The operating system assigns the first IP address.

Optionally, the virtual network proxy module is configured to determine, according to the network driver of the multiple operating system terminal, a public network IP address of the multi-operating system terminal accessing the network, and use the public network IP address as the second IP address. address.

Optionally, the virtual network proxy module is configured to determine a network type that the operating system accesses; when the network type is a private network, according to a preset network security policy and a preset dedicated network protocol stack, Converting the second IP address to a third IP address, using the third IP address as a first IP address; and the third IP address being a virtual IP address associated with the second IP address.

Optionally, the virtual network proxy module is configured to perform subnetting on the third IP address, and select an IP address from the divided subnets as the first IP address.

Optionally, the private network is a virtual private network VPN.

Optionally, the virtual network proxy module is further configured to: when the network type is a public network, perform subnetting on the second IP address according to a preset network security policy, and select from the divided subnets. An IP address is used as the first IP address.

The benefits are as follows:

The operating system sends a network access request to the virtual network proxy module through the corresponding virtual network access module; after obtaining the network access request, the virtual network proxy module allocates an IP address to the operating system, and sends the IP address through the virtual network access module. To the operating system, the virtual network proxy module allocates different IP addresses for different operating systems; the operating system accesses the network according to the IP address, so that each operating system can access the simultaneous network according to different IP addresses.

DRAWINGS

Specific embodiments of the present invention will be described below with reference to the accompanying drawings, in which:

FIG. 1 shows a multi-operating system terminal access network provided in an embodiment of the present invention. Schematic diagram of the process;

2 is a schematic diagram of a multi-operating system terminal provided in another embodiment of the present invention;

FIG. 3 is a schematic flowchart diagram of another method for accessing a network by a multi-operating system terminal according to another embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a multi-operating system terminal provided in another embodiment of the present invention.

detailed description

The embodiments of the present invention are further described in detail with reference to the accompanying drawings, in which FIG. An exhaustive example. And in the case of no conflict, the features in the embodiments and the embodiments in the description can be combined with each other.

Currently, when multiple operating systems in the same device access the network, an IP address needs to be shared, so that multiple operating systems cannot simultaneously access the network. In addition, when the network types accessed by multiple operating systems are different, there is a need for different operating systems to connect to their respective networks. In this scenario, the current method of accessing the network cannot meet the requirement. Therefore, the present application proposes a method for a multi-operating system terminal to access a network, the method being applied to a multi-operating system terminal, and the multi-operating system terminal is as shown in the embodiment shown in FIG. 4 to the multi-operating system terminal. . The multi-operating system terminal includes multiple operating systems, a virtual network access module, and a virtual network proxy module. The operating system sends a network access request to the virtual network proxy module through the corresponding virtual network access module. After obtaining the network access request, the virtual network proxy module allocates a first IP (Internet Protocol) address to the operating system. The first IP address is sent to the operating system through the virtual network access module, and the first IP address allocated by the virtual network proxy module for different operating systems is different; the operating system accesses the network according to the first IP address, thereby The operating system can access the simultaneous network according to different IP addresses.

With reference to the foregoing implementation environment, referring to the embodiment shown in FIG. 1 , this embodiment provides a method for a multi-operating system terminal to access a network. The process of the method provided in this embodiment is as follows:

101: The operating system sends a network access request to the virtual network proxy module by using a corresponding virtual network access module.

102: After obtaining the network access request, the virtual network proxy module allocates a first Internet Protocol IP address to the operating system, and sends the first IP address to the operating system through the virtual network access module, where the virtual network proxy module is a different operating system. The first IP addresses assigned are different;

Optionally, assigning the first internet protocol IP address to the operating system, including:

The operating system is assigned a first IP address according to a preset network security policy and a second IP address.

Optionally, determining a second IP address of the multi-operating system terminal accessing the network includes:

According to the network driver of the multi-operating system terminal, the public network IP address of the multi-operating system terminal accessing the network is determined, and the public network IP address is used as the second IP address.

Optionally, assigning the first IP address to the operating system according to the preset network security policy and the second IP address, including:

Determine the type of network that the operating system accesses;

If the network type is a private network, converting the second IP address to the third IP address according to the preset network security policy and the preset private network protocol stack, and using the third IP address as the first IP address;

Optionally, the third IP address is used as the first IP address, including:

Subnetting the third IP address;

Select an IP address from the divided subnets as the first IP address.

Optionally, the private network is a virtual private network VPN.

Optionally, after determining the type of the network accessed by the operating system, the method further includes:

If the network type is a public network, the second IP address is subnetted according to a preset network security policy, and an IP address is selected from the divided subnets as the first IP address.

103: The operating system accesses the network according to the first IP address.

Beneficial effects:

With reference to the foregoing implementation environment, this embodiment provides a method for a multi-operating system terminal to access a network. For convenience of description, the present embodiment uses a multi-operating system terminal as shown in FIG. 2, and the multi-operating system terminal includes two operating systems. The virtual network access module (vWIFI-P module 201 and vWIFI-E module 202), the virtual network proxy module (vWIFI-BE module 204), and the multi-operating system terminal perform network access through the WIFI mode as an example for description.

The multi-operating system terminal shown in FIG. 2, the multi-operating system terminal virtualizes two operating systems on the virtualized Kernerl (kernel) 203 through virtualization technology, wherein one operating system is a personal operating system for running A personal application, another operating system is an enterprise operating system, used to run enterprise applications. By running the personal application and the enterprise application separately in different operating systems, the application data of the two operating systems can be transmitted through different data channels, and the personal application can be operated normally in the personal operating system. Enterprise applications in enterprise operating systems are isolated, and enterprise application data is transmitted over isolated data channels, reducing the risk of enterprise application data leakage.

When virtualizing two operating systems through virtualization, two virtual networks will be virtualized. Access module, vWIFI-P module 201 and vWIFI-E module 202.

The specific implementation manner of virtualizing two network access modules includes, but is not limited to, being implemented by using a virtualization technology with the assistance of a WIFI Driver (WIFI network driver) and a VPN Stack (Virtual Private Network Protocol Stack). The personal operating system accesses the network through the vWIFI-P module 201, and allocates independent network channels for the personal operating system according to the VPN Stack and the Secure Policy. The enterprise operating system performs network access through the vWIFI-E module 202, and realizes complete encrypted transmission of enterprise care system data with the assistance of the VPN Stack, thereby enhancing the security of enterprise data.

The vWIFI-P module 201 implements the vWIFI-P module 201 as a network proxy interface of the real WIFI device by calling the device virtualization framework API supported by the virtualization, and its function is a proxy of the real network device. It has a separate IP address and communicates with the vWIFI-BE module 204 to realize network data transmission.

The vWIFI-E module 202 implements the vWIFI-P module 201 as a network proxy interface of the real WIFI device by calling the device virtualization framework API supported by the virtualization, and its function is a proxy of the real network device. It has a separate IP address and communicates with the vWIFI-BE module 204 to realize network data transmission.

The vWIFI-BE module 204 implements the vWIFI-BE module 204 as a network proxy server of the vWIFI-P module 201 and the vWIFI-E module 202 by calling the device virtualization framework API supported by the virtualization, and the function is to connect the real network device with the virtual network device. Network device connection. The vWIFI-BE module 204 communicates with the real WIFI Driver to implement data transmission. The vWIFI-BE module 204 communicates with the VPN stack, and establishes different types of network connections according to the Secure Policy, and provides dedicated, independent, and secure channels for different vWIFI-P modules 201 and vWIFI-E modules 202.

Secure Policy can dynamically establish network security policies based on user security level requirements to form a network dynamic security mechanism. Provide dynamic security for the upper system. And the Secure Policy can be set in advance through a dedicated interface, or can be set in advance through a network server. This implementation The example does not limit the specific mode of the preset network full policy and the specific setting time.

Referring to FIG. 3, the process of the method provided in this embodiment is specifically as follows:

301: The operating system sends a network access request to the virtual network proxy module by using a corresponding virtual network access module.

Each operating system corresponds to a virtual network access module.

For example, when the APP1 (Application) in the personal operating system is connected to the network, the personal operating system initiates a network access request 1 to the vWIFI-BE module 204 through the vWIFI-P module 201, requesting access to the public network through the WIFI.

The personal operating system may also initiate a network access request 1 to the vWIFI-BE module 204 through the vWIFI-P module 201 when the personal operating system is started. In this embodiment, the personal operating system initiates to the vWIFI-BE module 204 through the vWIFI-P module 201. The specific trigger condition of the network access request 1 is limited.

302: After obtaining the network access request, the virtual network proxy module allocates a first Internet Protocol IP address to the operating system;

The first IP address allocated by the virtual network proxy module for different operating systems is different;

This step is implemented in the specific implementation, including but not limited to the following two sub-steps:

Sub-step 1: After obtaining the network access request, the virtual network proxy module determines the second IP address of the multi-operating system terminal accessing the network;

Specifically, the network driver of the multi-operating system terminal determines the public network IP address of the multi-operating system terminal to access the network, and the public network IP address is used as the second IP address.

For example, the vWIFI-BE module 204 is based on the real physical WIFI device of the WIFI driver, and obtains the IP address of the device accessing the network, and uses the IP address as the public network IP address.

Since the sub-step 1 obtains the public network IP address of the multi-operating system terminal accessing the network, the IP obtained in the sub-step 1 regardless of which operating system in the multi-operating system terminal The addresses are the same.

For example, if the vWIFI-BE module 204 in the multi-operating system terminal shown in FIG. 2 obtains the network access request 1 of the personal operating system, it is determined that the public network IP address of the multi-operating system terminal accessing the network is 192.168.1.0, Then, after obtaining the network access request 2 of the enterprise operating system, the vWIFI-BE module 204 in the multi-operating system terminal shown in FIG. 2 determines that the public network IP address of the multi-operating system terminal accessing the network is also 192.168.1.0.

Of course, the public network IP address 192.168.1.0 is only a schematic description. In the actual application, the public network IP address can be other addresses. This embodiment does not limit the specific public network IP address.

Sub-step 2: Assign the first IP address to the operating system according to the preset network security policy and the second IP address.

The private network, such as the VPN, needs to encrypt the data to be exchanged, and the different private network processing methods are different. Therefore, this step is implemented in the specific implementation, but is not limited to the following steps:

Step 2.1: Determine the network type that the operating system accesses. If the network type is a private network, go to step 2.2. If the network type is a public network, go to step 2.3.

For example, if the operating system is a personal operating system, determine that the network type it accesses is a shared network, and go to step 2.3. If the operating system is an enterprise operating system, determine that the network type it accesses is a private network, and go to step 2.2.

Step 2.2: Convert the second IP address to the third IP address according to the preset network security policy and the preset private network protocol stack, and allocate the first IP address to the operating system according to the third IP address;

The specific implementation manner of converting the second IP address into the third IP address includes but is not limited to: selecting a corresponding network protocol from a preset private network protocol stack according to a network security policy and a dedicated network accessed by the operating system, according to the selection The network protocol translates the second IP address to form a virtual IP address, which is the third IP address.

For example, if the second IP address is 192.168.1.10, the second IP address is converted to form a virtual IP address 192.169.1.2, and the virtual IP address is used as the third IP address.

The specific implementation manner of allocating the first IP address to the operating system according to the third IP address includes but is not limited to the following two methods:

Manner 1: The third IP address is used as the first IP address.

Manner 2: subnetting the third IP address; selecting an IP address from the divided subnets as the first IP address.

The specific method of subnetting can use the existing NET protocol, the bridge, the IP translation, and the like, and is not specifically limited in this embodiment.

The selection of the above two methods includes, but is not limited to, if only one operating system terminal runs an operating system that accesses the private network, you can select mode one or mode two. If multiple operating system terminals have multiple operating systems that access the private network, in order to ensure that each operating system of the access private network assigns different IP addresses, mode 1 cannot be selected, and mode 2 needs to be selected.

The network security policy is based on the VPN policy in Figure 2. The configuration of the vWIFI-P module 201 and the vWIFI-E module 202 are configured for different upper-layer operating systems based on the configuration of the network access mode of the upper-layer operating system. Virtual private network. The policy can be configured by using different communication protocols, different encryption methods, different authentication certificates, time and place information. It realizes dynamic adjustment of the network access security of each front-end operating system and the visibility of the front-end operating systems to the external network.

Secure Policy is mainly based on the user's configuration and requirements, including but not limited to:

1. Whether the vWIFI-P module 201 and the vWIFI-E module 202 are allowed to allocate an IP address;

2. Which type of network IP address is assigned, which can be an internal subnet IP address or an IP address of the same network as the WIFI Driver;

3. Whether to assign a virtual network to the front end of the vWIFI-P module 201, vWIFI-E module 202, etc. address;

4. Whether the vWIFI-P module 201, the vWIFI-E module 202 is configured with an independent MAC address.

For example, the vWIFI-BE module 204 selects an encryption protocol corresponding to the enterprise operating system from the VPN stack according to the policy of the Secure Policy, encrypts the public network IP address 192.168.1.0, and obtains the encrypted public network IP address 192.169.1.0. 192.169.1.0 as the intranet IP address assigned to the enterprise operating system.

Alternatively, subnet the 192.169.1.0; select an IP address 192.169.1.1 from the divided subnets as the intranet IP address assigned to the operating system.

Through the step 2, the vWIFI-BE module 204 establishes an internal network share by using the internal network sharing technology of the software according to the policy of the vWIFI policy, and assigns an independent IP address to the vWIFI-E module 202, which may be an independent intranet IP address (method 2). Or the same IP address as the external device accesses the network (method 1).

Step 2.3: Subnetting the second IP address according to the preset network security policy, and selecting an IP address from the divided subnets as the first IP address.

Through step 2.3, the vWIFI-BE module 204 establishes an internal network share by using the internal network sharing technology of the software according to the policy of the vWIFI policy, and allocates an independent intranet IP address to the vWIFI-P module 201.

303: The virtual network proxy module sends the first IP address to the operating system by using the virtual network access module.

304: The operating system accesses the network according to the first IP address.

The method provided in this embodiment can ensure that each operating system is assigned a unique IP address through subnet division, VPN, etc., and not only can the network accessed by the operating system be controlled within a limited range of use, but also because of different The operating system uses different IP addresses for network access, so each operating system can access the network at the same time for data transmission. Through the network security policy, network access and security of the operating system can be dynamically adjusted according to external information such as time and place.

It should be noted that, in this embodiment, only two operating systems running in a multi-operating system terminal are used as an example. In the actual application process, a multi-operating system terminal can run more than two operating systems, which is not the most The specific number of operating systems that the operating system terminal actually runs is limited.

In addition, in this embodiment, only the multi-operating system terminal accesses the network through the WIFI mode. In the actual application process, the network can be accessed through the leased line or the network is accessed in other manners. The actual way to enter the network is limited.

In addition, this embodiment is only described by using the VPN as a dedicated network. In the actual application process, it may also be another type of dedicated network. This embodiment does not limit the specific private network.

Beneficial effects:

Based on the same inventive concept, referring to the embodiment shown in FIG. 4, this embodiment provides a multi-operating system terminal. The principle of solving a problem by a multi-operating system terminal is similar to that of a multi-operating system terminal accessing a network. For the implementation of multiple operating system terminals, refer to the implementation of the method, and the repeated description will not be repeated.

Referring to FIG. 4, the multiple operating system terminal includes: a plurality of operating systems 401, a virtual network access module 402, and a virtual network proxy module 403;

Each operating system 401 corresponds to a virtual network access module 402;

The operating system 401 is configured to send a network access request to the virtual network proxy module 403 through the corresponding virtual network access module 402; acquire the virtual network proxy by using the virtual network access module 402. The first Internet Protocol IP address allocated by the module 403 is connected to the network according to the first IP address;

The virtual network access module 402 is configured to send the network access request of the operating system 401 to the virtual network proxy module 403; send the first IP address assigned by the virtual network proxy module 403 to the operating system 401;

The virtual network proxy module 403 is configured to allocate a first IP address to the operating system 401 after obtaining the network access request, and send the first IP address to the operating system 401 through the virtual network access module 402, where the virtual network proxy module 403 is The first IP addresses assigned by different operating systems 401 are different.

Optionally, the virtual network proxy module 403 is configured to determine a second IP address of the multi-operating system terminal accessing the network, and allocate a first IP address to the operating system according to the preset network security policy and the second IP address.

Optionally, the virtual network proxy module 403 is configured to determine, according to the network driver of the multi-operating system terminal, a public network IP address of the multi-operating system terminal accessing the network, and use the public network IP address as the second IP address.

Optionally, the virtual network proxy module 403 is configured to determine a network type that the operating system accesses; when the network type is a private network, the second IP address is determined according to a preset network security policy and a preset private network protocol stack. Converted to a third IP address with the third IP address as the first IP address; the third IP address is the virtual IP address associated with the second IP address.

Optionally, the virtual network proxy module 403 is configured to perform subnetting on the third IP address, and select one IP address from the divided subnets as the first IP address.

Optionally, the private network is a virtual private network VPN.

Optionally, the virtual network proxy module 403 is further configured to: when the network type is a public network, perform subnetting on the second IP address according to the preset network security policy, and select an IP address from the divided subnets as the first An IP address.

The benefits are as follows:

In the above embodiments, the existing functional component modules can be used for implementation. For example, the processing module can use existing data processing components. At least, the positioning server used in the existing positioning technology has the function component implemented; as for the receiving module, any device with the signal transmission function has At the same time, the A, n parameter calculation, strength adjustment, etc. performed by the processing module are all existing technical means, and those skilled in the art can realize the corresponding design and development.

For convenience of description, the various parts of the above described devices are described in terms of functions divided into various modules or units. Of course, the functions of the various modules or units may be implemented in one or more software or hardware in the practice of the invention.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, a special purpose computer, an embedded processor or other programmable data processing device to produce a machine The instructions executed by a processor of a computer or other programmable data processing device generate means for implementing the functions specified in one or more blocks of the flowchart or in a block or blocks of the flowchart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

While the preferred embodiment of the invention has been described, it will be understood that Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and the modifications and

Claims

A method for a multi-operating system terminal to access a network, the method comprising:

The operating system sends a network access request to the virtual network proxy module through the corresponding virtual network access module;

After acquiring the network access request, the virtual network proxy module allocates a first Internet Protocol IP address to the operating system, and sends the first IP address to the operating system by using the virtual network access module. The first IP address allocated by the virtual network proxy module for different operating systems is different;

The operating system accesses the network according to the first IP address.
The method of claim 1, wherein the assigning the first internet protocol IP address to the operating system comprises:

Determining a second IP address of the multi-operating system terminal accessing the network;

Assigning a first IP address to the operating system according to a preset network security policy and the second IP address.
The method according to claim 2, wherein the determining the second IP address of the multi-operating system terminal accessing the network comprises:

Determining, according to the network driver of the multi-operating system terminal, the public network IP address of the multi-operating system terminal accessing the network, and using the public network IP address as the second IP address.
The method according to claim 2, wherein the assigning the first IP address to the operating system according to the preset network security policy and the second IP address comprises:

Determining a type of network accessed by the operating system;

If the network type is a dedicated network, according to a preset network security policy and a preset dedicated a network protocol stack, converting the second IP address into a third IP address, and using the third IP address as the first IP address;

The third IP address is a virtual IP address associated with the second IP address.
The method according to claim 4, wherein the using the third IP address as the first IP address comprises:

Subnetting the third IP address;

Select an IP address from the divided subnets as the first IP address.
The method according to claim 4 or 5, wherein the private network is a virtual private network VPN.
The method of claim 4, after the determining the type of the network accessed by the operating system, further comprising:

If the network type is a public network, the second IP address is subnet-divided according to a preset network security policy, and an IP address is selected from the divided subnets as the first IP address.
A multi-operating system terminal, comprising: a plurality of operating systems, a virtual network access module, and a virtual network proxy module;

Each operating system corresponds to a virtual network access module;

The operating system is configured to send a network access request to the virtual network proxy module by using the virtual network access module, and obtain the first Internet allocated by the virtual network proxy module by using the virtual network access module a protocol IP address, accessing the network according to the first IP address;

The virtual network access module is configured to send a network access request of the operating system to the virtual network proxy module, and send the first IP address allocated by the virtual network proxy module To the operating system;

The virtual network proxy module is configured to allocate a first IP address to the operating system after acquiring the network access request, and send the first IP address to the operation by using the virtual network access module. The first IP address assigned by the virtual network proxy module to different operating systems is different.
The multi-operating system terminal according to claim 8, wherein the virtual network proxy module is configured to determine a second IP address of the multi-operating system terminal accessing the network; according to a preset network security policy and a The second IP address is configured to allocate a first IP address to the operating system.
The multi-operating system terminal according to claim 9, wherein the virtual network proxy module is configured to determine, according to the network driver of the multi-operating system terminal, a public network IP address of the multi-operating system terminal accessing the network The public network IP address is used as the second IP address.
The multi-operating system terminal according to claim 9, wherein the virtual network proxy module is configured to determine a network type accessed by the operating system; when the network type is a private network, according to a preset a network security policy and a preset private network protocol stack, converting the second IP address into a third IP address, using the third IP address as a first IP address; and the third IP address being the first Two virtual IP addresses associated with the IP address.
The multi-operating system terminal according to claim 11, wherein the virtual network proxy module is configured to perform subnetting on the third IP address, and select an IP address from the divided subnets as the first IP address.
The multi-operating system terminal according to claim 11 or 12, wherein the private network is a virtual private network VPN.
The multi-operating system terminal according to claim 11, wherein the virtual network proxy module is further configured to: when the network type is a public network, the second IP address according to a preset network security policy. Perform subnetting and select an IP address from the divided subnets as the first IP address.