Enterprise intranet access method based on reverse connection and application layer tunnel

Abstract

The invention discloses an enterprise intranet access method based on a reverse connection and an application layer tunnel. A system for implementing the method is divided into an extranet terminal used by a user, a relay server deployed in a public network, a gateway server deployed in an enterprise intranet and an application server deployed in the enterprise intranet according to communicationroles; except the extranet terminal and the relay server, the other layers establish connections by using a reverse mode in which a message receiving end sends a request to a sending end, and an application layer protocol is used as a data transmission tunnel; the user sends the request to the relay server through the extranet terminal when accessing the enterprise intranet, the relay server sendsinformation to a target gateway server after verifying the information, the gateway server sends the information to a target application server, the target application server executes the request, and the request result is returned to the extranet terminal through the gateway server and the relay server in sequence. By adoption of the enterprise intranet access method provided by the invention, safe and efficient access to the enterprise intranet by the extranet terminal is achieved.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to an enterprise intranet access method based on a reverse connection and an application layer tunnel. Background technique [0002] The need for access to enterprise intranet resources has been around for a long time. Because the internal and external networks use different IP addresses, the conversion is completed by NAT at the network border, and the external appearance is an IP address, which makes it impossible for external network terminals to directly access internal network hosts. [0003] Intranet access needs to pay attention to the following issues: [0004] 1) Ensure security, including identity authentication, transmission security, and authority control; [0005] 2) It is easy to use, simple to install, and minimizes changes to the enterprise network environment; [0006] 3) The operation is simple, the details are hidden, and the configuration exposed to the ...

AI Technical Summary

Problems solved by technology

[0002] The need for access to enterprise intranet resources has been around for a long time. Since the internal and external networks use different IP addresses, the conversion is completed by NAT at the network border, and the external appearance is an IP address, which makes it impossible for external network terminals to directly access internal network hosts.

Images