A communication method and system of an in-cell corridor terminal

Abstract

The application discloses a communication method and system of a corridor terminal in a cell, at least one router is arranged between corridors, the router is bridged with at least one ONU in a family, at least one family terminal is hung under each ONU, and at least one corridor terminal is hung under each router; the method comprises the following steps: a first corridor terminal hung under a first router sends a source request message to an access gateway through a first ONU bridged by the first router; the access gateway converts first QinQ information in the source request message into second QinQ information to obtain a destination request message; the access gateway sends the destination request message to a second ONU, the second ONU sends the destination request message to a second router bridged by the second ONU, and the second router sends the destination request message to a second corridor terminal; a wireless router of a corridor is bridged with an ONU in a family, line reconstruction is avoided, and an access gateway needs to realize corridor LAN intercommunication between different families.

Description

Technical Field

[0001] This invention belongs to the field of communication technology, and more specifically, relates to a communication method and system for a building corridor terminal in a residential community. Background Technology

[0002] Intelligent communities utilize modern building technology and advanced technologies such as computers, communications, and control to integrate property management, security, and communication systems. They are connected to the property management office through a communication network, providing residents with a safe, comfortable, and convenient modern living environment.

[0003] However, the coverage of Wireless Fidelity (WIFI) in the building corridors of residential communities is relatively small. It can only enable communication between terminals within the same corridor, and cannot fully realize communication between terminals within the corridor. In existing solutions, wireless access points (APs) or wired links are generally used to expand the WIFI coverage. However, indoor APs have low bandwidth and low outward radiation energy. Wired links are complicated to run, require coordination with residents to pass through walls, have a long construction period, and have not yet achieved isolation between the WIFI in the building and the residents' networks, resulting in low security. Summary of the Invention

[0004] To address the aforementioned deficiencies or improvement needs of existing technologies, this invention provides a communication method and system for building corridor terminals within a residential community. Its purpose is to bridge the wireless router in the corridor with the ONU in each home, avoiding wiring modifications and utilizing existing equipment resources. The access gateway needs to enable LAN interconnection between different homes within the corridor. The access gateway modifies the QinQ information in the packets to ensure secure isolation between the corridor Wi-Fi and home users, thereby solving the technical problem of how to achieve mutual access between corridor terminals while ensuring security.

[0005] To achieve the above objectives, according to one aspect of the present invention, a communication method for building corridor terminals within a residential community is provided. At least one router is installed between building corridors, and the router is bridged to at least one ONU in at least one household to form a network topology. Each ONU is connected to at least one household terminal, and each router is connected to at least one corridor terminal. The communication method for building corridor terminals within the residential community includes: The first corridor terminal connected to the first router sends a source request message to the access gateway through the first ONU bridged by the first router; The access gateway converts the first QinQ information in the source request message into the second QinQ information to obtain the destination request message. The access gateway sends the destination request message to the second ONU, which then sends the destination request message to the second router it is bridged to. The second router then sends the destination request message to the second corridor terminal, so that the second corridor terminal can respond to the destination request message. The second corridor terminal is connected to the second router.

[0006] Furthermore, the communication method for the building corridor terminals within the residential community also includes: The access gateway receives account information from the management platform, wherein the account information includes username, password and QinQ link information; The access gateway receives an address pool from the management platform and divides the address pool into a public address pool and a private address pool. The private address pool is used to meet the communication needs of terminals within the home, while the public address pool is used to meet the communication needs of terminals between buildings.

[0007] Furthermore, the communication method for the building corridor terminals within the residential community also includes: Home terminals connected to the ONU send access requests to the access gateway through a regular QinQ tunnel; The access gateway receives the access request. If the destination address of the access request is an IP address on the Internet, it distributes the access request to the forwarding component. The forwarding component then requests an IP address from the private address pool to access the Internet using the obtained IP address.

[0008] Furthermore, the communication method for the building corridor terminals within the residential community also includes: The corridor terminal sends an access request to its corresponding router, so that the router can send the access request to the ONU bridged by the router; The ONU sends an access request to the access gateway through a public QinQ tunnel. The access gateway receives the access request. If the destination address of the access request is an IP address of the Internet, the access request is distributed to the forwarding component, which then applies for an IP address from the public address pool to access the Internet through the obtained IP address.

[0009] Furthermore, the communication method for the building corridor terminals within the residential community also includes: The access gateway receives access requests for home edge resources and determines whether the source address of the access request belongs to the home LAN corresponding to the home edge resource. If it is, the access request originates from the home terminal. The access request is encapsulated using the corresponding QinQ information and distributed to the switching component. The switching component sends the encapsulated access request to the service gateway through the VPN tunnel, and the service gateway sends the access request to the home edge resource. If it does not belong to a home terminal, the access request originates from a non-home terminal, and the access request is discarded.

[0010] Furthermore, the communication method for the building corridor terminals within the residential community also includes: The access gateway receives access requests for terminals within the home and determines whether there is an interoperability configuration corresponding to the source address of the access request. If it exists, the access request is sent to the corresponding home terminal; If it does not exist, the access request is discarded.

[0011] Furthermore, the communication method for the building corridor terminals within the residential community also includes: The access gateway intercepts unauthorized access requests within a unit of time and reports the corresponding unauthorized access records, so that users can blacklist the corresponding terminals based on the unauthorized access records.

[0012] Further, the access gateway converts the first QinQ information in the source request message into second QinQ information to obtain the destination request message, which includes: The SRv6 inbound service of the access gateway converts the first QinQ information in the source request packet into the second QinQ information according to the forwarding rules corresponding to the first ONU, sets the inbound direction of the source request packet as the tunnel entrance of the access gateway, and sets the outbound direction of the source request packet as the virtual port to obtain the intermediate request packet. The intermediate request message is sent to the virtual port, which receives the packet and invokes the SRv6 service. The SRv6 outgoing service sets the source address of the intermediate request packet to the gateway MAC address on the second ONU side, sets the destination address of the intermediate request packet to the MAC address of the second ONU, sets the inbound direction of the intermediate request packet to a virtual port, and sets the outbound direction of the intermediate request packet to the tunnel exit of the access gateway, according to the forwarding rules corresponding to the second ONU, so as to obtain the destination request packet.

[0013] Furthermore, one ONU can support full interconnection with 1 to 255 other ONUs.

[0014] According to another aspect of the present invention, a communication system for a building corridor terminal in a residential community is provided. The communication system for the building corridor terminal in a residential community is used to implement the communication method of the building corridor terminal in the residential community. It includes at least one router, at least one ONU and an access gateway. The router is bridged with at least one ONU in a home to form a network topology. Each ONU is connected to at least one home terminal and each router is connected to at least one corridor terminal. The first corridor terminal connected to the first router is used to send a source request message to the access gateway through the first ONU bridged by the first router; The access gateway is used to convert the first QinQ information in the source request message into the second QinQ information to obtain the destination request message; The access gateway is used to send the destination request message to the second ONU, which then sends the destination request message to the second router it is bridged to, and the second router sends the destination request message to the second corridor terminal so that the second corridor terminal can respond to the destination request message; wherein, the second corridor terminal is connected to the second router.

[0015] In summary, compared with existing technologies, the technical solutions conceived in this invention have the following beneficial effects: The wireless router in the stairwell is bridged with the ONU in the home, avoiding wiring modifications and utilizing existing equipment resources; the access gateway needs to enable LAN interconnection between different homes in the stairwell. The access gateway modifies the QinQ information of the packets to ensure secure isolation between the stairwell Wi-Fi and home users. Wi-Fi coverage within the building effectively improves the utilization rate of existing bandwidth, which is beneficial to enhancing people's health, entertainment, and other needs.

[0016] Furthermore, communication between terminals in different households does not require going through the public network. Instead, it directly connects the networks of different households in different or the same edge networks through Srv6 tunnels and access gateways. The network layer configuration is simple and highly scalable, which can meet the needs of ultra-large-scale data centers and breaks the limitations of LAN-LAN communication relay scenarios. Attached Figure Description

[0017] Figure 1 This is a schematic diagram of the structure of a communication system for a building corridor terminal in a residential community, provided in an embodiment of the present invention; Figure 2 This is a schematic diagram of a network topology provided in an embodiment of the present invention; Figure 3 This is a flowchart illustrating a communication method for a building corridor terminal within a residential community, as provided in an embodiment of the present invention. Figure 4 This is an interactive schematic diagram of inter-terminal access in a corridor provided by an embodiment of the present invention; Figure 5 This is provided by the embodiments of the present invention. Figure 3 A flowchart illustrating step 20; Figure 6 This is another interactive diagram of corridor terminal mutual access provided by an embodiment of the present invention; Figure 7 This is a schematic diagram illustrating how a home terminal and a building terminal access the Internet, as provided in an embodiment of the present invention. Figure 8 This is an interactive schematic diagram of a home terminal accessing the Internet provided by an embodiment of the present invention; Figure 9 This is an interactive schematic diagram of a corridor terminal accessing the Internet provided by an embodiment of the present invention; Figure 10 This is an interactive schematic diagram of a home terminal accessing home edge resources according to an embodiment of the present invention; Figure 11 This is a schematic diagram of the structure of an access gateway provided in an embodiment of the present invention. Detailed Implementation

[0018] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention. Furthermore, the technical features involved in the various embodiments of this invention described below can be combined with each other as long as they do not conflict with each other.

[0019] Example 1: To enhance the health, wellness, and entertainment needs of residents, it is necessary to provide wireless Wi-Fi coverage in the stairwells of the buildings. This will facilitate residents' entertainment while exercising up the stairs, provide security monitoring via cameras, and support other smart devices such as intelligent temperature control between buildings. For interoperability between different devices in the stairwells, please refer to [reference needed]. Figure 1 This embodiment provides a communication system for building corridor terminals in a residential community, including at least one router, at least one optical network unit (ONU), and an access gateway. The router is bridged with at least one ONU in a home to form a network topology. Each ONU is connected to at least one home terminal, and each router is connected to at least one corridor terminal.

[0020] The router can be a wireless router. The corridor terminal can be a camera, access control system, temperature control system, terminal used by the administrator, or terminal used by users moving in the corridor, etc.

[0021] The home terminal is a terminal used within a home, such as a family member's mobile phone or a smart device used in the home.

[0022] In this embodiment, the communication system of the building corridor terminal in the community also includes a Broadband Remote Access Server (BRAS). BRAS is a new type of access gateway for broadband network applications. It is located at the edge layer of the backbone network and can complete the data access of the user's bandwidth IP / ATM network, realize broadband Internet access for commercial buildings and community residents, IP VPN service based on IPSec (IP Security Protocol), build enterprise internal Intranet, support ISP to wholesale services to users, and other applications.

[0023] In this embodiment, the communication system of the building corridor terminal in the community also includes an Integrated Operation Management Platform (IOMP), which is used to manage the network.

[0024] In this embodiment, the communication system of the building corridor terminal in the community further includes an Optical Line Terminal (OLT), which has at least one ONU connected to it. The OLT is connected to the access gateway. The communication system of the building corridor terminal in the community also includes a service gateway, through which home edge resources (which can be understood as...) are accessed. Figure 1 (e.g., accessing private cloud disks, such as vnas1 in the cloud).

[0025] by Figure 1 For example, the OLT has ONU1, ONU2, and ONU3 connected to it, and each of ONU1, ONU2, and ONU3 has at least one terminal connected to it. The corridor is equipped with Router 1, Router 2, and Router 3, each of which has at least one terminal connected to it. For instance, Router 1 connects to the temperature control system and terminals used by management personnel, Router 2 connects to cameras and other terminals, and Router 3 connects to access control and other terminals.

[0026] Continue reading Figure 1 Router 1 is bridged to ONU1 to facilitate message forwarding through ONU1; Router 2 is bridged to ONU2 to facilitate message forwarding through ONU2; Router 3 is bridged to ONU3 to facilitate message forwarding through ONU3.

[0027] In a practical application scenario, a first corridor terminal connected to a first router is used to send a source request message to an access gateway through a first ONU bridged by the first router. The access gateway is used to convert the first QinQ information in the source request message into second QinQ information to obtain a destination request message. The access gateway is used to send the destination request message to a second ONU, which then sends the destination request message to a second router it is bridged with. The second router then sends the destination request message to a second corridor terminal, so that the second corridor terminal can respond to the destination request message. The second corridor terminal is connected to the second router.

[0028] In one embodiment, an ONU can also be interconnected with other ONUs to... Figure 2 For example, ONU1-ONU5 are interconnected with other ONUs respectively. Specifically, one ONU can support full interconnection with 1 to 255 other ONUs to broaden the communication range of the terminal.

[0029] For details regarding the communication mechanism of the communication system for the building corridor terminal in Example 1, please refer to the following description of the example.

[0030] In this embodiment, the wireless router in the building corridor is bridged to the ONU in each home, avoiding the need for wiring modifications and utilizing existing equipment resources. The access gateway needs to enable LAN interconnection between different homes in the corridor. The access gateway modifies the QinQ information in the packets to ensure secure isolation between the corridor Wi-Fi and home users. Wi-Fi coverage within the building effectively improves the utilization of existing bandwidth, contributing to enhancing the public's health, entertainment, and other needs.

[0031] Example 2: Based on the communication system for building corridor terminals in the aforementioned embodiments, this embodiment also provides a communication method for building corridor terminals in the same community. This communication method can be applied in the following scenarios: at least one router is set up between buildings, and the router is bridged with at least one ONU in a household to form a network topology. Each ONU is connected to at least one household terminal, and each router is connected to at least one corridor terminal. The communication method for building corridor terminals in this embodiment can realize the interconnection of corridor terminals between buildings.

[0032] See Figure 3 and Figure 4 The communication method for the building corridor terminals within the community includes: Step 10: The first corridor terminal connected to the first router sends a source request message to the access gateway through the first ONU bridged by the first router.

[0033] Taking the first corridor terminal as the terminal used by the corridor administrator and the second corridor terminal as a camera as an example, the first corridor terminal is connected to the first router, and the first router is bridged with ONU1 (i.e., the first ONU); the second corridor terminal is connected to the second router, and the second router is bridged with ONU2 (i.e., the second ONU).

[0034] The first corridor terminal sends a source request message to view the camera monitoring video. The source request message is first sent to ONU1 through the first router, and then ONU1 sends the source request message to the access gateway.

[0035] Step 20: The access gateway converts the first QinQ information in the source request message into the second QinQ information to obtain the destination request message.

[0036] In this embodiment, in the scenario of an access gateway, after an account is opened, multiple Local Area Network (LAN) links are used to connect to one Wide Area Network (WAN) link. One LAN is used for the home network, and another LAN is used for the common LAN in the building corridor. The access gateway needs to enable communication between the corridor LANs of different households. The access gateway needs to solve the problem of secure isolation between the corridor LAN and the home LAN, ensuring that they cannot be accessed by "network neighbors" and that shared files are not lost or damaged. Here, WAN stands for Wide Area Network, and LAN stands for Local Area Network. Their Chinese names are WAN port and LAN port, respectively. The WAN port is mainly used to connect to external networks, such as ADSL, DDN, Ethernet, and other access lines; while the LAN port is used to connect to the home network, mainly connecting to switches, hubs, or PCs in the home network.

[0037] To achieve secure isolation, the QinQ information corresponding to different households is different. Therefore, the QinQ information of the message from ONU1 needs to be modified to the OinQ information corresponding to ONU2.

[0038] QinQ (802.1Q-in-802.1Q) technology is a technology that extends VLAN space. It achieves the function of extending VLAN space by adding an 802.1Q tag layer on top of the 802.1Q tag packet, which can make private network VLANs transparent to the public network.

[0039] Basic QinQ, also known as QinQ Layer 2 tunneling, is implemented based on interfaces. After enabling basic QinQ on an interface, when that interface receives a packet, the device will add a VLAN tag of the interface's default VLAN to the packet. If the received packet already has a VLAN tag, it becomes a double-tag packet; if the received packet does not have a VLAN tag, it becomes a packet with the interface's default VLAN tag.

[0040] When a large number of VLANs are needed, basic QinQ functionality can be configured. By adding outer tags to VLANs, the range of available VLANs can be increased, thus solving the problem of scarce VLAN resources.

[0041] Step 30: The access gateway sends the destination request message to the second ONU, which then sends the destination request message to the second router it is bridged to. The second router then sends the destination request message to the second corridor terminal so that the second corridor terminal can respond to the destination request message.

[0042] After the access gateway processes the source request message, it is sent to ONU2. ONU2 and Router 2 then forward the processed source request message to the second corridor terminal. The response message returned by the second corridor terminal is then sent back to the first corridor terminal in sequence through Router 2, ONU2, access gateway, ONU1, and Router 1.

[0043] Throughout the entire message forwarding process, the message payload remains unchanged, while the MAC address in the source ID and the MAC address in the destination ID are modified according to the actual situation. The inbound and outbound directions of the message are also modified according to the actual situation to ensure the normal forwarding of the message.

[0044] The second corridor terminal is connected to the second router.

[0045] Continue reading Figure 5 Step 20 specifically includes: Step 201: The SRv6 inbound service of the access gateway converts the first QinQ information in the source request packet into the second QinQ information according to the forwarding rule corresponding to the first ONU, sets the inbound direction of the source request packet as the tunnel entrance of the access gateway, and sets the outbound direction of the source request packet as the virtual port to obtain the intermediate request packet.

[0046] In this embodiment, as Figure 6 As shown, the first ONU and the first leaf switch (i.e., Figure 6The left-hand side (aleaf) communicates via a QinQA tunnel. An SRv6 tunnel is established between the first leaf switch and the access gateway to enable home network access without using the public network. A VPN tunnel is established between the first leaf switch and the access gateway; a VPN tunnel is established between the access gateway and the second leaf switch (i.e., Figure 6 A Vpws tunnel is established between the first ONU and the second leaf switch on the right side of the middle switch. The second ONU communicates with the second leaf switch through the QinQB tunnel to achieve interconnection between the first ONU and the second ONU.

[0047] In addition, the access gateway includes a forwarding component (i.e., vcpe), which includes a first forwarding component and a second forwarding component. The first forwarding component and the second forwarding component communicate through an SRv6 tunnel. The first forwarding component has a first forwarding rule, and the second forwarding component has a second forwarding rule, so as to modify the packets through the corresponding forwarding rules.

[0048] by Figure 6 For example, the first QinQ information (i.e., QinQ: 111.11) is converted into the second QinQ information (i.e., QinQ: 222.22). The inbound direction of the source request packet is set to the tunnel ingress of the access gateway (vpws-LAN1), and the outbound direction of the source request packet is set to the virtual port (loopback-IP1) to obtain the intermediate request packet.

[0049] Step 202: Send the intermediate request message to the virtual port, and the virtual port receives the packet and calls the SRv6 service.

[0050] Step 203: The SRv6 outgoing service sets the source address of the intermediate request packet to the gateway MAC address on the second ONU side, sets the destination address of the intermediate request packet to the MAC address of the second ONU, sets the inbound direction of the intermediate request packet to the virtual port, and sets the outbound direction of the intermediate request packet to the tunnel exit of the access gateway, according to the forwarding rules corresponding to the second ONU, so as to obtain the destination request packet.

[0051] by Figure 6 For example, the source address of the intermediate request message is set to the gateway MAC address of the second ONU (i.e., lgmac2), the destination address of the intermediate request message is set to the MAC address of the second ONU (macB), the inbound direction of the intermediate request message is set to the virtual port (loopback-IP2), and the outbound direction of the intermediate request message is set to the tunnel exit of the access gateway (vpws-LAN2).

[0052] After receiving the destination message, the second ONU will continue to send the message to the second router, which will then forward it to the second corridor terminal, thus enabling communication between the corridor terminals.

[0053] More specifically, the first home terminal under the first ONU reports a source request message to the first leaf switch; wherein the source request message carries the MAC address of the first terminal and the MAC address of the destination device; The first leaf switch converts the source request message into a first Srv6 message, and transmits the first Srv6 message to the access gateway through the first Srv6 tunnel; The first forwarding component in the access gateway modifies the first Srv6 packet and transmits the modified first Srv6 packet to the second forwarding component through the second Srv6 tunnel according to the MAC address of the destination device carried in the modified first Srv6 packet. The second forwarding component converts the modified first Srv6 message into a destination request message, and transmits the destination request message to the second leaf switch through the third Srv6 tunnel to enable mutual access between the home network corresponding to the first ONU and the home network corresponding to the second ONU.

[0054] The first forwarding component pre-configures an inner VLAN and an outer VLAN on its own device according to the QinQ conversion rules configured on its own device; wherein, the inner VLAN is used to identify the first home terminal, and the outer VLAN is used to identify the edge network to which the forwarding needs to be performed; When the first forwarding component communicates with the first ONU for the first time, it establishes an internal forwarding table (first forwarding rule) in its own device; it uses the MAC address of the first home terminal in the first inner packet of the received first Srv6 packet as the MAC address of the inner VLAN, and uses the MAC address of the destination device in the first inner packet as the MAC address of the outer VLAN, thus obtaining the MAC address mapping relationship between the inner VLAN and the outer VLAN; it associates the MAC address mapping relationship with the QinQ conversion rule and records it in the internal forwarding table; In the internal forwarding table, a forwarding entry matching the QinQ information of the second ONU and the MAC address of the destination device in the first inner layer of the received first Srv6 message is found; the first inner layer message is forwarded to the second forwarding component according to the forwarding entry.

[0055] From a pseudocode perspective, Figure 6 The implementation process is as follows: ① Household A (i.e., the household corresponding to the first ONU) connects to household B (i.e., the household corresponding to the second ONU) via the access gateway: [SRv6 service entry] Outer dip => eprn1;

EVPN Inbound Rule

Home Sub_LAN Forwarding Table

evpn import rule

[0056] Traditional LAN-WAN virtual tunnels are more suitable for LAN-to-WAN scenarios. This invention uses EVPN technology to horizontally connect LAN-LAN. The dual-homed dual-active technology based on EVPN can achieve single-sided deployment when adding, deleting, or modifying interconnected sites, without affecting the configuration of existing sites.

[0057] Based on the aforementioned method, inter-building terminal communication can be achieved (e.g., when a user in a building encounters an emergency and needs to trigger a camera alarm; or when an administrator adjusts the building's temperature control system using their own smart device): Smart terminal A obtains IP1 from the sub-LAN of home 1, and smart device B obtains IP2 from the sub-LAN of home 2. IP1 and IP2 communicate with each other. The IP and qinqA assigned by home A's sub-LAN via VCPE are converted into qinqB of home B, and the destination IP is the IP assigned to home B. The return packet is the IP and qinqB assigned by home B's sub-LAN, converted into qinq of home A, and the destination IP is the IP assigned by home A's sub-LAN.

[0058] In this embodiment, the communication method for the building corridor terminals within the community further includes: the access gateway receiving account information from the management platform, wherein the account information includes username, password, and QinQ link information; the access gateway receiving an address pool from the management platform, and dividing the address pool into a public address pool and a private address pool, wherein the private address pool is used to meet the communication needs of terminals within a home, and the public address pool is used to meet the communication needs of terminals between buildings.

[0059] The management platform distributes account address pools, which cover a Class C network (e.g., 192.168.71.2-192.168.72.250 / 16). Note that the subnet mask needs to be set to 16 bits. The platform also distributes account address pools, drawing a 28-bit subnet mask from the above pools (e.g., 192.168.71.1-192.168.71.14), marking it as "public" (i.e., a public address pool for public areas), and using LANqinq2. Other addresses belong to the private address pool.

[0060] In addition, each household needs to distribute the network interconnection configuration for other households' sub-LANs, as well as the link conversion configuration from its own sub-LAN to other households' sub-LANs; after isolation through the address pool, ordinary household LANs do not respond to request packets from sub-LAN address pool IPs, nor do they respond to requests from sub-LAN address pool IPs to the household edge network; In this embodiment, after account opening, multiple LAN links are used to connect to one WAN link. One LAN is used for the home network, and the other LAN is used for the common LAN in the building corridor. The access gateway needs to enable communication between the corridor LANs of different homes. Home terminals access the Internet through a private address pool, while corridor terminals access the Internet through a public address pool, thus ensuring secure isolation while implementing multiple LAN links to one WAN link.

[0061] like Figure 7 As shown, terminal A in the home accesses the Internet through the LAN address pool (i.e., the private address pool), while the terminal in the corridor under home A accesses the Internet through the sub_LAN address pool (i.e., the public address pool).

[0062] Combination Figure 8 The communication method of the building corridor terminal in the community further includes: the home terminal connected to the ONU sends an access request to the access gateway through a normal QinQ tunnel; the access gateway receives the access request, and if the destination address of the access request is an Internet IP address, it distributes the access request to the forwarding component (i.e., vcpe), and the forwarding component applies for an IP address from the private address pool to access the Internet through the obtained IP address.

[0063] In other words, home terminals access the external network through the home network: the terminal connects from the home bridging optical modem, the traffic reaches the access gateway, enters the VCPE component according to the rulein rule, finds the private address pool to apply for an IP, and accesses the Internet through the WAN link via the IP.

[0064] Combination Figure 9 The communication method for the building corridor terminals within the community further includes: the corridor terminal sending an access request to its corresponding router, which then forwards the access request to the ONU bridged by the router; the ONU sending the access request to the access gateway through a public QinQ tunnel. The access gateway receives the access request, and if the destination address of the access request is an Internet IP address, it distributes the access request to a forwarding component, which then requests an IP address from the public address pool to access the Internet using the obtained IP address.

[0065] To prevent public hallway terminals from accessing home terminals and causing information loss, the QinQ tunnels used by hallway terminals and home terminals are different.

[0066] Combination Figure 10 The communication method for the building corridor terminals within the community further includes: the access gateway receiving an access request for a home edge resource, determining whether the source address of the access request belongs to the home LAN corresponding to the home edge resource; if it does, the access request originates from a home terminal, the access request is encapsulated using corresponding QinQ information, and the encapsulated access request is distributed to a switching component (i.e., vSwitch); the switching component sends the encapsulated access request to the service gateway through a VPN tunnel, and the service gateway sends the access request to the home edge resource; if it does not belong to the home edge resource, the access request originates from a non-home terminal, and the access request is discarded.

[0067] In other words, if the corridor terminal cannot access the home edge network and the destination IP is not an address pool IP, the system will prepare to encapsulate the home's QinQ and forward it to the service gateway. Before encapsulation, it is necessary to determine whether the source IP belongs to the home LAN. If it is found that the source IP is not in the address pool allocated by the home LAN, the traffic does not meet the encapsulation conditions and will be dropped.

[0068] In one embodiment, the communication method for the building corridor terminal within the community further includes: the access gateway receiving an access request for a home terminal, determining whether there is an interoperability configuration corresponding to the source address of the access request; if there is, sending the access request to the corresponding home terminal; if there is not, discarding the access request.

[0069] That is, when a terminal in the building accesses a terminal inside the home, the destination IP address is in the home intranet address pool, and there is no sub_LAN interconnection configuration for that address pool, so the traffic is dropped.

[0070] In one embodiment, the communication method of the building corridor terminal in the community further includes: the access gateway intercepts illegal access requests within a unit time period and reports the corresponding illegal access records so that users can blacklist the corresponding terminals through the illegal access records.

[0071] The embodiments of the present invention have at least the following effects: Currently, home bandwidth can reach gigabit modems at most, and at least 100 Mbps fiber optic connections, but the actual upload speed used is only tens of kb and the download speed is only a few megabits. In-building Wi-Fi coverage effectively improves the utilization of existing bandwidth; it also enhances the health and entertainment needs of residents; facilitates improved intelligent monitoring efficiency of communities and property management; improves the resident experience; and promotes community civility.

[0072] Example 3: Based on the communication method for building corridor terminals within a residential community provided in the above embodiments, the present invention also provides an access gateway, such as... Figure 11 The diagram shown is a schematic representation of the device architecture according to an embodiment of the present invention. The device in this embodiment includes one or more processors 21 and a memory 22. Figure 11 Take a processor 21 as an example.

[0073] The processor 21 and the memory 22 can be connected via a bus or other means. Figure 11 Taking the example of a connection between China and Israel via a bus.

[0074] The memory 22 serves as a non-volatile computer-readable storage medium for a communication method of building corridor terminals within a residential community. It can be used to store non-volatile software programs, non-volatile computer-executable programs, and modules, such as the communication method of building corridor terminals in embodiment 2. The processor 21 executes various functional applications and data processing of the device by running the non-volatile software programs, instructions, and modules stored in the memory 22, thereby realizing the communication method of building corridor terminals in the embodiment.

[0075] The memory 22 may include high-speed random access memory and non-volatile memory, such as at least one disk storage device, flash memory device, or other non-volatile solid-state storage device. In some embodiments, the memory 22 may optionally include memory remotely located relative to the processor 21, and these remote memories may be connected to the processor 21 via a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

[0076] The program instructions / modules are stored in the memory 22. When executed by one or more processors 21, they execute the communication method of the building corridor terminal in the above embodiment.

[0077] Those skilled in the art will understand that all or part of the steps in the various methods of the embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, which may include: read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk, etc.

[0078] Those skilled in the art will readily understand that the above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A communication method for a building corridor terminal within a residential community, characterized in that, At least one router is set up in the corridor and bridged to at least one ONU in the home to form a network topology. Each ONU is connected to at least one home terminal and each router is connected to at least one corridor terminal. The communication method for the building corridor terminals within the residential community includes: The first corridor terminal connected to the first router sends a source request message to the access gateway through the first ONU bridged by the first router; The access gateway converts the first QinQ information in the source request packet into the second QinQ information to obtain the destination request packet; this includes: the access gateway's SRv6 inbound service converting the first QinQ information in the source request packet into the second QinQ information according to the forwarding rules corresponding to the first ONU, setting the inbound direction of the source request packet to the tunnel inlet of the access gateway, and setting the outbound direction of the source request packet to a virtual interface to obtain an intermediate request packet; sending the intermediate request packet to the virtual interface, the virtual interface receiving the packet and calling the SRv6 outbound service; the SRv6 outbound service setting the source address of the intermediate request packet to the gateway MAC address on the second ONU side, setting the destination address of the intermediate request packet to the MAC address of the second ONU, setting the inbound direction of the intermediate request packet to a virtual interface, and setting the outbound direction of the intermediate request packet to the tunnel exit of the access gateway to obtain the destination request packet; The access gateway sends the destination request message to the second ONU, which then sends the destination request message to the second router it is bridged to. The second router then sends the destination request message to the second corridor terminal, so that the second corridor terminal can respond to the destination request message. The second corridor terminal is connected to the second router.

2. The communication method for a building corridor terminal within a residential community according to claim 1, characterized in that, The communication method for the building corridor terminals within the residential community also includes: The access gateway receives account information from the management platform, wherein the account information includes username, password and QinQ link information; The access gateway receives an address pool from the management platform and divides the address pool into a public address pool and a private address pool. The private address pool is used to meet the communication needs of terminals within the home, while the public address pool is used to meet the communication needs of terminals between buildings.

3. The communication method for a building corridor terminal within a residential community according to claim 2, characterized in that, The communication method for the building corridor terminals within the residential community also includes: Home terminals connected to the ONU send access requests to the access gateway through a regular QinQ tunnel; The access gateway receives the access request. If the destination address of the access request is an IP address on the Internet, it distributes the access request to the forwarding component. The forwarding component then requests an IP address from the private address pool to access the Internet using the obtained IP address.

4. The communication method for a building corridor terminal within a residential community according to claim 2, characterized in that, The communication method for the building corridor terminals within the residential community also includes: The corridor terminal sends an access request to its corresponding router, so that the router can send the access request to the ONU bridged by the router; The ONU sends an access request to the access gateway through a public QinQ tunnel. The access gateway receives the access request. If the destination address of the access request is an IP address of the Internet, the access request is distributed to the forwarding component, which then applies for an IP address from the public address pool to access the Internet through the obtained IP address.

5. The communication method for a building corridor terminal within a residential community according to claim 1, characterized in that, The communication method for the building corridor terminals within the residential community also includes: The access gateway receives access requests for home edge resources and determines whether the source address of the access request belongs to the home LAN corresponding to the home edge resource. If it is, the access request originates from the home terminal. The access request is encapsulated using the corresponding QinQ information and distributed to the switching component. The switching component sends the encapsulated access request to the service gateway through the VPN tunnel, and the service gateway sends the access request to the home edge resource. If it does not belong to a home terminal, the access request originates from a non-home terminal, and the access request is discarded.

6. The communication method for a building corridor terminal within a residential community according to claim 1, characterized in that, The communication method for the building corridor terminals within the residential community also includes: The access gateway receives access requests for terminals within the home and determines whether there is an interoperability configuration corresponding to the source address of the access request. If it exists, the access request is sent to the corresponding home terminal; If it does not exist, the access request is discarded.

7. The communication method for a building corridor terminal within a residential community according to claim 1, characterized in that, The communication method for the building corridor terminals within the residential community also includes: The access gateway intercepts unauthorized access requests within a unit of time and reports the corresponding unauthorized access records, so that users can blacklist the corresponding terminals based on the unauthorized access records.

8. The communication method for a building corridor terminal within a residential community according to any one of claims 1-7, characterized in that, One ONU can support full interconnection with 1 to 255 other ONUs.

9. A communication system for a building corridor terminal within a residential community, characterized in that, The communication system for the building corridor terminal in the community is used to implement the communication method for the building corridor terminal in the community as described in any one of claims 1-8, including at least one router, at least one ONU and an access gateway, bridging the router with at least one ONU in a home to form a network topology, with at least one home terminal connected to each ONU and at least one corridor terminal connected to each router. The first corridor terminal connected to the first router is used to send a source request message to the access gateway through the first ONU bridged by the first router; The access gateway is used to convert the first QinQ information in the source request message into the second QinQ information to obtain the destination request message; The access gateway is used to send the destination request message to the second ONU, which then sends the destination request message to the second router it is bridged to, and the second router sends the destination request message to the second corridor terminal so that the second corridor terminal can respond to the destination request message; wherein, the second corridor terminal is connected to the second router.

Images