A method, device and system for remotely accessing edge devices

Abstract

The present invention discloses a method, device and system for remotely accessing edge devices, wherein the method includes: receiving a remote access instruction sent from a central jump board, the remote access instruction is used to access the edge device managed by the intranet management server; sending an address acquisition request pointing to the edge device to a channel center device, so that the channel center device responds to the address acquisition request and sends a network establishment instruction to the edge device; receiving a registration request initiated by the edge device for the network establishment instruction, and assigning a static address to the edge device; obtaining the access address reported by the edge device from the communication center device, the access address is constructed by the edge device according to the static address, and initiating access to the edge device based on the access address. The technical solution provided by the present application can realize remote access to edge devices while saving costs.

Description

Technical Field

[0001] The present invention relates to the field of Internet technology, and in particular to a method, device and system for remotely accessing an edge device. Background Art

[0002] In the scenario where the cloud platform automatically manages edge devices without public IP addresses, when the edge devices are online, if there is no remote access method, it is impossible to know the operating status of the edge devices. Therefore, it is necessary to manually inspect the computer room where the edge devices are located and report abnormal edge devices.

[0003] In order to reduce the cost of human intervention, a jump server that can be accessed from the public network can be deployed in the computer room where the edge device is located. By remotely accessing the jump server, the process of remotely accessing the edge device can be realized. However, this method of deploying an additional jump server will also increase the cost of remote access. Summary of the invention

[0004] The purpose of the present application is to provide a method, device and system for remotely accessing edge devices, which can achieve remote access to edge devices while saving costs.

[0005] To achieve the above-mentioned purpose, on the one hand, the present application provides a method for remotely accessing an edge device, which is applied to an intranet management server, and the method includes: receiving a remote access instruction sent from a central jump board, wherein the remote access instruction is used to access the edge device managed by the intranet management server; sending an address acquisition request directed to the edge device to a channel center device, so that the channel center device responds to the address acquisition request and sends a network establishment instruction to the edge device; receiving a registration request initiated by the edge device for the network establishment instruction, and assigning a static address to the edge device; obtaining an access address reported by the edge device from the communication center device, wherein the access address is constructed by the edge device according to the static address, and initiating access to the edge device based on the access address.

[0006] To achieve the above-mentioned purpose, the present application further provides an intranet management server on the other hand, wherein the intranet management server includes a memory and a processor, wherein the memory is used to store a computer program, and when the computer program is executed by the processor, the above-mentioned method of remotely accessing an edge device is implemented.

[0007] To achieve the above-mentioned purpose, on the other hand, the present application also provides a method for remotely accessing an edge device, which is applied to a channel center device, and the method includes: receiving an address acquisition request directed to an edge device from an intranet management server; in response to the address acquisition request, sending a network establishment instruction to the edge device, so that the edge device and the intranet management server establish a private network; receiving an access address reported by the edge device, and feeding back the access address to the intranet management server, so that the intranet management server initiates access to the edge device based on the access address.

[0008] To achieve the above-mentioned purpose, the present application further provides a channel center device on the other hand, which includes a memory and a processor, the memory is used to store a computer program, and when the computer program is executed by the processor, the above-mentioned method of remotely accessing an edge device is implemented.

[0009] To achieve the above-mentioned purpose, the present application also provides a system for remotely accessing edge devices, the system comprising a central jump board, an intranet management server and a channel center device, wherein: the central jump board is used to receive remote access instructions directed to edge devices sent by user terminals, and after determining the intranet management server to which the edge device belongs, sends the remote access instructions to the intranet management server; the channel center device is used to send a network establishment instruction to the edge device so that the edge device establishes a private network with the intranet management server, and receives an access address reported by the edge device; the intranet management server is used to obtain the access address of the edge device from the channel center device, and initiate access to the edge device based on the access address.

[0010] As can be seen from the above, the technical solution provided by one or more embodiments of the present application can realize remote access to edge devices through the interaction process between the central jump board machine, the intranet management server and the channel center device. Among them, after receiving the remote access instruction for the edge device, the central jump board machine can forward the remote access instruction to the intranet management server to which the edge device belongs. The intranet management server can request the access address of the edge device from the channel center device. In response to the request, the channel center device can send a network establishment instruction to the edge device. The network establishment instruction can establish a private network between the edge device and the intranet management server. After the private network is established, the intranet management server can obtain the access address corresponding to the edge device from the channel center device, so that based on the access address and the established private network, the intranet management server can initiate access to the edge device. Through the system operation between the central jump board machine, the intranet management server and the channel center device, the remote access instruction initiated by the user terminal can be finally delivered to the edge device, thereby realizing remote access to the edge device.

[0011] The technical solution provided by this application does not require the deployment of an additional jump server in the computer room where the edge device is located, thereby greatly reducing costs while achieving remote access. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0013] Figure 1 is a schematic diagram of a system structure for remotely accessing an edge device in an embodiment of the present invention;

[0014] Figure 2 It is a schematic diagram of a method for remotely accessing an edge device executed by an intranet management server in an embodiment of the present invention;

[0015] Figure 3 is an interactive schematic diagram of remote access to an edge device in an embodiment of the present invention;

[0016] Figure 4 It is a schematic diagram of a method for remotely accessing an edge device performed by a channel center device in an embodiment of the present invention;

[0017] Figure 5 is a flow chart of establishing a private network in a channel in an embodiment of the present invention;

[0018] Figure 6It is a remote access flowchart in a specific application scenario. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions of this application will be clearly and completely described below in combination with the specific implementation methods of this application and the corresponding drawings. Obviously, the described implementation methods are only part of the implementation methods of this application, not all of the implementation methods. Based on the implementation methods in this application, all other implementation methods obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0020] The method for remotely accessing edge devices provided in this application can be applied to Figure 1 In the system shown. Figure 1 It can include central jump board machine, intranet management server cluster, channel center equipment, audit center and edge equipment.

[0021] The central jump board can have a communication connection with the user terminal, so as to receive various remote access instructions sent by the user terminal.

[0022] An intranet management server cluster may include multiple intranet management servers, each of which has one or more edge devices to manage. In actual applications, edge devices can be divided according to certain standards. For example, edge devices can be divided according to regions and operators. Edge devices classified into the same group can be managed by the same intranet management server. In actual applications, the intranet management server corresponding to the same group can be one or multiple intranet management servers operating in coordination.

[0023] There can be a long connection between the channel center device and each edge device, through which the channel center device can issue various instructions to the edge device.

[0024] The audit center can record various audit information generated during the remote access process to ensure the security of the remote access process. For example, the central jump board can audit the remote access instructions sent by the user terminal, and the intranet management server can also audit the remote access instructions forwarded by the central jump board.

[0025] Specifically, the central jump server provides intranet access to ensure the security of the jump server. The cloud audit center provides audit services and monitoring services to facilitate the audit of all instructions of the central jump server and the intranet administrator server. The intranet management server cluster divides the management server group according to the region to manage the edge devices in different regions. The channel center provides a long connection channel for edge devices, and a private network between the intranet management server and the edge device can be established through the channel.

[0026] See also Figure 2 and Figure 3 , a method for remotely accessing an edge device provided in one embodiment of the present application can be applied to Figure 1 In the intranet management server shown, the method may include the following steps.

[0027] S11: Receive a remote access instruction sent from a central jump server, where the remote access instruction is used to access an edge device managed by the intranet management server.

[0028] In this embodiment, the user terminal can initiate a remote access instruction for a remote edge device, and the remote access instruction can carry the device identification of the edge device. After the remote access instruction is received by the central jump board, the central jump board can identify the device identification therein, and based on the device identification, it can determine the edge device that the user terminal currently needs to access.

[0029] In the central jump board, the mapping relationship between the device identifier and the intranet management server can be stored. Among them, the edge device managed by the intranet management server can have a mapping relationship with the intranet management server. In this way, based on the identified device identifier, the central jump board can query the intranet management server with a mapping relationship with the device identifier and send the remote access instruction to the corresponding intranet management server.

[0030] In one embodiment, in order to ensure the security of remote access, the central jump board machine and the intranet management server will audit and authenticate the received remote access instructions. Specifically, after receiving the remote access instruction, the central jump board machine will generate an audit log corresponding to the remote access instruction, and report the audit log to the audit center for subsequent offline analysis. The central jump board machine can also authenticate the user's identity. By identifying the user ID carried in the remote access instruction, it can be determined whether the user corresponding to the user ID is a user with remote access rights, and at the same time, the specific operation authority of the user when performing remote access can be further determined. If the user does not have remote access rights, or the currently executed operation request does not match the operation authority he has, the central jump board machine can reject the remote access instruction.

[0031] After auditing and authority authentication, the central jump server will determine the intranet management server corresponding to the remote access instruction and send the remote access instruction to the corresponding intranet management server.

[0032] In this embodiment, the intranet management server can perform secondary audit and secondary authentication on the received remote access instruction. The specific audit and authentication process is consistent with the process in the central jump server, for example, it also includes the steps of generating an audit log of the remote access instruction and reporting the audit log to the audit center.

[0033] Specifically, a method for providing a secure audit access instruction is provided: the login user is authenticated and audited on the central jump board machine to determine whether the login user has the authority to log in to the intranet management server. After the authentication is passed, the user logs in to the intranet management server, and the intranet management server jumps to the edge device again. The intranet management server conducts a secondary audit of all instructions executed by the edge device. All instructions executed on the central jump board machine and the intranet management server are reported to the cloud audit platform, which monitors illegal instructions and issues warnings.

[0034] S12: Send an address acquisition request directed to the edge device to the channel center device, so that the channel center device sends a network establishment instruction to the edge device in response to the address acquisition request.

[0035] In this embodiment, after the intranet management server completes the authentication of the remote access instruction, it can identify the device identification of the edge device carried in the remote access instruction. After confirming that the edge device corresponding to the device identification is an edge device managed by itself, the intranet management server can try to obtain the access address of the edge device from the channel center device. Specifically, the intranet management server can construct an address acquisition request containing the device identification and send the address acquisition request to the channel center device.

[0036] In this embodiment, the device identification of the edge device may be carried in the address acquisition request. After receiving the address acquisition request, the channel center device may extract the device identification therein, and then query locally whether it has the access address corresponding to the device identification. If it has, the corresponding access address may be directly provided to the intranet management server. If it does not have, the channel center device may send a network establishment instruction to the edge device corresponding to the device identification. The network establishment instruction may establish a private network between the edge device and the intranet management server, and then the intranet management server may initiate access to the edge device through the private network.

[0037] Specifically, the channel center device and each edge device have a long connection, each long connection can have a corresponding channel address, and there can also be a mapping relationship between the channel address and the edge device corresponding to the long connection. In this way, after receiving the address acquisition request, the channel center device can extract the device identifier in the address acquisition request, and then query the channel address corresponding to the device identifier. Through the long connection between the channel address and the edge device, the channel center device can send a network establishment instruction to the edge device.

[0038] S13: Receive a registration request initiated by the edge device in response to the network establishment instruction, and allocate a static address to the edge device.

[0039] In this embodiment, after receiving the network establishment instruction sent by the channel center device, the edge device can initiate a registration request to the affiliated intranet management server. In response to the registration request, the intranet management server can allocate a static IP address to the edge device, thereby building a private network with the edge device.

[0040] See also Figure 5 In an actual application scenario, after the supernode of the intranet management server receives the registration request initiated by the edge device, the DHCP service of the intranet management server can assign a static IP address to the edge device. After the edge device obtains the static IP address assigned by the DHCP service, it can bind the static IP address to its own network card and feedback the static IP address and its own access port to the channel center device. The combination of the static IP address and the access port can be used as the access address reported by the edge device. At this point, the private network between the edge device and the intranet management server is established.

[0041] Specifically, the method for establishing a private network can be described as follows:

[0042] 1. The edge device box establishes a long connection channel with the channel center box-platform;

[0043] 2. The channel center box-platform issues instructions to establish a private network;

[0044] 3. The edge device is registered with the intranet management server supernode, and the DHCP service of the intranet management server allocates a private network static IP;

[0045] 4. After the edge device obtains the static IP of the private network, it sets it on the network card and returns the IP and port of the private network. At this point, the private network is established.

[0046] S14: Acquire the access address reported by the edge device from the communication center device, the access address is constructed by the edge device according to the static address, and initiate access to the edge device based on the access address.

[0047] In this embodiment, after receiving the access address reported by the edge device, the channel center device can store the access address in association with the device identification of the edge device. In response to the address acquisition request previously sent by the intranet management server, the channel center device can feed back the access address reported by the edge device to the intranet management server.

[0048] After the intranet management server obtains the access address reported by the edge device, it can initiate access to the edge device based on the access address. Specifically, the intranet management server can send the remote access command sent by the user terminal to the corresponding edge device through the private network, or obtain the operating status parameters of the edge device through the private network, and then feed back the operating status parameters to the user terminal through the central jump board.

[0049] See also Figure 6 In one of the specific application examples for issuing remote commands, the central jump board can provide a pssh (parallel ssh, batch secure shell) remote login tool 35 and a pcmd (parallel cmd, batch command prompt) remote execution command tool. An n2n network can be established between the intranet management server and the edge device, with the intranet management server acting as an n2n server and the edge device acting as an n2n client.

[0050] The user terminal accesses the remote login tool and sends a pssh login request. After completing the login, it can jump to the corresponding intranet management server n2n server. Based on the login information of the user terminal, the intranet management server can obtain the device identification of the edge device that the user terminal actually wants to access remotely. The device identification can be, for example, the host name of the edge device, the device serial code, etc. The intranet management server can send an address acquisition request carrying the device identification to the channel center device, and the channel center device can feedback the IP address and access port of the edge device to the intranet management server. After determining the correctness of the IP address and access port data fed back by the channel center device, the intranet management server can initiate access to the edge device, thereby realizing remote interaction between the user terminal and the edge device.

[0051] If it is abnormal data, it will be returned directly. After the connection between the remote login tool and the edge device is established, interactive commands can be issued to the edge device through the remote login tool.

[0052] One embodiment of the present application also provides a method for remotely accessing an edge device, which can be applied to the channel center device mentioned above. Figure 4 , the method includes the following steps.

[0053] S21: receiving an address acquisition request directed to the edge device from the intranet management server;

[0054] S22: In response to the address acquisition request, sending a network establishment instruction to the edge device, so that the edge device and the intranet management server establish a private network;

[0055] S23: receiving the access address reported by the edge device, and feeding back the access address to the intranet management server, so that the intranet management server initiates access to the edge device based on the access address.

[0056] For the specific implementation of the above steps, please refer to the previous description, which will not be repeated here.

[0057] The present application also provides an intranet management server, which includes a memory and a processor, wherein the memory is used to store a computer program, and when the computer program is executed by the processor, the above-mentioned method of remotely accessing an edge device is implemented.

[0058] The present application also provides a channel center device, which includes a memory and a processor, wherein the memory is used to store a computer program, and when the computer program is executed by the processor, the method for remotely accessing an edge device as described above is implemented.

[0059] In the present application, the memory may include a physical device for storing information, which is usually a device that digitizes the information and then stores it in a medium using electrical, magnetic or optical methods. The memory may also include: a device that stores information using electrical energy, such as RAM or ROM; a device that stores information using magnetic energy, such as a hard disk, a floppy disk, a magnetic tape, a magnetic core memory, a magnetic bubble memory or a USB flash drive; a device that stores information using optical means, such as a CD or a DVD. Of course, there are other types of memory, such as quantum memory or graphene memory, etc.

[0060] In the present application, the processor may be implemented in any suitable manner. For example, the processor may take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (e.g., software or firmware) executable by the (micro)processor, a logic gate, a switch, an application specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller, etc.

[0061] The present application also provides a system for remotely accessing edge devices, the system comprising a central jump board, an intranet management server and a channel center device, wherein:

[0062] The central jump board is used to receive a remote access instruction directed to an edge device from a user terminal, and after determining the intranet management server to which the edge device belongs, send the remote access instruction to the intranet management server;

[0063] The channel center device is used to send a network establishment instruction to the edge device so that the edge device and the intranet management server establish a private network, and receive an access address reported by the edge device;

[0064] The intranet management server is used to obtain the access address of the edge device from the channel center device, and initiate access to the edge device based on the access address.

[0065] As can be seen from the above, the technical solution provided by one or more embodiments of the present application can realize remote access to edge devices through the interaction process between the central jump board machine, the intranet management server and the channel center device. Among them, after receiving the remote access instruction for the edge device, the central jump board machine can forward the remote access instruction to the intranet management server to which the edge device belongs. The intranet management server can request the access address of the edge device from the channel center device. In response to the request, the channel center device can send a network establishment instruction to the edge device. The network establishment instruction can establish a private network between the edge device and the intranet management server. After the private network is established, the intranet management server can obtain the access address corresponding to the edge device from the channel center device, so that based on the access address and the established private network, the intranet management server can initiate access to the edge device. Through the system operation between the central jump board machine, the intranet management server and the channel center device, the remote access instruction initiated by the user terminal can be finally delivered to the edge device, thereby realizing remote access to the edge device.

[0066] The technical solution provided by this application does not require the deployment of an additional jump server in the computer room where the edge device is located, thereby greatly reducing costs while achieving remote access.

[0067] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the embodiments of the system and the device, the introduction of the embodiment of the aforementioned method can be referred to for comparative explanation.

[0068] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may be in the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may be in the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0069] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0070] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0071] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0072] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0073] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0074] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0075] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0076] The above is only the implementation mode of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A method for remotely accessing an edge device, characterized in that: The method is applied to an intranet management server, and the method comprises: Receiving a remote access instruction sent from a central jump server, wherein the remote access instruction is used to access an edge device managed by the intranet management server; Sending an address acquisition request directed to the edge device to the channel center device, so that the channel center device responds to the address acquisition request and sends a network establishment instruction to the edge device through a long connection between the channel center device and the edge device, so that the edge device and the intranet management server establish a private network; receiving a registration request initiated by the edge device in response to the network establishment instruction, and assigning a static address to the edge device; The access address reported by the edge device is obtained from the channel center device, the access address is constructed by the edge device according to the static address, and access is initiated to the edge device based on the access address; wherein the access address includes the static address and the access port on the edge device.

2. The method according to claim 1, characterized in that Sending an address acquisition request pointing to the edge device to the channel center includes: authenticating the remote access instruction, and after the authentication is passed, identifying a device identifier of the edge device carried in the remote access instruction; An address acquisition request including the device identification is constructed, and the address acquisition request is sent to the channel center device.

3. The method according to claim 1, characterized in that The method further comprises: The remote access instruction is received by the intranet management server after being audited once by the central jump server, and the intranet management server performs a secondary audit on the remote access instruction; After the central jump board determines that the logged-in user has the authority to log in to the intranet management server, the intranet management server conducts a secondary audit on the instructions executed by the edge device and reports the audit results to the audit center.

4. The method according to claim 3, characterized in that The intranet management server performs a secondary audit on the remote access instruction, including: Generate an audit log of the remote access instruction and report the audit log to an audit center.

5. The method according to claim 1, characterized in that: Allocating a static address to the edge device includes: A private network is established with the edge device, and a static address is assigned to the edge device through a DHCP service.

6. The method according to claim 5, characterized in that Establishing a private network with the edge device includes: receiving a device registration request from the edge device, wherein the device registration request is initiated by the edge device after receiving an instruction to establish a private network issued by the channel center; Allocate a private network static IP address to the edge device through the DHCP service, so that the edge device sets the private network static IP address to the network card; Receive the IP and port of the private network fed back by the edge device.

7. An intranet management server, characterized in that: The intranet management server includes a memory and a processor, the memory is used to store a computer program, and when the computer program is executed by the processor, the method according to any one of claims 1 to 6 is implemented.

8. A method for remotely accessing an edge device, characterized in that: The method is applied to a channel center device, and the method comprises: Receive the address acquisition request for the edge device sent by the intranet management server; In response to the address acquisition request, sending a network establishment instruction to the edge device through a long connection with the edge device, so that the edge device establishes a private network with the intranet management server; Receive the access address reported by the edge device, and feed back the access address to the intranet management server, so that the intranet management server initiates access to the edge device based on the access address; wherein the access address is constructed based on the static address assigned to the edge device by the intranet management server, and the access address includes the static address and the access port on the edge device.

9. The method according to claim 8, characterized in that Sending a network establishment instruction to the edge device includes: Identify the device identification of the edge device carried in the address acquisition request, and query the channel address corresponding to the device identification; A network establishment instruction is sent to the edge device through the long connection between the edge device and the edge device represented by the channel address.

10. A channel center device, characterized in that: The channel center device includes a memory and a processor, the memory is used to store a computer program, and when the computer program is executed by the processor, it implements the method described in any one of claims 8 to 9.

11. A system for remotely accessing an edge device, characterized in that: The system includes a central jump board, an intranet management server and a channel center device, wherein: The central jump board is used to receive a remote access instruction directed to an edge device from a user terminal, and after determining the intranet management server to which the edge device belongs, send the remote access instruction to the intranet management server; The intranet management server is used to receive the remote access instruction sent by the central jump board machine, and send an address acquisition request pointing to the edge device to the channel center device; The channel center device is used to respond to the address acquisition request, send a network establishment instruction to the edge device through a long connection between the edge device and the edge device, so that the edge device establishes a private network with the intranet management server, and receives the access address reported by the edge device; The intranet management server is also used to obtain the access address of the edge device from the channel center device, and initiate access to the edge device based on the access address; wherein the access address is constructed based on the static address assigned to the edge device by the intranet management server, and the access address includes the static address and the access port on the edge device.

Images