A video stream one-way import system and method based on multicast proxy technology

Abstract

The application discloses a video stream one-way import system and method based on multicast proxy technology, which comprises a low-density network system and a high-density network system; a single import host A is connected with a multicast source and a single import host B as a multicast proxy client; the single import host B is connected with an intranet client as an intranet multicast source; a multicast proxy program is configured to the single import host A, and a trusted multicast source is set; the intranet client IP which needs to receive the video stream is configured in the single import host B; the single import host A receives corresponding video stream; the single import host A sends the video stream to the single import host B; the single import host B actively sends the video stream to the corresponding intranet client; and the intranet client in the high-density network system watches real-time video. The low-density network system and the high-density network system are set, the video stream is sent in a multicast mode based on a multicast protocol proxy form, the single import host B pushes the multicast stream to the intranet client by simulating the multicast source, and the effect of real-time playing is achieved.

Description

Technical Field

[0001] This invention relates to the field of network security isolation and information transmission technology, and in particular to a video stream one-way import system and method based on multicast proxy technology. Background Technology

[0002] The hardware of the network security isolation and one-way information import system adopts a "2+1" structure, which consists of two host business processing units, A and B, and a set of one-way isolation transmission units. The one-way isolation transmission unit realizes the one-way data transmission function, so that the two sides of the data transmission are physically isolated, providing one-way loop-free security for data transmission.

[0003] The network security isolation and one-way information import system enables file transfer from the external network to the internal network, offering two options: First, users simply upload files to the external server using their preferred browser, and the external server then imports the data one-way into the internal network, allowing internal users to download directly. This method is highly compatible with existing network infrastructure. Second, a client needs to be installed on both the external and internal networks. A one-way data import sending client is installed on the external terminal, and a one-way data import receiving client is installed on the internal terminal. Users simply drag and drop files or folders onto the one-way data import sending client, and the external network transmits the data one-way to the internal network. Internal users can then view the data on the receiving client. Simultaneously, emails and database information from the external network are automatically synchronized to the internal network. The database and email systems can be configured by the user, and policies can be set to schedule one-way data imports from the external network to the internal network, allowing users to access external emails and other data in real time within the internal network.

[0004] However, existing network security isolation and one-way information import systems are mainly based on file exchange and cannot import audio and video traffic into the intranet for real-time playback. Summary of the Invention

[0005] Based on the above-mentioned technical problems, the purpose of this invention is to provide a video stream one-way import system and method based on multicast proxy technology, which enables video streams from external networks to be imported into clients on internal networks for real-time playback.

[0006] To achieve the above objectives, the present invention provides the following technical solution:

[0007] A video stream one-way import system based on multicast proxy technology includes a low-density network system and a high-density network system;

[0008] The low-density network system includes a multicast source and a single-channel host A; the high-density network system includes a single-channel host B and an intranet client.

[0009] The single-channel host A, acting as a multicast proxy client, is connected to both the multicast source and the single-channel host B. The single-channel host B, acting as an intranet multicast source, is connected to the intranet client.

[0010] The single-channel host A performs unidirectional isolated transmission to the single-channel host B.

[0011] Preferably, the single-channel host A and the single-channel host B use a one-way isolation card for one-way isolated transmission.

[0012] A method for one-way import of video streams based on multicast proxy technology includes the following steps:

[0013] S1. Configure a multicast agent for single-channel host A in the low-density network system and set trusted multicast sources;

[0014] S2. Configure the internal network client IP that needs to receive the video stream in the single-channel host B of the high-density network system;

[0015] S3. In a low-density network system, the multicast source enables video streaming, and the single-channel host A receives the corresponding video stream.

[0016] S4. Single-channel host A sends the video stream to single-channel host B in the high-density network system through a one-way isolation transmission card;

[0017] S5. The single-channel host B actively sends the video stream to the corresponding intranet client based on the configured intranet client IP information.

[0018] S6. In the high-density network system, the intranet client opens the VLC streaming player to watch live video.

[0019] Preferably, the specific steps for single-channel host A to receive the corresponding video stream in step 3 are as follows:

[0020] S31, Interface for configuring IGMPProxy function on single-channel host A;

[0021] S32. Configure a reliable multicast source for the IGMPProxy program;

[0022] S33. Start the IGMPProxy program and periodically send IGMPProxy messages to request to join the relevant multicast source;

[0023] S34. The multicast source route pushes multicast video streams to single-channel external hosts based on the IGMPReport messages.

[0024] S35. When it is necessary to stop the multicast stream, IGMPReport issues a leave message command to stop receiving video multicast streams.

[0025] Preferably, when the single-channel host A receives the video stream, it also performs data netting on the multicast messages and then sends them to the single-channel host B through a one-way isolation transmission card.

[0026] Preferably, when the single-channel host A receives the video stream, it also performs data netting and transmission of the multicast packets, including the following steps:

[0027] S341. Record the destination IP and UDP port number of the multicast message;

[0028] S342. Extract the multicast message content and strip away the IP and UDP related protocol header information;

[0029] S343. Send the message data content and message attribute content to the single-channel host B through the one-way isolation transmission card;

[0030] S344. The single-lead host B combines the message content and corresponding attribute information to restore the multicast message of the single-lead host B.

[0031] S345. Single-channel host B, as a multicast source, actively sends multicast video streams to the high-density network system.

[0032] S346. In the high-density network system, intranet clients use VLC streaming player to listen to the corresponding multicast address and port number to play multicast videos.

[0033] Preferably, when a proprietary protocol is not used for unidirectional isolated transmission, the original network transmission protocol can be used directly for network transmission, and the two have the same effect.

[0034] Compared with the prior art, the beneficial effects of the present invention are:

[0035] 1. This invention sets up a low-density network system and a high-density network system, and uses a multicast protocol proxy to push the video stream to the intranet client in a multicast manner. The single-host B pushes the multicast stream to the intranet client in a simulated multicast source manner, achieving the effect of real-time playback.

[0036] 2. This invention splits multicast messages into two parts: message attributes and message content. These are then transmitted to the single-channel intranet host via a private protocol, fulfilling the requirement that the unidirectional isolation card does not transmit network protocol data. 3. In this invention, the single-channel host B actively pushes video streams to the client using either unicast or multicast methods to adapt to different intranet environments.

[0037] 4. The single-channel host B in this invention has internal storage function, which can cache video streams, improve the system's video stream caching capability, reduce memory consumption when caching external network data, and effectively improve the smoothness of video playback, solving the problem of video stream playback being not smooth due to network environment. Attached Figure Description

[0038] To more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the specific embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0039] Figure 1 This is a system topology diagram of the present invention;

[0040] Figure 2 This is a flowchart illustrating the one-way isolated transmission process of video streams based on multicast proxy technology in this invention.

[0041] Figure 3 This is a flowchart of the multicast proxy based on the IGMP protocol in this invention;

[0042] Figure 4 This is a diagram illustrating the one-way transmission of video multicast messages based on a proprietary protocol in this invention. Detailed Implementation

[0043] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0044] Please see Figures 1 to 4 The present invention provides a technical solution:

[0045] Example 1:

[0046] A video stream one-way import system based on multicast proxy technology includes a low-density network system and a high-density network system;

[0047] The low-density network system includes a multicast source and a single-channel host A; the high-density network system includes a single-channel host B and an intranet client.

[0048] The single-channel host A, acting as a multicast proxy client, is connected to both the multicast source and the single-channel host B. The single-channel host B, acting as an intranet multicast source, is connected to the intranet client.

[0049] The single-channel host A performs unidirectional isolated transmission to the single-channel host B; specifically, the single-channel host A and the single-channel host B perform unidirectional isolated transmission using a unidirectional isolation card.

[0050] A method for one-way import of video streams based on multicast proxy technology includes the following steps:

[0051] S1. Configure a multicast agent for single-channel host A in the low-density network system and set trusted multicast sources;

[0052] S2. Configure the internal network client IP that needs to receive the video stream in the single-channel host B of the high-density network system;

[0053] S3. In a low-density network system, the multicast source enables video streaming, and the single-channel host A receives the corresponding video stream.

[0054] The specific steps for single-channel host A to receive the corresponding video stream in step S3 are as follows:

[0055] S31, Interface for configuring IGMPProxy function on single-channel host A;

[0056] S32. Configure a reliable multicast source for the IGMPProxy program;

[0057] S33. Start the IGMPProxy program and periodically send IGMPProxy messages to request to join the relevant multicast source;

[0058] S34. The multicast source route pushes the multicast video stream to the unidirectional external host based on the IGMPReport message. Since the unidirectional import system requires isolated transmission at the network layer, network layer protocol stripping is necessary for the original multicast video stream. When unidirectional host A receives the video stream, it also performs data netting on the multicast message and then sends it to unidirectional host B via the unidirectional isolation transmission card. The steps involved in unidirectional host A receiving the video stream, performing data netting on the multicast message, and transmitting it include:

[0059] S341. Record the destination IP and UDP port number of the multicast message;

[0060] S342. Extract the multicast message content and strip away the IP and UDP related protocol header information;

[0061] S343. Send the message data content and message attribute content to the single-channel host B through the one-way isolation transmission card;

[0062] S344. The single-lead host B combines the message content and corresponding attribute information to restore the multicast message of the single-lead host B.

[0063] S345. Single-channel host B, as a multicast source, actively sends multicast video streams to the high-density network system.

[0064] In the S346 high-density network system, intranet clients use VLC streaming player to listen to the corresponding multicast address and port number to play multicast videos.

[0065] This invention splits multicast messages into two parts: message attributes and message content. These are then transmitted to a single-channel intranet host via a private protocol, thus fulfilling the requirement that the unidirectional isolation card does not transmit network protocol data.

[0066] S35. When it is necessary to stop the multicast stream, IGMPReport issues a leave message command to stop receiving video multicast streams.

[0067] S4. Single-channel host A sends the video stream to single-channel host B in the high-density network system through a one-way isolation transmission card;

[0068] S5. The single-channel host B actively sends the video stream to the corresponding intranet client based on the configured intranet client IP information.

[0069] S6. In the high-density network system, the intranet client opens the VLC streaming player to watch live video.

[0070] This invention sets up low-density and high-density network systems, and uses a multicast protocol proxy to push video streams to intranet clients in a multicast manner. The single-host B pushes the multicast stream to the intranet clients in a simulated multicast source manner, achieving the effect of real-time playback.

[0071] Example 2:

[0072] Please see Figures 1 to 4 The present invention provides a technical solution:

[0073] A video stream one-way import system based on multicast proxy technology includes a low-density network system and a high-density network system;

[0074] The low-density network system includes a multicast source and a single-channel host A; the high-density network system includes a single-channel host B and an intranet client.

[0075] The single-channel host A, acting as a multicast proxy client, is connected to both the multicast source and the single-channel host B. The single-channel host B, acting as an intranet multicast source, is connected to the intranet client.

[0076] The single-channel host A performs unidirectional isolated transmission to the single-channel host B; specifically, the single-channel host A and the single-channel host B perform unidirectional isolated transmission using a unidirectional isolation card.

[0077] A method for one-way import of video streams based on multicast proxy technology includes the following steps:

[0078] S1. Configure a multicast agent for single-channel host A in the low-density network system and set trusted multicast sources;

[0079] S2. Configure the internal network client IP that needs to receive the video stream in the single-channel host B of the high-density network system;

[0080] S3. In a low-density network system, the multicast source enables video streaming, and the single-channel host A receives the corresponding video stream.

[0081] The specific steps for single-channel host A to receive the corresponding video stream in step S3 are as follows:

[0082] S31, Interface for configuring IGMPProxy function on single-channel host A;

[0083] S32. Configure a reliable multicast source for the IGMPProxy program;

[0084] S33. Start the IGMPProxy program and periodically send IGMPProxy messages to request to join the relevant multicast source;

[0085] S34. The multicast source route pushes the multicast video stream to the unidirectional external host based on the IGMPReport messages. Since the unidirectional import system requires isolated transmission at the network layer, the original multicast video stream needs to undergo network layer protocol stripping. When unidirectional host A receives the video stream, it also performs data netting on the multicast messages and then sends them to unidirectional host B via the unidirectional isolation transmission card; the original network transmission protocol is used directly for network transmission.

[0086] S35. When it is necessary to stop the multicast stream, IGMPReport issues a leave message command to stop receiving video multicast streams.

[0087] S4. Single-channel host A sends the video stream to single-channel host B in the high-density network system through a one-way isolation transmission card;

[0088] S5. The single-channel host B actively sends the video stream to the corresponding intranet client based on the configured intranet client IP information.

[0089] S6. In the high-density network system, the intranet client opens the VLC streaming player to watch live video.

[0090] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for unidirectional import of video stream based on multicast proxy technology, characterized in that, It comprises the following steps: S1, configure a multicast proxy program for a single-guide host A in a low-density network system, and set a trusted multicast source; S2, configure an internal network client IP in a single-guide host B in a high-density network system which needs to receive a video stream; S3, start a video push stream in a multicast source in the low-density network system, and the single-guide host A receives a corresponding video stream; S4, the single-guide host A sends the video stream to the single-guide host B in the high-density network system through a one-way isolation transmission card; S5, the single-guide host B actively sends the video stream to the corresponding internal network client according to the configured internal network client IP information; S6, the internal network client in the high-density network system opens a VLC streaming player to watch real-time video; The step S3 of receiving the corresponding video stream by the single-guide host A specifically comprises the following steps: S31, configure an interface of an IGMP Proxy function for the single-guide host A; S32, configure a reliable multicast source to the IGMP Proxy program; S33, start the IGMP Proxy program, and initiate an IGMP Proxy message at a regular time to apply to join the related multicast source; S34, the multicast source routes push the multicast video stream to the single-guide external network host according to the IGMP Report message; S35, when it is needed to stop the multicast stream, the IGMP Report sends a leave message instruction to stop receiving the video multicast stream; When the single-guide host A receives the video stream, data is also extracted from the multicast message, and then is sent to the single-guide host B through the one-way isolation transmission card, and the specific steps are as follows: S341, record the destination IP and UDP port number and other attribute contents of the multicast message; S342, extract the multicast message content and strip the IP, UDP related protocol header information; S343, send the message data content and the message attribute content to the single-guide host B through the one-way isolation transmission card; S344, the single-guide host B restores the multicast message of the single-guide host B by combining the message content and the corresponding attribute information; S345, the single-guide host B actively sends the multicast video stream to the high-density network system as a multicast source; S346, the internal network client in the high-density network system uses a VLC streaming player to listen to the corresponding multicast address and port number to play the multicast video.

2. The method of claim 1, wherein the method is characterized by: When the one-way isolation transmission of the private protocol is not used, the original network transmission protocol can be directly used for network transmission, and the effects of the two are the same.

3. A system for one-way import of video stream based on multicast proxy technology, characterized in that, The system performs a video stream one-way guide-in method based on a multicast proxy technology according to any one of claims 1-2, comprising a low-density network system and a high-density network system; The low-density network system comprises a multicast source and a single-guide host A; the high-density network system comprises a single-guide host B and an internal network client; The single-guide host A is connected with the multicast source and the single-guide host B as a multicast proxy client; the single-guide host B is connected with the internal network client as an internal network multicast source; The single-guide host A and the single-guide host B perform one-way isolation transmission, and the video stream is transmitted from the single-guide host A to the single-guide host B in one-way isolation.

4. The system according to claim 3, wherein the system further comprises a multicast proxy server. The single-guide host A and the single-guide host B perform one-way isolation transmission by using a one-way isolation card.

Images