Virtual private network connection establishment method, electronic equipment and computer readable medium

Abstract

The invention provides a virtual private network connection establishment method, electronic equipment and a computer readable storage medium, and the virtual private network connection establishment method comprises the steps: obtaining an equipment identifier of user equipment under the condition that the user equipment establishes connection with network interconnection equipment; determining an available virtual private network type according to the equipment identifier of the user equipment; and establishing connection with the virtual private network server of the available virtual private network type.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of communication technology, and in particular to a method for establishing a virtual private network (VPN, Virtual Private Network) connection, an electronic device, and a computer-readable medium. Background Art

[0002] At present, remote work is increasing, and the importance of information security is self-evident. Therefore, the use rate of VPN will also increase. At present, routers and other network interconnection devices from various manufacturers already have VPN functions. Routers support multiple types of VPNs, and each VPN has its own usage scenarios. In specific scenarios, routers only allow one VPN connection to be established at the same time. This requires manually setting the connection parameters of a new VPN connection to establish a new VPN connection every time a VPN connection is changed. This method requires manual setting of connection parameters, which is cumbersome. Alternatively, multiple routers are set up to implement multiple types of VPN connections. This method does not require frequent manual setting of connection parameters, but it will increase costs and increase the complexity of the network. Summary of the invention

[0003] Embodiments of the present application provide a VPN connection establishment method, an electronic device, and a computer-readable medium.

[0004] In a first aspect, an embodiment of the present application provides a method for establishing a virtual private network connection, including: when a user device establishes a connection with a network interconnection device, obtaining a device identifier of the first user device; determining an available virtual private network type based on the device identifier of the user device; and establishing a connection with a virtual private network server of the available virtual private network type.

[0005] In a second aspect, an embodiment of the present application provides an electronic device, comprising: at least one processor; a memory, wherein at least one program is stored in the memory, and when the at least one program is executed by the at least one processor, any one of the above-mentioned VPN connection establishment methods is implemented.

[0006] In a third aspect, an embodiment of the present application provides a computer-readable medium, on which a computer program is stored. When the computer program is executed by a processor, any one of the above-mentioned VPN connection establishment methods is implemented.

[0007] The VPN connection establishment method provided in the embodiment of the present application automatically identifies the available VPN type based on the device identification of the user device, thereby automatically establishing a connection with a VPN server of the available VPN type. It does not require the user to set connection parameters or to set up multiple network interconnection devices, thereby simply realizing the VPN connection. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Figure 1 A flowchart of a method for establishing a VPN connection provided by an embodiment of the present application;

[0009] Figure 2 A schematic diagram of setting a first mapping relationship in an embodiment of the present application;

[0010] Figure 3 A schematic diagram of querying a first mapping relationship in an embodiment of the present application;

[0011] Figure 4 A flowchart of a VPN connection establishment method provided in Example 1 of an embodiment of the present application;

[0012] Figure 5 A flowchart of a VPN connection establishment method provided in Example 2 of an embodiment of the present application;

[0013] Figure 6 A schematic block diagram of the composition of an electronic device provided in accordance with another embodiment of the present application. DETAILED DESCRIPTION

[0014] In order to enable those skilled in the art to better understand the technical solution of the present application, the VPN connection establishment method, electronic device, and computer-readable medium provided by the present application are described in detail below in conjunction with the accompanying drawings.

[0015] Example embodiments will be described more fully below with reference to the accompanying drawings, but the example embodiments may be embodied in different forms and should not be construed as limited to the embodiments set forth herein. On the contrary, the purpose of providing these embodiments is to make this application thorough and complete and to enable those skilled in the art to fully understand the scope of this application.

[0016] In the absence of conflict, the embodiments of the present application and the features therein may be combined with each other.

[0017] As used herein, the term "and / or" includes any and all combinations of at least one of the associated listed items.

[0018] The terms used herein are only used to describe specific embodiments and are not intended to limit the present application. As used herein, the singular forms "a", "an" and "the" are also intended to include the plural forms, unless the context clearly indicates otherwise. It will also be understood that when the terms "comprising" and / or "made of" are used in this specification, the presence of the features, wholes, steps, operations, elements and / or components is specified, but the presence or addition of at least one other feature, whole, step, operation, element, component and / or its group is not excluded.

[0019] Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by those of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and this application, and will not be interpreted as having an idealized or overly formal meaning unless explicitly defined herein.

[0020] Figure 1 A flowchart of a method for establishing a VPN connection provided in one embodiment of the present application.

[0021] First, refer to Figure 1 An embodiment of the present application provides a method for establishing a virtual private network connection, which can be executed by a network interconnection device. The method includes:

[0022] Step 100: When a user device establishes a connection with a network interconnection device, obtain a device identification of the user device.

[0023] In some exemplary embodiments, the device identifier may be a unique identifier of the user device, for example, a Media Access Control (MAC) address.

[0024] In some exemplary embodiments, the network interconnection device may be any device that implements network connection, for example, may be a router.

[0025] In some exemplary embodiments, the MAC address of the user equipment may be obtained from an Address Resolution Protocol (ARP) message.

[0026] Step 101: Determine available VPN types according to a device identifier of a user device.

[0027] In some exemplary embodiments, the VPN type can be any one of Point-to-Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), Internet Protocol (IP) Security Protocol (IPSEC), Generic Route Encapsulation (GRE), Virtual Extensible Local Area Network (VxLan), Open VPN, etc.

[0028] In some exemplary embodiments, determining the available VPN type based on the device identifier of the user device includes: searching for the target VPN type corresponding to the device identifier of the user device in a first mapping table (as shown in Table 1) between pre-set device identifiers and VPN types, and using the found target VPN type as the available VPN type.

[0029] In some exemplary embodiments, determining the available VPN type based on the device identifier of the user device includes: searching for the target VPN type corresponding to the MAC address of the user device in a first mapping table (as shown in Table 1) between pre-set MAC addresses and VPN types, and using the found target VPN type as the available VPN type.

[0030] Table 1

[0031] MAC Address Types of VPNs Aa:B:C:::: PPTP A:Bb:C:::: L2TP A:B:Cc:::: IPSEC A1:B:Cc:::: GRE ... ...

[0032] In some exemplary embodiments, the method further includes: when the target VPN type corresponding to the device identifier of the first user device cannot be found in the first mapping table, prompting whether the device identifier of the user device needs to be added to the first mapping table; when it is confirmed that the device identifier of the user device needs to be added to the first mapping table, obtaining and displaying all VPN types supported by the network interconnection device; receiving a selection instruction for the displayed VPN type, and saving the mapping relationship between the device identifier of the user device and the VPN type corresponding to the selection instruction in the first mapping table.

[0033] In some exemplary embodiments, when it is confirmed that there is no need to add the device identifier of the user equipment to the first mapping table, the process is terminated.

[0034] In some exemplary embodiments, after the mapping relationship between the device identification of the user equipment and the VPN type corresponding to the selection instruction is saved in the first mapping table, the step of searching the first mapping table for the target VPN type corresponding to the device identification of the user equipment may be continued.

[0035] In some exemplary embodiments, after the mapping relationship between the device identification of the user device and the VPN type corresponding to the selection instruction is saved in the first mapping table, the process may also be terminated.

[0036] In some exemplary embodiments, all VPN types supported by the network interconnection device can be prefabricated in the firmware of the network interconnection device when the network interconnection device leaves the factory. Then, when it is necessary to obtain all VPN types supported by the network interconnection device, all VPN types supported by the network interconnection device are read from the firmware.

[0037] In some exemplary embodiments, before searching for the target VPN type corresponding to the device identification of the user equipment, the method further includes: presetting or updating a first mapping table.

[0038] In some exemplary embodiments, Figure 2 As shown, presetting or updating the first mapping table includes: receiving an add instruction, obtaining and displaying all VPN types supported by the network interconnection device; receiving a selection instruction for the displayed VPN type, and obtaining a device identifier; and saving the mapping relationship between the obtained device identifier and the VPN type corresponding to the selection instruction to the first mapping table.

[0039] In some exemplary embodiments, the device identification may be manually input by a user or obtained from an ARP message.

[0040] In some exemplary embodiments, the MAC address may be manually input by a user or obtained from an ARP message.

[0041] In some exemplary embodiments, Figure 2 As shown, the user can enter the add command by clicking the add button in the upper right corner. After the user clicks the add command in the upper right corner, the display interface will display all VPN types supported by the network interconnection device and the device identification of the newly connected device. The user can select a VPN type from all VPN types supported by the network interconnection device and select a device identification from the device identifications of the newly connected device, and then click the add button on the right to save the mapping relationship between the selected VPN type and the device identification to the first mapping table.

[0042] In some exemplary embodiments, after setting the first mapping table, as shown in FIG. Figure 3 As shown, you can click the query button to query all mapping relationships currently added to the first mapping table. There is a delete button and a modify button on the right side of each mapping relationship. The user can delete the corresponding mapping relationship by clicking the delete button and modify the corresponding mapping relationship by clicking the modify button.

[0043] Step 102: Establish a connection with an available VPN server of VPN type.

[0044] In some exemplary embodiments, establishing a connection with a VPN server of an available VPN type includes: searching a second mapping table between preset VPN types and connection parameters for connection parameters corresponding to the available VPN type; and establishing a connection with a VPN server of the available VPN type according to the searched connection parameters.

[0045] In some exemplary embodiments, the connection parameters include all parameters required to establish a connection with a VPN server, such as a user name, a password, etc.

[0046] In some exemplary embodiments, the connection parameters may be manually input by a user.

[0047] In some exemplary embodiments, after establishing a connection with an available VPN type VPN server, the method further includes: determining whether the connection established with the available VPN type VPN server is successful; and ending the process if the connection established with the available VPN type VPN server is successful.

[0048] In some exemplary embodiments, the method further includes: if the connection established with the available VPN type VPN server is unsuccessful, determining whether reconnection is required; if reconnection is required, continuing to execute the step of establishing a connection with the available VPN type VPN server.

[0049] In some exemplary embodiments, the method further includes: when reconnection is not required, ending the process.

[0050] In some exemplary embodiments, before establishing a connection with an available VPN type VPN server, the method further includes: determining whether there is an established VPN connection; and if there is no established VPN connection, continuing to execute the step of establishing a connection with an available VPN type VPN server.

[0051] In some exemplary embodiments, before obtaining the device identification of the user device, the method further includes: determining whether there is an established VPN connection; and continuing to perform the step of obtaining the device identification of the user device when there is no established VPN connection.

[0052] In some exemplary embodiments, the method further includes: in the case where there is already an established VPN connection, determining the VPN type of the established connection; determining whether the VPN type of the established connection is the same as the available VPN type; in the case where the VPN type of the established connection is the same as the available VPN type, confirming the use of an accessed device of the VPN type of the established connection; disconnecting the accessed device from the network interconnection device, and maintaining the connection between the user device and the VPN server of the VPN type of the established connection before the user device establishes a connection with the network interconnection device.

[0053] In some exemplary embodiments, the method further includes: when the VPN type of the established connection is different from the available VPN type, confirming the use of an accessed device of the VPN type of the established connection; disconnecting the accessed device from the network interconnection device, and disconnecting from a VPN server of the VPN type of the established connection; and establishing a connection with a VPN server of the available VPN type.

[0054] In some exemplary embodiments, before disconnecting the connected device from the network interconnection device, the method further includes: determining whether the priority of the VPN type to which the connection has been established is higher than the priority of the available VPN type; and continuing to execute the step of disconnecting the connected device from the network interconnection device if the priority of the VPN type to which the connection has been established is lower than the priority of the available VPN type.

[0055] In some exemplary embodiments, the method further includes: when the priority of the VPN type that has been connected is higher than the priority of the available VPN type, sending a prompt message to the user device, the prompt message is used to prompt the user device that its own priority is lower and the VPN can be manually connected.

[0056] In some exemplary embodiments, the mapping relationship in the first mapping table further includes: a priority of the VPN type, so that the priority of the VPN type can be determined based on the first mapping table.

[0057] In some exemplary embodiments, the mapping relationship in the second mapping table further includes: a priority of the VPN type, so that the priority of the VPN type can be determined based on the second mapping table.

[0058] In some exemplary embodiments, a third mapping table between VPN types and priorities may also be separately set, so that the priority of the VPN type may be determined based on the third mapping table.

[0059] The VPN connection establishment method provided in the embodiment of the present application automatically identifies the available VPN type based on the device identification of the user device, thereby automatically establishing a connection with a VPN server of the available VPN type. It does not require the user to set connection parameters or to set up multiple network interconnection devices, thereby simply realizing the VPN connection.

[0060] In order to more completely present the overall process of the VPN connection establishment method of the embodiment of the present application, several example information is listed below for explanation. The listed examples are not intended to limit the protection scope of the embodiment of the present application.

[0061] Example 1

[0062] like Figure 4 As shown, the VPN connection establishment method of this example includes:

[0063] Step 400: pre-set a first mapping table between MAC addresses and VPN types, and pre-set a second mapping table between VPN types and connection parameters.

[0064] Step 401: When a user device establishes a connection with a router, a MAC address of the user device is obtained.

[0065] Step 402, determine whether the target VPN type corresponding to the MAC address of the user device can be found in the first mapping table; if the target VPN type corresponding to the MAC address of the user device can be found in the first mapping table, execute step 403; if the target VPN type corresponding to the MAC address of the user device cannot be found in the first mapping table, execute step 408.

[0066] Step 403, taking the found target VPN type as an available VPN type; determining whether there is an established VPN connection; if there is an established VPN connection, executing step 404; if there is no established VPN connection, executing step 407.

[0067] Step 404, determine the VPN type of the established connection; determine whether the VPN type of the established connection is the same as the available VPN type; if the VPN type of the established connection is the same as the available VPN type, execute step 405; if the VPN type of the established connection is not the same as the available VPN type, execute steps 406 and 407.

[0068] Step 405, confirming the use of the connected device of the VPN type to which the connection has been established; disconnecting the connected device from the network interconnection device; and maintaining the connection between the user device and the VPN server of the VPN type to which the connection has been established before the connection between the user device and the network interconnection device is established.

[0069] Step 406, confirming the use of the connected device of the VPN type to which the connection has been established; disconnecting the connected device from the network interconnection device; and disconnecting the VPN server of the VPN type to which the connection has been established.

[0070] Step 407, searching the second mapping table for connection parameters corresponding to the VPN type corresponding to the MAC address of the user equipment, and establishing a connection with a VPN server of the VPN type corresponding to the MAC address of the user equipment according to the found connection parameters.

[0071] Step 408, confirm whether it is necessary to add the MAC address of the user device to the first mapping table; if it is necessary to add the MAC address of the user device to the first mapping table, execute step 409; if it is not necessary to add the MAC address of the user device to the first mapping table, end this process.

[0072] Step 409, obtain and display all VPN types supported by the network interconnection device; receive a selection instruction for the displayed VPN type, save the mapping relationship between the MAC address of the user device and the VPN type corresponding to the selection instruction in the first mapping table, and return to step 402.

[0073] Example 2

[0074] like Figure 5 As shown, the VPN connection establishment method of this example includes:

[0075] Step 500: pre-set a first mapping table between MAC addresses, VPN types and priorities of VPN types, and pre-set a second mapping table between VPN types and connection parameters.

[0076] Step 501: When a user device establishes a connection with a router, a MAC address of the user device is obtained.

[0077] Step 502, determine whether the target VPN type corresponding to the MAC address of the user device can be found in the first mapping table; if the target VPN type corresponding to the MAC address of the user device can be found in the first mapping table, execute step 503; if the target VPN type corresponding to the MAC address of the user device cannot be found in the first mapping table, execute step 510.

[0078] Step 503, taking the found target VPN type as an available VPN type; determining whether there is an established VPN connection; if there is an established VPN connection, executing step 504; if there is no established VPN connection, executing step 508.

[0079] Step 504, determine the VPN type of the established connection; determine whether the VPN type of the established connection is the same as the available VPN type; if the VPN type of the established connection is the same as the available VPN type, execute step 505; if the VPN type of the established connection is not the same as the available VPN type, execute step 506.

[0080] Step 505, confirming the use of the connected device of the VPN type that has established a connection; disconnecting the connected device from the network interconnection device; and maintaining the connection between the user device and the VPN server of the VPN type that has established a connection before the user device establishes a connection with the network interconnection device.

[0081] Step 506, determining whether the priority of the VPN type with which the connection has been established is higher than the priority of the available VPN type according to the first mapping table; if the priority of the VPN type with which the connection has been established is lower than the priority of the available VPN type, executing steps 507-508; if the priority of the VPN type with which the connection has been established is higher than the priority of the available VPN type, executing step 509.

[0082] Step 507, confirming the use of the connected device of the VPN type to which the connection has been established; disconnecting the connected device from the network interconnection device; and disconnecting the VPN server of the VPN type to which the connection has been established.

[0083] Step 508: Look up the connection parameters corresponding to the VPN type corresponding to the MAC address of the user device in the second mapping table, and establish a connection with a VPN server of the VPN type corresponding to the MAC address of the user device according to the found connection parameters.

[0084] Step 509: Send a prompt message to the user device, where the prompt message is used to prompt the user device that its priority is low and the VPN can be manually connected.

[0085] Step 510, confirm whether it is necessary to add the MAC address of the user device to the first mapping table; if it is necessary to add the MAC address of the user device to the first mapping table, execute step 511; if it is not necessary to add the MAC address of the user device to the first mapping table, end this process.

[0086] Step 511, obtain and display all VPN types supported by the network interconnection device; receive a selection instruction for the displayed VPN type, save the mapping relationship between the MAC address of the user device and the VPN type corresponding to the selection instruction in the first mapping table, and return to step 502.

[0087] Second, refer to Figure 6 Another embodiment of the present application provides an electronic device, including: at least one processor 601; a memory 602, wherein at least one program is stored in the memory 602, and when the at least one program is executed by the at least one processor 601, any one of the above-mentioned VPN connection establishment methods is implemented.

[0088] In some exemplary embodiments, the electronic device further includes: one or more I / O interfaces 603 connected between the processor 601 and the memory 602 , and configured to implement information interaction between the processor 601 and the memory 602 .

[0089] Among them, the processor 601 is a device with data processing capabilities, including but not limited to a central processing unit (CPU); the memory 602 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory (FLASH); the I / O interface (read-write interface) 603 is connected between the processor 601 and the memory 602, and can realize information interaction between the processor 601 and the memory 602, including but not limited to a data bus (Bus), etc.

[0090] In some embodiments, the processor 601 , the memory 602 , and the I / O interface 603 are connected to each other via a bus 604 , and further connected to other components of the computing device.

[0091] In a third aspect, another embodiment of the present application provides a computer-readable medium, on which a computer program is stored, and when the computer program is executed by a processor, any of the above-mentioned VPN connection establishment methods is implemented.

[0092] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0093] Example embodiments have been disclosed herein, and although specific terms are employed, they are used and should be interpreted only in a general illustrative sense and not for limiting purposes. In some instances, it will be apparent to those skilled in the art that, unless otherwise expressly noted, features, characteristics, and / or elements described in conjunction with a particular embodiment may be used alone or in combination with features, characteristics, and / or elements described in conjunction with other embodiments. Therefore, those skilled in the art will appreciate that various changes in form and detail may be made without departing from the scope of the present application as set forth in the appended claims.

Claims

1. A method for establishing a virtual private network connection, comprising: When a user device establishes a connection with a network interconnection device, obtaining a device identifier of the user device; Determining an available virtual private network type according to a device identifier of the user device; A connection is established with a VPN server of the available VPN type.

2. The method for establishing a virtual private network connection according to claim 1, wherein: Determining the available virtual private network type according to the device identification of the user equipment includes: In a first mapping table between preset device identifiers and virtual private network types, the target virtual private network type corresponding to the device identifier of the user equipment is searched, and the searched target virtual private network type is used as the available virtual private network type.

3. The method for establishing a virtual private network connection according to claim 2, further comprising: If the target virtual private network type corresponding to the device identifier of the user equipment cannot be found in the first mapping table, prompting whether the device identifier of the user equipment needs to be added to the first mapping table; When it is confirmed that the device identification of the user device needs to be added to the first mapping table, all virtual private network types supported by the network interconnection device are acquired and displayed; An instruction for selecting a displayed virtual private network type is received, and a mapping relationship between a device identifier of the user device and the virtual private network type corresponding to the selection instruction is stored in the first mapping table.

4. The method for establishing a virtual private network connection according to claim 1, wherein: The establishing of a connection with the available virtual private network type virtual private network server comprises: Searching for connection parameters corresponding to the available virtual private network type in a second mapping table between pre-set virtual private network types and connection parameters; A connection is established with a VPN server of the available VPN type according to the found connection parameters.

5. The method for establishing a virtual private network connection according to any one of claims 1 to 4, before establishing a connection with the virtual private network server of the available virtual private network type, the method further comprises: determining whether there is an established virtual private network connection; In the case that there is no established VPN connection, the step of establishing a connection with a VPN server of the available VPN type is continued.

6. The method for establishing a virtual private network connection according to claim 5, further comprising: In the case where there is already an established virtual private network connection, determining the type of the virtual private network of the established connection; In the case where the type of the virtual private network that has been connected is the same as the type of the available virtual private network, confirming the connected device using the type of the virtual private network that has been connected; disconnecting the connected device from the network interconnection device; Alternatively, when the VPN type with established connection is different from the available VPN type, confirm the use of the connected device of the VPN type with established connection; disconnect the connected device from the network interconnection device, disconnect the connection with the VPN server of the VPN type with established connection; and establish a connection with the VPN server of the available VPN type.

7. The method for establishing a virtual private network connection according to claim 6, before disconnecting the connected device from the network interconnection device, the method further comprises: Determine whether the priority of the virtual private network type for which the connection has been established is higher than the priority of the available virtual private network type; In the case where the priority of the virtual private network type to which the connection has been established is lower than the priority of the available virtual private network type, the step of disconnecting the connected device from the network interconnection device is continued.

8. The method for establishing a virtual private network connection according to claim 7, further comprising: When the priority of the VPN type that has established a connection is higher than the priority of the available VPN type, a prompt message is sent to the user equipment, wherein the prompt message is used to prompt the user equipment that its own priority is lower and the VPN can be manually connected.

9. An electronic device, comprising: at least one processor; A memory having at least one program stored therein, wherein when the at least one program is executed by the at least one processor, the method for establishing a virtual private network connection according to any one of claims 1 to 8 is implemented.

10. A computer-readable medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the method for establishing a virtual private network connection according to any one of claims 1 to 8.

Images