WO2022188596A1

WO2022188596A1 - Access control method and apparatus, data forwarding method and apparatus, and electronic device and storage medium

Info

Publication number: WO2022188596A1
Application number: PCT/CN2022/076230
Authority: WO
Inventors: 王光; 姜焰; 朱敏
Original assignee: 百果园技术(新加坡)有限公司; 王光
Priority date: 2021-03-09
Filing date: 2022-02-14
Publication date: 2022-09-15
Also published as: CN113055457B; CN113055457A

Abstract

The present application discloses an access control method and apparatus, a data forwarding method and apparatus, and an electronic device and a storage medium. The access control method comprises: receiving an access request sent by a client; selecting, from an access system, a target access subsystem to be accessed by an accessing client; when it is determined that a tree network node structure in the target access subsystem comprises a node with an available resource, selecting, from the current tree network node structure, a corresponding access node for the accessing client, wherein each node in the network node structure establishes a communication connection by means of a tree structure; when it is determined that each node in the tree network node structure in the target access subsystem has no available resources, specifying an access point as a new node in the tree network node structure, and selecting the new node as an access node corresponding to the accessing client; and sending an access control instruction to the accessing client, so as to control the accessing client to access the access node, and storing the correlation between an identifier of the accessing client and an identifier of the access node.

Description

Access control and data forwarding method, device, electronic device and storage medium

CROSS-REFERENCE TO RELATED APPLICATIONS

This application claims the priority of the Chinese patent application with the application number 202110255660.4 and the application name "Access Control and Data Forwarding Method, Device, Electronic Device and Storage Medium" filed with the China Patent Office on March 09, 2021, all of which The contents are incorporated herein by reference.

technical field

The present application relates to the field of network information technology, and in particular, to a method, apparatus, electronic device and storage medium for access control and data forwarding.

Background technique

In the mobile Internet environment, applications based on audio and video real-time communication are more and more widely used, such as webcasting, video conferencing, group chat and other application scenarios. The above application scenarios are all based on the network connection between the mobile client and the back-end access point (ie the server). The quality of the network at the end directly affects the user experience, and has higher requirements on the packet loss rate and delay of the network. In order to meet richer social and office attributes, the demand for real-time communication between multiple people is getting higher and higher. The real-time communication scenario between multiple people expands the end-to-end link into a mesh from point to point. The choice of the access point (server), the service capacity, load balancing and scalability of the access point (server) all put forward higher requirements.

In the current multi-person real-time communication scenario, the way for clients to access the access point and data forwarding is as follows: multiple clients in a multi-person call access the same access point, and the audio and video data between the clients are all Forwarding is performed through the only access point. However, the above method is only suitable for the scenario where the call members are relatively single and the physical distance between the call members is relatively close. For international calls with long distances, such as transnational calls, the quality is poor and it is not scalable. , and the upper limit of the number of people connected to the access point is limited by the service capability of the access point.

SUMMARY OF THE INVENTION

In order to solve the problem that in the existing multi-person real-time communication scenario, the way that the client accesses the access point and data forwarding makes the call quality limited by the physical distance and the number of call members, the embodiment of the present application provides an access control and Data forwarding method, device, electronic device and storage medium.

In a first aspect, an embodiment of the present application provides an access control method, including:

receiving an access request sent by a client, where the access request carries an identifier of the client to be accessed;

Select the corresponding access node for the client to be accessed according to the following steps:

Selecting a target access subsystem to be accessed by the client to be accessed from an access system, where the access system includes at least one access subsystem;

When it is determined that the tree-like network node structure in the target access subsystem includes nodes with available resources, select a corresponding access node for the client to be accessed from the current tree-like network node structure , the tree-like network node structure includes at least one layer, each node in the tree-like network node structure is an access point included in the target access subsystem, and each node in the tree-like network node structure Establish a communication connection through a tree structure;

When it is determined that each node in the tree-like network node structure in the target access subsystem does not have available resources, designate an access point as a new node in the tree-like network node structure, and select the The new node is used as the access node corresponding to the client to be accessed;

An access control instruction is sent to the to-be-accessed client to control the to-be-accessed client to access the access node, and the corresponding relationship between the to-be-accessed client identifier and the access node identifier is stored.

In a second aspect, an embodiment of the present application provides an access control apparatus, including:

a receiving unit, configured to receive an access request sent by a client, where the access request carries an identifier of the client to be accessed;

a selection unit, configured to select a corresponding access node for the client to be accessed according to the following steps: selecting a target access subsystem to be accessed by the client to be accessed from the access system, where the access system includes at least one access subsystem; when it is determined that the tree-like network node structure in the target access subsystem includes a node with available resources, select the client to be accessed from the current tree-like network node structure The terminal selects a corresponding access node, the tree-like network node structure includes at least one layer, each node in the tree-like network node structure is an access point included in the target access subsystem, and the network node Each node in the structure establishes a communication connection through a tree-like structure; when it is determined that each node in the tree-like network node structure in the target access subsystem does not have available resources, an access point is designated as the tree a new node in the network node structure, and select the new node as the access node corresponding to the client to be accessed;

A control unit, configured to send an access control instruction to the client to control the client to access the access node corresponding to the client, and store the correspondence between the client identifier and the access node identifier.

In a third aspect, an embodiment of the present application provides a data forwarding method, which is applied to the tree-like network node structure established in the above access control method, including:

The root node in the tree-like network node structure receives a data forwarding request, and the data forwarding request includes the data to be forwarded and a destination client identifier;

acquiring the correspondence between the client identifier and the access point identifier, and searching for the access node identifier corresponding to the target client identifier from the correspondence between the client identifier and the access node identifier;

When it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is the root node, the data to be forwarded is sent to the node corresponding to the node identifier accessed by the destination client, and the destination client The node corresponding to the node identifier accessed by the destination client sends the to-be-forwarded data to the client corresponding to the destination client identifier;

When it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is a child node, the data to be forwarded is forwarded to the first root node connected to the node identifier corresponding to the node identifier accessed by the destination client , the first root node sends the data to be forwarded to the node corresponding to the node identifier accessed by the destination client, and the node corresponding to the node identifier accessed by the destination client sends the data to be forwarded It is sent to the client corresponding to the destination client identifier.

In a fourth aspect, an embodiment of the present application provides a data forwarding device, which is applied to the root node of the tree-like network node structure established in the above access control method, including:

a receiving unit, configured to receive a data forwarding request, where the data forwarding request includes the data to be forwarded and a destination client identifier;

an acquiring unit, configured to acquire the correspondence between the client identifier and the access point identifier, and search for the access node identifier corresponding to the destination client identifier from the correspondence between the client identifier and the access node identifier;

The first sending unit is configured to send the data to be forwarded to the node corresponding to the node identifier accessed by the destination client when it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is the root node. A node, where the node corresponding to the node identifier accessed by the destination client sends the to-be-forwarded data to the client corresponding to the destination client identifier;

The second sending unit is configured to send the data to be forwarded to the node corresponding to the node identifier accessed by the destination client when it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is a child node. The first root node connected to the node, the first root node sends the data to be forwarded to the node corresponding to the node identifier accessed by the destination client, and the node identifier corresponding to the destination client access node The node sends the data to be forwarded to the client corresponding to the destination client identifier.

In a fifth aspect, an embodiment of the present application provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executable on the processor, and the processor implements the program when the processor executes the program. The access control method or the data forwarding method described in this application.

In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, implements the steps in the access control method or the data forwarding method described in the present application.

The beneficial effects of the embodiments of the present application are as follows:

In this embodiment of the present application, after receiving the access request sent by the client and carrying the identifier of the client to be accessed, the receiving control terminal selects a corresponding access node for the client to be accessed in the following manner: selecting the access node from the access system The target access subsystem to be accessed by the access client, the access system includes at least one access subsystem, when it is determined that there is a node with available resources in the tree-like network node structure in the target access subsystem, from the current In the tree-like network node structure, the corresponding access node is selected for the client to be accessed, wherein the tree-like network node structure includes at least one layer, and each node in the tree-like network node structure includes the target access subsystem Access point, each node in the tree-like network node structure establishes a communication connection through the tree-like structure. When it is determined that each node in the tree-like network node structure in the target access system does not have available resources, an access point is designated. point as a new node in the tree-like network node structure, and select the new node as the access node corresponding to the client to be accessed, and then send an access control instruction to the client to be accessed to control the access to be accessed. The client accesses the access node selected for it, and stores the correspondence between the identifier of the client to be accessed and the identifier of the access node. Compared with the prior art, in the multi-person real-time communication scenario, the access system includes the access node. The access subsystem is not limited by geographical location. In the access subsystem, the access point is dynamically selected to establish a tree-like network node structure. When each node in the current tree-like network node structure has no available resources, a new one is added. As a new node in the current tree-like network node structure, the access point ensures enough accessible nodes for clients to access, and the tree-like network node structure provides service capabilities that meet the needs, so that the quality of multi-person calls is not good. Limited by physical distance and the number of call members, communication efficiency and user experience are improved.

Other features and advantages of the present application will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the present application. The objectives and other advantages of the application may be realized and attained by the structure particularly pointed out in the written description, claims, and drawings.

Description of drawings

The drawings described herein are used to provide further understanding of the present application and constitute a part of the present application. The schematic embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation of the present application. In the attached image:

FIG. 1 is a schematic structural diagram of an access control system provided by an embodiment of the present application;

FIG. 2 is a schematic diagram of an implementation flow of an access control method provided by an embodiment of the present application;

3 is a schematic structural diagram of an access control apparatus provided by an embodiment of the present application;

FIG. 4 is a schematic flowchart of the implementation of the data forwarding method provided by the embodiment of the present application;

5 is a schematic structural diagram of a data forwarding apparatus provided by an embodiment of the present application;

FIG. 6 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

Detailed ways

The preferred embodiments of the present application will be described below with reference to the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present application, and are not intended to limit the present application. The embodiments in and features in the embodiments can be combined with each other.

As shown in FIG. 1 , which is a schematic structural diagram of an access control system provided by an embodiment of the present application, which may include an access control terminal and an access system, and the access system includes at least one access subsystem. In FIG. 1 , use 3 Each access subsystem included in the access system can be an independent computer room, and the geographic location of each access subsystem can be located in different countries on the earth, or can be located in the same Different regions of a country are not limited in this embodiment of the present application. Each access subsystem includes multiple access points, and the access points can be servers for forwarding data, such as communication data between clients during a multi-person audio and video conference. The data may include, but is not limited to, audio data, video data, and the like. In this embodiment of the present application, the access control terminal may be a quality detection system, and the instruction detection system may be implemented on a server. When the quality detection system receives an access request sent by the client, the quality detection system may detect that the client has The network quality between the access points of the access subsystem selects an optimal access subsystem for the client. The quality detection system instructs each access subsystem to create an access network according to the number of requesting access clients, and the access network structure in each access subsystem is a tree-like network node structure. The nodes establish a two-way communication connection through the tree structure. Each new node added to the tree network node structure means that the number of clients connected to each node in the existing tree network node structure reaches the online level (that is, each node has no available resources), a two-way communication connection is established between the root node in the tree-like network node structure in each access subsystem and the root node in the tree-like network node structure in other access subsystems, to Data can be transmitted between each access subsystem through their respective root nodes.

The server may be an independent physical server, or a cloud server that provides basic cloud computing services such as cloud servers, cloud databases, and cloud storage. The client can be, but is not limited to, a smart phone, a tablet computer, a notebook computer, a desktop computer, etc., which is not limited in this embodiment of the present application.

As shown in FIG. 2, it is a schematic diagram of the implementation flow of the access control method provided by the embodiment of the present application. The access control method can be applied to the above-mentioned access control terminal. In the embodiment of the present application, the access control terminal uses the quality The control system is used as an example to illustrate, which may include the following steps:

S11. Receive an access request sent by a client, where the access request carries an identifier of the client to be accessed.

During specific implementation, the quality control system receives an access request sent by a client, where the access request carries the identifier of the client to be accessed, and the client to be accessed includes the client that sent the access request, which is recorded as the source client , the client to be accessed may also include the destination client that the source client requests for communication. If the client to be accessed also includes the destination client, the quality control system queries the access node identifier corresponding to the destination client identifier from the locally stored correspondence between the client identifier and the access node identifier. The corresponding access node identifier indicates that the destination client has accessed the target access node. If the access node corresponding to the destination client identifier is not queried, no matter whether the client to be accessed is the source client or the destination client, Select the corresponding access node for the client to be accessed according to steps S12 to S14:

S12. Select a target access subsystem to be accessed by the client to be accessed from the access system, where the access system includes at least one access subsystem.

During specific implementation, the quality control system selects a target access subsystem to be accessed by the client to be accessed from the access system, and the access system includes at least one access subsystem.

Specifically, the quality control system stores the access point (that is, the server) identifier and IP (Internet Protocol, Internet Protocol) address information contained in each access subsystem in the access system, and the quality control system returns each access point to the client to be accessed. The access point identifier and IP address information are specified in the access subsystem, and the client sends a detection packet to the designated access point in each access subsystem according to the access point identifier and IP address information specified in each access subsystem, and obtains corresponding detection results, and send each detection result to the quality control system, and the quality control system selects a target access subsystem to be accessed for the client to be accessed according to the detection result, wherein the detection result includes the client to be accessed. The terminal sends information such as the delay and packet loss rate of the probe packet to the designated access point. The target access subsystem is the client to be accessed and the designated access client determined by the quality control system according to the delay and packet loss rate of the probe packet sent. The access subsystem to which the access point with the best network quality between the points belongs, wherein the designated access point in each access subsystem may be pre-configured as required, which is not limited in this embodiment of the present application.

S13. When it is determined that the tree-like network node structure in the target access subsystem includes nodes with available resources, select a corresponding access point for the client to be accessed from the current tree-like network node structure. into the node.

During specific implementation, when it is determined that the tree-like network node structure in the target access subsystem includes nodes with available resources, the quality detection system selects the client to be accessed from the current tree-like network node structure The terminal selects a corresponding access node, the tree-like network node structure includes at least one layer, each node in the tree-like network node structure is an access point included in the target access subsystem, and the network node Each node in the structure establishes a bidirectional communication connection through the tree structure.

Specifically, when it is determined that the highest level node of the current tree network node structure has available resources, the highest level node is selected as the access node corresponding to the client to be accessed, the highest level node is the root node, and other level nodes are the root The child node of the node; when it is determined that the highest-level node does not have available resources, select a node with available resources from the child nodes of the root node in the order from high to low as the access node corresponding to the client to be accessed. .

In the embodiment of the present application, the tree-like network node structure in the target access subsystem is established node by node according to the number of client accesses. Initially, when it is determined that the tree-like network structure has not been established in the target access subsystem, an access point is designated as the root node of the tree-like network structure, and the root node is the highest level node of the tree-like network structure. When the number of accessed clients is equal to the first preset threshold, specify an access point as the first child node of the next level of the root node, until the number of clients accessed by the child node is equal to the second preset threshold , designate an access point as the second child node of the level, and so on, until the number of child nodes contained in the current level is equal to the set value, and the clients connected to the root node and the child nodes of the current level are all available. When the upper limit is accessed, another access point is designated as the child node of the next level of the current level, and when the number of levels of the tree-like network node structure established is equal to the third preset threshold, the establishment of the next level is not continued. child node. The first preset threshold, the second preset threshold, and the third preset threshold can be set according to the actual situation, and the first preset threshold can be set to the same value as the second preset threshold. For example, the first preset threshold can be set to the same value as the second preset threshold. The preset threshold and the second preset threshold are both 10, and the third preset threshold is set to 3, which is not limited in this embodiment of the present application.

During specific implementation, when it is determined that the number of clients currently accessed by the root node of the tree-like network structure in the target access subsystem is less than the first preset threshold, it is determined that the root node has available resources, and the root node is selected as the to-be-connected The access node corresponding to the client. When it is determined that the number of clients currently accessed by the root node is equal to the first preset threshold, and it is determined that there are no available resources at the root node, select a client that is accessed from the child nodes of the root node in descending order of hierarchy. Nodes whose number is less than the second preset threshold are used as access nodes corresponding to the client to be accessed. The target access subsystem takes the access subsystem 1 in Figure 1 as an example. Assuming that the current tree-like network structure in the access subsystem 1 has been established with two layers, each node is connected to 10 sub-nodes, that is, N=10. The highest level is recorded as the 0th level, then the 0th level includes the root node 1, and the next level of the highest level is recorded as the 1st level, then the 1st level includes 10 child nodes: 1_1~1_10, assuming the first preset threshold and The second preset thresholds are all 10. If root node 1 has exited clients, that is, the number of clients connected to root node 1 is less than 10, root node 1 is selected as the access node corresponding to the client to be accessed. , if the number of clients connected to root node 1 is 10, select a node whose number of connected clients is less than 10 from the nodes 1_1 to 1_10 of the first level as the access node corresponding to the client to be accessed .

S14. When it is determined that each node in the tree-like network node structure in the target access subsystem does not have available resources, designate an access point as a new node in the tree-like network node structure, and The new node is selected as the access node corresponding to the client to be accessed.

During specific implementation, when it is determined that the current tree-like network node structure in the target access subsystem contains only the root node, and the root node has no available resources, the quality detection system designates an access point as the next level of the root node. When it is determined that the root node and child nodes are included in the current tree-like network node structure, the number of child nodes of the current level is less than the set upper limit value corresponding to the current level, and there are no available resources in the root node and each child node. When it is determined that an access point is used as a child node of the current level; when it is determined that the number of child nodes of the current level is equal to the set upper limit value corresponding to the current level, and there are no available resources in the root node and each child node is specified, an access point is designated as the child node of the next level of the child node of the current level.

Specifically, when it is determined that the current tree-like network structure in the target access subsystem only includes the root node, and the number of clients currently accessed by the root node is equal to the first preset threshold, the quality detection system determines that the root node does not exist resource, a new access point is designated as a child node of the next level of the root node, for example, the first child node 1_1 of the next level of the root node 1 in the access subsystem 1 of FIG. 1 .

The quality detection system presets the upper limit of the number of sub-nodes that can be connected at each level, and can count and store the total number of sub-nodes that can be connected at most at each level according to the number of sub-nodes that can be connected to each node. For example, if the upper limit of the number of child nodes that can be connected to a node is set to N, the upper limit of the number of child nodes that can be connected to the next level of the 0th level (ie the highest level), that is, the first level is N, since the first level contains N child nodes, the number of child nodes of the next level that can be connected to each child node is N, then the next level is the upper limit of the number of child nodes that can be connected to the second level The value is N×N=N ² . When the quality detection system determines that the current tree-like network node structure in the target access subsystem includes a root node and child nodes, and the number of child nodes of the current level is less than the set upper limit value corresponding to the current level, and the root node is currently connected When the number of clients connected to the node is equal to the first preset threshold, and the number of clients currently accessed by each child node is equal to the second preset threshold, a new access point is designated as a child node of the current level. For example, the first preset threshold and the second preset threshold are both set to 10 as an example for description. Suppose that the access subsystem 1 in FIG. 1 currently includes two levels, and the number of corresponding child nodes of the first level is equal to The upper limit is set to 10, the number of clients currently connected to root node 1 is 10, the sub-nodes of the current level include: 1_1 and 1_2, and the number of clients currently connected to sub-nodes 1_1 and 1_2 are both 10. That is to say, root node 1 and child nodes 1_1 and 1_2 have no available resources, and the number of child nodes of the first level is 2, which is less than the set upper limit of 10, then a new access point is designated as the child node of the first level : 1_3.

When the quality detection system determines that the number of child nodes at the current level is equal to the set upper limit value corresponding to the current level, and the number of clients currently accessed by the root node is equal to the first preset threshold, the number of clients currently accessed by each child node is When both are equal to the second preset threshold, a new access point is designated as the child node of the next level of the child node of the current level. Continuing the above example, when the root node 1 currently has 10 clients connected to it, the current level of child nodes includes 10: 1_1 to 1_10, and the number of clients currently connected to child nodes 1_1 to 1_10 is 10. That is to say, the root node 1 and the child nodes 1_1 to 1_10 have no available resources, and the number of the child nodes of the first level reaches the set upper limit of 10, then a new access point is designated as the child node of the second level: 1_1_1.

Further, in the embodiment of the present application, it is considered that when the number of layers of the tree-like network node structure increases gradually, the link paths between the clients connecting the sub-nodes will cause the server to process the link paths due to the increase in the number of transit nodes (ie, transit servers). The increase of the delay may affect the experience of the corresponding user. Therefore, an upper limit is imposed on the number of layers of the tree-like network node structure. When the number of layers of the current tree-like network node structure in the access subsystem reaches the preset upper limit value, and when the clients currently connected to each node are full, if the access subsystem is assigned to a new client, an access point can be re-designated in the access subsystem as the new root Node, that is to say, multiple tree-like network node structures can be set in the same access subsystem, so that the same access subsystem has a certain horizontal expansion capability.

Specifically, when it is determined that the number of levels of the tree-like network node structure is equal to the third preset threshold, and the number of child nodes of the lowest level is equal to the set upper limit value corresponding to the lowest level, the quality detection system specifies an access point As a new root node to establish a new tree-like network node structure. Wherein, the third preset threshold may be set by itself as required, for example, may be set to 3, which is not limited in this embodiment of the present application.

It should be noted that, in this embodiment of the present application, when a root node is specified in an access subsystem, the quality detection system indicates that the newly established root node is in the access subsystem of other established root nodes in the access system. The root node establishes a two-way communication connection. For example, in Figure 1, it is assumed that access subsystem 1 is the first access subsystem to establish a root node, access subsystem 2 is the second access subsystem to establish a root node, and access subsystem 3 is the last to establish a root node. The access subsystem of the root node can record the tree-like network node structure in different access subsystems according to the order in which the root node is added. The root node 1 in the access subsystem 1 can be recorded as LEVEL0, and the The root node 2 in the access subsystem 2 is denoted as LEVEL1, and the root node 3 in the access subsystem 3 is denoted as LEVEL2, wherein LEVEL0, LEVEL1, and LEVEL2 represent that the root node 1, the root node 2, and the root node 3 join After the quality detection system designates the root node 2 of the access subsystem 2, it instructs the root node 2 to establish a communication connection with the root node 1; after the quality detection system designates the root node 3 of the access system 3, it instructs the root node 2 to establish a communication connection with the root node 1. 3. Establish communication connections with root node 2 and root node 1 respectively, and so on. After the quality detection system designates the root node M of the Mth access subsystem, it indicates the root node M and the first M-1 access subsystems. The root nodes establish communication connections respectively. If an access subsystem includes multiple root nodes, communication connections can be established between the root nodes.

Furthermore, after each root node in different access subsystems establishes a communication connection, each root node in different access systems can maintain communication continuity by sending heartbeat packets.

Further, in order to facilitate management, when the multi-person audio and video conference ends, each root node can exit the network as follows:

When it is determined that the root node in the access subsystem in which the access system has established the tree-like network node structure needs to exit the current network, each root node is controlled to exit the current network one by one in the reverse order of establishment.

S15. Send an access control instruction to the to-be-accessed client to control the to-be-accessed client to access the access node, and store the correspondence between the to-be-accessed client identifier and the access node identifier relation.

During specific implementation, the quality detection system sends an access control instruction to the client to be accessed, and the access control instruction includes the identifier of the node to be accessed and IP address information, and the client to access receives the access sent by the quality detection system. After entering the control instruction, access the access node selected by the quality detection system according to the identity and IP address of the node to be accessed, and return an access success response message to the quality detection system, and the quality detection system stores the client identity and the access node. Correspondence of node IDs.

In the embodiment of the present application, since two-way communication connection is performed between nodes, and each node can access the client, that is, each client has the ability to connect to the microphone, therefore, the present application is not only applicable to the live broadcast mode, but also It is suitable for conference or group chat mode where many people are on the microphone at the same time, and the scope of application is wider.

In the specific implementation process, according to the above-mentioned access control method provided by the embodiment of the present application, the access points of the computer rooms in different regions of the world can be organized in the form of a combination of tree and mesh, which has strong horizontal and vertical expansion capabilities. , horizontal expansion has global expansion capability. For example, in the scenario of a multi-person audio and video conference between users in Europe, Asia, and America, you can select an access point in a computer room in Europe, Asia, and America as the root node. , each continent establishes a communication connection through the root node selected by each continent, and each continent can expand vertically by establishing a tree-like network node structure in the computer room selected by each continent. The upper limit of vertical expansion only depends on the access point in the computer room (ie During the conference, access points can be dynamically added or deleted according to the number of online clients, and in the embodiment of the present application, the number of clients that can be accessed by each node and the number of clients that can be connected to each node The number of sub-nodes at the next level is limited. When the upper limit is reached, new access points will be expanded, so that a single access point will not become a bottleneck for expansion.

In the access control method provided by the embodiment of the present application, after receiving the access request sent by the client and carrying the identifier of the client to be accessed, the receiving control terminal selects the corresponding access node for the client to be accessed in the following manner: In the access system, the target access subsystem to be accessed by the client to be accessed is selected, and the access system includes at least one access subsystem. When it is determined that there are available resources in the tree-like network node structure in the target access subsystem When the node is connected, select the corresponding access node for the client to be accessed from the current tree-like network node structure, wherein the tree-like network node structure includes at least one layer, and each node in the tree-like network node structure is targeted to connect Access points included in the sub-system, each node in the tree-like network node structure establishes a communication connection through the tree-like structure, when it is determined that each node in the tree-like network node structure in the target access system does not have available resources , then designate an access point as a new node in the tree-like network node structure, and select the new node as the access node corresponding to the client to be accessed, and then send an access control instruction to the client to be accessed , to control the access node to be accessed by the client to be accessed, and store the corresponding relationship between the identifier of the client to be accessed and the identifier of the access node. Compared with the prior art, in the multi-person real-time communication scenario, The access subsystem included in the access system is not limited by geographical location. In the access subsystem, the access point is dynamically selected to establish a tree-like network node structure. When none of the nodes in the current tree-like network node structure are available When adding resources, a new access point is added as a new node in the current tree-like network node structure to ensure enough accessible nodes for client access, and the tree-like network node structure provides service capabilities that meet the needs. The quality of multi-person calls is not limited by physical distance and the number of call members, which improves communication efficiency and user experience.

Based on the same inventive concept, an embodiment of the present application also provides an access control apparatus. Since the above-mentioned access control apparatus solves the problem in a similar manner to the access control method, the implementation of the above-mentioned apparatus can refer to the implementation of the method, and the repetitions are repeated. No longer.

As shown in FIG. 3 , which is a schematic structural diagram of an access control apparatus provided by an embodiment of the present application, which may include:

A receiving unit 21, configured to receive an access request sent by a client, where the access request carries an identifier of the client to be accessed;

The selection unit 22 is configured to select a corresponding access node for the client to be accessed according to the following steps: selecting a target access subsystem to be accessed by the client to be accessed from the access system, the access system At least one access subsystem is included; when it is determined that the tree-like network node structure in the target access subsystem includes nodes with available resources, the to-be-accessed node is selected from the current tree-like network node structure The client selects a corresponding access node, the tree-like network node structure includes at least one layer, each node in the tree-like network node structure is an access point included in the target access subsystem, and the network Each node in the node structure establishes a communication connection through a tree structure; when it is determined that each node in the tree network node structure in the target access subsystem does not have available resources, an access point is designated as the a new node in the tree-like network node structure, and selecting the new node as the access node corresponding to the client to be accessed;

A control unit 23, configured to send an access control instruction to the client to control the client to access the access node corresponding to the client, and store the correspondence between the client identifier and the access node identifier .

Preferably, the selection unit 22 is specifically configured to select the highest-level node as the access corresponding to the client to be accessed when it is determined that the highest-level node of the tree-like network node structure has available resources. node, the highest-level node is the root node, and other hierarchical nodes are child nodes of the root node; when it is determined that the highest-level node does not have available resources, the order from high to low levels is from the root node. A node with available resources is selected from among the child nodes of the node as the access node corresponding to the client to be accessed.

Optionally, the device further includes:

a designating unit, configured to designate an access point as the access point when it is determined that the tree-like network structure has not been established in the target access subsystem before selecting the corresponding access node for the to-be-accessed client the root node of the tree-like network structure; and

The selection unit 22 is specifically configured to designate an access point as the next level of the root node when it is determined that the tree-like network node structure only includes the root node and the root node does not have available resources child nodes; when it is determined that the tree network node structure includes a root node and child nodes, the number of child nodes of the current level is less than the set upper limit value corresponding to the current level, and the root node and each child node are in the When there are no available resources, an access point is designated as a child node of the current level; when it is determined that the number of child nodes of the current level is equal to the set upper limit value corresponding to the current level, and the root node and each child node are When there is no available resource in the nodes, an access point is designated as the child node of the next level of the child node of the current level.

Preferably, the selection unit 22 is specifically configured to determine that the root node does not have available resources in the following manner: when it is determined that the number of clients currently accessed by the root node is equal to a first preset threshold, determine the The root node does not have available resources; determine that any child node has no available resources in the following manner: when it is determined that the number of clients currently accessed by any child node is equal to the second preset threshold, determine that any child node does not have available resources. Available resources exist.

Optionally, the specifying unit is further configured to determine that the number of levels of the tree-like network node structure is equal to a third preset threshold, and the number of child nodes of the lowest level is equal to the setting corresponding to the lowest level. When the limit is exceeded, an access point is designated as a new root node to establish a new tree-like network node structure.

Preferably, two-way communication connection is performed between each node in the tree-like network node structure; two-way communication is established between the access subsystems in the tree-like network node structure established by the access system through their respective root nodes. connect.

Optionally, the control unit 23 is further configured to, when it is determined that the root node in the access subsystem in which the access system has established a tree-like network node structure needs to exit the current network, control each root node to follow the establishment sequence. The reverse order exits the current network one by one.

As shown in FIG. 4 , which is a schematic flowchart of the implementation of the data forwarding method provided by the embodiment of the present application, which is applied to the tree-like network node structure established in the above-mentioned access control method provided by the embodiment of the present application. The data forwarding method, The following steps can be included:

S31. The root node in the tree-like network node structure receives a data forwarding request, where the data forwarding request includes the data to be forwarded and a destination client identifier.

During specific implementation, the root node of the tree-like network node structure in any access subsystem in the access control system receives a data forwarding request, where the data forwarding request is sent by a client accessing the root node, or is The client that accesses any child node of the root node sends the message to any child node and forwards it to the root node.

S32: Acquire the correspondence between the client identifier and the access point identifier, and search for the access node identifier corresponding to the target client identifier from the correspondence between the client identifier and the access node identifier.

During specific implementation, the root node obtains the correspondence between the client identifier and the access node identifier from the access control terminal (quality detection system), and searches for the destination client identifier from the correspondence between the client identifier and the access node identifier. The corresponding access node identifier, that is, the node identifier accessed by the destination client.

S33. When it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is the root node, send the to-be-forwarded data to the node corresponding to the node identifier accessed by the destination client, and the The node corresponding to the node identifier accessed by the destination client sends the to-be-forwarded data to the client corresponding to the destination client identifier.

During specific implementation, if the node corresponding to the node identifier accessed by the destination client is the root node, the root node that receives the data forwarding request sends the data to be forwarded to the root node accessed by the destination client, and the client receives the data to be forwarded. The incoming root node directly forwards the data to be forwarded to the destination client. Wherein, if the root node accessed by the destination client is the root node that receives the data forwarding request, the root node that receives the data forwarding request directly sends the data to be forwarded to the destination client.

S34. When it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is a child node, forward the to-be-forwarded data to the first node connected to the node identifier corresponding to the node identifier accessed by the destination client. The root node, the first root node sends the data to be forwarded to the node corresponding to the node identifier accessed by the destination client, and the node corresponding to the node identifier accessed by the destination client sends the data to be forwarded. The forwarding data is sent to the client corresponding to the destination client identifier.

During specific implementation, if the node corresponding to the node identifier accessed by the destination client is a child node, the root node that receives the data forwarding request sends the data to be forwarded to the root node connected to the child node accessed by the destination client. Denoted as the first root node, the first root node forwards the data to be forwarded to the child node accessed by the destination client, and then the child node accessed by the destination client sends the data to be forwarded to the destination client.

As can be seen from the above data forwarding process, in order to avoid the formation of a closed loop during the data forwarding process, the root nodes in different access subsystems will only send the data to be forwarded to the lower-level child nodes connected to the root node, and will not directly send it to other nodes. The subordinate child nodes of the root node are forwarded through the connected root node.

Taking FIG. 1 as an example, it is assumed that the node accessed by the client that initiates the data forwarding request is the child node 1_1_1 in the tree-like network node structure in the access subsystem 1, and the node accessed by the destination client is the access subsystem 3. For the child node 3_1_1 in the tree-like network node structure, the data forwarding path may be as follows: the client initiates a data forwarding request to the child node 1_1_1 to which it is connected, and the child node 1_1_1 forwards the data forwarding request to the upper-level child node 1_1 to which it is connected , the child node 1_1 sends the data forwarding request to the connected root node 1, the root node 1 extracts the data to be forwarded from the data forwarding request, and forwards the to-be-forwarded data to the root node 3 in the access subsystem 3, and the root node 3 The data to be forwarded is sent to its next-level child node 3_1, the child node 3_1 sends the to-be-forwarded data to its next-level child node 3_1_1, and the child node 3_1_1 sends the to-be-forwarded data to the destination client.

It should be noted that although the root nodes of the cross-access subsystem can logically send data directly, they can also be transferred at the bottom layer through the third or more root nodes of the access subsystem. Set the routing policy to set the specific path for forwarding. In the above example, in the process of sending the data to be forwarded from the root node 1 in the access subsystem 1 to the root node 3 in the access system 3, the root node 1 can also send the data to be forwarded to the root node 2, and then the root node 1 sends the data to be forwarded to the root node 2. The root node 2 sends the data to be forwarded to the root node 3.

Based on the same inventive concept, an embodiment of the present application also provides a data forwarding device. Since the principle of solving the problem of the above-mentioned data forwarding device is similar to that of the data forwarding method, the implementation of the above-mentioned device can refer to the implementation of the method, and the repetition will not be repeated. .

As shown in FIG. 5 , which is a schematic structural diagram of a data forwarding apparatus provided by an embodiment of the present application, the data forwarding apparatus is applied to the root node of the tree-like network node structure established in the above access control method, and may include:

a receiving unit 41, configured to receive a data forwarding request, where the data forwarding request includes the data to be forwarded and a destination client identifier;

an obtaining unit 42, configured to obtain the correspondence between the client identifier and the access point identifier, and search for the access node identifier corresponding to the destination client identifier from the correspondence between the client identifier and the access node identifier;

The first sending unit 43 is configured to, when it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is the root node, send the data to be forwarded to the node identifier corresponding to the destination client access. the node, the node corresponding to the node identifier accessed by the destination client sends the data to be forwarded to the client corresponding to the destination client identifier;

The second sending unit 44 is configured to, when it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is a child node, send the to-be-forwarded data to the node identifier corresponding to the destination client access. The first root node connected to the node, the first root node sends the data to be forwarded to the node corresponding to the node identifier accessed by the destination client, and the node identifier accessed by the destination client corresponds to The node sends the data to be forwarded to the client corresponding to the destination client identifier.

Preferably, the data forwarding request is sent by a client accessing the root node, or sent by a client accessing any sub-node of the root node to any sub-node and then forwarded to any sub-node. of the root node.

Based on the same technical concept, an embodiment of the present application further provides an electronic device 500. Referring to FIG. 6 , the electronic device 500 is configured to implement the access control method described in the foregoing method embodiments. The electronic device 500 in this embodiment may include : a memory 501, a processor 502, and a computer program stored in the memory and executable on the processor, such as an access control program. When the processor executes the computer program, the steps in each of the foregoing embodiments of the access control method or the data forwarding method are implemented, for example, step S11 shown in FIG. 2 . Alternatively, when the processor executes the computer program, the functions of the modules/units in the foregoing device embodiments are implemented, for example, 21.

The specific connection medium between the above-mentioned memory 501 and the processor 502 is not limited in this embodiment of the present application. In the embodiment of the present application, the memory 501 and the processor 502 are connected by a bus 503 in FIG. 6 , and the bus 503 is represented by a thick line in FIG. 6 . be limited. The bus 503 can be divided into an address bus, a data bus, a control bus, and the like. For ease of presentation, only one thick line is used in FIG. 6, but it does not mean that there is only one bus or one type of bus.

The memory 501 may be a volatile memory (volatile memory), such as random-access memory (RAM); the memory 501 may also be a non-volatile memory (non-volatile memory), such as read-only memory, flash memory A flash memory, hard disk drive (HDD) or solid-state drive (SSD), or memory 501 is a device that can be used to carry or store desired program code in the form of instructions or data structures and can be accessed by Any other medium accessed by the computer, but not limited to this. The memory 501 may be a combination of the above-mentioned memories.

The processor 502 is configured to implement an access control method as shown in FIG. 2, including:

The processor 502 is configured to call the computer program stored in the memory 501 to perform step S11 as shown in FIG. 2 , and receive an access request sent by the client, where the access request carries the client to be accessed In step S12, the target access subsystem to be accessed by the client to be accessed is selected from the access system, the access system includes at least one access subsystem, and step S13, when the target access subsystem is determined When the tree-like network node structure in the system includes a node with available resources, select a corresponding access node for the client to be accessed from the current tree-like network node structure, step S14, when it is determined that the When each node in the tree-like network node structure in the target access subsystem has no available resources, designate an access point as a new node in the tree-like network node structure, and select the new node As the access node corresponding to the client to be accessed, and step S15, sending an access control instruction to the client to be accessed to control the client to access the access node, and The corresponding relationship between the identifier of the client to be accessed and the identifier of the access node is stored.

Alternatively, the processor 502 is configured to implement a data forwarding method as shown in FIG. 4 , including:

The processor 502 is configured to invoke the computer program stored in the memory 501 to execute step S31 as shown in FIG. 4 , the root node in the tree-like network node structure receives a data forwarding request, and the data forwarding request includes: The data to be forwarded and the destination client identifier, step S32, obtain the corresponding relationship between the client identifier and the access point identifier, and search for the destination client identifier corresponding to the corresponding relationship between the client identifier and the access node identifier. The access node identifier, step S33, when it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is the root node, then the data to be forwarded is sent to the node identifier corresponding to the destination client access. The node corresponding to the node identifier accessed by the destination client sends the data to be forwarded to the client corresponding to the destination client identifier, and in step S34, when determining the destination client identifier When the node corresponding to the corresponding access node identifier is a child node, the data to be forwarded is forwarded to the first root node connected to the node corresponding to the node identifier accessed by the destination client, and the first root node is connected by the first root node. Send the data to be forwarded to the node corresponding to the node identifier accessed by the destination client, and send the data to be forwarded to the destination client identifier by the node corresponding to the node identifier accessed by the destination client the corresponding client.

Embodiments of the present application further provide a computer-readable storage medium, which stores computer-executable instructions to be executed by the above-mentioned processor, and includes a program to be executed by the above-mentioned processor.

In some possible implementations, various aspects of the access control method provided by the present application can also be implemented in the form of a program product, which includes program codes, and when the program product runs on an electronic device, the program The code is used to cause the electronic device to execute the steps in the access control method according to various exemplary embodiments of the present application described above in this specification. For example, the electronic device may execute steps S11, Receive an access request sent by the client, where the access request carries the identifier of the client to be accessed, step S12, select a target access subsystem to be accessed by the client to be accessed from the access system, and the access The access system includes at least one access subsystem, and in step S13, when it is determined that the tree-like network node structure in the target access subsystem includes nodes with available resources, from the current tree-like network node structure as The to-be-accessed client selects a corresponding access node, and in step S14, when it is determined that each node in the tree-like network node structure in the target access subsystem does not have available resources, specify an access point as a new node in the tree-like network node structure, and select the new node as the access node corresponding to the client to be accessed, and step S15: send access to the client to be accessed A control instruction is used to control the client to be accessed to access the access node, and to store the corresponding relationship between the identifier of the client to be accessed and the identifier of the access node.

In some possible implementations, various aspects of the data forwarding method provided by this application can also be implemented in the form of a program product, which includes program code, and when the program product runs on an electronic device, the program code For causing the electronic device to perform the steps in the data forwarding method according to various exemplary embodiments of the present application described above in this specification, for example, the electronic device may perform step S31 as shown in FIG. The root node in the network node structure receives the data forwarding request, and the data forwarding request includes the data to be forwarded and the destination client identifier. Step S32: Obtain the correspondence between the client identifier and the access point identifier, and send the request from the client Searching for the access node identifier corresponding to the target client identifier in the corresponding relationship between the identifier and the access node identifier, step S33, when it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is the root node, then Send the data to be forwarded to the node corresponding to the node identifier accessed by the destination client, and send the data to be forwarded to the destination client by the node corresponding to the node identifier accessed by the destination client and step S34, when it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is a child node, then forward the data to be forwarded to the destination client access point. The first root node to which the node corresponding to the node identifier is connected, the first root node sends the to-be-forwarded data to the node corresponding to the node identifier accessed by the destination client, and the node identified by the destination client accesses the node. The node corresponding to the node identifier sends the data to be forwarded to the client corresponding to the destination client identifier.

It should be understood by those skilled in the art that the embodiments of the present application may be provided as a method, an apparatus, or a computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (apparatus), and computer program products according to embodiments of the present application. It will be understood that each process and/or block in the flowchart illustrations and/or block diagrams, and combinations of processes and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in a flow or flow of a flowchart and/or a block or blocks of a block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions The apparatus implements the functions specified in the flow or flow of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in the flow or blocks of the flowcharts and/or the block or blocks of the block diagrams.

While the preferred embodiments of the present application have been described, additional changes and modifications to these embodiments may occur to those skilled in the art once the basic inventive concepts are known. Therefore, the appended claims are intended to be construed to include the preferred embodiment and all changes and modifications that fall within the scope of this application.

Claims

An access control method, comprising:

receiving an access request sent by a client, where the access request carries an identifier of the client to be accessed;

Select the corresponding access node for the client to be accessed according to the following steps:

Selecting a target access subsystem to be accessed by the client to be accessed from an access system, where the access system includes at least one access subsystem;

When it is determined that the tree-like network node structure in the target access subsystem includes nodes with available resources, select a corresponding access node for the client to be accessed from the current tree-like network node structure , the tree-like network node structure includes at least one layer, each node in the tree-like network node structure is an access point included in the target access subsystem, and each node in the network node structure passes through the tree The like structure establishes a communication connection;

When it is determined that each node in the tree-like network node structure in the target access subsystem does not have available resources, designate an access point as a new node in the tree-like network node structure, and select the The new node is used as the access node corresponding to the client to be accessed;

An access control instruction is sent to the to-be-accessed client to control the to-be-accessed client to access the access node, and the corresponding relationship between the to-be-accessed client identifier and the access node identifier is stored.
The method according to claim 1, wherein when it is determined that the tree-like network node structure in the target access subsystem includes nodes with available resources, the current tree-like network node structure is: The to-be-accessed client selects a corresponding access node, which specifically includes:

When it is determined that the highest level node of the tree-like network node structure has available resources, the highest level node is selected as the access node corresponding to the client to be accessed, the highest level node is the root node, and other levels The node is a child node of the root node;

When it is determined that the highest-level node does not have available resources, select a node with available resources from the child nodes of the root node in descending order of hierarchy as the access corresponding to the to-be-accessed client node.
The method of claim 1, wherein before selecting the corresponding access node for the client to be accessed, the method further comprises:

When it is determined that the tree-like network structure has not been established in the target access subsystem, an access point is designated as the root node of the tree-like network structure; and

When it is determined that each node in the tree-like network node structure in the target access subsystem does not have available resources, an access point is designated as a new node in the tree-like network node structure, specifically including:

When it is determined that only the root node is included in the tree-like network node structure, and the root node has no available resources, an access point is designated as a child node of the next level of the root node;

When it is determined that the tree-like network node structure includes a root node and child nodes, the number of child nodes of the current level is less than the set upper limit value corresponding to the current level, and neither the root node nor each child node is available. resource, specify an access point as a child node of the current level;

When it is determined that the number of child nodes of the current level is equal to the set upper limit value corresponding to the current level, and there are no available resources in the root node and each child node, an access point is designated as the current level The child node of the next level of the child node.
The method of claim 3, wherein

Determine that the root node does not have available resources by:

When it is determined that the number of clients currently accessed by the root node is equal to the first preset threshold, it is determined that the root node does not have available resources;

Determine that no resources are available for any of the child nodes by:

When it is determined that the number of clients currently accessed by the any sub-node is equal to the second preset threshold, it is determined that there is no available resource in the any sub-node.
The method of claim 3, further comprising:

When it is determined that the number of levels of the tree-like network node structure is equal to the third preset threshold, and the number of child nodes of the lowest level is equal to the set upper limit value corresponding to the lowest level, an access point is designated as the new , to establish a new tree-like network node structure.
The method according to claim 5, characterized in that a bidirectional communication connection is performed between each node in the tree-like network node structure; and the access system establishes one of the access subsystems of the tree-like network node structure. A two-way communication connection is established between them through their respective root nodes.
The method of claim 6, further comprising:

When it is determined that the root node in the access subsystem in which the access system has established a tree-like network node structure needs to exit the current network, each root node is controlled to exit the current network one by one in the reverse order of establishment.
An access control device, comprising:

a receiving unit, configured to receive an access request sent by a client, where the access request carries an identifier of the client to be accessed;

a selection unit, configured to select a corresponding access node for the client to be accessed according to the following steps: selecting a target access subsystem to be accessed by the client to be accessed from the access system, where the access system includes at least one access subsystem; when it is determined that the tree-like network node structure in the target access subsystem includes a node with available resources, select the client to be accessed from the current tree-like network node structure The terminal selects a corresponding access node, the tree-like network node structure includes at least one layer, each node in the tree-like network node structure is an access point included in the target access subsystem, and the network node Each node in the structure establishes a communication connection through a tree-like structure; when it is determined that each node in the tree-like network node structure in the target access subsystem does not have available resources, an access point is designated as the tree a new node in the network node structure, and select the new node as the access node corresponding to the client to be accessed;

A control unit, configured to send an access control instruction to the client to control the client to access the access node corresponding to the client, and store the correspondence between the client identifier and the access node identifier.
A data forwarding method, characterized in that it is applied to the tree-like network node structure established in the access control method according to any one of claims 1 to 7, comprising:

The root node in the tree-like network node structure receives a data forwarding request, and the data forwarding request includes the data to be forwarded and a destination client identifier;

acquiring the correspondence between the client identifier and the access point identifier, and searching for the access node identifier corresponding to the target client identifier from the correspondence between the client identifier and the access node identifier;

When it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is the root node, the data to be forwarded is sent to the node corresponding to the node identifier accessed by the destination client, and the destination client The node corresponding to the node identifier accessed by the destination client sends the to-be-forwarded data to the client corresponding to the destination client identifier;

When it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is a child node, the data to be forwarded is forwarded to the first root node connected to the node identifier corresponding to the node identifier accessed by the destination client , the first root node sends the data to be forwarded to the node corresponding to the node identifier accessed by the destination client, and the node corresponding to the node identifier accessed by the destination client sends the data to be forwarded It is sent to the client corresponding to the destination client identifier.
The method according to claim 9, wherein the data forwarding request is sent by a client accessing the root node, or sent by a client accessing any child node of the root node to the After any child node is forwarded to the root node.
A data forwarding device, characterized in that it is applied to the root node of the tree-like network node structure established in the access control method according to any one of claims 1 to 7, comprising:

a receiving unit, configured to receive a data forwarding request, where the data forwarding request includes the data to be forwarded and a destination client identifier;

an acquiring unit, configured to acquire the correspondence between the client identifier and the access point identifier, and search for the access node identifier corresponding to the destination client identifier from the correspondence between the client identifier and the access node identifier;

The first sending unit is configured to send the data to be forwarded to the node corresponding to the node identifier accessed by the destination client when it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is the root node. A node, where the node corresponding to the node identifier accessed by the destination client sends the to-be-forwarded data to the client corresponding to the destination client identifier;

The second sending unit is configured to send the data to be forwarded to the node corresponding to the node identifier accessed by the destination client when it is determined that the node corresponding to the access node identifier corresponding to the destination client identifier is a child node. The first root node connected to the node, the first root node sends the data to be forwarded to the node corresponding to the node identifier accessed by the destination client, and the node identifier corresponding to the destination client access node The node sends the data to be forwarded to the client corresponding to the destination client identifier.
An electronic device, comprising a memory, a processor, and a computer program stored on the memory and running on the processor, characterized in that, when the processor executes the program, the program according to claims 1 to 7 is implemented The access control method described in any one or the data forwarding method described in any one of claims 9-10.
A computer-readable storage medium on which a computer program is stored, characterized in that, when the program is executed by a processor, the access control method according to any one of claims 1 to 7 or any one of claims 9 to 10 is implemented. The data forwarding method described in one item.