A device remote connection method, apparatus, medium and system

Abstract

The application relates to a device remote connection method, device, medium and device, which is applied to an operation and maintenance platform and comprises the following steps: receiving a remote connection request of a client, wherein the remote connection request comprises a target access end device; when a WebSocket connection is not established between the target access end device and the operation and maintenance platform, adopting a message queue mode to inform the target access end device to send a request for establishing the WebSocket connection to the operation and maintenance platform, and establishing the WebSocket connection; through the WebSocket connection, establishing a remote connection session of the client to the target access end device, and bidirectionally transmitting operation data of the client and response data of the target access end, so that an operation and maintenance personnel remotely operates the target access end through the client. An additional proxy program does not need to be deployed on the access end device, the workload of operation and maintenance and the complexity of the system are reduced, and communication cost and processing time are reduced.

Description

Technical Field

[0001] This application relates to the Internet field, and more particularly to a method, apparatus, medium, and system for remote device connection. Background Technology

[0002] In SD-WAN (Software-Defined Wide Area Network) application scenarios, the access devices that bring traffic into the SD-WAN network are typically deployed in the customer's internal network environment. These access devices can be physical machines (CPEs), virtual machines, or containers (vCPEs).

[0003] Because maintenance personnel cannot directly access the access devices deployed in the intranet environment from the control center, they cannot promptly troubleshoot or execute emergency system commands.

[0004] In related technologies, remote desktop assistance from clients is required, which results in high communication costs, slow processing efficiency, and a lack of confidentiality during execution, potentially leading to the leakage of sensitive information. Furthermore, the lack of complete recording of the execution process makes it impossible to trace back the operation, hindering the accumulation of knowledge about problem-solving processes and the review of operational procedures.

[0005] To address these issues, other technical approaches can be considered. For example, a proxy program can be deployed on the access device to expose the internal network to the control center. This allows operations and maintenance personnel to directly access the access device for troubleshooting and system command execution. Alternatively, technologies such as Virtual Private Networks (VPNs) or Secure Sockets Layer (SSL) can be used to securely expose the internal network to the control center. This also allows operations and maintenance personnel direct access to the internal network.

[0006] However, these methods require the deployment of additional agent programs on the access devices, increasing the workload of operation and maintenance and the complexity of the system. The additional network equipment and configuration also increase the complexity and maintenance costs of the system. Moreover, exposing the internal network to the control center may increase the network's attack surface and security risks, making the internal network more vulnerable to hacker attacks and malware infections, or leading to the leakage of sensitive information, making confidential data and user privacy more easily obtained and abused illegally. Summary of the Invention

[0007] To overcome the problems existing in related technologies, this application provides a method, apparatus, medium and device for remote connection of equipment.

[0008] According to a first aspect of this application, a method for remotely connecting a device is provided, applied to an operation and maintenance platform, comprising:

[0009] Receive a remote connection request from a client, wherein the remote connection request includes a target access device;

[0010] When the target access device and the operation and maintenance platform have not established a WebSocket connection, a message queue is used to notify the target access device to send a request to the operation and maintenance platform to establish a WebSocket connection, and then establish a WebSocket connection.

[0011] The WebSocket connection establishes a remote connection session between the client and the target access device, enabling bidirectional transmission of the client's operation data and the target access device's response data, thus allowing maintenance personnel to remotely operate the target access device through the client.

[0012] Based on the foregoing solution, in some embodiments of this application, before receiving the remote connection request from the client, the following steps are also included:

[0013] Receive registration information from access devices, verify the registration information, and store information about successfully registered access devices;

[0014] Provides a remote connection operation interface so that clients can log in to the web service, retrieve successfully registered access devices, and select the target access device.

[0015] Based on the foregoing scheme, in some embodiments of this application, establishing a remote connection session between the client and the target access device includes:

[0016] A first temporary service port and a second temporary service port are created for the remote connection session. The first temporary service port is used to connect to the access device, and the second temporary service port is used to connect to the client.

[0017] Based on the foregoing scheme, in some embodiments of this application, the bidirectional transmission of the client's operation data and the target access terminal's response data includes:

[0018] An external service port is created to receive the client's operation data and the access device's response data, and then forwards them to the corresponding temporary service port.

[0019] Based on the foregoing scheme, in some embodiments of this application, receiving the client's operation data and the access device's response data through the external service port and forwarding them to the corresponding temporary service port includes:

[0020] When the data received by the external service port is the client's operation data, the operation data is sent to the second temporary service port, so that the second temporary service port forwards the operation data to the first temporary service port, and the first temporary service port forwards it to the access terminal device.

[0021] When the data received by the external service port is the response data of the access device, the response data is sent to the first temporary service port, so that the first temporary service port forwards the response data to the second temporary service port, and the second temporary service port forwards it to the client.

[0022] Based on the foregoing solution, in some embodiments of this application, the device remote connection method further includes:

[0023] Monitor the idle time of the remote connection session, and close the remote connection session when the idle time reaches a preset threshold.

[0024] Based on the foregoing solution, in some embodiments of this application, the device remote connection method further includes:

[0025] Record the bidirectional data transmission, generate an operation log, and store the operation log based on the identifier of the remote connection session.

[0026] Based on the foregoing solution, in some embodiments of this application, the device remote connection method further includes:

[0027] The system receives a request from the client to retrieve operation logs and displays the corresponding operation logs on the remote connection operation interface based on the identifier of the remote connection session in the request.

[0028] According to another aspect of this application, a device for remote connection of equipment is provided, applied to an operation and maintenance platform, comprising:

[0029] A remote connection request receiving module is used to receive remote connection requests from clients, wherein the remote connection request includes a target access device;

[0030] The WebSocket connection management module is used to notify the target access device to send a request to the operation and maintenance platform to establish a WebSocket connection when the target access device and the operation and maintenance platform have not established a WebSocket connection, and to establish a WebSocket connection.

[0031] The connection session establishment module is used to establish a remote connection session between the client and the target access device through the WebSocket connection, and to transmit the client's operation data and the target access device's response data bidirectionally, so that maintenance personnel can remotely operate the target access device through the client.

[0032] Based on the foregoing solution, in some embodiments of this application, the device remote connection device further includes:

[0033] The registration module is used to receive registration information from access devices, verify the registration information, and store information about successfully registered access devices.

[0034] The Web service module provides a remote connection interface, enabling clients to log in to the Web service, retrieve successfully registered access devices, and select the target access device.

[0035] Based on the foregoing solution, in some embodiments of this application, the device remote connection apparatus further includes:

[0036] The session monitoring module is used to monitor the idle time of the remote connection session. When the idle time reaches a preset threshold, the remote connection session is closed.

[0037] Based on the foregoing solution, in some embodiments of this application, the device remote connection apparatus further includes:

[0038] The log management module is used to record bidirectional data transmission, generate operation logs, and store the operation logs based on the identifier of the remote connection session.

[0039] Based on the foregoing scheme, in some embodiments of this application, the log management module is further configured to receive the client's request for obtaining operation logs, and display the corresponding operation logs on the remote connection operation interface according to the identifier of the remote connection session in the request.

[0040] According to another aspect of this application, a computer-readable storage medium is provided, on which a computer program is stored, which, when executed, implements the steps of a device remote connection method.

[0041] According to another aspect of this application, a computer device is provided, including a processor, a memory, and a computer program stored in the memory, characterized in that the processor executes the computer program to implement the steps of a remote device connection method.

[0042] This application establishes an operations and maintenance (O&M) platform that receives remote connection requests from clients. When no connection is established with the target access device, the O&M platform uses a message queue to notify the target access device to send a WebSocket connection request to the O&M platform and establish the WebSocket connection. This establishes a remote connection session between the client and the target access device, enabling O&M personnel to remotely operate the target access device through the client. As an effective way to solve the problem of access devices deployed in intranet environments being inaccessible directly, compared to the previously mentioned methods of deploying proxy programs, using VPNs or SSL on the access device, this remote device connection method has the following advantages:

[0043] No additional agent programs need to be deployed on the access device, reducing the workload of operation and maintenance and the complexity of the system.

[0044] There is no need to expose the internal network to the control center. Data is transmitted using WebSocket connections, which ensures the security of data transmission.

[0045] Maintenance personnel can directly operate the target access point through the client, which is convenient and quick, reducing communication costs and processing time.

[0046] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and do not limit this application. Attached Figure Description

[0047] The accompanying drawings, which form part of this application, are used to provide a further understanding of this application. The illustrative embodiments and descriptions of this application are used to explain this application and do not constitute an undue limitation of this application. In the drawings:

[0048] Figure 1 This is a flowchart illustrating a method for remotely connecting a device according to an exemplary embodiment.

[0049] Figure 2 This is a block diagram illustrating a device remote connection apparatus according to an exemplary embodiment.

[0050] Figure 3 This is a block diagram illustrating a device remote connection apparatus according to an exemplary embodiment.

[0051] Figure 4 This is a block diagram illustrating a device remote connection apparatus according to an exemplary embodiment.

[0052] Figure 5 This is a block diagram illustrating a device remote connection apparatus according to an exemplary embodiment.

[0053] Figure 6 This is a block diagram illustrating a computer device for remote device connection according to an exemplary embodiment. Detailed Implementation

[0054] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application. It should be noted that, unless otherwise specified, the embodiments and features in the embodiments of this application can be arbitrarily combined with each other.

[0055] In SD-WAN application scenarios, customers configure access devices on their internal network to access the SD-WAN network. These access devices can be physical machines (CPEs), virtual machines, or containers (vCPEs). Since access devices are typically deployed within the customer's internal network environment, maintenance personnel cannot remotely connect to them when troubleshooting or executing urgent system commands. Traditionally, customers need to use remote desktop to assist maintenance personnel, resulting in high communication costs, slow processing efficiency, and a lack of confidentiality, potentially leading to the leakage of sensitive information. Furthermore, this remote processing method cannot record the execution process, hindering knowledge accumulation and operational review. Other technologies, such as deploying agents to expose the internal network to the control center and using VPNs or SSL to securely expose the internal network to the control center, can address the issue of maintenance personnel not being able to directly access access devices deployed on the internal network in SD-WAN scenarios. However, the former presents security risks and low operational efficiency, while the latter requires additional security configuration and management costs.

[0056] This application provides a method for remote device connection, applied to an operations and maintenance (O&M) platform. The O&M platform is located in a cloud system. A server-side application is installed on the O&M platform, and a client-side application is installed on the network devices of O&M personnel. O&M personnel can access the O&M platform using the client-side application. The access device can initiate a connection request to the O&M platform and establish a WebSocket connection. The O&M platform connects to the O&M personnel's client on one hand, and establishes a WebSocket connection with the access device on the other, enabling the client to remotely operate the access device through the established WebSocket connection.

[0057] Figure 1 This is a flowchart illustrating a method for remotely connecting a device according to an exemplary embodiment. (Reference) Figure 1 Remote device connection methods are applied to the operation and maintenance platform, including:

[0058] Step S11: Receive a remote connection request from the client. The remote connection request includes the target access device.

[0059] When operations and maintenance (O&M) personnel need to remotely operate access devices, since their client computers cannot directly connect to the access devices located on the internal network, they need to send a remote connection request to the O&M platform via their client computers. Furthermore, because SD-WAN networks typically include multiple access devices, O&M personnel need to identify the target access device from among these and include its relevant information in the remote connection request. This information could include a globally unique serial number (SN), a globally unique ID, the target access device's IP address, MAC address, device model, version number, and other relevant details. This information helps O&M personnel more accurately identify and manage the target device, improving the efficiency of troubleshooting and system management.

[0060] Prior to this, the operations and maintenance platform needs to know which access devices exist in the SD-WAN network and display the known access devices to the operations and maintenance personnel's client so that the operations and maintenance personnel can select the access devices for remote operation through the operations and maintenance platform.

[0061] In one exemplary embodiment, the device remote connection method further includes, before receiving a remote connection request from a client;

[0062] Receive registration information from access devices, verify the registration information, and store the information of successfully registered access devices.

[0063] When configuring an SD-WAN network, the operations and maintenance (O&M) platform records information for each access device before delivery to the customer. This information includes, for example, the serial number (SN), globally unique ID, IP address, MAC address, device model, and version number. After configuring the access devices in their respective branch offices and connecting to the network, these devices can proactively connect to the O&M platform and register. Registration information can uniquely identify each access device, such as one or more of the following: globally unique serial number (SN), globally unique ID, IP address, MAC address, device model, and version number. Upon receiving the registration information, the O&M platform compares it with the pre-recorded device information. If they match, the platform confirms successful registration and stores the device's information. Registering access devices prevents unauthorized access, improving network security. Furthermore, it helps determine which of the multiple access devices delivered to the customer are already in use. In practical applications, the operations and maintenance platform can be configured with a remote connection proxy service and a web service. The remote connection proxy service receives and saves the registration information. The web service then displays the saved registration information on the remote connection operation interface.

[0064] Meanwhile, the operations and maintenance platform provides a remote connection interface. When operations and maintenance personnel connect to the platform using a client, this interface is displayed on their client, allowing them to log in to the web service. Through this interface, personnel can retrieve registered access devices. They can then select a target access device from the list. Clicking the send or confirm button sends a remote connection request to the operations and maintenance platform, carrying the unique identifier of the target access device.

[0065] Step S12: When the target access device and the operation and maintenance platform have not established a WebSocket connection, the target access device is notified to send a request to the operation and maintenance platform to establish a WebSocket connection using a message queue, and then the WebSocket connection is established.

[0066] Although access devices proactively establish a WebSocket connection with the operations and maintenance (O&M) platform and send registration information upon startup, maintaining a prolonged remote connection between the O&M platform and the access devices leads to a waste of connection channel resources. When there are many access devices in an SD-WAN network, prolonged remote connections between the O&M platform and access devices consume significant resources. Therefore, timely closure of established WebSocket connections can save substantial resources, reducing the consumption of both the O&M platform and access devices. Furthermore, timely closure of established WebSocket connections can improve security and shorten the potential attack window. If WebSocket connections remain open, attackers have more time and opportunity to launch attacks. Timely closure of WebSocket connections reduces the attack window, thereby improving system security.

[0067] Because WebSocket connection requests can only be sent from the access device to the operations and maintenance platform, and not from the operations and maintenance platform to the access device, after the operations and maintenance platform receives a remote connection request from the client to connect to the target access device, it checks whether a WebSocket connection already exists between the target access device and the operations and maintenance platform. If a WebSocket connection exists, it uses the existing WebSocket connection; if the WebSocket connection is released, the operations and maintenance platform assumes that no WebSocket connection has been established between the target access device and the operations and maintenance platform, and uses a message queue to notify the target access device to send an instruction to the operations and maintenance platform to establish a WebSocket connection. After receiving the connection request from the target access device, the operations and maintenance platform establishes a WebSocket connection with the target access device.

[0068] Step S13: Establish a remote connection session between the client and the target access device via WebSocket connection, and transmit the client's operation data and the target access device's response data bidirectionally, so that the operation and maintenance personnel can remotely operate the target access device through the client.

[0069] The operations and maintenance platform has established a connection with the operations and maintenance personnel's client. Through a WebSocket connection with the target access device, a remote connection session can be established between the client and the target access device, enabling bidirectional transmission of client operation data and target access device response data. Through this remote connection session, operations and maintenance personnel can remotely operate the target access device via the client.

[0070] In this embodiment, when maintenance personnel need to establish a remote connection with the target access device, the maintenance platform uses a message queue to send a small amount of control information to the target access device, notifying it to initiate a WebSocket connection request to the maintenance center and establish a WebSocket connection for transmitting data streams. This fully utilizes the advantages of message queues (suitable for transmitting small amounts of data) and WebSocket connections (suitable for transmitting large amounts of data). When a remote connection needs to be established, the maintenance platform takes the lead, sending control information via message queues to control the target access device to establish a WebSocket connection. The maintenance platform does not need to maintain a long-term WebSocket connection with the access device, avoiding idle communication channel occupation and resource consumption on both the maintenance platform and the target access device. By using message queues and WebSocket connections, the establishment and disconnection of remote connections can be controlled more flexibly and efficiently, reducing resource waste and consumption, and improving system stability and reliability.

[0071] Because the operations and maintenance platform is set up in the cloud system, it establishes WebSocket connections with different access devices. Different operations and maintenance personnel only need to connect to the operations and maintenance platform to choose to establish remote connections with different access devices. This avoids the problems of traditional technologies, such as the need to deploy operation gateways, which need to be deployed in a network that can be directly connected to the intranet, which has great limitations on the deployment network environment, consumes a lot of hardware resources, and requires multiple operation gateways for multiple customers, resulting in high deployment costs.

[0072] In an exemplary embodiment, step S13, establishing a remote connection session from the client to the target access device, includes:

[0073] A first temporary service port and a second temporary service port are created for the remote connection session. The first temporary service port is used to connect to the access device, and the second temporary service port is used to connect to the client.

[0074] The operations and maintenance platform assigns a session ID to each session, with different sessions possessing unique session IDs. The session ID identifies the current remote session, and the first and second temporary service ports each correspond one-to-one with the session ID. A pair of temporary ports are opened for each session, connecting to the client and the access device respectively. This ensures isolation between different sessions, preventing mutual interference. It also facilitates management by the operations and maintenance platform. For example, the platform can record operation or response data from each temporary port in real time, generating log data identified by the session ID. Log data from different clients remotely connecting to different access devices can be clearly distinguished.

[0075] In one exemplary embodiment, the bidirectional transmission of client operation data and target access terminal response data includes:

[0076] Create an external service port to receive client operation data and access device response data, and forward them to the corresponding temporary service port.

[0077] If a pair of temporary ports are established for each session, and an external port is used as the temporary port for transmitting data between the client and the access device, a large amount of external port resources will be consumed when there are many remote connections. This places high demands on the hardware resources of the operation and maintenance platform, limiting its service capabilities. Therefore, in this embodiment, an external service port is created to receive operation data from the client and response data from the access device, and then forwards it to the corresponding temporary service port. The temporary service port can be an internal port, invisible externally, and can be configured by the operation and maintenance platform as needed. The operation and maintenance platform creates the external service port to receive operation data from different clients and response data from different target access devices. When providing remote connection services, the operation and maintenance platform only occupies one external port, saving external service port resources. Since the external service port forwards operation data from different clients and response data from different target access devices to the corresponding temporary service ports, different sessions can still be distinguished through the temporary service ports.

[0078] In one exemplary embodiment, receiving client operation data and access device response data through an external service port and forwarding them to the corresponding temporary service port includes:

[0079] When the data received by the external service port is the client's operation data, the operation data is sent to the second temporary service port, so that the second temporary service port forwards the operation data to the first temporary service port, and the first temporary service port forwards it to the access device.

[0080] When the data received by the external service port is the response data of the access terminal device, the response data is sent to the first temporary service port, so that the first temporary service port forwards the response data to the second temporary service port, and the second temporary service port forwards it to the client.

[0081] Data from the client and access device is received by the external service port and forwarded to the corresponding first or second temporary service port. Client operation data is forwarded to the second temporary service port, and then sent to the access device via the first temporary service port; access device response data is forwarded to the first temporary service port, and then sent to the client via the second temporary service port. This not only enables remote connection between the client and access device, but also isolates operation data during the remote connection process using paired temporary ports, preventing interference between data from different clients and access devices. Furthermore, it distinguishes between operation data and response data based on whether the data is sent from the first temporary service port to the second temporary service port or vice versa, enabling effective differentiation when storing log data and facilitating subsequent log data management and use.

[0082] In one exemplary embodiment, the device remote connection method further includes:

[0083] Monitor the idle time of remote connection sessions, and close the remote connection session when the idle time reaches a preset threshold.

[0084] Remote connection sessions consume connection channel resources. The operations and maintenance platform can monitor current sessions and record their idle duration. For example, when the idle duration reaches a preset threshold, the remote connection session can be closed. This avoids wasting remote connection channel resources due to prolonged idleness, and timely closure of remote connection sessions reclaims channel resources. The preset threshold can be determined based on actual conditions, such as 1 minute or 5 minutes. Since each session automatically closes after a certain idle period, it avoids the problem of traditional technologies where remote connections persist for extended periods due to maintenance personnel forgetting to close them, continuously generating large amounts of log data and significantly wasting system resources.

[0085] In one exemplary embodiment, the device remote connection method further includes:

[0086] Record bidirectional data transmission, generate operation logs, and store operation logs based on the identifier of the remote connection session.

[0087] During remote connections, the operations and maintenance platform records bidirectional data transmission for each session, generates operation logs, and stores these logs based on the identifier of the remote connection session. Each remote connection generates its own log data, which is stored in the database based on the remote connection session identifier. When querying log data, only the remote connection session identifier needs to be retrieved to quickly obtain the target log. Furthermore, having the operations and maintenance platform record log data avoids the risk of log data falsification inherent in traditional technologies where log data is recorded and stored by the access device and then uploaded to a log server. By recording and saving WebSocket connection process data, it is easy to trace back the operation process, facilitating the accumulation of knowledge and experience in problem handling and enabling review of the operation process.

[0088] In one exemplary embodiment, the device remote connection method further includes:

[0089] Receive the client's request to retrieve operation logs, and display the corresponding operation logs on the remote connection operation interface based on the identifier of the remote connection session in the request.

[0090] When operations and maintenance (O&M) personnel need to obtain log data, they can send a request to the O&M platform to retrieve operation logs. O&M personnel can retrieve the corresponding log data based on different sessions, including the identifier of the remote connection session in the request. The O&M platform then displays the corresponding operation logs on the remote connection operation interface based on the remote connection session identifier for O&M personnel to view.

[0091] To better understand the device remote connection method proposed in this application, a specific embodiment will be used for further explanation. Specific Implementation Example 1:

[0093] The company has multiple branch offices, each configured with access devices to form an SD-WAN network. Since these access devices reside within the internal network environments of each branch office, and these branches are geographically distributed, maintenance personnel cannot remotely connect to the access devices for troubleshooting or executing emergency system commands. They resort to remote desktop operations, but this requires the corresponding branch office to activate the remote desktop and assist the maintenance personnel, resulting in high communication costs, low efficiency, and the potential for sensitive information leakage.

[0094] Remote connections can also be achieved by deploying an operations gateway. However, the operations gateway needs to be deployed in a network environment that can directly connect to the internal network. If this method is adopted, multiple operations gateways need to be deployed for multiple branch offices, which is very costly, and this method cannot be quickly scaled up.

[0095] After comparing various remote connection solutions, the enterprise's operations and maintenance personnel ultimately adopted the remote connection method provided by the cloud service provider. The cloud service provider offers an operations and maintenance platform, which is hosted within the cloud system and includes a remote connection proxy service, a web service, and a log storage unit. The remote connection proxy service is deployed on a network-accessible server, providing secure WebSocket connections (TLS encryption) for remote connection clients and secure HTTPS control for the operations and maintenance platform. The web service provides a remote connection operation interface for operations and maintenance personnel to log in.

[0096] After restarting, access devices in multiple branch offices automatically connect to the remote proxy server and send registration information, which serves as a unique identifier for the access device. The remote proxy service verifies the registration information and then stores the access device information.

[0097] Maintenance personnel access the remote connection operation interface by visiting the specified URL, and log in to the web service after entering the correct username and password. Through the remote connection interface, maintenance personnel can retrieve information about successfully registered access devices. The web service obtains relevant information from the access device information stored in the remote connection proxy service and displays it in the remote connection operation interface.

[0098] The maintenance personnel select the target access device that needs to execute emergency system commands and click the confirmation button for remote connection.

[0099] When the remote connection proxy service of the operation and maintenance platform detects that no WebSocket connection has been established with the target access device, it uses a message queue to notify the target access device to send a request to the remote connection proxy server to establish a WebSocket connection, and then establishes the WebSocket connection.

[0100] The remote connection proxy service establishes a remote connection session based on the identifiers of the operator's client and the target access device, and creates two internal ports: a first temporary service port and a second temporary service port.

[0101] After the maintenance personnel see the successful connection message on the remote connection interface, they can send operation data to the target access device. The operation data is sent to the external service port pre-established by the remote connection proxy server. The remote proxy server then sends the operation data to the second temporary service port, which forwards it to the first temporary service port, and finally the first temporary service port forwards it to the target access device.

[0102] The target access device executes the operation data and sends the response data to the external service port pre-established by the remote proxy server. The remote proxy server sends the response data to the first temporary service port, which forwards it to the second temporary service port, and finally forwards it to the client.

[0103] The remote connection agent service monitors the idle time of remote connection sessions and closes the remote connection session when the idle time reaches 2 minutes.

[0104] The log storage unit monitors remote connection sessions in real time, records the data transmitted between the first and second temporary service ports, generates log data, and stores it based on the session identifier. The log data is stored in JSON file format on the object storage server.

[0105] When operations and maintenance personnel need to access log data, they first connect to the remote connection operation interface, select the relevant button for log data, and the remote connection operation interface displays existing log data by session ID. The operations and maintenance personnel then select a specific session ID from the remote connection logs of the operations and maintenance platform.

[0106] The web service uses the session ID of the operation log to request a temporary authorized download link for the operation log from the proxy service. Using this temporary authorized download link ensures that only the web service on the operations platform can access and download the log once, thus preventing the leakage of sensitive log information.

[0107] The web service displays an operation log player via a remote connection interface. The player accesses a temporary authorized download link to download the operation log file associated with the session ID from the object storage server. The player parses the operation log file and replays the remote operation process second by second from the beginning. The user can visually view the operation process, freely drag the playback progress, and directly copy the log information text.

[0108] Through the above embodiments, the device remote connection method provided in this application allows the operation and maintenance platform to take the lead in establishing a remote connection when necessary. Control information is sent via message queues to control the target access device to establish a WebSocket connection. The operation and maintenance platform does not need to maintain a long-term WebSocket connection with the access device, avoiding idle communication channel occupation and resource consumption on both the operation and maintenance platform and the target access device. Furthermore, it eliminates the need to deploy an operation gateway, avoiding the problems of significant network environment limitations, high hardware resource consumption of operation gateways, and high deployment costs associated with deploying multiple operation gateways for multiple customers.

[0109] Operation and response data are received through an external service port, and a pair of temporary internal service ports are established for each remote connection session, which saves external service port resources and isolates different sessions.

[0110] Operation logs are stored using session identifiers for easy access and management. They are also stored in the operations and maintenance center, preventing tampering and leakage and enhancing log security.

[0111] Figure 2 This is a block diagram illustrating a device remote connection apparatus according to an exemplary embodiment. (Reference) Figure 2 The device remote connection apparatus includes: a remote connection request receiving module 201, a WebSocket connection management module 202, and a connection session establishment module 203.

[0112] The remote connection request receiving module 201 is configured to receive remote connection requests from clients, including the target access device.

[0113] The WebSocket connection management module 202 is configured to, when the target access device and the operation and maintenance platform have not established a WebSocket connection, use a message queue to notify the target access device to send a request to the operation and maintenance platform to establish a WebSocket connection, and then establish a WebSocket connection.

[0114] The connection session establishment module 203 is configured to establish a remote connection session between the client and the target access device via WebSocket connection, and to bidirectionally transmit the client's operation data and the target access device's response data, so that maintenance personnel can remotely operate the target access device through the client.

[0115] In an exemplary embodiment, the connection session establishment module 203 is further configured to create a first temporary service port and a second temporary service port for a remote connection session, wherein the first temporary service port is used to connect to the access device and the second temporary service port is used to connect to the client.

[0116] In an exemplary embodiment, the connection session establishment module 203 is further configured to create an external service port, receive client operation data and access device response data through the external service port, and forward them to the corresponding temporary service port.

[0117] Figure 3 This is a block diagram illustrating a device remote connection apparatus according to an exemplary embodiment. (Reference) Figure 3 The device remote connection device also includes:

[0118] The registration module 301 is configured to receive registration information from access devices, verify the registration information, and store information about successfully registered access devices.

[0119] Web service module 302 is configured to provide a remote connection operation interface so that clients can log in to the Web service, retrieve successfully registered access devices, and select target access devices.

[0120] Figure 4 This is a block diagram illustrating a device remote connection apparatus according to an exemplary embodiment. (Reference) Figure 4 The device remote connection device also includes:

[0121] The session monitoring module 401 is configured to monitor the idle time of the remote connection session and close the remote connection session when the idle time reaches a preset threshold.

[0122] Figure 5 This is a block diagram illustrating a device remote connection apparatus according to an exemplary embodiment. (Reference) Figure 5 The device remote connection device also includes:

[0123] The log management module 501 is configured to record bidirectional data transmission, generate operation logs, and store the operation logs based on the identifier of the remote connection session.

[0124] In an exemplary embodiment, the log management module 501 is further configured to receive a request from a client to obtain operation logs, and display the corresponding operation logs on the remote connection operation interface according to the identifier of the remote connection session in the request.

[0125] Figure 6 This is a block diagram illustrating a computer device 600 for remote device connection according to an exemplary embodiment. For example, the computer device 600 may be provided as a server. (Refer to...) Figure 6 The computer device 600 includes a processor 601, the number of which can be set to one or more as needed. The computer device 600 also includes a memory 602 for storing instructions executable by the processor 601, such as application programs. The number of memories can be set to one or more as needed. The stored application programs can be one or more. The processor 601 is configured to execute instructions to perform the aforementioned device remote connection method.

[0126] Those skilled in the art will understand that embodiments of this application can be provided as methods, apparatus (devices), or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product implemented on one or more computer-usable storage media containing computer-usable program code. Computer storage media include volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data), including but not limited to RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridges, magnetic tape, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and is accessible by a computer. Furthermore, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transmission mechanisms, and can include any information delivery medium.

[0127] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (devices), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0128] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes

[0129] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0130] In this application, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that an article or device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such an article or device. Without further limitation, an element defined by the phrase "comprising..." does not exclude the presence of other identical elements in the article or device that includes said element.

[0131] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0132] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if these modifications and variations fall within the scope of the claims of this application and their equivalents, the intent of this application also includes these modifications and variations.

Claims

1. A method for remotely connecting devices, applied to an operation and maintenance platform, characterized in that, include: Receive a remote connection request from a client, wherein the remote connection request includes a target access device; When the target access device and the operation and maintenance platform have not established a WebSocket connection, a message queue is used to notify the target access device to send a request to the operation and maintenance platform to establish a WebSocket connection, and then establish a WebSocket connection. The WebSocket connection establishes a remote connection session between the client and the target access device, enabling bidirectional transmission of the client's operation data and the target access device's response data, thus allowing maintenance personnel to remotely operate the target access device through the client. Record the bidirectional data transmission, generate an operation log, and store the operation log based on the identifier of the remote connection session; Establishing a remote connection session between the client and the target access device includes: A first temporary service port and a second temporary service port are created for the remote connection session. The first temporary service port is used to connect to the access terminal device, and the second temporary service port is used to connect to the client. The first temporary service port and the second temporary service port correspond one-to-one with the session ID. The first temporary service port and the second temporary service port are internal ports. The bidirectional transmission of the client's operation data and the target access terminal's response data includes: An external service port is created to receive the client's operation data and the access device's response data, and then forwards them to the corresponding temporary service port. The step of receiving the client's operation data and the access device's response data through the external service port and forwarding them to the corresponding temporary service port includes: When the data received by the external service port is the client's operation data, the operation data is sent to the second temporary service port, so that the second temporary service port forwards the operation data to the first temporary service port, and the first temporary service port forwards it to the access terminal device. When the data received by the external service port is the response data of the access device, the response data is sent to the first temporary service port, so that the first temporary service port forwards the response data to the second temporary service port, and the second temporary service port forwards it to the client.

2. The device remote connection method as described in claim 1, characterized in that, Before receiving the remote connection request from the client, the method further includes: Receive registration information from access devices, verify the registration information, and store information about successfully registered access devices; Provides a remote connection operation interface so that clients can log in to the web service, retrieve successfully registered access devices, and select the target access device.

3. The device remote connection method as described in claim 1, characterized in that, Also includes: Monitor the idle time of the remote connection session, and close the remote connection session when the idle time reaches a preset threshold.

4. The device remote connection method as described in claim 1, characterized in that, Also includes: The system receives a request from the client to retrieve operation logs and displays the corresponding operation logs on the remote connection operation interface based on the identifier of the remote connection session in the request.

5. A remote device for connecting equipment, applied to an operation and maintenance platform, characterized in that, include: A remote connection request receiving module is used to receive remote connection requests from clients, wherein the remote connection request includes a target access device; The WebSocket connection management module is used to notify the target access device to send a request to the operation and maintenance platform to establish a WebSocket connection when the target access device and the operation and maintenance platform have not established a WebSocket connection, and to establish a WebSocket connection. The connection session establishment module is used to establish a remote connection session between the client and the target access device through the WebSocket connection, and to transmit the client's operation data and the target access device's response data bidirectionally, so that maintenance personnel can remotely operate the target access device through the client; Establishing a remote connection session between the client and the target access device includes: A first temporary service port and a second temporary service port are created for the remote connection session. The first temporary service port is used to connect to the access terminal device, and the second temporary service port is used to connect to the client. The first temporary service port and the second temporary service port correspond one-to-one with the session ID. The first temporary service port and the second temporary service port are internal ports. The bidirectional transmission of the client's operation data and the target access terminal's response data includes: An external service port is created to receive the client's operation data and the access device's response data, and then forwards them to the corresponding temporary service port. The step of receiving the client's operation data and the access device's response data through the external service port and forwarding them to the corresponding temporary service port includes: When the data received by the external service port is the client's operation data, the operation data is sent to the second temporary service port, so that the second temporary service port forwards the operation data to the first temporary service port, and the first temporary service port forwards it to the access terminal device. When the data received by the external service port is the response data of the access terminal device, the response data is sent to the first temporary service port, so that the first temporary service port forwards the response data to the second temporary service port, and the second temporary service port forwards it to the client; The log management module is used to record bidirectional data transmission, generate operation logs, and store the operation logs based on the identifier of the remote connection session.

6. The device remote connection device as described in claim 5, characterized in that, Also includes: The registration module is used to receive registration information from access devices, verify the registration information, and store information about successfully registered access devices. The Web service module provides a remote connection interface, enabling clients to log in to the Web service, retrieve successfully registered access devices, and select the target access device.

7. The device remote connection device as described in claim 5, characterized in that, Also includes: The session monitoring module is used to monitor the idle time of the remote connection session. When the idle time reaches a preset threshold, the remote connection session is closed.

8. The device remote connection device as described in claim 5, characterized in that, The log management module is also used to receive the client's request to obtain operation logs, and display the corresponding operation logs on the remote connection operation interface according to the identifier of the remote connection session in the request.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed, it implements the steps of the method as described in any one of claims 1-4.

10. A computer device comprising a processor, a memory, and a computer program stored in the memory, characterized in that, When the processor executes the computer program, it implements the steps of the method as described in any one of claims 1-4.

Images