Address translation method, cloud console and private gateway

Abstract

The invention provides an address allocation method, a cloud console, an Internet of Things terminal and a private gateway, and relates to the technical field of cloud technology management, and the method comprises the steps: obtaining a CIDR address block of an Internet of Things private network and an identifier of a first Internet of Things card; based on an unused IP address in the CIDR address block, obtaining a first IP address of the first Internet of Things card, the first IP address being used for accessing a host in a VPC and a host in an IDC or other Internet of Things cards of the first Internet of Things card; obtaining at least one second IP address of the first Internet of Things card, wherein the at least one second IP address comprises an IP address provided by at least one operator network supported by the first Internet of Things card; sending the first mapping relation to a private gateway; the first mapping relationship comprises a corresponding relationship between the first IP address and the at least one second IP address. According to the method, on the basis of improving the system performance of the Internet of Things private network, the complexity of using the Internet of Things private network by the tenant can be reduced.

Description

[0001] This application is a divisional application of the invention application with an application date of April 11, 2022, Chinese application number 202210377294.4, and invention name “Address allocation method, cloud console, Internet of Things terminal and dedicated gateway”. Technical Field

[0002] Embodiments of the present application relate to the field of cloud technology, and in particular to the field of management technology of cloud technology, and more specifically to an address allocation method, a cloud console, an Internet of Things terminal, and a dedicated gateway. Background Art

[0003] For operator IoT private networks, tenants usually negotiate with operators to assign an access point name (APN) with a network segment that does not overlap with the tenant's virtual private cloud (VPC) and / or Internet data center (IDC) network segment, so that IoT terminals can obtain their Internet Protocol (IP) addresses from the APN network segment.

[0004] However, with this IP address allocation method, after the tenant allocates an IP address for the IoT terminal to access the VPC and / or IDC, it may be affected by the network segment of the VPC and / or IDC, and the APN network segment may need to be readjusted, which will lead to low system performance. In addition, the negotiation process between the tenant and the operator will also increase the complexity of the operator's IoT private network.

[0005] Therefore, there is an urgent need in this field for an address allocation method to reduce the complexity of tenants using the IoT private network while improving the system performance of the IoT private network. Summary of the invention

[0006] The present application provides an address allocation method, a cloud console, an IoT terminal and a dedicated gateway, which can reduce the complexity of tenants using the IoT private network while improving the system performance of the IoT private network.

[0007] In a first aspect, an embodiment of the present application provides an address allocation method, which is applicable to a cloud console, and the method includes:

[0008] Obtaining a Classless Inter-Domain Routing (CIDR) address block of the IoT private network and an identifier of the first IoT card;

[0009] The network segment included in the CIDR address block does not overlap with the network segment where the Internet data center IDC of the first IoT card is located, and the network segment included in the CIDR address block does not overlap with the network segment where the virtual private cloud VPC of the first IoT card is located;

[0010] Based on an unused IP address in the CIDR address block, obtaining a first Internet Protocol IP address of the first IoT card, where the first IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0011] Acquire at least one second IP address of the first IoT card, where the at least one second IP address includes an IP address provided by at least one operator network supported by the first IoT card;

[0012] Sending the first mapping relationship to the dedicated gateway;

[0013] The first mapping relationship includes a corresponding relationship between the first IP address and the at least one second IP address, and the first mapping relationship is used by the dedicated gateway to modify the source IP address and the target IP address in the data packet to be forwarded according to the first mapping relationship.

[0014] In a second aspect, an embodiment of the present application provides an address allocation method, which is applicable to an IoT terminal, and the method includes:

[0015] In response to a configuration operation performed by the tenant of the first IoT card on the IoT terminal, generating configuration information;

[0016] The configuration information includes a Classless Inter-Domain Routing (CIDR) address block of the IoT private network and an identifier of the first IoT card. The CIDR address block is used by the cloud console to determine a first Internet Protocol (IP) address of the first IoT card. The first IP address is used to access a host in a virtual private cloud (VPC) of the first IoT card and a host in an Internet data center (IDC).

[0017] The configuration information is sent to the cloud console through an interface provided by the cloud console.

[0018] In a third aspect, an embodiment of the present application provides an address allocation method, which is applicable to a dedicated gateway, and the method includes:

[0019] Receive a first mapping relationship sent by the cloud console;

[0020] The first mapping relationship includes a correspondence between a first Internet Protocol IP address of the first IoT card and at least one second IP address of the first IoT card, the first IP address is used to access a host in a virtual private cloud VPC of the first IoT card and a host in an Internet data center IDC, and the at least one second IP address includes an IP address provided by at least one operator network supported by the first IoT card;

[0021] The source IP address and the destination IP address in the data packet to be forwarded are modified based on the mapping relationship.

[0022] In a fourth aspect, an embodiment of the present application provides a data transmission method, which is applicable to a dedicated gateway that supports a network address translation NAT function;

[0023] The method includes:

[0024] Receive a first downlink Internet Protocol IP data packet sent by a host in a virtual private cloud VPC or an Internet data center IDC of a multi-operator composite smart card; the multi-operator composite smart card includes multiple member cards; the IP address of the multi-operator composite smart card includes an IP address provided by an operator network supported by each member card of the multiple member cards; the first member card of the multiple member cards is a member card used for an IoT terminal to access a network;

[0025] Modify the destination address in the first downlink IP data packet from the third IP address to the fourth IP address, and obtain a second downlink IP data packet; wherein the third IP address is the IP address determined by the host in the IP address of the multi-operator composite smart card, and the fourth IP address is the IP address provided by the operator network supported by the first member card;

[0026] Send the second downlink IP data packet to the IoT terminal.

[0027] In a fifth aspect, an embodiment of the present application provides a data transmission method, which is applicable to a dedicated gateway, and the method includes:

[0028] Receive raw Internet Protocol IP packets;

[0029] The original IP data packet includes a dynamic IP address of the first IoT card, and the dynamic IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0030] Encapsulating the original IP data packet using the IP address provided by at least one operator network supported by the first IoT card to obtain an encapsulated IP data packet;

[0031] Send the encapsulated IP data packet.

[0032] In a sixth aspect, an embodiment of the present application provides a data transmission method, which is applicable to a dedicated gateway, and the method includes:

[0033] Receive encapsulated Internet Protocol IP data packets;

[0034] The encapsulated IP data packet includes an IP address provided by at least one operator network supported by the first IoT card and a dynamic IP address of the first IoT card, where the dynamic IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0035] Decapsulate the encapsulated IP data packet to obtain the original IP data packet;

[0036] Send the original IP packet.

[0037] In a seventh aspect, an embodiment of the present application provides a cloud console, including:

[0038] An acquisition unit, used to acquire a Classless Inter-Domain Routing CIDR address block of the IoT private network and an identifier of the first IoT card;

[0039] The network segment included in the CIDR address block does not overlap with the network segment where the Internet data center IDC of the first IoT card is located, and the network segment included in the CIDR address block does not overlap with the network segment where the virtual private cloud VPC of the first IoT card is located;

[0040] The acquisition unit is further used to acquire a first Internet Protocol IP address of the first IoT card based on an unused IP address in the CIDR address block, where the first IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0041] The acquisition unit is further used to acquire at least one second IP address of the first IoT card, where the at least one second IP address includes an IP address provided by at least one operator network supported by the first IoT card;

[0042] A sending unit, configured to send the first mapping relationship to a dedicated gateway;

[0043] The first mapping relationship includes a corresponding relationship between the first IP address and the at least one second IP address, and the first mapping relationship is used by the dedicated gateway to modify the source IP address and the target IP address in the data packet to be forwarded according to the first mapping relationship.

[0044] In a ninth aspect, an embodiment of the present application provides an IoT terminal, including:

[0045] A generating unit, configured to generate configuration information in response to a configuration operation performed by a tenant of the first IoT card on the IoT terminal;

[0046] The configuration information includes a Classless Inter-Domain Routing (CIDR) address block of the IoT private network and an identifier of the first IoT card. The CIDR address block is used by the cloud console to determine a first Internet Protocol (IP) address of the first IoT card. The first IP address is used to access a host in a virtual private cloud (VPC) of the first IoT card and a host in an Internet data center (IDC).

[0047] The sending unit is used to send the configuration information to the cloud console through an interface provided by the cloud console.

[0048] In a tenth aspect, an embodiment of the present application provides a dedicated gateway, including:

[0049] A receiving unit, configured to receive a first mapping relationship sent by a cloud console;

[0050] The first mapping relationship includes a correspondence between a first Internet Protocol IP address of the first IoT card and at least one second IP address of the first IoT card, the first IP address is used to access a host in a virtual private cloud VPC of the first IoT card and a host in an Internet data center IDC, and the at least one second IP address includes an IP address provided by at least one operator network supported by the first IoT card;

[0051] The processing unit is used to modify the source IP address and the destination IP address in the data packet to be forwarded based on the mapping relationship.

[0052] In an eleventh aspect, an embodiment of the present application provides a dedicated gateway, which supports a network address translation NAT function; including:

[0053] A receiving unit is used to receive a first downlink Internet Protocol IP data packet sent by a host in a virtual private cloud VPC or an Internet data center IDC of a multi-operator composite smart card; the multi-operator composite smart card includes a plurality of member cards; the IP address of the multi-operator composite smart card includes an IP address provided by an operator network supported by each of the plurality of member cards; the first member card among the plurality of member cards is a member card used for an IoT terminal to access a network;

[0054] The processing unit is used to modify the destination address in the first downlink IP data packet from the third IP address to the fourth IP address, so as to obtain a second downlink IP data packet; wherein the third IP address is an IP address determined by the host in the IP address of the multi-operator composite smart card, and the fourth IP address is an IP address provided by the operator network supported by the first member card;

[0055] The sending unit is used to send the second downlink IP data packet to the IoT terminal.

[0056] In a twelfth aspect, an embodiment of the present application provides a dedicated gateway, including:

[0057] A receiving unit, used for receiving an original Internet Protocol IP data packet;

[0058] The original IP data packet includes a dynamic IP address of the first IoT card, and the dynamic IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0059] An encapsulation unit, configured to encapsulate an original IP data packet using an IP address provided by at least one operator network supported by the first IoT card to obtain an encapsulated IP data packet;

[0060] The sending unit is used to send the encapsulated IP data packet.

[0061] In a thirteenth aspect, an embodiment of the present application provides a dedicated gateway, including:

[0062] A receiving unit, used for receiving encapsulated Internet Protocol IP data packets;

[0063] The encapsulated IP data packet includes an IP address provided by at least one operator network supported by the first IoT card and a dynamic IP address of the first IoT card, where the dynamic IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0064] A decapsulation unit, used for decapsulating the encapsulated IP data packet to obtain an original IP data packet;

[0065] The sending unit is used to send the original IP data packet.

[0066] In a fourteenth aspect, an embodiment of the present application provides an electronic device, including:

[0067] a processor adapted to implement computer instructions; and,

[0068] A computer-readable storage medium stores computer instructions, wherein the computer instructions are suitable for being loaded by a processor and executing the method of the first aspect.

[0069] In a fifteenth aspect, an embodiment of the present application provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are read and executed by a processor of a computer device, the computer device executes the method of the first aspect above.

[0070] In a sixteenth aspect, an embodiment of the present application provides a computer program product or a computer program, the computer program product or the computer program including computer instructions, the computer instructions being stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the method of the first aspect above.

[0071] Based on the above technical solution, a first IP address is introduced for the host of VPC and IDC, and at least one second IP address is introduced for at least one operator network supported by the first IoT card, and then a first mapping relationship including the correspondence between the first IP address and the at least one second IP address is sent to the dedicated gateway, so that the dedicated gateway modifies the source IP address and the destination IP address in the data packet to be forwarded according to the first mapping relationship; this is equivalent to providing completely independent network address space for different tenants, so that tenants can independently plan / configure the network address of the IoT terminal, and are no longer restricted by the address space specified by the operator APN. On the basis of improving the system performance of the IoT private network, the complexity of tenants using the IoT private network can be reduced.

[0072] In other words, the present application introduces the first IP address and designs the first IP address to be an unused IP address selected from the network segment included in the CIDR address block that does not overlap with the network segment where the IDC of the first IoT card is located and the network segment where the VPC of the first IoT card is located. This can not only ensure that the first IoT card can communicate normally with the IDC of the first IoT card, but also ensure that the first IoT card can maintain normal communication with the VPC of the first IoT card. In addition, using the unused IP address selected from the network segment included in the CIDR address block as the first IP address is equivalent to providing the tenant with a network address space that is completely independent of the operator's APN or other tenants, so that the tenant can independently plan / configure the IP address of the IoT terminal, and is no longer subject to restrictions such as the cloud connector that the IP address of the tenant's IoT card must not be used by other tenants' cloud connector instances. This can reduce the complexity of tenants using the IoT private network while improving the system performance of the IoT private network.

[0073] In short, by introducing the first IP address, this application can improve the system performance of the IoT private network and reduce the complexity of tenants using the IoT private network while ensuring normal communication between the first IoT card and the hosts of the VPC and IDC.

[0074] In addition, the present application introduces at least one second IP address and sends a first mapping relationship including the correspondence between the first IP address and the at least one second IP address to a dedicated gateway, so that the dedicated gateway modifies the source IP address and the destination IP address in the data packet to be forwarded according to the first mapping relationship; this is equivalent to the present application, based on the first IP address, introducing at least one second IP address and designing the first mapping relationship to be used by the dedicated gateway to modify the source IP address and the destination IP address in the data packet to be forwarded based on the first mapping relationship, which can not only avoid exposing the at least one second IP address to tenants, but also avoid the at least one second IP address from being affected by other tenants, thereby improving the freedom of selection of the at least one second IP address, and thereby reducing the complexity of tenants' use of the IoT private network on the basis of improving the system performance of the IoT private network.

[0075] In addition, the present application designs the at least one second IP address to include an IP address provided by at least one operator network supported by the first IoT card; this is equivalent to, regardless of whether the first IoT card is a single-operator IoT card or a multi-operator composite card, only one first IP address needs to be allocated to the IoT card, and the first IP address is always used to communicate with the VPC and IDC of the first IoT card; in other words, regardless of whether the first IoT card supports one operator network or more than one operator network, only one first IP address needs to be allocated to the IoT card, and the first IP address is always used to communicate with the VPC and IDC of the first IoT card; considering that only the first IP address is exposed to tenants, the solution of the present application can ensure the consistency of the tenant experience, and thus reduce the complexity of tenants using the IoT private network on the basis of improving the system performance of the IoT private network. BRIEF DESCRIPTION OF THE DRAWINGS

[0076] Figure 1 This is an example of a private IoT network provided in an embodiment of the present application.

[0077] Figure 2 This is another example of the IoT private network provided in the embodiments of the present application.

[0078] Figures 3 to 10 It is a schematic flowchart of the address allocation method provided in an embodiment of the present application.

[0079] Fig.11 It is a schematic block diagram of the cloud console provided in an embodiment of the present application.

[0080] Fig.12 It is a schematic block diagram of the Internet of Things terminal provided in an embodiment of the present application.

[0081] Figures 13 to 16 It is a schematic block diagram of a private network provided in an embodiment of the present application.

[0082] Fig.17 It is a schematic structural diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0083] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application.

[0084] The solution provided in this application may involve artificial intelligence technology.

[0085] Among them, artificial intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results. In other words, artificial intelligence is a comprehensive technology in computer science that attempts to understand the essence of intelligence and produce a new intelligent machine that can respond in a similar way to human intelligence. Artificial intelligence is to study the design principles and implementation methods of various intelligent machines so that machines have the functions of perception, reasoning and decision-making.

[0086] It should be understood that artificial intelligence technology is a comprehensive discipline that covers a wide range of fields, including both hardware-level and software-level technologies. Basic artificial intelligence technologies generally include technologies such as sensors, dedicated artificial intelligence chips, cloud computing, distributed storage, big data processing technology, operating / interactive systems, and mechatronics. Artificial intelligence software technology mainly includes computer vision technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0087] With the research and advancement of artificial intelligence technology, artificial intelligence technology has been studied and applied in many fields, such as common smart homes, smart wearable devices, virtual assistants, smart speakers, smart marketing, unmanned driving, automatic driving, drones, robots, smart medical care, smart customer service, etc. I believe that with the development of technology, artificial intelligence technology will be applied in more fields and play an increasingly important role.

[0088] The embodiments of the present application may involve computer vision (CV) technology in artificial intelligence technology. Computer vision is a science that studies how to make machines "see". To put it more concretely, it refers to machine vision such as using cameras and computers to replace human eyes to identify and measure targets, and further perform graphic processing to make computer processing into images that are more suitable for human eye observation or transmission to instrument detection. As a scientific discipline, computer vision studies related theories and technologies, and attempts to establish an artificial intelligence system that can obtain information from images or multidimensional data. Computer vision technology generally includes image processing, image recognition, image semantic understanding, image retrieval, OCR, video processing, video semantic understanding, video content / behavior recognition, three-dimensional object reconstruction, 3D technology, virtual reality, augmented reality, simultaneous positioning and map construction, and other technologies, as well as common biometric recognition technologies such as face recognition and fingerprint recognition.

[0089] The embodiments of the present application may also involve machine learning (ML) in artificial intelligence technology. ML is a multi-disciplinary cross-discipline involving probability theory, statistics, approximation theory, convex analysis, algorithm complexity theory and other disciplines. It specializes in how computers simulate or implement human learning behavior to acquire new knowledge or skills and reorganize existing knowledge structures to continuously improve their performance. Machine learning is the core of artificial intelligence and the fundamental way to make computers intelligent. Its applications are spread across all fields of artificial intelligence. Machine learning and deep learning generally include artificial neural networks, belief networks, reinforcement learning, transfer learning, inductive learning, and learning by teaching.

[0090] In addition, the solution provided by this application may involve blockchain technology.

[0091] Blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. Blockchain can include the underlying blockchain platform, platform product service layer, and application service layer.

[0092] The underlying blockchain platform can include processing modules such as user management, basic services, smart contracts, and operational detection. Among them, the user management module is responsible for the identity information management of all blockchain participants, including maintaining public and private key generation (account management), key management, and the maintenance of the correspondence between the user's real identity and the blockchain address (authority management), etc., and, under authorization, supervises and audits the transactions of certain real identities and provides risk control rule configuration (risk control audit); the basic service module is deployed on all blockchain node devices to verify the validity of business requests, and records valid requests to storage after consensus is reached. For a new business request, the basic service first performs interface adaptation analysis and authentication processing (interface adaptation), and then encrypts the business information through the consensus algorithm (consensus management). The smart contract module is responsible for the registration and issuance of contracts, as well as contract triggering and contract execution. Developers can define the contract logic in a programming language and publish it to the blockchain (contract registration). According to the logic of the contract terms, the key or other events are called to trigger the execution and complete the contract logic. It also provides the function of contract upgrade and cancellation. The operation detection module is mainly responsible for the deployment, configuration modification, contract setting, cloud adaptation and real-time status visualization output of the product during the product release process, such as alarm, network status detection, node equipment health status detection, etc.

[0093] The platform product service layer provides the basic capabilities and implementation framework of typical applications. Developers can superimpose business features based on these basic capabilities to complete the blockchain implementation of business logic. The application service layer provides application services based on blockchain solutions for business participants to use.

[0094] In addition, the embodiments of the present application relate to the field of security, and in particular to the field of network management of wireless security, and in particular to the field of security management of Internet Protocol (IP) addresses in wireless security.

[0095] To facilitate the understanding of the present application, the relevant terms involved in the present application are explained below.

[0096] Multi-card single standby: A standard IoT card integrates multiple operators' subscriber identity modules (SIMs) and controls the switching of operator SIMs through electrical signals.

[0097] Classless Inter-Domain Routing (CIDR): is a method of creating additional addresses on the Internet that are provided to service providers (ISPs) and then assigned to customers by ISPs. CIDR reduces the burden on Internet routers by centralizing routes so that one IP address represents thousands of IP addresses served by major backbone providers. All packets sent to these addresses are sent to ISPs such as MCI or Sprint. In 1990, there were about 2,000 routes on the Internet. Five years later, there were more than 30,000 routes on the Internet. Without CIDR, routers would not be able to support the increase in Internet websites. CIDR uses 13 to 27-bit variable network IDs instead of the fixed 8, 16, and 24 bits used by ABC class network IDs. CIDR restructures the classful routing selection process that was originally used to assign class A, class B, and class C addresses. CIDR replaces the restrictions on the network portion of the address in the original address structure (the network portion of the three class addresses was limited to 8 bits, 16 bits, and 24 bits, respectively) with a prefix of 13-27 bits. In the address block that administrators can allocate, the number of hosts ranges from 32 to 500,000, which can better meet the special address needs of organizations. CIDR addresses contain a standard 32-bit IP address and information about the number of bits in the network prefix. Take the CIDR address 222.80.18.18 / 25 as an example, where " / 25" means that the first 25 bits in the address represent the network part, and the remaining bits represent the host part. In other words, CIDR is a method of classifying IP addresses for assigning IP addresses to users and effectively routing IP data packets on the Internet. An IP address consists of two parts: a prefix that identifies the network and the host address that follows within this network. In the previous classified network, the allocation of IP addresses divided the 32 bits of the IP address into segments of 8 bits each. This requires the prefix to be 8, 16, or 24 bits. Therefore, the smallest allocable address block is 256 (24-bit prefix, 8-bit host address, 2 8 = 256) addresses, which is too few for most enterprises. A larger address block contains 65536 (16-bit prefix, 16-bit host, 2 16 =65536) addresses, which is too much for even large companies. This results in insufficient use of IP addresses and inconvenience in routing, because a large number of small networks (Class C networks) that require separate routing are geographically separated and difficult to aggregate, thus adding a lot of burden to routing devices. Classless inter-domain routing is based on variable length subnet masking (VLSM) to allocate prefixes of arbitrary length.

[0098] Access point name (APN): is the name of the gateway between a mobile network such as General Packet Radio Service (GPRS) or 3G and another computer network (usually the Internet). A mobile device must set up an access point name provided by the operator to establish a data connection. The operator uses this name to distinguish the type of network connection to be established, such as what IP address will be assigned to the wireless device, or what security method will be used, and whether or how to connect to some private customer network. More specifically, the access point name indicates which public data network (PDN) a mobile data user wants to use for communication. In addition, the access point name can also be used to define the type of service provided by the PDN (such as connecting to a WAP server, MMS service). APN has been used for the 3rd Generation Partnership Project (3GPP) data access network, such as General Packet Radio Service (GPRS) or Evolved Packet Core network (EPC). GPRS is a mobile data service available to mobile phone users of the Global System for Mobile Communications (GSM), and is a data transmission technology in the second generation of mobile communications. GSM, commonly known as "Global Communication", is a mobile communication technology standard originated in Europe. It is a second generation mobile communication technology. Its development purpose is to allow all parts of the world to use a common mobile phone network standard, allowing users to travel around the world with one mobile phone.

[0099] Data Network Name (DNN): APN in the fifth-generation mobile communication technology (5-Generation, 5G) system.

[0100] International Mobile Subscriber Identification Number (IMSI): It is a symbol to distinguish mobile users. It is stored in the SIM card and can be used to distinguish the valid information of mobile users. Its total length does not exceed 15 digits, and it also uses 0 to 9. MCC is the country code of the mobile user, which occupies 3 digits. China's MCC is 460; MNC is the mobile network number, which consists of two or three digits. China Mobile's mobile network code (MNC) is 00; it is used to identify the mobile communication network to which the mobile user belongs; MSIN is the mobile user identification code, which is used to identify mobile users in a mobile communication network.

[0101] Integrated circuit card identity (ICCID): SIM card number, equivalent to the ID card of mobile phone number. ICCID is the unique identification number of IC card, which consists of 20 digits, and its encoding format is: XXXXXX0MFSSYYGXXXXXX. Among them, the first six digits can refer to the operator code. For example, the operator code of China Mobile is: 898600; 898602; 898604. For another example, the operator code of China Unicom is: 898601, 898606, 898609, and China Telecom is 898603.

[0102] Internet Data Center (IDC): The telecommunications department uses existing Internet communication lines and bandwidth resources to establish a standardized telecommunications professional-grade computer room environment to provide enterprises and governments with a full range of services such as server hosting, leasing, and related value-added services.

[0103] Internet Protocol version 4 (IPv4): Whether you use a smartphone or a PC to access the Internet, an IP address will be assigned to it. The phone or PC uses this IP address to communicate with other networks on the Internet and exchange information. There are two types of IP addresses: IPv4 and IPv6. IPv4, also known as the fourth version of the Internet Communication Protocol, is the fourth revised version in the development process of the Internet Protocol. IPv4 uses 32-bit (4-byte) addresses, and there are only 4,294,967,296 (232) addresses in the address space. Because some addresses are reserved for special purposes, such as private networks (about 18 million addresses) and multicast addresses (about 270 million addresses), the number of addresses that can be routed on the Internet is reduced. As addresses are continuously allocated to end users, the problem of IPv4 address exhaustion is also arising.

[0104] Internet Protocol Version 6 (IPv6): It is the next generation IP protocol designed by the Internet Engineering Task Force to replace IPv4.

[0105] Internet of Things: This is a definition made to distinguish it from the Internet. It refers to a network that connects any object to the network through information sensors such as radio frequency identification devices (RFID) to exchange information and communicate, so as to achieve object identification, positioning, detection and management. In other words, the Internet of Things can be simply said to be an extension of the Internet. Its core is still the Internet. The Internet connects people through computers (PCs or servers), while the connection of the Internet of Things is broader. It can be between people, people and things, or even things and things. Compared with the Internet, the Internet of Things is free from the limitations of time and space, and can truly do whatever it wants anytime and anywhere.

[0106] Virtual Private Cloud (VPC): A private network on a dedicated cloud. You can fully control the private network, such as selecting an IP address range, configuring routing tables and gateways, etc. You can use cloud resources in a custom private network, such as cloud servers, cloud database RDS and load balancing. Each private network consists of at least one private network segment, a router and at least one switch. When creating a private network and a switch, specify the private network segment used by the private network in the form of a CIDR address block. The router (vRouter) is the hub of the private network. As an important functional component in the private network, it can connect each switch in the private network. It is also a gateway device that connects the private network and other networks. After each private network is successfully created, the system will automatically create a router, and each router is associated with a routing table. The switch (vSwitch) is the basic network device that makes up the private network and is used to connect different cloud resources. After creating a private network, you can create a switch to divide one or more subnets for the private network. Different switches in the same private network can communicate with each other. Applications can be deployed in switches in different availability zones to improve the availability of applications.

[0107] IoT Card: It is a traffic card for smart terminal devices provided by operators to IoT service companies. IoT Card is only sold in bulk to corporate users and is widely used in shared bicycles, mobile payments, and Internet of Vehicles. It has the characteristics of low fees, security, and high communication efficiency.

[0108] Customer Premise Equipment (CPE): Also known as customer terminal equipment, the so-called "premise" means that it always stands in front of the user's device. Its function is to convert mobile communication signals (4G, 5G, etc.) or wired broadband signals into local LAN signals for use by user devices. 5G CPE is a type of 5G terminal equipment, which is used to receive 5G signals sent by operator base stations, and then convert them into Wi-Fi signals or wired signals, allowing more local devices (mobile phones, tablets, computers) to access the Internet. In essence, "optical modems" are a type of CPE. The difference between "optical modems" and 5G CPE is that "optical modems" are connected to the operator's optical fiber access network equipment, while 5G CPE is connected to 5G base stations. Unlike conventional "optical modems" that can only be used in one place, 5G CPE can be "mobile" and can be used wherever there is a 5G signal. For example, when a family goes on vacation to a suburban villa, they can use 5G CPE to set up a Wi-Fi 6 high-speed hotspot so that family members can go online and share videos of their trip. For example, when a company goes out to hold an event or attend an exhibition, it can use 5G CPE to facilitate employees and customers to surf the Internet. It can even be said that you can carry CPE with you, which is equivalent to carrying a fiber-optic broadband with you. It can be said that 5G CPE is an enhanced version of "optical modem". Through 5G CPE, users can control a variety of smart devices in their homes, and while realizing the interconnection of all things, it significantly improves the life experience of family members. For enterprises, 5G CPE also has very broad application prospects. Taking the smart factory as an example, in the future, the factory's equipment and materials will be connected to the Internet. 5G CPE can serve as a unified traffic entrance and exit for all equipment in a certain area (workshop), providing these devices with low-cost, high-speed network connections. With the increase in application scenarios, 5G CPE will support more communication protocols (such as Bluetooth, UWB, etc.) in addition to 5G, and truly become the management and control center of all devices. In addition to the network connection function, 5G CPE will also be combined with edge computing to become a sinking edge computing node to provide computing power support for related devices.

[0109] Virtual network: A logical network constructed by software on a physical network or other virtual networks to implement a user-defined network topology and meet user-specific needs. The main application scenario is a multi-tenant cloud computing data center. In the cloud application model, there are multiple cloud resource lessees (tenants), and all tenants share the physical infrastructure of the cloud service provider, including servers, storage, and networks, which forms a multi-tenancy model (Muti-Tenancy). This approach is particularly favored by Internet startups with limited funds. Tenants hope that the network provided by the cloud service provider will be a natural extension and expansion of their own enterprise network. The so-called "natural" means that it can be seamlessly integrated with the network resources provided by the cloud service provider without changing their own network configuration. At the same time, it is also possible to naturally migrate and deploy applications and services carried by their own enterprise network to the cloud service provider's network. For the cloud service provider's data center, traditional L2 / L3 network technology is difficult to adapt to this difficult technical challenge, and it is necessary to change the existing network management model and the way of providing network resources (provision) to tenants. New application requirements in the cloud model can be met through the virtualization technology of computing and storage resources. Specifically, the network provided by cloud service providers to tenants is a virtual network. Although the same underlying physical network infrastructure is used, the virtual network (including the control plane and data plane) obtained by each tenant is independent and completely isolated. Through the control plane provided by the cloud service provider, tenants can arbitrarily configure and manage their own virtual networks. More importantly, with the help of software, virtual networks can be quickly delivered to tenants. Together with virtual computing and storage resources, each tenant's virtual resources form a complete VPC.

[0110] Network Address Translator (NAT): It replaces the address information in the IP packet header. NAT is usually deployed at the network exit of an organization to achieve public network accessibility and upper layer protocol connectivity by replacing the internal network IP address with the exit IP address.

[0111] Figure 1 This is an example of the IoT private network 100 provided in an embodiment of the present application.

[0112] like Figure 1As shown, the IoT private network 100 may include an IoT terminal 110, an access network device 120, an operator core network 130, and an IDC 140. Among them, the operator core network 130 can be connected to the IDC's computer room through a dedicated line. For example, the operator connects to the IDC's computer room through an APN / DNN dedicated line, and provides a private network for the customer's IoT terminal 110 under the 4G / 5G network through the isolation of the APN / DNN for directional access to the IDC. After negotiation between the tenant and the operator, a network segment that does not overlap with the tenant's VPC / IDC can be allocated to the APN, and the address of the IoT terminal 110 is obtained from the network segment.

[0113] Figure 2 It is an example of a communication system 300 to which an embodiment of the present application is applicable.

[0114] like Figure 2 As shown, the communication system 300 may include IoT terminals 311 to 313, base stations 321 to 323, operator core networks 331 to 333, cloud control consoles 340, dedicated gateways 350, public clouds 360, and IDC 370. Among them, the operator core networks 331 to 333 may be 4G / 5G core networks, the cloud control console 340 may be public cloud control consoles, the dedicated gateway 350 may also be referred to as an address translation device, and the IDC 370 may be an IDC built by the customer. In this application, the base stations 321 to 323, the operator core networks 331 to 333, the cloud control consoles 340, and the dedicated gateways 350 are referred to as virtual IoT private networks. The virtual IoT private network can not only establish a two-way connection with the public cloud 360, but also establish a two-way connection with the IDC 370 to pull or upload various structured or streaming data, including but not limited to databases and video streams.

[0115] It should be understood that IoT terminals 311 to 313 may be 4G / 5G CPE or other forms of data terminals, which may have the ability to access a single or multiple operator networks. Figure 2 As shown, IoT terminal 311 and IoT terminal 313 can only access a single operator network, while IoT terminal 312 can access three operator networks.

[0116] The application scenarios involved in this application are exemplified below.

[0117] Application scenario 1:

[0118] New retail stores collect video data through cameras and transmit it back to the public cloud or the customer's self-built IDC through 4G / 5G CPE. Customers deploy video analysis tools in the IDC for remote control, store inspections, customer flow data analysis, fire detection, etc. Customers assign IP addresses to IoT cards through the cloud console and communicate with the public cloud or the customer's self-built IDC through the IP address of the IoT card. The IoT terminal selects the appropriate operator network access based on the store's network environment, and switches to another operator network when the accessed operator network fails. During the entire process, customers do not need to perceive changes in the operator's IP address.

[0119] Application scenario 2:

[0120] The passenger information system (PIS) network screen uses the 4G / 5G network to access the public cloud or the customer's self-built IDC to periodically pull real-time arrival information of buses / subways. The customer assigns an IP address to the IoT card through the cloud console and communicates with the public cloud or the customer's self-built IDC through the IP address of the IoT card. The IoT terminal can select a suitable operator network access based on the network environment of the PIS network screen, and switch to another operator network when the accessed operator network fails. During the whole process, the customer does not need to perceive the changes in the operator's IP address.

[0121] Figure 3 is a schematic flow chart of an address allocation method 410 provided in an embodiment of the present application. The address allocation method 410 may be executed by a cloud console. For example, the address allocation method 410 may be executed by Figure 2 The address allocation method 410 may be executed by a public cloud console. For example, the cloud console may be a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, and big data and artificial intelligence platforms. For ease of description, the prediction method provided in this application is described below using the cloud console as an example.

[0122] like Figure 3 As shown, the method 410 may include some or all of the following:

[0123] S411, the cloud console obtains the classless inter-domain routing CIDR address block of the IoT private network and the identifier of the first IoT card; wherein the network segment included in the CIDR address block does not overlap with the network segment where the Internet data center IDC of the first IoT card is located, and the network segment included in the CIDR address block does not overlap with the network segment where the virtual private cloud VPC of the first IoT card is located.

[0124] Exemplarily, the first IoT card may be a single-operator IoT card or a multi-operator composite smart card, wherein a single-operator IoT card may refer to an IoT card that supports access to a single operator network, and a multi-operator composite smart card may refer to an IoT card that supports access to multiple operator networks.

[0125] Exemplarily, the identifier of the first IoT card may be a name identifier of the first IoT card.

[0126] Of course, in other alternative embodiments, the identifier of the first IoT card may be any information that can identify the first IoT card and can be modified by the tenant.

[0127] Exemplarily, the network segment included in the CIDR address block can be the network segment where one or more subnets are allocated to the IoT terminals in the virtual IoT private network by the tenant according to the address planning of the private network. The network segment included in the CIDR address block does not overlap with the network segment where the tenant's IDC is located, and does not overlap with the network segment where the tenant's VPC is located.

[0128] Of course, in other alternative embodiments, the network segment included in the CIDR address block may also be non-overlapping with the network segment where the tenant's IDC (or the tenant's VPC) is located. In one implementation, the network segment included in the CIDR address block may also be non-overlapping with the network segment where the tenant's IDC is located, that is, only the communication between the IoT terminal and the tenant's IDC is guaranteed. In another implementation, the network segment included in the CIDR address block may also be non-overlapping with the network segment where the tenant's VPC is located, that is, only used to ensure communication between the IoT terminal and the tenant's VPC.

[0129] S412, the cloud console obtains a first Internet Protocol IP address of the first IoT card based on an unused IP address in the CIDR address block, where the first IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0130] Exemplarily, the cloud console determines an IP address among the unused IP addresses in the CIDR address block as the first IP address. For example, the first IP address may be an IPv4 address or an IPv6 address. Optionally, the first IP address may also be defined as an address used by the first IoT card to access other IoT cards.

[0131] It should be understood that in the present application, the first IP address of the first IoT card can also be understood as the first IP address of the IoT terminal, that is, the IP address of the IoT terminal (or the first IoT card) under the tenant (Overlay) network. In other alternative embodiments, the first IP address can also be referred to as a tenant (overlay) address or an upper layer address. A tenant network refers to a virtual network established on an underlying network, whose logical nodes and logical links constitute an overlay network. Optionally, the underlying network can be at least one operator network supported by the first IoT card.

[0132] Exemplarily, the cloud console may randomly select an IP address from unused IP addresses in the CIDR address block as the first IP address.

[0133] Exemplarily, the cloud console may select an IP address from unused IP addresses in the CIDR address block according to a predefined rule as the first IP address. Optionally, the predefined rule may be selected in a predefined order. Optionally, the predefined order may be the order of the IP addresses in the network segment. Of course, the predefined rule may also be a rule of other forms or directions, which is not specifically limited in this application.

[0134] Exemplarily, the cloud console may select the most frequently used or least frequently used IP address among the unused IP addresses in the CIDR address block as the first IP address.

[0135] S413, the cloud console obtains at least one second IP address of the first IoT card, where the at least one second IP address includes an IP address provided by at least one operator network supported by the first IoT card.

[0136] Exemplarily, the at least one second IP address corresponds to the at least one operator network in a one-to-one manner.

[0137] For example, the cloud console may first obtain the network segment where the APN provided by each of the at least one operator network is located from each of the at least one operator network; then the cloud console may select an unused IP address from the network segment where the APN provided by each of the operator networks is located as the second IP address provided by each operator. Based on this, the cloud console may obtain at least one second IP address of the first IoT card.

[0138] S414, the cloud console sends a first mapping relationship to the dedicated gateway; wherein the first mapping relationship includes a correspondence between the first IP address and the at least one second IP address, and the first mapping relationship is used by the dedicated gateway to modify the source IP address and the destination IP address in the data packet to be forwarded according to the first mapping relationship.

[0139] Exemplarily, if the first IoT card is a multi-operator composite smart card, that is, the operator networks supported by the first IoT card are multiple operator networks, the cloud console can obtain a unique second IP address from the APN address space provided by the multiple operator networks, and establish a corresponding relationship with the first IP address until all operators are traversed and a first mapping relationship is formed. In other words, if the multiple operator networks are N operator networks, the first mapping relationship can be reflected as the following rules or data: first IP address->[second IP address provided by operator network 1, second IP address provided by operator network 2, ..., second IP address provided by operator network N]. Optionally, N is an integer greater than or equal to 1.

[0140] Exemplarily, after the cloud console sends the first mapping relationship to the dedicated gateway, the cloud console may also update or maintain the first mapping relationship.

[0141] In this embodiment, a first IP address is introduced for the host of the VPC and IDC, and at least one second IP address is introduced for at least one operator network supported by the first IoT card, and then a first mapping relationship including the correspondence between the first IP address and the at least one second IP address is sent to the dedicated gateway, so that the dedicated gateway modifies the source IP address and the destination IP address in the data packet to be forwarded according to the first mapping relationship; this is equivalent to providing completely independent network address space for different tenants, so that tenants can independently plan / configure the network address of the IoT terminal, and are no longer restricted by the address space specified by the operator APN. On the basis of improving the system performance of the IoT private network, the complexity of tenants using the IoT private network can be reduced.

[0142] In other words, the present application introduces the first IP address and designs the first IP address to be an unused IP address selected from the network segment included in the CIDR address block that does not overlap with the network segment where the IDC of the first IoT card is located and the network segment where the VPC of the first IoT card is located. This can not only ensure that the first IoT card can communicate normally with the IDC of the first IoT card, but also ensure that the first IoT card can maintain normal communication with the VPC of the first IoT card. In addition, using the unused IP address selected from the network segment included in the CIDR address block as the first IP address is equivalent to providing the tenant with a network address space that is completely independent of the operator's APN or other tenants, so that the tenant can independently plan / configure the IP address of the IoT terminal, and is no longer subject to restrictions such as the cloud connector that the IP address of the tenant's IoT card must not be used by other tenants' cloud connector instances. This can reduce the complexity of tenants using the IoT private network while improving the system performance of the IoT private network.

[0143] In short, by introducing the first IP address, this application can improve the system performance of the IoT private network and reduce the complexity of tenants using the IoT private network while ensuring normal communication between the first IoT card and the hosts of the VPC and IDC.

[0144] In addition, the present application introduces at least one second IP address and sends a first mapping relationship including the correspondence between the first IP address and the at least one second IP address to a dedicated gateway, so that the dedicated gateway modifies the source IP address and the destination IP address in the data packet to be forwarded according to the first mapping relationship; this is equivalent to the present application, based on the first IP address, introducing at least one second IP address and designing the first mapping relationship to be used by the dedicated gateway to modify the source IP address and the destination IP address in the data packet to be forwarded based on the first mapping relationship, which can not only avoid exposing the at least one second IP address to tenants, but also avoid the at least one second IP address from being affected by other tenants, thereby improving the freedom of selection of the at least one second IP address, and thereby reducing the complexity of tenants' use of the IoT private network on the basis of improving the system performance of the IoT private network.

[0145] In addition, the present application designs the at least one second IP address to include an IP address provided by at least one operator network supported by the first IoT card; this is equivalent to, regardless of whether the first IoT card is a single-operator IoT card or a multi-operator composite card, only one first IP address needs to be allocated to the IoT card, and the first IP address is always used to communicate with the VPC and IDC of the first IoT card; in other words, regardless of whether the first IoT card supports one operator network or more than one operator network, only one first IP address needs to be allocated to the IoT card, and the first IP address is always used to communicate with the VPC and IDC of the first IoT card; considering that only the first IP address is exposed to tenants, the solution of the present application can ensure the consistency of the tenant experience, and thus reduce the complexity of tenants using the IoT private network on the basis of improving the system performance of the IoT private network.

[0146] In some embodiments, S411 may include:

[0147] The cloud console receives the CIDR address block and the identifier of the first IoT card sent by the IoT terminal;

[0148] The cloud console configures attribute information associated with the identifier of the first IoT card;

[0149] The attribute information includes at least one of the following: a unique identifier of the first IoT card in the at least one operator network, a unique identifier of the first IoT card in the cloud console, and a unique identifier of the first IoT card in all tenants.

[0150] Exemplarily, the tenant configures the CIDR address block of the IoT private network to the cloud console through the interface provided by the cloud console. For example, the CIDR address block of the IoT private network can be 10.0.1.0 / 24, 192.168.1.0 / 24, etc.

[0151] Exemplarily, the tenant creates a name identifier for the first IoT card.

[0152] Further, the cloud console configures attribute information associated with the name identifier of the first IoT card; wherein the attribute information includes at least one of the following: a unique identifier of the first IoT card in a supported operator network, a unique identifier of the first IoT card in the cloud console, and a unique identifier of the first IoT card in all tenants. Optionally, the unique identifier of the first IoT card in a supported operator network may be an IMSI or an ICCID. Optionally, the unique identifier of the first IoT card in a supported operator network may be obtained from the storage information of the first IoT card. Optionally, the unique identifier of the first IoT card in a supported operator network may be entered by an operation and maintenance personnel or imported in other forms.

[0153] In some embodiments, S413 may include:

[0154] If there is an interface provided by the at least one operator network, the at least one second IP address is obtained through the interface provided by the at least one operator network; if there is no interface provided by the at least one operator network, the at least one second IP address is obtained in response to the configuration operation of the operation and maintenance personnel on the cloud console.

[0155] Exemplarily, the cloud console configures the at least one second IP address for the first IoT card through the interface provided by the operator network, which serves as the underlying network (underlay) IP address for accessing the operator network. When there is no interface provided by the operator network, the at least one second IP address can be configured offline by the operation and maintenance personnel of the public cloud. In a specific implementation, the cloud console can obtain an unoccupied IP address from the address space of the APN provided by the operator network as the second IP address of the first IoT card. Furthermore, the cloud console configures the second IP address configured for the first IoT card to the operator network.

[0156] The address allocation method provided in this application is described below from the perspective of the IoT terminal.

[0157] Figure 4 4 is a schematic flow chart of an address allocation method 420 provided in an embodiment of the present application. The method 420 may be applicable to an IoT terminal, such as an IoT terminal supporting an Equal-Cost Multipath Routing (ECMP) function.

[0158] It should be noted that ECMP exists in a network environment where multiple different links reach the same destination address. If traditional routing technology is used, the data packets sent to the destination address can only use one of the links, and the other links are in a backup state or invalid state. In addition, it takes a certain amount of time to switch between them in a dynamic routing environment. The equal-value multi-path routing protocol can use multiple links at the same time in this network environment, which not only increases the transmission bandwidth, but also can back up the data transmission of failed links without delay and packet loss.

[0159] like Figure 4 As shown, the address allocation method 420 may include:

[0160] S421, generating configuration information in response to a configuration operation performed by a tenant of the first IoT card on the IoT terminal;

[0161] The configuration information includes a Classless Inter-Domain Routing (CIDR) address block of the IoT private network and an identifier of the first IoT card. The CIDR address block is used by the cloud console to determine a first Internet Protocol (IP) address of the first IoT card. The first IP address is used to access a host in a virtual private cloud (VPC) of the first IoT card and a host in an Internet data center (IDC).

[0162] S422: Send the configuration information to the cloud console through an interface provided by the cloud console.

[0163] Exemplarily, the configuration operation may be an operation performed by the tenant on the screen, such as a write operation, a screen sliding operation, a selection operation, a click operation, a press operation, etc. on the screen.

[0164] Exemplarily, the configuration operation may be a voice input operation or the like.

[0165] In this embodiment, the configuration information is generated by the configuration operation of the tenant of the first IoT card on the IoT terminal, and the configuration information is sent to the cloud console. This not only facilitates the tenant to independently configure the CIDR address block of the IoT private network and the identifier of the first IoT card, but also simplifies the configuration complexity of the CIDR address block of the IoT private network and the identifier of the first IoT card.

[0166] In some embodiments, the method 420 may further include:

[0167] If the IoT terminal supports the insertion of multiple IoT cards including the first IoT card, the IoT terminal receives the detection signaling periodically sent by the dedicated gateway; the IoT terminal sends a response signaling to the dedicated gateway, and the response signaling is used to determine the operator network accessed by the multiple IoT cards and the IP addresses provided by the accessed operator network that the multiple IoT cards are using; the method 420 may also include: if the operator network accessed by the multiple IoT cards includes multiple operator networks or the IP addresses provided by the accessed operator network that the multiple IoT cards are using include multiple IP addresses, the IoT terminal determines multiple transmission paths from the multiple reachable paths of the first IoT card; the IoT terminal uses the multiple transmission paths for data transmission.

[0168] Exemplarily, the IoT terminal may use an equal-cost routing (ECMP) approach to determine multiple transmission paths.

[0169] Exemplarily, the IoT terminal may first determine multiple reachable paths based on the first IP address and the IP addresses provided by the accessed operator network and being used by the multiple IoT cards; then the IoT terminal may select the multiple transmission paths from the multiple reachable paths based on the attribute information of the data packet to be sent. Optionally, the attribute information of the data packet to be sent may be a triplet or a quintuple of information of the data packet to be sent. The quintuple generally refers to the source IP address, source port, destination IP address, destination port, and transport layer protocol. For example, the IoT terminal may determine the paths with the same destination port among the multiple reachable paths as the multiple transmission paths.

[0170] Exemplarily, the IoT terminal may adopt a stream hash, polling or random method to perform load sharing and utilize the multiple transmission paths for data transmission.

[0171] In this embodiment, by introducing periodic detection signaling, the operator network accessed by the IoT terminal and the second IP address provided by the operator network that the IoT terminal is using are determined. If the operator networks accessed by the multiple IoT cards include multiple operator networks, it means that the IoT terminal can access the VPC or IDC through the operator network and a dedicated gateway in a multi-card multi-standby link aggregation mode; based on this, when the IoT terminal determines that there are multiple reachable paths for the IoT terminal, it can select multiple transmission paths for data transmission from the multiple reachable paths to increase the transmission bandwidth, and is conducive to backing up the data transmission of failed links without delay and packet loss.

[0172] The address allocation method provided in this application is explained below from the perspective of a dedicated gateway.

[0173] Figure 54 is a schematic flow chart of an address allocation method 430 provided in an embodiment of the present application. The method 430 may be executed by a dedicated gateway, for example, a gateway having an address conversion function. Figure 2 The dedicated gateway 350 is shown to perform.

[0174] like Figure 4 As shown, the address allocation method 430 may include:

[0175] S431, the dedicated gateway receives a first mapping relationship sent by the cloud console;

[0176] The first mapping relationship includes a correspondence between a first Internet Protocol IP address of the first IoT card and at least one second IP address of the first IoT card, the first IP address is used to access a host in a virtual private cloud VPC of the first IoT card and a host in an Internet data center IDC, and the at least one second IP address includes an IP address provided by at least one operator network supported by the first IoT card;

[0177] S432: The dedicated gateway modifies the source IP address and the destination IP address in the data packet to be forwarded based on the mapping relationship.

[0178] In some embodiments, the method 430 may further include:

[0179] If the IoT terminal supports the insertion of multiple IoT cards including the first IoT card, a detection signaling is periodically sent to the IoT terminal; a response signaling sent by the IoT terminal is received, and the response signaling is used to determine the operator network accessed by the multiple IoT cards and the IP addresses provided by the accessed operator network that the multiple IoT cards are using; if the operator network accessed by the multiple IoT cards includes multiple operator networks or the IP addresses provided by the accessed operator network that the multiple IoT cards are using include multiple IP addresses, the dedicated gateway determines multiple transmission paths from the multiple reachable paths of the first IoT card; and uses the multiple transmission paths to transmit data.

[0180] It should be understood that since method 430 is an interactive solution for method 410 and method 420, its related content can refer to the related solutions of method 410 and method 420 to avoid repetition and will not be repeated here.

[0181] The present application also provides a data transmission method, which is applicable to a dedicated gateway that supports a network address translation NAT function.

[0182] Figure 6 is a schematic flow chart of a data transmission method 500 provided in an embodiment of the present application. The method 500 may be executed by a dedicated gateway, for example, a gateway having an address translation function. Figure 2 The dedicated gateway 350 is shown to perform.

[0183] like Figure 6 As shown, the data transmission method 500 may include:

[0184] S510, the dedicated gateway receives a first downlink Internet Protocol IP data packet sent by a host in a virtual private cloud VPC or an Internet data center IDC of a multi-operator composite smart card; the multi-operator composite smart card includes a plurality of member cards; the IP address of the multi-operator composite smart card includes an IP address provided by an operator network supported by each of the plurality of member cards; the first member card among the plurality of member cards is a member card for an IoT terminal to access a network;

[0185] S520, the dedicated gateway modifies the destination address in the first downlink IP data packet from the third IP address to the fourth IP address, thereby obtaining a second downlink IP data packet; wherein the third IP address is an IP address determined by the host in the IP address of the multi-operator composite smart card, and the fourth IP address is an IP address provided by the operator network supported by the first member card;

[0186] S530: The dedicated gateway sends the second downlink IP data packet to the IoT terminal.

[0187] Exemplarily, the IoT terminal is accessed through a multi-operator composite smart card, and the tenant selects an IP address provided by the operator network for all member cards. The requirements for these IP addresses are: 1) the IP address needs to be real and belong to the dedicated APN of the operator where the member card is located; 2) the IP address is not used by other tenants under the same APN.

[0188] For example: the APN network segment provided by the first operator network is 10.0.1.0 / 24, the APN network segment provided by the second operator network is 172.0.1.0 / 24, and the APN network segment provided by the third operator network is 10.1.1.0 / 24. After confirmation with the public cloud service provider, the tenant selects the following three static IPs for the terminal.

[0189] The IP address provided by the first carrier network is: 10.0.1.10 / 32.

[0190] IP address provided by the second operator's network: 172.0.1.25 / 32.

[0191] IP address provided by the third-party operator network: 10.1.1.100 / 32.

[0192] The host in the VPC / IDC can communicate with the IoT terminal through any of the three IPs mentioned above, and the address conversion is performed by a dedicated gateway.

[0193] Assume that the IoT terminal accesses the network from the first operator network (its real IP address is 10.0.1.10), host 1 randomly selects 172.0.1.25 as the IP address of the IoT terminal, and host 2 randomly selects 10.1.1.100 as the IP address of the IoT terminal. The dedicated gateway will modify the destination address of the downlink IP data packet from host 1 from 172.0.1.25 to 10.0.1.10, and send the modified IP data packet to the IoT terminal. Similarly, the destination address of the downlink IP data packet from host 2 will be modified from 10.1.1.100 to 10.0.1.10, and the modified IP data packet will be sent to the IoT terminal.

[0194] In this embodiment, by introducing the third IP address and the fourth IP address, the host can independently select the IP address of the IoT terminal, which can improve the system performance of the IoT private network.

[0195] In some embodiments, the method 500 may further include:

[0196] Create a NAT session context;

[0197] Receiving a first uplink IP data packet sent by the IoT terminal;

[0198] Based on the context of the NAT session, modify the source address of the first uplink IP data packet from the fourth IP address to the third IP address to obtain a second uplink IP data packet;

[0199] The second uplink IP data packet is sent to the host.

[0200] For example: the APN network segment provided by the first operator network is 10.0.1.0 / 24, the APN network segment provided by the second operator network is 172.0.1.0 / 24, and the APN network segment provided by the third operator network is 10.1.1.0 / 24. After confirmation with the public cloud service provider, the tenant selects the following three static IPs for the terminal.

[0201] The IP address provided by the first carrier network is: 10.0.1.10 / 32.

[0202] IP address provided by the second operator's network: 172.0.1.25 / 32.

[0203] IP address provided by the third-party operator network: 10.1.1.100 / 32.

[0204] Assume that the IoT terminal accesses the network from the first operator network (its real IP address is 10.0.1.10), host 1 randomly selects 172.0.1.25 as the IP address of the IoT terminal, and host 2 randomly selects 10.1.1.100 as the IP address of the IoT terminal. The dedicated gateway will modify the destination address of the downlink IP data packet from host 1 from 172.0.1.25 to 10.0.1.10, and create the context of the NAT session. When the uplink IP packet arrives, its source address will be changed to 172.0.1.25. Similarly, the destination address of the downlink IP data packet from host 2 will be modified from 10.1.1.100 to 10.0.1.10, and the context of the NAT session will be created. When the uplink IP packet arrives, its source address will be changed to 10.1.1.100.

[0205] In other words, the dedicated gateway of this embodiment should have a complete NAT function, rather than a simple address translation.

[0206] The data transmission method provided by this application is described below.

[0207] Figure 7 610 is a schematic flow chart of a data transmission method 610 provided in an embodiment of the present application. The method 610 may be executed by a dedicated gateway, for example, a gateway having an address translation function. Figure 2 The dedicated gateway 350 is shown to perform.

[0208] like Figure 7 As shown, the data transmission method 610 may include:

[0209] S611, receiving an original Internet Protocol IP data packet;

[0210] The original IP data packet includes a dynamic IP address of the first IoT card, and the dynamic IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0211] S612, encapsulating the original IP data packet using the IP address provided by at least one operator network supported by the first IoT card to obtain an encapsulated IP data packet;

[0212] S613, sending the encapsulated IP data packet.

[0213] Exemplarily, the dedicated gateway can obtain tenant information through the tunnel context without assigning a static IP address to the card. The IoT terminal obtains a dynamic IP address when accessing the operator's network. After the IoT terminal completes network access and obtains a dynamic IP address, the SDK can be responsible for authenticating with the dedicated gateway and negotiating tunnel parameters. After the negotiation is completed, the tenant's data can be carried through the tunnel.

[0214] In this embodiment, the IoT terminal and the dedicated gateway are connected through a tunnel. The tenant only needs to configure the network segment on the terminal side and is not aware of the IP address of the APN provided by the operator network. This can reduce the complexity of tenants using the IoT private network while improving the system performance of the IoT private network.

[0215] Figure 8 6 is a schematic flow chart of a data transmission method 620 provided in an embodiment of the present application. The method 620 may be executed by a dedicated gateway, for example, a gateway having an address translation function. Figure 2 The dedicated gateway 350 is shown to perform.

[0216] like Figure 8 As shown, the data transmission method 620 may include:

[0217] S621, the dedicated gateway receives an encapsulated Internet Protocol IP data packet;

[0218] The encapsulated IP data packet includes an IP address provided by at least one operator network supported by the first IoT card and a dynamic IP address of the first IoT card, where the dynamic IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0219] S622, the dedicated gateway decapsulates the encapsulated IP data packet to obtain the original IP data packet;

[0220] S623: The dedicated gateway sends the original IP data packet.

[0221] It should be understood that method 610 is a method for encapsulating a data packet by a dedicated gateway, and method 620 is a method for decapsulating a data packet by a dedicated gateway. Since decapsulating a data packet is a reverse operation of encapsulating a data packet, the specific scheme of method 630 can refer to the relevant description of method 620. To avoid repetition, it will not be repeated here. In addition, the present application does not specifically limit the specific implementation of the encapsulation operation and decapsulation operation involved. For example, it can be an encapsulation or decapsulation technology based on an IP tunnel.

[0222] Combine the following Fig. 9 and Fig.10 The preferred embodiments provided in this application are described exemplarily.

[0223] Fig. 9 It is a schematic flowchart of the address allocation method 710 for a single-operator IoT card provided in an embodiment of the present application.

[0224] like Fig. 9 As shown, the method 710 may include:

[0225] S711: The tenant configures a CIDR address block dedicated to IoT in the cloud console.

[0226] Exemplarily, the tenant configures the CIDR address block of the IoT private network to the cloud console through the interface provided by the cloud console. For example, the CIDR address block of the IoT private network can be 10.0.1.0 / 24, 192.168.1.0 / 24, etc.

[0227] S712, the tenant creates the first IoT card on the cloud console.

[0228] Exemplarily, the tenant creates a name identifier for a first IoT card, wherein the first IoT card is a single-operator composite smart card.

[0229] Further, the cloud console configures attribute information associated with the name identifier of the first IoT card; wherein the attribute information includes at least one of the following: a unique identifier of the first IoT card in a supported operator network, a unique identifier of the first IoT card in the cloud console, and a unique identifier of the first IoT card in all tenants. Optionally, the unique identifier of the first IoT card in a supported operator network may be an IMSI or an ICCID. Optionally, the unique identifier of the first IoT card in a supported operator network may be obtained from the storage information of the first IoT card. Optionally, the unique identifier of the first IoT card in a supported operator network may be entered by an operation and maintenance personnel or imported in other forms.

[0230] S713, the cloud console obtains the first IP address of the first IoT card.

[0231] Exemplarily, the cloud console selects an unused IP address from the CIDR address block of the IoT private network and assigns it to the first IoT card, and uses it as a tenant (overlay) IP address for accessing the host of the VPC / IDC of the first IoT card.

[0232] S714, the cloud console configures the second IP address of the first IoT card to the operator network.

[0233] Exemplarily, the cloud console configures a second IP address for the first IoT card through an interface provided by the operator network, which serves as an underlay IP address for accessing the operator network. When there is no interface provided by the operator network, the second IP address of the first IoT card can be configured offline by the operation and maintenance personnel of the public cloud. In a specific implementation, the cloud console can obtain an unoccupied IP address from the address space of the APN provided by the operator network as the second IP address of the first IoT card. Furthermore, the cloud console configures the second IP address configured for the first IoT card to the operator network.

[0234] S715, the cloud console sends the corresponding relationship between the first IP address and the second IP address to the dedicated gateway.

[0235] Exemplarily, the cloud console generates a correspondence between the first IP address and the second IP address, and sends the correspondence between the first IP address and the second IP address to the dedicated gateway, so that the dedicated gateway modifies the destination IP address and the source IP address in the upstream data packet according to the correspondence between the first IP address and the second IP address, or modifies the destination IP address and the source IP address in the downstream data packet according to the correspondence between the first IP address and the second IP address.

[0236] Fig.10 It is a schematic flowchart of an address allocation method 720 for a multi-operator composite smart card provided in an embodiment of the present application.

[0237] like Fig.10 As shown, the method 720 may include:

[0238] S721: The tenant configures a CIDR address block dedicated to IoT in the cloud console.

[0239] Exemplarily, the tenant configures the CIDR address block of the IoT private network to the cloud console through the interface provided by the cloud console. For example, the CIDR address block of the IoT private network can be 10.0.1.0 / 24, 192.168.1.0 / 24, etc.

[0240] S722, the tenant creates the first IoT card on the cloud console.

[0241] Exemplarily, the tenant creates a name identifier for a first IoT card, wherein the first IoT card is a multi-operator composite smart card.

[0242] Further, the cloud console configures attribute information associated with the name identifier of the first IoT card; wherein the attribute information includes at least one of the following: a unique identifier of the first IoT card in a supported operator network, a unique identifier of the first IoT card in the cloud console, and a unique identifier of the first IoT card in all tenants. Optionally, the unique identifier of the first IoT card in a supported operator network may be an IMSI or an ICCID. Optionally, the unique identifier of the first IoT card in a supported operator network may be obtained from the storage information of the first IoT card. Optionally, the unique identifier of the first IoT card in a supported operator network may be entered by an operation and maintenance personnel or imported in other forms.

[0243] Since the first IoT card is a multi-operator composite smart card, the cloud console can configure attribute information associated with the name identifier of the first IoT card for each member card in the first IoT card. For example, the cloud console can configure a unique identifier in the operator network to which it belongs, such as IMSI or ICCID, for each member card in the first IoT card.

[0244] S723, the cloud console obtains the first IP address of the first IoT card.

[0245] Exemplarily, the cloud console selects an unused IP address from the CIDR address block of the IoT private network and assigns it to the first IoT card, and uses it as a tenant (overlay) IP address for accessing the host of the VPC / IDC of the first IoT card.

[0246] S724, the cloud console configures the first second IP address of the first IoT card to the operator network 1.

[0247] Exemplarily, the cloud console configures the first second IP address for the first IoT card through the interface provided by the operator network 1, which serves as the underlying network (underlay) IP address for accessing the operator network 1. When there is no interface provided by the operator network 1, the first second IP address of the first IoT card can be configured offline by the operation and maintenance personnel of the public cloud. In a specific implementation, the cloud console can obtain an unoccupied IP address from the address space of the APN provided by the operator network 1 as the first second IP address of the first IoT card. Furthermore, the cloud console configures the first second IP address configured for the first IoT card to the operator network 1.

[0248] S724, the cloud console configures the second second IP address of the first IoT card to the operator network 2.

[0249] Exemplarily, the cloud console configures a second second IP address for the first IoT card through the interface provided by the operator network 2, which serves as the underlying network (underlay) IP address for accessing the operator network 2. When there is no interface provided by the operator network 2, the second second IP address of the first IoT card can be configured offline by the operation and maintenance personnel of the public cloud. In a specific implementation, the cloud console can obtain an unoccupied IP address from the address space of the APN provided by the operator network 2 as the second second IP address of the first IoT card. Furthermore, the cloud console configures the second second IP address configured for the first IoT card to the operator network 1.

[0250] In other words, the shared cloud console can configure the first and second IP addresses of the first IoT card to the operator network 1 and the second IP address of the first IoT card to the operator network 2 by traversing the operator network 1 and the operator network 2. For example, the first and second IP addresses of the first IoT card can be configured to the operator network 1 and the second IP address of the first IoT card can be configured to the operator network 2 by traversing the interfaces provided by the operator network 1 and the operator network 2. For another example, the first and second IP addresses of the first IoT card can be configured to the operator network 1 and the second IP address of the first IoT card can be configured to the operator network 2 offline by the operation and maintenance personnel of the public cloud.

[0251] S721, the cloud console sends the corresponding relationship between the first IP address and the two second IP addresses (ie, the first second IP address and the second second IP address) to the dedicated gateway.

[0252] Exemplarily, the cloud console generates a correspondence between the first IP address and the two second IP addresses (i.e., the first second IP address and the second second IP address), and sends the correspondence between the first IP address and the two second IP addresses (i.e., the first second IP address and the second second IP address) to the dedicated gateway, so that the dedicated gateway modifies the destination IP address and the source IP address in the upstream data packet according to the correspondence between the first IP address and the two second IP addresses (i.e., the first second IP address and the second second IP address), or modifies the destination IP address and the source IP address in the downstream data packet according to the correspondence between the first IP address and the two second IP addresses (i.e., the first second IP address and the second second IP address).

[0253] In other words, the cloud console sends the correspondence between the overlay IP and the underlay IP to the dedicated gateway so that the dedicated gateway can detect the member card according to the correspondence between the overlay IP and the underlay IP, and dynamically modify the source IP address and destination IP address of the uplink data packet or the downlink data packet according to the detection result and the correspondence.

[0254] The preferred embodiments of the present application are described in detail above in conjunction with the accompanying drawings. However, the present application is not limited to the specific details in the above embodiments. Within the technical concept of the present application, the technical solution of the present application can be subjected to a variety of simple modifications, and these simple modifications all belong to the protection scope of the present application. For example, the various specific technical features described in the above specific embodiments can be combined in any suitable manner without contradiction. In order to avoid unnecessary repetition, the present application will not further explain various possible combinations. For another example, the various different embodiments of the present application can also be arbitrarily combined, as long as they do not violate the ideas of the present application, they should also be regarded as the contents disclosed in the present application.

[0255] It should also be understood that in the various method embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0256] The method provided in the embodiment of the present application is described above, and the device provided in the embodiment of the present application is described below.

[0257] Fig.11 It is a schematic block diagram of the cloud console 810 provided in an embodiment of the present application.

[0258] like Fig.11 As shown, the cloud console 810 may include:

[0259] An acquisition unit 811 is used to acquire a Classless Inter-Domain Routing CIDR address block of the IoT private network and an identifier of the first IoT card;

[0260] The network segment included in the CIDR address block does not overlap with the network segment where the Internet data center IDC of the first IoT card is located, and the network segment included in the CIDR address block does not overlap with the network segment where the virtual private cloud VPC of the first IoT card is located;

[0261] The acquisition unit 811 is further configured to acquire a first Internet Protocol IP address of the first IoT card based on an unused IP address in the CIDR address block, where the first IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0262] The acquiring unit 811 is further configured to acquire at least one second IP address of the first IoT card, where the at least one second IP address includes an IP address provided by at least one operator network supported by the first IoT card;

[0263] A sending unit 812, configured to send a first mapping relationship to a dedicated gateway;

[0264] The first mapping relationship includes a corresponding relationship between the first IP address and the at least one second IP address, and the first mapping relationship is used by the dedicated gateway to modify the source IP address and the target IP address in the data packet to be forwarded according to the first mapping relationship.

[0265] In some embodiments, the acquisition unit 811 is specifically used to:

[0266] Receiving the CIDR address block and the identifier of the first IoT card sent by the IoT terminal;

[0267] Configuring attribute information associated with the identifier of the first IoT card;

[0268] The attribute information includes at least one of the following: a unique identifier of the first IoT card in the at least one operator network, a unique identifier of the first IoT card in the cloud console, and a unique identifier of the first IoT card in all tenants.

[0269] In some embodiments, the acquisition unit 811 is specifically used to:

[0270] If there is an interface provided by the at least one operator network, the at least one second IP address is obtained through the interface provided by the at least one operator network; if there is no interface provided by the at least one operator network, the at least one second IP address is obtained in response to the configuration operation of the operation and maintenance personnel on the cloud console.

[0271] Fig.12 It is a schematic block diagram of the Internet of Things terminal 820 provided in an embodiment of the present application.

[0272] like Fig.12 As shown, the IoT terminal 820 may include:

[0273] A generating unit 821, configured to generate configuration information in response to a configuration operation performed by a tenant of the first IoT card on the IoT terminal;

[0274] The configuration information includes a Classless Inter-Domain Routing (CIDR) address block of the IoT private network and an identifier of the first IoT card. The CIDR address block is used by the cloud console to determine a first Internet Protocol (IP) address of the first IoT card. The first IP address is used to access a host in a virtual private cloud (VPC) of the first IoT card and a host in an Internet data center (IDC).

[0275] The sending unit 822 is used to send the configuration information to the cloud console through an interface provided by the cloud console.

[0276] In some embodiments, the sending unit 822 is further configured to:

[0277] If the IoT terminal supports inserting multiple IoT cards including the first IoT card, receiving a detection signaling periodically sent by a dedicated gateway;

[0278] Sending a response signaling to the dedicated gateway, the response signaling is used to determine the operator network accessed by the multiple IoT cards and the IP addresses provided by the accessed operator network and being used by the multiple IoT cards;

[0279] The sending unit 822 is also used for:

[0280] If the operator networks accessed by the multiple IoT cards include multiple operator networks or the IP addresses provided by the accessed operator networks used by the multiple IoT cards include multiple IP addresses, determining multiple transmission paths from the multiple reachable paths of the first IoT card;

[0281] The multiple transmission paths are used for data transmission.

[0282] Fig.13 It is a schematic block diagram of a dedicated network 830 provided in an embodiment of the present application.

[0283] like Fig.13 As shown, the dedicated network 830 may include:

[0284] A receiving unit 831 is used to receive a first mapping relationship sent by a cloud console;

[0285] The first mapping relationship includes a correspondence between a first Internet Protocol IP address of the first IoT card and at least one second IP address of the first IoT card, the first IP address is used to access a host in a virtual private cloud VPC of the first IoT card and a host in an Internet data center IDC, and the at least one second IP address includes an IP address provided by at least one operator network supported by the first IoT card;

[0286] The processing unit 832 is used to modify the source IP address and the destination IP address in the data packet to be forwarded based on the mapping relationship.

[0287] In some embodiments, the receiving unit 831 is further configured to:

[0288] If the IoT terminal supports insertion of multiple IoT cards including the first IoT card, periodically sending a detection signaling to the IoT terminal;

[0289] Receiving a response signaling sent by the IoT terminal, the response signaling is used to determine the operator network accessed by the multiple IoT cards and the IP addresses provided by the accessed operator network and being used by the multiple IoT cards;

[0290] If the operator networks accessed by the multiple IoT cards include multiple operator networks or the IP addresses provided by the accessed operator networks used by the multiple IoT cards include multiple IP addresses, determining multiple transmission paths from the multiple reachable paths of the first IoT card;

[0291] The multiple transmission paths are used for data transmission.

[0292] Fig.14 It is a schematic block diagram of a dedicated network 840 provided in an embodiment of the present application.

[0293] like Fig.14 As shown, the dedicated network 840 may include:

[0294] The receiving unit 841 is used to receive a first downlink Internet Protocol IP data packet sent by a host in a virtual private cloud VPC or an Internet data center IDC of a multi-operator composite smart card; the multi-operator composite smart card includes multiple member cards; the IP address of the multi-operator composite smart card includes an IP address provided by an operator network supported by each member card of the multiple member cards; the first member card of the multiple member cards is a member card used for an IoT terminal to access a network;

[0295] The processing unit 842 is configured to modify the destination address in the first downlink IP data packet from the third IP address to the fourth IP address, so as to obtain a second downlink IP data packet; wherein the third IP address is an IP address determined by the host in the IP address of the multi-operator composite smart card, and the fourth IP address is an IP address provided by the operator network supported by the first member card;

[0296] The sending unit 843 is used to send the second downlink IP data packet to the IoT terminal.

[0297] In some embodiments, the sending unit 843 is further configured to:

[0298] Create a NAT session context;

[0299] Receiving a first uplink IP data packet sent by the IoT terminal;

[0300] Based on the context of the NAT session, modify the source address of the first uplink IP data packet from the fourth IP address to the third IP address to obtain a second uplink IP data packet;

[0301] The second uplink IP data packet is sent to the host.

[0302] Fig.15 It is a schematic block diagram of a dedicated network 850 provided in an embodiment of the present application.

[0303] like Fig.15As shown, the private network 850 may include:

[0304] The receiving unit 851 is used to receive an original Internet Protocol IP data packet;

[0305] The original IP data packet includes a dynamic IP address of the first IoT card, and the dynamic IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0306] The encapsulation unit 852 is used to encapsulate the original IP data packet using the IP address provided by at least one operator network supported by the first IoT card to obtain an encapsulated IP data packet;

[0307] The sending unit 853 is used to send the encapsulated IP data packet.

[0308] Fig.16 It is a schematic block diagram of the dedicated network 860 provided in an embodiment of the present application.

[0309] like Fig.16 As shown, the dedicated network 860 may include:

[0310] A receiving unit 861 receives an encapsulated Internet Protocol IP data packet;

[0311] The encapsulated IP data packet includes an IP address provided by at least one operator network supported by the first IoT card and a dynamic IP address of the first IoT card, where the dynamic IP address is used to access a host in the VPC and a host in the IDC of the first IoT card;

[0312] The decapsulation unit 862 is used to decapsulate the encapsulated IP data packet to obtain the original IP data packet;

[0313] The sending unit 863 is used to send the original IP data packet.

[0314] It should be understood that the device embodiment and the method embodiment may correspond to each other, and similar descriptions may refer to the method embodiment. To avoid repetition, it will not be repeated here. Specifically, the cloud control console 810, the IoT terminal 820 or the dedicated network 830~860 may correspond to the corresponding subject in the method for executing the embodiment of the present application, and the various units in the cloud control console 810, the IoT terminal 820 or the dedicated network 830~860 are respectively for implementing the corresponding process in the method, and for the sake of brevity, it will not be repeated here.

[0315] It should also be understood that the various units in the cloud control console 810 or the Internet of Things terminal 820 and the dedicated network 830 involved in the embodiment of the present application can be separately or completely merged into one or several other units to constitute, or one (some) of the units can also be split into multiple smaller units in function to constitute, which can achieve the same operation without affecting the realization of the technical effects of the embodiments of the present application. The above-mentioned units are divided based on logical functions. In practical applications, the functions of one unit can also be implemented by multiple units, or the functions of multiple units can be implemented by one unit. In other embodiments of the present application, the cloud control console 810, the Internet of Things terminal 820 or the dedicated network 830~860 may also include other units. In practical applications, these functions can also be implemented with the assistance of other units, and can be implemented by the collaboration of multiple units. According to another embodiment of the present application, the cloud console 810, IoT terminal 820 or private network 830-860 involved in the embodiment of the present application can be constructed by running a computer program (including program code) capable of executing each step involved in the corresponding method on a general computing device of a general-purpose computer including processing elements and storage elements such as a central processing unit (CPU), a random access storage medium (RAM), and a read-only storage medium (ROM), and the address allocation method of the embodiment of the present application can be implemented. The computer program can be recorded on, for example, a computer-readable storage medium, and loaded into an electronic device through a computer-readable storage medium, and run therein to implement the corresponding method of the embodiment of the present application.

[0316] In other words, the units mentioned above can be implemented in hardware form, can be implemented in software form, or can be implemented in the form of a combination of software and hardware. Specifically, the steps of the method embodiment in the embodiment of the present application can be completed by the hardware integrated logic circuit and / or software form of the processor, and the steps of the method disclosed in the embodiment of the present application can be directly embodied as a hardware decoding processor to execute, or the hardware and software combination in the decoding processor can be executed. Optionally, the software can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an electrically erasable programmable memory, a register, etc. The storage medium is located in a memory, and the processor reads the information in the memory, and completes the steps in the above method embodiment in combination with its hardware.

[0317] Fig.17 It is a schematic structural diagram of an electronic device 900 provided in an embodiment of the present application.

[0318] like Fig.17As shown, the electronic device 900 at least includes a processor 910 and a computer-readable storage medium 920. The processor 910 and the computer-readable storage medium 920 may be connected via a bus or other means. The computer-readable storage medium 920 is used to store a computer program 921, which includes computer instructions, and the processor 910 is used to execute the computer instructions stored in the computer-readable storage medium 920. The processor 910 is the computing core and control core of the electronic device 900, which is suitable for implementing one or more computer instructions, and is specifically suitable for loading and executing one or more computer instructions to implement the corresponding method flow or corresponding function.

[0319] As an example, the processor 910 may also be referred to as a central processing unit (CPU). The processor 910 may include, but is not limited to, a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, and the like.

[0320] As an example, the computer-readable storage medium 920 may be a high-speed RAM memory, or a non-volatile memory (Non-Volatile Memory), such as at least one disk memory; optionally, it may also be at least one computer-readable storage medium located away from the aforementioned processor 910. Specifically, the computer-readable storage medium 920 includes, but is not limited to: a volatile memory and / or a non-volatile memory. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct RAM bus random access memory (DR RAM).

[0321] like Fig.17 As shown, the electronic device 900 may further include a transceiver 930 .

[0322] The processor 910 may control the transceiver 930 to communicate with other devices, specifically, to send information or data to other devices, or to receive information or data sent by other devices. The transceiver 930 may include a transmitter and a receiver. The transceiver 930 may further include an antenna, and the number of antennas may be one or more.

[0323] It should be understood that the various components in the communication device 900 are connected via a bus system, wherein the bus system includes not only a data bus but also a power bus, a control bus and a status signal bus.

[0324] In one implementation, the electronic device 900 can be any electronic device with data processing capabilities; the computer-readable storage medium 920 stores a first computer instruction; the processor 910 loads and executes the first computer instruction stored in the computer-readable storage medium 920 to implement the corresponding steps performed by the cloud console, the Internet of Things terminal or the dedicated gateway; in a specific implementation, the first computer instruction in the computer-readable storage medium 920 is loaded by the processor 910 and executes the corresponding steps, which will not be repeated here to avoid repetition.

[0325] According to another aspect of the present application, an embodiment of the present application further provides a computer-readable storage medium (Memory), which is a memory device in the electronic device 900 for storing programs and data. For example, a computer-readable storage medium 920. It can be understood that the computer-readable storage medium 920 here can include both the built-in storage medium in the electronic device 900 and the extended storage medium supported by the electronic device 900. The computer-readable storage medium provides a storage space, which stores the operating system of the electronic device 900. In addition, one or more computer instructions suitable for being loaded and executed by the processor 910 are also stored in the storage space, and these computer instructions can be one or more computer programs 921 (including program codes).

[0326] According to another aspect of the present application, an embodiment of the present application further provides a computer program product or a computer program, which includes a computer instruction, and the computer instruction is stored in a computer-readable storage medium. For example, a computer program 921. At this time, the data processing device 900 can be a computer, and the processor 910 reads the computer instruction from the computer-readable storage medium 920, and the processor 910 executes the computer instruction, so that the computer executes the address allocation method provided in the above various optional ways.

[0327] In other words, when implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process of the embodiment of the present application is run in whole or in part or the function of the embodiment of the present application is implemented. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center.

[0328] Those of ordinary skill in the art will appreciate that the units and process steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0329] Finally, it should be noted that the above content is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. An address conversion method, characterized in that: The method is applicable to a cloud console, and the method includes: In response to the tenant's configuration operation, obtain the Classless Inter-Domain Routing CIDR address block of the IoT private network; In response to a creation operation for the first IoT card, an unused Internet Protocol IP address is selected in the CIDR address block to obtain a first IP address of the first IoT card, and an unused IP address is selected in an address space provided by each of at least one operator network to obtain at least one second IP address of the first IoT card; Among them, the first IP address corresponds to the target IP address in the first downlink data packet of the first IoT card, and the at least one second IP address corresponds to the source IP address in the first uplink data packet of the first IoT card.

2. The method according to claim 1, characterized in that The network segment included in the CIDR address block does not overlap with the network segment where the tenant's Internet data center IDC is located, and / or the network segment included in the CIDR address block does not overlap with the network segment where the tenant's virtual private cloud VPC is located.

3. The method according to claim 1, characterized in that The step of selecting an unused IP address from an address space provided by each operator network in at least one operator network to obtain at least one second IP address of the first IoT card includes: The address space provided by each operator network is obtained through an interface provided by each operator network, and an unused IP address is selected in the address space provided by each operator network to obtain the second IP address.

4. The method according to claim 1, characterized in that In response to the creation operation for the first IoT card, selecting an unused Internet Protocol IP address in the CIDR address block as the first IP address of the first IoT card, and selecting an unused IP address in the address space provided by at least one operator network as at least one second IP address, including: In response to a creation operation for an identifier of the first Internet of Things card, an unused Internet Protocol IP address in the CIDR address block is selected as the first IP address, and an unused IP address in an address space provided by at least one operator network is selected as the at least one second IP address.

5. The method according to claim 4, characterized in that The method further comprises: In response to a creation operation for the first IoT card, configuring attribute information for the first IoT card; The attribute information includes at least one of the following: a unique identifier of the first IoT card in the at least one operator network, a unique identifier of the first IoT card in the cloud console, and a unique identifier of the first IoT card in all tenants.

6. The method according to claim 1, characterized in that The method further comprises: Establishing a first mapping relationship, wherein the first mapping relationship includes a mapping relationship between the first IP address and the at least one second IP address; The first mapping relationship is sent to a dedicated gateway having an address translation function.

7. The method according to claim 1, characterized in that The first IoT card is a single-operator composite smart card, and the at least one second IP address is one second IP address; or the first IoT card is a multi-operator composite smart card, and the at least one second IP address is multiple second IP addresses.

8. An address conversion method, characterized in that: The method is applicable to a dedicated gateway, and the method comprises: Receive a first downlink data packet from a first IoT card; Performing address conversion on the target IP address in the first downlink data packet based on the first IP address to obtain a second downlink data packet; the first IP address is an IP address used by the first IoT in a Classless Inter-Domain Routing CIDR address block of the IoT private network; Send the second downlink data packet to the first IoT card.

9. The method according to claim 8, characterized in that The network segment included in the CIDR address block does not overlap with the network segment where the tenant's Internet data center IDC is located, and / or the network segment included in the CIDR address block does not overlap with the network segment where the tenant's virtual private cloud VPC is located.

10. The method according to claim 8, characterized in that Before performing address conversion on the target IP address in the first downlink data packet based on the first IP address to obtain the second downlink data packet, the method further includes: Receive a first mapping relationship from the cloud console, the first mapping relationship including a mapping relationship between the first IP address and at least one second IP address; the at least one second IP address is an IP address used by the first IoT card in an address space provided by each of at least one operator network, and the at least one second IP address includes the target IP address; The step of performing address conversion on the target IP address in the first downlink data packet based on the first IP address to obtain the second downlink data packet includes: Based on the first mapping relationship and the first IP address, the target IP address is converted to obtain the second downlink data packet.

11. The method according to claim 8, characterized in that The method further comprises: Receive a first uplink data packet of the first IoT card; Based on the context of the NAT session, the source IP address of the first uplink data packet is replaced with the target IP address to obtain a second uplink data packet; the context of the NAT session is a context created based on the first downlink data packet and the second downlink data packet; The second uplink data packet is sent to the tenant's Internet data center IDC or the tenant's virtual private cloud VPC.

12. The method according to claim 11, characterized in that When the IoT terminal into which the first IoT card is inserted supports insertion of multiple IoT cards including the first IoT card, and the operator networks accessed by the multiple IoT cards include multiple operator networks or the IP addresses provided by the accessed operator networks being used by the multiple IoT cards include multiple IP addresses, the first uplink data packet includes data packets on multiple reachable paths of the first IoT card.

13. The method according to claim 8, characterized in that When the IoT terminal into which the first IoT card is inserted supports insertion of multiple IoT cards including the first IoT card, and the operator networks accessed by the multiple IoT cards include multiple operator networks or the IP addresses provided by the accessed operator networks being used by the multiple IoT cards include multiple IP addresses, the first downlink data packet includes data packets on multiple reachable paths of the first IoT card.

14. A cloud control console, characterized in that: include: Acquisition unit for: In response to the tenant's configuration operation, obtain the Classless Inter-Domain Routing CIDR address block of the IoT private network; In response to a creation operation for the first IoT card, an unused Internet Protocol IP address is selected in the CIDR address block to obtain a first IP address of the first IoT card, and an unused IP address is selected in an address space provided by each of at least one operator network to obtain at least one second IP address of the first IoT card; Among them, the first IP address corresponds to the target IP address in the first downlink data packet of the first IoT card, and the at least one second IP address corresponds to the source IP address in the first uplink data packet of the first IoT card.

15. A dedicated gateway, characterized in that: include: A receiving unit, configured to receive a first downlink data packet from a first IoT card; A processing unit, configured to perform address conversion on a target IP address in the first downlink data packet based on a first IP address to obtain a second downlink data packet; the first IP address is an IP address used by the first IoT in a Classless Inter-Domain Routing CIDR address block of the IoT private network; A sending unit is used to send the second downlink data packet to the first IoT card.

16. An electronic device, characterized in that: include: a processor adapted to execute a computer program; A computer-readable storage medium, wherein a computer program is stored in the computer-readable storage medium, and when the computer program is executed by the processor, the method according to any one of claims 1 to 7 or the method according to any one of claims 8 to 13 is implemented.

17. A computer-readable storage medium, characterized in that: Used to store a computer program, which, when executed on a computer, causes the computer to execute the method according to any one of claims 1 to 7 or the method according to any one of claims 8 to 13.

Images