Business request method and device based on articulated naturality web, and electronic equipment
By receiving and encrypted business requests in the Internet, the problem of security data between the Internet and the Internet is solved by receiving and encrypted business requests in the Internet, and security data transmission between the Internet and the Internet is realized.
Patent Information
- Application Number
- CN202411503325.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-25
- Publication Date
- 2025-01-28
AI Technical Summary
The Internet of Television cannot use the Transmission Control Protocol (TCP) in the Internet for business access, resulting in the inability to secure business access between the Internet and Internet of Television.
By receiving business requests sent by Internet devices, the destination port number and destination equipment number corresponding to the source port number is obtained, the destination equipment number is encrypted, and the encrypted data packet is sent to the corresponding networking equipment for decryption and business access.
A business access to security between the Internet and the Internet of the Internet solves the problem of TCP agents that cannot use the Internet IP in the Internet, and improves the security of data transmission.
Smart Images
Figure CN119382971A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of visual networking, and in particular to a service request method, device and electronic device based on visual networking. Background Art
[0002] Visual Internet is a network system built based on operator patents and using visual Internet technology and protocols. Compared with the Internet, Visual Internet can achieve real-time transmission of high-definition multimedia data across the entire network.
[0003] However, the visual network cannot use the Transmission Control Protocol (TCP) in the Internet for business access, and the related technology lacks a method for secure business access to the Internet through the visual network. Summary of the invention
[0004] In view of the above problems, embodiments of the present application are proposed to provide a method, device and electronic device for service request based on visual networking that overcome the above problems or at least partially solve the above problems.
[0005] In a first aspect, an embodiment of the present application discloses a service request method based on a visual networking, which is applied to a first visual networking device, and the method includes:
[0006] Receive a service request sent by a first Internet device; the service request carries service data and a source port number of the first visual network device;
[0007] Obtaining a destination port number and a destination device number corresponding to the source port number, and obtaining a first data packet according to the service request and the destination port number;
[0008] The first data packet is encrypted based on the destination device number to obtain a first encrypted data packet, and the first encrypted data packet is sent to a second visual networking device corresponding to the destination device number, so that the second visual networking device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform business access to the second Internet device according to the destination port number in the first data packet.
[0009] In a second aspect, an embodiment of the present application discloses a service request method based on a visual networking, which is applied to a second visual networking device, and the method includes:
[0010] Receive a first encrypted data packet sent by a first visual networking device; the first encrypted data packet is obtained by the first visual networking device receiving a service request sent by a first Internet device, obtaining a destination port number and a destination device number corresponding to the source port number, obtaining a first data packet according to the service request and the destination port number, and encrypting the first data packet based on the destination device number; the service request carries service data and the source port number of the first visual networking device;
[0011] The first encrypted data packet is decrypted based on the destination device number to obtain the first data packet, and service access is performed on the second Internet device according to the destination port number in the first data packet.
[0012] In a third aspect, the application embodiment discloses a service request device based on visual networking, the device is located in a first visual networking device, and the device includes:
[0013] A first receiving module is used to receive a service request sent by a first Internet device; the service request carries service data and a source port number of the first visual network device;
[0014] A first acquisition module, used to acquire a destination port number and a destination device number corresponding to the source port number, and acquire a first data packet according to the service request and the destination port number;
[0015] The first sending module is used to encrypt the first data packet based on the destination device number to obtain a first encrypted data packet, and send the first encrypted data packet to a second visual networking device corresponding to the destination device number, so that the second visual networking device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform business access to the second Internet device according to the destination port number in the first data packet.
[0016] In a fourth aspect, the application embodiment discloses a service request device based on visual networking, the device is located in a second visual networking device, and the device includes:
[0017] A second receiving module is used to receive a first encrypted data packet sent by a first visual networking device; the first encrypted data packet is obtained by the first visual networking device receiving a service request sent by a first Internet device, obtaining a destination port number and a destination device number corresponding to the source port number, and obtaining a first data packet according to the service request and the destination port number, and encrypting the first data packet based on the destination device number; the service request carries service data and the source port number of the first visual networking device;
[0018] The service access module is used to decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet.
[0019] In a fifth aspect, the application embodiment discloses an electronic device, including:
[0020] one or more processors; and
[0021] One or more machine-readable media having instructions stored thereon, when executed by the one or more processors, cause the processors to perform the method as described in any one of the first aspect or the second aspect.
[0022] In a sixth aspect, an embodiment of the application discloses a computer-readable storage medium, wherein a computer program stored in the medium enables a processor to execute a method as described in any one of the first aspect or the second aspect.
[0023] In this embodiment, after receiving the service request sent by the first Internet, the destination port number and the destination device number corresponding to the source port number in the service request are obtained, and the first data packet is obtained according to the service request and the destination port number. The first data packet is encrypted based on the destination device number to obtain a first encrypted data packet, and the first encrypted data packet is sent to the second visual network device corresponding to the destination device. The second visual network device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet. This embodiment solves the problem that the TCP proxy with the Internet Protocol Address (IP) cannot be used in the visual network, and service access cannot be performed between the Internet and the visual network. In addition, the first data packet is encrypted by the destination device number. After the second visual network device obtains the encrypted first data packet, it can decrypt the encrypted first data packet according to its own device number (i.e., the destination device number) to obtain the first data packet, and perform service access based on the decrypted first data packet, thereby improving the security of data access between the Internet and the visual network. BRIEF DESCRIPTION OF THE DRAWINGS
[0024] Figure 1 It is a flowchart of a method for requesting a service based on a visual network provided by an embodiment of the present application;
[0025] Figure 2 It is a flowchart of another method for requesting a service based on a visual network provided by an embodiment of the present application;
[0026] Figure 3 It is a structural diagram of a business request system based on visual networking in the related art;
[0027] Figure 4 This is a flowchart of another method for requesting a service based on a visual network provided by an embodiment of the present application;
[0028] Figure 5 It is a flowchart of another method for requesting a service based on a visual network provided by an embodiment of the present application;
[0029] Figure 6 It is a flowchart of another method for requesting a service based on a visual network provided by an embodiment of the present application;
[0030] Figure 7 An interactive step flow chart of a service request method based on visual networking provided by an embodiment of the present application;
[0031] Figure 8 It is a structural block diagram of a visual networking device provided in an embodiment of the present application;
[0032] Fig. 9 It is a flowchart of another method for requesting a service based on a visual network provided by an embodiment of the present application;
[0033] Fig.10 It is a flowchart of another method for requesting a service based on a visual network provided by an embodiment of the present application;
[0034] Fig.11 It is a structural block diagram of another service request device based on a visual networking device number provided in an embodiment of the application;
[0035] Fig.12 It is a structural block diagram of another service request device based on a visual networking device number provided in an embodiment of the application;
[0036] Fig.13 It is a structural block diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION
[0037] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the present application is further described in detail below in conjunction with the accompanying drawings and specific implementation methods.
[0038] Figure 1 A service request method based on visual networking is shown, which is applied to a first visual networking device. Figure 1 , the method may include the following steps:
[0039] Step 101: Receive a service request sent by a first Internet device.
[0040] The service request carries service data and the source port number of the first visual networking device.
[0041] Among them, the first visual networking device can be a proxy server, a switch, or other visual networking devices in the visual network. The type of the first visual networking device is not limited here.
[0042] The service request may include a request to access data in a database, a request to upload a file, or a request for other service types, and the types of service requests are not limited here.
[0043] Business data is data used to indicate the execution of a business request. For example, if a business request is used to read data from a database, the business data may include a database identifier or other information used to locate the database. For another example, if a business request is used to write data in a database, the business request may include a database identifier or other information used to locate the database, as well as the data to be written into the database.
[0044] Step 102: Obtain a destination port number and a destination device number corresponding to the source port number, and obtain a first data packet according to the service request and the destination port number.
[0045] The source port number is the port number through which the first visual network device monitors the service requests sent by the first Internet device; the destination port number is the port number through which the second visual network device and the second Internet interact with data, and the destination device number is the device number of the second visual network.
[0046] For example, the destination port number and the destination device number corresponding to the source port number are pre-registered, and the registered data is stored locally in the first visual networking device. After receiving the service request and obtaining the source port number from the service request, the destination port number and the destination device number corresponding to the source port number are obtained from the correspondence between the pre-stored source port number and the pre-stored destination port number and the destination device number of the local device.
[0047] Furthermore, in the service registration module of the first visual network, the destination port number and the destination device number corresponding to the source port number are registered and stored.
[0048] Specifically, the service request and the destination port number are assembled into a first data packet of the Socks5 protocol, and the first data packet is an Internet Protocol data packet.
[0049] Furthermore, the destination IP address may be obtained according to the source port number, and the service request, the destination port number and the destination IP address may be encapsulated into a first data packet.
[0050] Step 103, encrypt the first data packet based on the destination device number to obtain a first encrypted data packet, send the first encrypted data packet to the second visual networking device corresponding to the destination device number, so that the second visual networking device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet.
[0051] The second visual network obtains the destination device number of the second visual network locally, and uses the destination device number to decrypt the first encrypted data packet.
[0052] For example, the first data packet is an Internet protocol data packet, and the first visual networking device encrypts the first data packet and converts it into a first encrypted data packet of the visual networking protocol. According to the destination device number, the second visual networking device corresponding to the destination device number is determined from the visual networking system, and the first encrypted data packet is sent to the second visual networking device. The second visual networking device obtains the destination device number of the second visual networking device from the local computer, and uses the destination device number to decrypt the first encrypted data packet.
[0053] When the second visual networking device accesses the second Internet device for business, the second Internet device obtains the access result and feeds back the access result to the second visual networking device according to the destination port number. The second visual networking device sends the feedback result to the first visual networking device, which then feeds back to the first Internet device.
[0054] In this embodiment, after receiving the service request sent by the first Internet, the destination port number and the destination device number corresponding to the source port number in the service request are obtained, and the first data packet is obtained according to the service request and the destination port number. The first data packet is encrypted based on the destination device number to obtain a first encrypted data packet, and the first encrypted data packet is sent to the second visual network device corresponding to the destination device. The second visual network device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet. This embodiment solves the problem that the TCP proxy of the Internet IP cannot be used in the visual network, and data transmission cannot be performed between the Internet and the visual network. In addition, the first data packet is encrypted by the destination device number. After the second visual network device obtains the encrypted first data packet, it can decrypt the encrypted first data packet according to its own device number (i.e., the destination device number) to obtain the first data packet, and perform service access based on the decrypted first data packet. This embodiment improves the security of data transmission between the Internet and the visual network.
[0055] Reference Figure 2 This embodiment provides another service request method based on visual networking, referring to Figure 2 , the method may include the following steps:
[0056] Step 201: Receive a service request sent by a first Internet device.
[0057] The service request carries service data and the source port number of the first visual networking device.
[0058] For example, refer to Figure 3The first visual networking device includes a v2vTcpServer module, a v2vSocks5 client module, a service registration module and a v2v module. The first visual networking device monitors the service request sent by the first Internet device through the v2vTcpServer module and obtains the source port number of the first visual networking device carried in the service request.
[0059] Step 202: According to the correspondence between the pre-stored source port number, the pre-stored destination port number, and the pre-stored destination device number, the destination port number and the destination device number corresponding to the source port are obtained.
[0060] For example, refer to Figure 3 , pre-register the correspondence between the source port number and the destination port number and the destination device number, and store it in the service registration module of the first device. In this step, obtain the destination port number and the destination device number corresponding to the source port from the service registration module of the first visual network device.
[0061] Step 203: Acquire a first Internet protocol data packet according to the service request and the destination port number.
[0062] For example, the service request can be assembled into a first Internet protocol data packet through the v2vSocks5 client module in the first visual networking device.
[0063] For example, the destination IP address can also be obtained according to the source port number. In this step, the service request, the destination port number and the destination IP address are assembled into a first data packet of the Internet Protocol.
[0064] Specifically, the service request and the destination port number can be assembled into a Socks5 protocol request data packet through the v2vSocks5 client module in the first visual networking device. The request data packet is the first data packet in this step.
[0065] Step 204: encrypt the first data packet based on the destination device number to obtain an encrypted first data packet.
[0066] For example, the first data packet is encrypted according to the destination device number and the preset encryption algorithm to obtain the encrypted first data packet. For example, the preset encryption algorithm may be an encryption algorithm based on a cryptographic hash function, such as an SM3 encryption algorithm.
[0067] For example, refer to Figure 3 , based on the encryption module in the SMP module of the first visual networking device ( Figure 3 (not shown), encrypt the first data packet using the destination device number to obtain the encrypted first data packet.
[0068] Step 205, converting the encrypted first data packet into a first encrypted data packet of the visual networking protocol.
[0069] For example, refer to Figure 3 , through the v2v module of the first visual networking device, the first data packet is converted into a first encrypted data packet of the visual networking protocol.
[0070] Step 206, sending the first encrypted data packet to the second visual networking device corresponding to the destination device number, so that the second visual networking device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet.
[0071] For example, refer to Figure 3 , obtain the browser request (i.e., business request) through the v2vTcpServer module of the first visual networking device, and obtain the source port number corresponding to the business request, and then obtain the destination port number and destination device number corresponding to the source port from the service registration module of the first visual networking device. Through the v2vSocks client module of the first visual networking device, assemble the destination port number and business data into the first data packet of the Socks5 protocol, and then send the first data packet and the destination device number to the SMP module of the first visual networking device. Through the SMP module of the first visual networking device, encrypt the first data packet using the destination device number to obtain the encrypted first data packet, and send the encrypted first data packet and the destination device number to the v2v module of the first visual networking device.
[0072] The v2v module of the first visual networking device converts the encrypted first data packet into the first encrypted data packet of the visual networking protocol. Then, according to the destination device number, the second visual networking device corresponding to the destination device number is determined from the visual networking system, and the first encrypted data packet is sent to the v2v device of the second visual networking device. The v2v device of the second visual networking device sends the first encrypted data packet to the SMP module of the second visual networking device. The SMP module of the second visual networking device decrypts the first encrypted data packet according to the destination port number of the second visual networking device, and obtains the first data packet. The destination port number and service request in the first data packet are parsed by the v2vSocks service module of the second visual networking device, and the service access is performed on the second Internet according to the service request and the destination port number.
[0073] In this embodiment, after receiving the service request sent by the first Internet, the destination port number and the destination device number corresponding to the source port number can be quickly and accurately obtained according to the correspondence between the pre-stored source port number and the pre-stored destination port number and the pre-stored destination device number, and the first data packet of the visual network protocol is obtained according to the service request and the destination port number. The first data packet is encrypted based on the destination device number to obtain the encrypted first data packet, and the encrypted first data packet is converted into the first encrypted data packet of the visual network protocol. The first encrypted data packet is a data packet of the visual network protocol. The first visual network device can send the first encrypted data packet to the second visual network device through the visual network protocol, thereby realizing data transmission between different visual network devices. The second visual network device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform business access to the second Internet device according to the destination port number in the first data packet. The problem that the TCP proxy of the Internet IP cannot be used in the visual network and data transmission cannot be performed between the Internet and the visual network is solved, and the security of data transmission between the Internet and the visual network is improved.
[0074] Reference Figure 4 This embodiment provides another service request method based on visual networking, referring to Figure 4 , the method may include the following steps:
[0075] Step 301: Receive a service request sent by a first Internet device.
[0076] The service request carries service data and the source port number of the first visual networking device.
[0077] Step 302, obtaining the destination Internet Protocol address corresponding to the source port number.
[0078] For example, the correspondence between the source port number and the destination port number, the destination IP address, and the destination device number is pre-registered and stored in the service registration module of the first device. In this step, the destination IP address corresponding to the source port is obtained from the service registration module.
[0079] Step 303, obtaining the destination port number and the destination device number corresponding to the source port number, and obtaining the first data packet according to the service request, the destination port number and the destination Internet Protocol address.
[0080] The destination port number and the destination device number corresponding to the source port number are obtained from the correspondence between the pre-registered source port number and the destination port number, the destination IP address, and the destination device number stored in the service registration module.
[0081] Reference Figure 3, the service request, the destination IP address and the destination port number can be assembled into a first data packet of the Socks5 protocol through the v2vSocks5 client module in the first visual networking device.
[0082] Step 304: encrypt the first data packet based on the destination device number to obtain a first encrypted data packet.
[0083] Reference Figure 3 , the SMP module in the first visual networking device can use a preset encryption algorithm to encrypt the first data packet using the destination device number to obtain a first encrypted data packet.
[0084] A first data packet is obtained according to the service request, the destination port number and the destination Internet Protocol address, the first data packet including the destination IP data, and correspondingly, a first encrypted data packet obtained by encrypting the first data packet also includes the destination IP.
[0085] Step 305, sending the first encrypted data packet including the destination Internet protocol to the second visual network device corresponding to the destination device number, so that the second visual network can access the second Internet service according to the destination port number and the destination Internet protocol in the first data packet.
[0086] For example, the second visual networking device determines the second Internet that needs to be accessed based on the destination IP, performs business access to the second Internet, obtains the access result, and the second Internet feeds back the access result to the second visual networking device corresponding to the destination port number.
[0087] Reference Figure 5 This embodiment provides another service request method based on visual networking, referring to Figure 5 , the method may include the following steps:
[0088] Step 401: Receive a service request sent by a first Internet device.
[0089] The service request carries service data and the source port number of the first-view networking device.
[0090] Step 402, obtaining the source device number corresponding to the source port number.
[0091] For example, the source device number corresponding to the source port number is obtained according to the source port number and the correspondence between the pre-stored source port number and the pre-stored source device number. The source device number of the first visual networking device can also be obtained from the first visual networking device.
[0092] Step 403: Obtain the destination port number and the destination device number corresponding to the source port number, and obtain the first data packet according to the service request and the destination port number.
[0093] For example, refer to Figure 3 , through the v2vSocks5 client module in the first visual networking device, the service request and the destination port number are assembled into a first data packet of the Socks5 protocol.
[0094] Step 404: encrypt the first data packet based on the destination device number to obtain a first encrypted data packet.
[0095] The method of this step has been described in the aforementioned step 204 and will not be repeated here.
[0096] Further, the first data packet and the source device number are encrypted to obtain a first encrypted data packet including the source device number.
[0097] Step 405, sends the first encrypted data packet including the source device number to the second visual network device corresponding to the destination device number, so that the second visual network device can obtain the second data packet according to the access result after obtaining the access result, and encrypt the second data packet based on the source device number to obtain the second encrypted data packet and send it to the first visual network device determined according to the source device number.
[0098] Reference Figure 3 , the first encrypted data packet is sent to the v2v device in the second visual networking device through the v2v device in the first visual networking device, the v2v device in the second visual networking device sends the first encrypted data packet to the SMP module in the second visual networking device, the SMP module decrypts the first encrypted data packet according to the destination port number of the second visual networking device, obtains the first data packet, accesses the destination Internet according to the destination port number in the first data packet, and obtains the access result.
[0099] The second Internet will feed back the access result to the v2vNat module corresponding to the destination port number, and send the access result to the v2vSocks5 service module through the v2vNat module of the second visual network device. The v2vSocks5 service module will encapsulate the access data into a second data packet of the Socks5 protocol, encrypt it through the SMP module to obtain a second encrypted data packet, and send it to the v2v module of the first visual network device through the v2v module.
[0100] Step 406: decrypt the second encrypted data packet based on the source device number to obtain a second data packet.
[0101] Reference Figure 3 The v2v module of the first visual networking device converts the second encrypted data packet into a Socks5 protocol data packet, and then sends it to the SMP module of the first visual networking device for decryption. The SMP module decrypts and obtains the second data packet.
[0102] Step 407: Obtain the access result in the second data packet, and feed back the access result to the first Internet device.
[0103] Reference Figure 3 The SMP module returns the decrypted second data packet to the v2vSocks5 client module, and the v2vSocks5 client module parses the access result and feeds it back to the first Internet device through the v2vTcpServer module.
[0104] Reference Figure 6 The method may further include the following steps:
[0105] Step 501, receiving a first encrypted data packet sent by a first visual networking device.
[0106] Among them, the first encrypted data packet is obtained by the first visual networking device receiving a service request sent by the first Internet device, obtaining the destination port number and the destination device number corresponding to the source port number, obtaining the first data packet according to the service request and the destination port number, and encrypting the first data packet based on the destination device number; the service request carries the service data and the source port number of the first visual networking device.
[0107] The method for the first visual network to obtain the first encrypted data packet has been explained in the aforementioned steps 101 to 103 and will not be repeated here.
[0108] Step 502: decrypt the first encrypted data packet based on the destination device number to obtain a first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet.
[0109] Reference Figure 3 The SMP module in the second visual networking device decrypts the first encrypted data packet according to the destination device number to obtain the first data packet, and accesses the service to the second Internet according to the destination port number in the first data packet.
[0110] In this embodiment, the second visual networking device receives the first encrypted data packet sent by the first visual networking device. The first encrypted data packet is the first visual networking device obtaining the destination port number and the destination device number corresponding to the source port number in the service request, obtaining the first data packet according to the service request and the destination port number, and encrypting the first data packet based on the destination device number to obtain the first encrypted data packet. Based on this embodiment, the problem that the TCP proxy of the Internet IP cannot be used in the visual network, and data transmission and service access cannot be performed between the Internet and the visual network is solved. In addition, this embodiment sends service requests based on encrypted data packets, thereby improving the security of data transmission between the Internet and the visual network.
[0111] Reference Figure 7 , the method may include the following steps:
[0112] Step 601: A first visual networking device receives a service request sent by a first Internet device.
[0113] The service request carries service data and the source port number of the first visual networking device.
[0114] Step 602: The first visual networking device obtains the destination port number and the destination device number corresponding to the source port number, and obtains the first data packet according to the service request and the destination port number.
[0115] The method of this step has been described in the aforementioned step 102 and will not be repeated here.
[0116] Step 603: The first visual networking device encrypts the first data packet based on the destination device number to obtain a first encrypted data packet, and sends the first encrypted data packet to the second visual networking device corresponding to the destination device number.
[0117] The method of this step has been described in the aforementioned step 103 and will not be repeated here.
[0118] Step 604: The second visual networking device decrypts the first encrypted data packet based on the destination device number to obtain the first data packet, and performs service access to the second Internet device according to the destination port number in the first data packet.
[0119] The method of this step has been described in the aforementioned step 501 and will not be repeated here.
[0120] Reference Figure 8 This embodiment also provides a visual networking device, the system includes: a v2vSocks5 client module, a v2vSocks5 service module, a service registration module, a v2v module, a v2vTcpServer module, an SMP module, and a v2vNat module.
[0121] Furthermore, in this embodiment, the service request system based on the visual networking includes a first visual networking device and a second visual networking device, wherein the first visual networking device and the second visual networking device both include a v2vSocks5 client module, a v2vSocks5 service module, a service registration module, a v2v module, a v2vTcpServer module, an SMP module, and a v2vNat module.
[0122] When the first visual networking device sends a service request to the second visual networking device, refer to Figure 3The first visual networking device processes and sends service requests based on the v2vTcpServer module, v2vSocks5 client module, service registration module, SMP module and v2v module; the second visual networking device receives service requests and processes service access based on the v2v module, v2vSocks5 service module, SMP module and v2vNat module.
[0123] The service registration module is used to register configuration information on the proxy and store the mapping relationship between the configuration information and the source port number. The configuration information includes the source device number, the destination device number, the destination port number and the destination IP address. The service registration module is also used to obtain the destination device number, the destination port number and the destination IP address corresponding to the source port number from the stored mapping relationship according to the source port number when receiving a service request.
[0124] Among them, the v2vSocks5 service module is used to receive data packets of the socks5 protocol, and parse the destination IP address, destination port number and service request in the data packet, and connect to the destination service based on the destination IP address.
[0125] Among them, the v2vSocks5 client module is used to assemble IP data packets, obtain the client request message of the socks5 protocol and forward it.
[0126] Among them, the SMP module is used to encrypt data packets.
[0127] Among them, the v2vNat module is used to perform NAT conversion between device numbers and IP addresses.
[0128] Among them, the v2v module is used to encapsulate and decapsulate IP data packets and v2v data packets, and to communicate between the first visual networking device and the second visual networking device.
[0129] The v2vTcpServer module is used to monitor ports and convert and query configuration information of ports and services.
[0130] Combine the following Figure 8 and Fig. 9 , further exemplary description of the service request method based on the visual network in this embodiment is given, referring to Figure 8 and 9 , the method may include the following steps:
[0131] Step S1: The first visual networking device registers configuration information through the service registration module and binds the configuration information to a source port in the v2vTcpServer module.
[0132] The configuration information includes the source device number, destination device number, destination service IP and destination port number corresponding to the source port number.
[0133] Step S2: The first visual networking device obtains the browser request sent by the first Internet device, and obtains the source port number bound to the browser request in the v2vTcpServer module of the first visual networking device.
[0134] The source port number is the port number through which the first visual networking device monitors the access request of the first Internet device.
[0135] Step S3: Obtain configuration information from the service registration module of the first visual networking device through the v2vTcpServer module of the first visual networking device.
[0136] Specifically, through the v2vTcpServer module of the first visual networking device, the source device number, the destination device number, the destination service IP and the destination port number corresponding to the source port number are obtained from the service registration module of the first visual networking device.
[0137] Step S4: Send the acquired configuration information to the v2vSocks5 client module of the first visual networking device through the v2vTcpServer module of the first visual networking device.
[0138] Specifically, the service request, as well as the source device number, destination device number, destination service IP and destination port number in the configuration information are sent to the v2vSocks5 client of the first visual networking device.
[0139] Step S5, the v2vSocks5 client module of the first visual networking device assembles the first data packet of the socks5 protocol according to the destination IP address number and the destination port number in the configuration information, and sends the first data packet and the source device number to the SMP module of the first visual networking device.
[0140] The v2vSocks5 client of the first-view networking device assembles the service request, the destination IP address number, and the destination port number into a first data packet of the socks5 protocol, and the first data packet is a data packet of the Internet Protocol.
[0141] Step S6: The SMP module of the first visual networking device uses the destination device number to encrypt the first data packet and the source device number, obtains the encrypted first data packet, and sends it to the v2v module of the first visual networking device.
[0142] For example, the SMP module encrypts the first data packet using the destination device number based on the SM3 algorithm to obtain the encrypted first data packet.
[0143] Step S7, the v2v module of the first visual networking device encapsulates the IP data of the first data packet into a first encrypted data packet of the visual networking protocol, and sends the first encrypted data packet to the v2v module in the second visual networking device corresponding to the destination device number according to the destination device number.
[0144] In this step, the v2v module of the first visual networking device encapsulates the IP data in the encrypted first data packet into a first encrypted data packet of the visual networking protocol, and the first encrypted data packet is a v2v data packet. Based on the first encrypted data packet of the visual networking protocol, the first encrypted data packet can be transmitted between the first visual networking device and the second visual networking device.
[0145] Step S8, the v2v module of the second visual networking device converts the first encrypted data packet of the visual networking protocol into a data packet of the Internet Protocol, and sends it to the SMP module of the second visual networking device.
[0146] The v2v module of the second visual networking device converts the v2v data packet into an IP data packet, and sends the source device number and the IP data packet to the SMP module.
[0147] Step S9, the SMP module of the second visual networking device decrypts the first encrypted data packet, and sends the decrypted first data packet to the v2vsocks5 service module of the second visual networking device.
[0148] For example, the SMP module of the second visual networking device is based on SM3 and uses the destination device number of the device to decrypt the first encrypted data packet to obtain the decrypted first data packet.
[0149] Step S10, the v2vsocks5 service module of the second visual networking device parses the destination IP address of the first data packet, and sends the source device number and the destination IP address to the v2vNat module of the second visual networking device.
[0150] The v2vsocks5 service module of the second visual networking device obtains the destination IP address from the corresponding field used to write the destination IP address in the first data packet.
[0151] Step S11, the v2vNat module of the second visual networking device generates a configuration information corresponding to the source device number and the destination IP address, and sends the service request to the service page corresponding to the destination IP.
[0152] The configuration information includes the corresponding relationship between the source device number and the destination IP address.
[0153] Step S12: The v2vNat module of the second visual networking device receives the access result returned by the service page.
[0154] Among them, the service page is equivalent to the second Internet device in the aforementioned embodiment. The second Internet device performs a business access operation, obtains an access result, and sends the access result to the second visual network device through the destination port number.
[0155] Reference Fig.10 , after step S12, further comprising the following steps:
[0156] Step S13, the v2vNat module of the second visual networking device sends response data including the access result to the v2vsocks5 service module of the second visual networking device.
[0157] Based on the aforementioned step S11, the correspondence between the active device number and the destination IP address is stored in the v2vNat module.
[0158] Step S14, the v2vsocks5 service module of the second visual networking device obtains the source device number corresponding to the destination IP address according to the configuration information corresponding to the source device number and the destination IP address in the v2vNat module of the second visual networking device, and sends the response data and the source device number to the SMP module of the second visual networking device.
[0159] That is, the v2vsocks5 device of the second visual networking device obtains the response data, and obtains the source device number from the v2vNat module according to the destination IP address.
[0160] Step S15, the SMP module of the second visual networking device encrypts the response data to obtain an encrypted second data packet, and sends the encrypted second data packet to the v2v module of the second visual networking device.
[0161] The SMP module of the second visual networking device encrypts the response data using the source device number based on the SM3 algorithm. The response data is equivalent to the second data packet in the aforementioned embodiment.
[0162] Step S16, the v2v module of the second visual networking device encapsulates the encrypted second data packet into a second encrypted data packet of the visual networking protocol, and sends it to the v2v module of the first visual networking device corresponding to the source device number according to the source device number.
[0163] The v2v module of the second visual networking device locates the first visual networking device from the visual networking system according to the source device number, and sends the second encrypted data packet to the first visual networking device.
[0164] Step S17, the v2v module of the first visual networking device converts the second encrypted data packet of the second visual networking protocol into an encrypted data packet of the Internet Protocol, and sends it to the SMP module of the first visual networking device.
[0165] That is, the v2v module of the first visual networking device converts the v2v data packet of the second encrypted data into an IP data packet and returns it to the SMP module of the first visual networking device. Specifically, the v2v module of the first visual networking device converts the second encrypted data packet of the second visual networking protocol into an encrypted data packet of the Internet protocol and sends it to the SMP module of the first visual networking device for decrypting the encrypted data packet through the SMP module of the first visual networking device.
[0166] Step S18, the SMP module of the first visual networking device decrypts the encrypted data packet according to the source device number to obtain the second data packet, and sends the second data packet to the v2vSocks5 client of the first visual networking device.
[0167] The SMP module of the first visual networking device decrypts the encrypted data packet using the source device number of the device based on the SM3 algorithm to obtain the second data packet.
[0168] Step S19, the v2vSocks5 client of the first visual networking device directly returns the access result to the v2vTcpServer module of the first visual networking device.
[0169] The v2vSocks5 client of the first visual networking device obtains the access result in the second data packet and returns it to the v2vTcpServer module of the first visual networking device.
[0170] Step S20: the v2vTcpServer module of the first visual networking device responds the access result in the second data packet to the browser.
[0171] The browser in this step is equivalent to the first Internet device in the aforementioned embodiment.
[0172] Based on the method of this embodiment, two independent visual network devices can access the IP service within a visual network through IP.
[0173] Reference Fig.11 The embodiment of the present application further provides a service request device 70 based on visual networking, which is applied to a first visual networking device. The device 70 includes:
[0174] The first receiving module 701 is used to receive a service request sent by a first Internet device; the service request carries service data and a source port number of the first visual network device;
[0175] A first acquisition module 702, configured to acquire a destination port number and a destination device number corresponding to a source port number, and acquire a first data packet according to a service request and a destination port number;
[0176] The first sending module 703 is used to encrypt the first data packet based on the destination device number to obtain a first encrypted data packet, and send the first encrypted data packet to the second visual networking device corresponding to the destination device number, so that the second visual networking device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet.
[0177] For example, the device 70 further includes:
[0178] A second acquisition module, configured to acquire a source device number corresponding to a source port number after receiving a service request sent by the first Internet device;
[0179] The first acquisition module 702 includes:
[0180] The first sending module 703 includes:
[0181] The first sending submodule is used to send a first encrypted data packet including a source device number to a second visual network device corresponding to a destination device number, so that the second visual network device can obtain a second data packet according to the access result after obtaining the access result, and encrypt the second data packet based on the source device number to obtain a second encrypted data packet and send it to the first visual network device determined according to the source device number.
[0182] Optionally, the first sending module 703 further includes:
[0183] A first acquisition submodule is used to decrypt the first encrypted data packet including the source device number based on the source device number to obtain a second data packet after sending the first encrypted data packet including the source device number to the second visual networking device corresponding to the destination device number;
[0184] The second acquisition submodule is used to obtain the access result in the second data packet and feed the access result back to the first Internet device.
[0185] Optionally, the first acquisition module 702 includes:
[0186] A third acquisition submodule, used for assembling the service request and the destination port number into a first data packet of the Internet protocol;
[0187] The first sending module 703 includes:
[0188] A fourth acquisition submodule, configured to encrypt the first data packet based on the destination device number to obtain the encrypted first data packet;
[0189] The first conversion submodule is used to convert the encrypted data packet into an encrypted data packet of the visual networking protocol.
[0190] Optionally, the device 70 further includes:
[0191] A third acquisition module, configured to acquire a destination Internet Protocol address corresponding to a source port number after receiving a service request sent by the first Internet device;
[0192] The first acquisition module 702 includes:
[0193] A fifth acquisition submodule, configured to acquire a first data packet according to the service request, the destination port number and the destination Internet Protocol address;
[0194] The first sending module 703 includes:
[0195] The second sending submodule is used to send the first encrypted data packet including the destination Internet protocol to the second visual network device corresponding to the destination device number, so that the second visual network can access the second Internet according to the destination port number and the destination Internet protocol in the first data packet.
[0196] Optionally, the first receiving module 701 includes:
[0197] The sixth acquisition submodule is used to acquire the destination port number and the destination device number corresponding to the source port according to the correspondence between the pre-stored source port number, the pre-stored destination port number, and the pre-stored destination device number.
[0198] In this embodiment, after receiving the service request sent by the first Internet, the destination port number and the destination device number corresponding to the source port number in the service request are obtained, and the first data packet is obtained according to the service request and the destination port number. The first data packet is encrypted based on the destination device number to obtain a first encrypted data packet, and the first encrypted data packet is sent to the second visual network device corresponding to the destination device. The second visual network device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet. This embodiment solves the problem that the TCP proxy of the Internet IP cannot be used in the visual network, and data transmission cannot be performed between the Internet and the visual network. In addition, the first data packet is encrypted by the destination device number. After the second visual network device obtains the encrypted first data packet, it can decrypt the encrypted first data packet according to its own device number (i.e., the destination device number) to obtain the first data packet, and perform service access based on the decrypted first data packet. This embodiment improves the security of data transmission between the Internet and the visual network.
[0199] Reference Fig.12 The embodiment of the present application further provides a service request device 80 based on a visual networking device number, the device comprising:
[0200] The second receiving module 801 is used to receive a first encrypted data packet sent by a first visual networking device; the first encrypted data packet is a service request sent by a first Internet device received by the first visual networking device; obtain a destination port number and a destination device number corresponding to a source port number, and obtain a first data packet according to the service request and the destination port number; the first data packet is encrypted based on the destination device number; the service request carries service data and a source port number of the first visual networking device;
[0201] The service access module 802 is used to decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet.
[0202] In this embodiment, after receiving the service request sent by the first Internet, the destination port number and the destination device number corresponding to the source port number in the service request are obtained, and the first data packet is obtained according to the service request and the destination port number. The first data packet is encrypted based on the destination device number to obtain a first encrypted data packet, and the first encrypted data packet is sent to the second visual network device corresponding to the destination device. The second visual network device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet. This embodiment solves the problem that the TCP proxy of the Internet IP cannot be used in the visual network, and data transmission cannot be performed between the Internet and the visual network. In addition, the first data packet is encrypted by the destination device number. After the second visual network device obtains the encrypted first data packet, it can decrypt the encrypted first data packet according to its own device number (i.e., the destination device number) to obtain the first data packet, and perform service access based on the decrypted first data packet. This embodiment improves the security of data transmission between the Internet and the visual network.
[0203] The embodiment of the present invention discloses an electronic device, such as Fig.13 As shown, it includes: a processor 1101 and a memory 1102, the device number memory 1102 stores programs or instructions that can be run on the device number processor 1101, and when the device number program or instruction is executed by the device number processor 1101, it implements a service request method based on visual networking such as any of the above-mentioned device numbers.
[0204] An embodiment of the present invention discloses a computer-readable storage medium, wherein a computer program stored in the storage medium enables a processor to execute any of the above methods.
[0205] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.
[0206] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, devices, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0207] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0208] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0209] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0210] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present application.
[0211] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "including one..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the device number element.
[0212] The above is a detailed introduction to the service request method, device, equipment and storage medium based on the visual network provided by the present application. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for general technical personnel in this field, according to the idea of the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.
Claims
1. A service request method based on visual networking, characterized in that: Applied to the first visual networking device, the method includes: Receive a service request sent by a first Internet device; the service request carries service data and a source port number of the first visual network device; Obtaining a destination port number and a destination device number corresponding to the source port number, and obtaining a first data packet according to the service request and the destination port number; The first data packet is encrypted based on the destination device number to obtain a first encrypted data packet, and the first encrypted data packet is sent to a second visual networking device corresponding to the destination device number, so that the second visual networking device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform business access to the second Internet device according to the destination port number in the first data packet.
2. The method according to claim 1, characterized in that: Acquiring a first data packet according to the service request and the destination port number includes: Acquire a first data packet of Internet Protocol according to the service request and the destination port number; Encrypting the first data packet based on the destination device number to obtain a first encrypted data packet includes: Encrypting the first data packet based on the destination device number to obtain an encrypted first data packet; The encrypted first data packet is converted into a first encrypted data packet of a visual networking protocol.
3. The method according to claim 1, characterized in that After receiving the service request sent by the first Internet device, the method further includes: Obtaining a source device number corresponding to the source port number; Sending the first encrypted data packet to a second visual networking device corresponding to the destination device number includes: A first encrypted data packet including the source device number is sent to a second visual network device corresponding to the destination device number, so that the second visual network device can obtain a second data packet according to the access result after obtaining the access result, encrypt the second data packet based on the source device number, obtain a second encrypted data packet, and send the second encrypted data packet to the first visual network device.
4. The method according to claim 3, characterized in that: After sending the first encrypted data packet including the source device number to the second visual networking device corresponding to the destination device number, the method further includes: decrypting the second encrypted data packet based on the source device number to obtain the second data packet; The access result in the second data packet is obtained, and the access result is fed back to the first Internet device.
5. The method according to claim 1, characterized in that After receiving the service request sent by the first Internet device, the method further includes: Obtaining a destination Internet Protocol address corresponding to the source port number; Acquiring a first data packet according to the service request and the destination port number includes: Acquire the first data packet according to the service request, the destination port number and the destination Internet Protocol address; Sending the first encrypted data packet to a second visual networking device corresponding to the destination device number includes: A first encrypted data packet including the destination Internet protocol is sent to a second visual network device corresponding to the destination device number, so that the second visual network can access the second Internet service according to the destination port number and the destination Internet protocol in the first data packet.
6. The method according to claim 1, characterized in that Obtaining the destination port number and the destination device number corresponding to the source port number includes: According to the correspondence between the pre-stored source port number, the pre-stored destination port number, and the pre-stored destination device number, the destination port number and the destination device number corresponding to the source port are acquired.
7. A service request method based on visual networking, characterized in that: Applied to a second visual networking device, the method includes: Receive a first encrypted data packet sent by a first visual networking device; the first encrypted data packet is obtained by the first visual networking device receiving a service request sent by a first Internet device, obtaining a destination port number and a destination device number corresponding to a source port number, obtaining a first data packet according to the service request and the destination port number, and encrypting the first data packet based on the destination device number; the service request carries service data and a source port number of the first visual networking device; The first encrypted data packet is decrypted based on the destination device number to obtain the first data packet, and service access is performed on the second Internet device according to the destination port number in the first data packet.
8. A service request device based on visual networking, characterized in that: The device is located in the first visual networking device, and the device includes: A first receiving module is used to receive a service request sent by a first Internet device; the service request carries service data and a source port number of the first visual network device; A first acquisition module, used to acquire a destination port number and a destination device number corresponding to the source port number, and acquire a first data packet according to the service request and the destination port number; The first sending module is used to encrypt the first data packet based on the destination device number to obtain a first encrypted data packet, and send the first encrypted data packet to a second visual networking device corresponding to the destination device number, so that the second visual networking device can decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform business access to the second Internet device according to the destination port number in the first data packet.
9. A service request device based on visual networking, characterized in that: The device is located in the second visual networking device, and the device includes: A second receiving module is used to receive a first encrypted data packet sent by a first visual networking device; the first encrypted data packet is obtained by the first visual networking device receiving a service request sent by a first Internet device, obtaining a destination port number and a destination device number corresponding to a source port number, obtaining a first data packet according to the service request and the destination port number, and encrypting the first data packet based on the destination device number; the service request carries service data and a source port number of the first visual networking device; The service access module is used to decrypt the first encrypted data packet based on the destination device number to obtain the first data packet, and perform service access to the second Internet device according to the destination port number in the first data packet.
10. An electronic device, characterized in that: include: one or more processors; and One or more machine-readable media having instructions stored thereon, when executed by the one or more processors, cause the processors to perform the method of any one of claims 1 to 7.
11. A computer-readable storage medium, characterized in that: The computer program stored therein enables the processor to execute the method according to any one of claims 1 to 7.