Audio and video communication method and system based on one-way access network

Abstract

The invention discloses an audio and video communication method and system based on a one-way access network, and relates to the field of one-way access. An audio and video communication method based on a one-way access network comprises the steps that an inquiry terminal is set to be in an intranet environment and initiates a video inquiry invitation to a hospital information system through an intranet; the proxy server sends the media negotiation information of the inquiry end to a specified invited end through the Internet hospital system; the invited end creates a media negotiation message as a response and returns the media negotiation message to the inquiry end; the audio and video streams of the inquiry end are forwarded to the proxy server; the proxy server repackages the audio and video streams of the inquiry end and then forwards the audio and video streams to the invited end through the Internet hospital system; and the audio and video streams of the invited end are forwarded to the inquiry end through the Internet hospital system. According to the invention, convenient remote medical services can be provided, the security and privacy of the medical information system are satisfied, and the efficiency and quality of the medical services are improved at the same time.

Description

Technical Field

[0001] The present invention relates to the field of one-way access, and in particular to an audio and video communication method and system based on a one-way access network. Background Art

[0002] Video consultation is a convenient service provided by Internet hospitals. Through online video connection, remote medical consultation and diagnosis and treatment services between patients and doctors are realized, thereby broadening the coverage of medical services and improving medical efficiency. The existing video consultation system adopts a dual network card configuration to ensure the completion of medical services. The intranet network card is connected to the internal network of the medical institution and is responsible for key data interaction with the hospital information system, including sensitive medical operations such as doctor order entry, medical record writing, and image data review. The extranet network card is connected to the Internet and is specifically used to realize remote video consultation between doctors and patients, and real-time communication between the two parties through the online platform. The consultation computer using the dual network card solution can complete the diagnosis and treatment business by accessing the hospital information system on the Internet and the intranet at the same time, but this practice has certain security risks. 1. Since the physical isolation between the intranet and the extranet is broken, the intranet system may face direct attacks from the Internet, increasing the risk of data leakage and infection by malware; 2. If there are security vulnerabilities in the extranet connection part of the consultation computer, attackers may use these vulnerabilities to access the intranet, and then damage the hospital information system or steal sensitive information; 3. When processing medical data, if the consultation computer fails to effectively isolate the intranet and extranet data streams, sensitive medical information may be improperly accessed or mistransmitted to the Internet; 4. The complexity of maintaining the dual network card configuration may increase the probability of configuration errors, thereby inadvertently providing opportunities for the generation of security vulnerabilities. In view of the above-mentioned deficiencies in the prior art, it is necessary to provide a new video consultation method that can provide convenient remote medical services, meet the security and privacy of medical information systems, and improve the efficiency and quality of medical services. Therefore, the present invention designs an audio and video communication method based on a one-way access network to achieve the above content. Summary of the invention

[0003] The technical problem to be solved by the present invention is how to provide convenient remote medical services, meet the security and privacy of medical information systems, and improve the efficiency and quality of medical services. The purpose is to provide an audio and video communication method and system based on a one-way access network. By setting the consultation end in an intranet environment, the media negotiation process is realized through multi-level proxy forwarding, and audio and video streams are transmitted through a one-way network, the security problem caused by the dual network card configuration of the consultation end is solved.

[0004] The present invention is achieved through the following technical solutions:

[0005] An audio and video communication method based on a one-way access network, comprising:

[0006] The consultation terminal is set to be in the intranet environment, and initiates a video consultation invitation to the hospital information system through the intranet;

[0007] The proxy server sends the media negotiation information of the consultation terminal to the designated invited terminal through the Internet hospital system;

[0008] The invited end creates its own media negotiation message as a response and returns it to the inquiring end;

[0009] Forwarding the audio and video streams of the above consultation terminal to the above proxy server;

[0010] The proxy server repackages the audio and video streams of the consultation terminal and forwards them to the invited terminal through the Internet hospital system;

[0011] The audio and video stream of the invited end is forwarded to the consultation end through the Internet hospital system.

[0012] Among them, the consultation end and the invited end can be mobile terminals or computers. The consultation end accesses the hospital information system through the intranet, and the invited end is operated by the patient. The invited end can request access to the Internet hospital system and the hospital information system through an interface on the external network. The consultation end and the invited end can log in without logging in, or log in through authenticated identity information to enter the Internet hospital system for video consultation, and enter the hospital information system after the consultation to record the follow-up diagnosis and treatment.

[0013] The above-mentioned audio and video communication method based on a one-way access network includes:

[0014] The above consultation terminal is configured with an intranet network card to obtain the authority to access the above hospital information system through the intranet;

[0015] The invited party configures an external network card to obtain the authority to access the Internet hospital system and the hospital information system through the Internet.

[0016] The proxy server sends the media negotiation information of the consultation terminal to the designated invited terminal through the Internet hospital system, including:

[0017] The proxy server forwards the media negotiation information of the inquiry terminal to the designated port of the relay server;

[0018] The relay server forwards the media negotiation information of the consultation terminal to the signaling server of the Internet hospital system;

[0019] The signaling server sends the media negotiation information of the inquiring terminal to the invited terminal.

[0020] The proxy server repackages the audio and video streams of the consultation terminal and forwards them to the invited terminal through the Internet hospital system, including:

[0021] The proxy server transmits the repackaged audio and video stream of the consultation terminal to the relay server;

[0022] The relay server selects a port to bind the invited end so as to send the audio and video stream of the consultation end to the invited end through the Internet hospital system.

[0023] The above-mentioned forwarding of the audio and video stream of the invited terminal to the consultation terminal through the Internet hospital system includes:

[0024] The audio and video stream of the invited end is forwarded to the binding port of the relay server through the Internet hospital system;

[0025] The relay server forwards the audio and video stream of the invited end to the consultation end.

[0026] By configuring the gatekeeper, only the specified port of the relay server is allowed to access it.

[0027] The above-mentioned inquiry terminal and the above-mentioned proxy server, the above-mentioned invited terminal and the designated port of the above-mentioned relay server, and the above-mentioned inquiry terminal and the designated port of the above-mentioned relay server all communicate through the TURN service.

[0028] The designated ports of the above-mentioned Internet hospital system and the above-mentioned relay server communicate through the peer address.

[0029] After forwarding the audio and video stream of the invited end to the consultation end through the Internet hospital system, the consultation end also includes: the consultation end plays the audio and video stream of the invited end in real time.

[0030] An audio and video communication system based on a one-way access network, comprising:

[0031] Consultation invitation module: used for the consultation terminal to be set in the intranet environment and initiate a video consultation invitation to the hospital information system through the intranet;

[0032] Media negotiation module: used for the proxy server to send the media negotiation information of the above-mentioned consultation terminal to the designated invited terminal through the Internet hospital system;

[0033] Negotiation response module: used for the invited end to create its own media negotiation message as a response and return it to the inquiring end;

[0034] Video forwarding module: used to forward the audio and video streams of the above consultation terminal to the above proxy server;

[0035] Consultation video module: used for the proxy server to repackage the audio and video streams of the consultation terminal and forward them to the invited terminal through the Internet hospital system;

[0036] One-way video module: used to forward the audio and video stream of the invited end to the consultation end through the Internet hospital system.

[0037] Compared with the prior art, the present invention has the following advantages and beneficial effects:

[0038] The present invention initiates a video consultation invitation to a proxy server through a consultation terminal in an intranet state, and then conducts media negotiation with the invited terminal through an Internet hospital system; after the negotiation is completed, the proxy server forwards the audio and video streams of the consultation terminal to the invited terminal through the Internet hospital system, and at the same time, the audio and video streams of the invited terminal are also forwarded by the proxy server to the consultation terminal through the Internet hospital system. The present invention actively initiates a video consultation invitation by setting the consultation terminal in an intranet environment, and the Internet hospital system implements media negotiation through multi-layer proxy forwarding, while realizing that the audio and video data transmission of the entire consultation process between the consultation terminal and the invited terminal is completed under a unidirectional network condition, while meeting the security and privacy of the medical information system, providing convenient remote medical services, improving the efficiency and quality of medical services, and solving the problem that the security of the intranet is threatened by the external network due to the dual network card configuration of the consultation terminal. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the technical solutions of the exemplary embodiments of the present invention, the following briefly introduces the drawings required for use in the embodiments. It should be understood that the following drawings only illustrate certain embodiments of the present invention and should not be regarded as limiting the scope. For those of ordinary skill in the art, other relevant drawings can be obtained based on these drawings without creative work. In the drawings:

[0040] Figure 1 The present invention is a flowchart of an audio and video communication method based on a one-way access network according to an embodiment of the present invention. DETAILED DESCRIPTION

[0041] In order to make the objectives, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with embodiments and drawings. The exemplary embodiments of the present invention and their description are only used to explain the present invention and are not intended to limit the present invention.

[0042] Example

[0043] like Figure 1 As shown, the embodiment of the present application provides an audio and video communication method based on a one-way access network, including:

[0044] The consultation terminal is set to be in the intranet environment, and initiates a video consultation invitation to the hospital information system through the intranet;

[0045] The proxy server sends the media negotiation information of the consultation terminal to the designated invited terminal through the Internet hospital system;

[0046] The invited end creates its own media negotiation message as a response and returns it to the inquiring end;

[0047] Forwarding the audio and video streams of the above consultation terminal to the above proxy server;

[0048] The proxy server repackages the audio and video streams of the consultation terminal and forwards them to the invited terminal through the Internet hospital system;

[0049] The audio and video stream of the invited end is forwarded to the consultation end through the Internet hospital system.

[0050] The present invention initiates a video consultation invitation to a proxy server through a consultation terminal in an intranet state, and then conducts media negotiation with the invited terminal through an Internet hospital system; after the negotiation is completed, the proxy server forwards the audio and video streams of the consultation terminal to the invited terminal through the Internet hospital system, and at the same time, the audio and video streams of the invited terminal are also forwarded by the proxy server to the consultation terminal through the Internet hospital system. The present invention actively initiates a video consultation invitation by setting the consultation terminal in an intranet environment, and the Internet hospital system implements media negotiation through multi-layer proxy forwarding, while realizing that the audio and video data transmission of the entire consultation process between the consultation terminal and the invited terminal is completed under a unidirectional network condition, while meeting the security and privacy of the medical information system, providing convenient remote medical services, improving the efficiency and quality of medical services, and solving the problem that the security of the intranet is threatened by the external network due to the dual network card configuration of the consultation terminal.

[0051] The above-mentioned audio and video communication method based on a one-way access network includes:

[0052] The above consultation terminal is configured with an intranet network card to obtain the authority to access the above hospital information system through the intranet;

[0053] The invited party configures an external network card to obtain the authority to access the Internet hospital system and the hospital information system through the Internet.

[0054] Optionally, the invited doctor can perform the following operations: after the video consultation in the Internet hospital system is completed, he can log in to the internal hospital information system through single sign-on to perform follow-up diagnosis and treatment services, such as making a diagnosis, entering medical advice, and writing medical records.

[0055] The proxy server sends the media negotiation information of the consultation terminal to the designated invited terminal through the Internet hospital system, including:

[0056] The proxy server forwards the media negotiation information of the inquiry terminal to the designated port of the relay server;

[0057] The relay server forwards the media negotiation information of the consultation terminal to the signaling server of the Internet hospital system;

[0058] The signaling server sends the media negotiation information of the inquiring terminal to the invited terminal.

[0059] The proxy server repackages the audio and video streams of the consultation terminal and forwards them to the invited terminal through the Internet hospital system, including:

[0060] The proxy server transmits the repackaged audio and video stream of the consultation terminal to the relay server;

[0061] The relay server selects a port to bind the invited end so as to send the audio and video stream of the consultation end to the invited end through the Internet hospital system.

[0062] Forwarding the audio and video stream of the invited terminal to the consultation terminal through the Internet hospital system, including:

[0063] The audio and video stream of the invited end is forwarded to the binding port of the relay server through the Internet hospital system;

[0064] The relay server forwards the audio and video stream of the invited end to the consultation end.

[0065] By configuring the gatekeeper, only the specified port of the relay server is allowed to access it.

[0066] Among them, configure the network gate: only allow the proxy server IP to access the specific port of the relay server;

[0067] When the consulting end initiates a video consultation invitation, the media negotiation information is forwarded through the proxy server to the relay server mapped by the network gate, and then forwarded to the signaling server of the Internet hospital system through the relay server. The signaling server sends the media negotiation information of the consulting end to the invited end. After receiving it, the invited end can save it locally, and at the same time create its own media negotiation message as a response, and return it to the consulting end.

[0068] The above-mentioned inquiry terminal and the above-mentioned proxy server, the above-mentioned invited terminal and the designated port of the above-mentioned relay server, and the above-mentioned inquiry terminal and the designated port of the above-mentioned relay server all communicate through the TURN service.

[0069] The designated ports of the above-mentioned Internet hospital system and the above-mentioned relay server communicate through the peer address.

[0070] After forwarding the audio and video stream of the invited end to the consultation end through the Internet hospital system, the consultation end also includes: the consultation end plays the audio and video stream of the invited end in real time.

[0071] After the media negotiation is completed, the consultation end captures the audio and video streams. Because it is in the intranet environment at this time and cannot directly access the Internet hospital system through the external network, the audio and video streams are forwarded to the proxy server, which can be forwarded using the TURN protocol.

[0072] The proxy server can re-encapsulate the data packets of the audio and video streams through the network address translation technology, modify the source address and destination address of the data packets, and then transmit them to the relay server through the one-way network through the network gate. The TURN service running on the relay server selects a port to bind to the inviting party, then parses the data packets of the audio and video streams and forwards them to the invited party through the Internet hospital system.

[0073] The invited end also captures the local audio and video streams and transmits them to the Internet hospital system. The Internet hospital system forwards the audio and video streams to the above-mentioned bound port of the relay server through the peer address, and then the TRUN service forwards the audio and video streams to the called consultation end. The audio and video streams of the consultation end and the invited end are transmitted respectively through different ports of the relay server. When one or more users of a consultation end connect to the same designated invited end at different times, the one-way access network communication between the consultation end and the invited end is further isolated. In addition, when there are multiple consultation ends and designated invited ends, and different consultation ends are connected to their respective designated different invited ends at the same time, different invited ends can each select a bound port for video diagnosis and treatment, which further improves the security of the one-way access network.

[0074] In summary, the embodiments of the present application provide an audio and video communication method and system based on a one-way access network:

[0075] In the new video consultation method, the consultation end is in the intranet area, and all requests are actively initiated by the intranet to the internal hospital information system, and the entire consultation process is completed under unidirectional network conditions. In the further implementation process, the signaling server of the Internet hospital system realizes the media negotiation process through multi-layer proxy forwarding, and the audio and video data are first encapsulated through the network address conversion package, and then transmitted to the video platform through the TURN protocol relay. The present invention effectively avoids the risk of the intranet system being directly exposed to the Internet by placing the consultation end in the intranet area and adopting a unidirectional network communication method. The isolation of the intranet and the extranet is also realized through multi-layer proxy, thereby reducing the possibility of attacks and data leakage from the Internet; and, in a further embodiment, the isolation of the intranet and the extranet is strengthened by configuring the designated port through the network gate. The present invention adopts a multi-layer proxy forwarding method to solve the transmission problem of audio and video data in the intranet environment, and realizes remote video consultation without directly accessing the extranet. And, in a further embodiment, data transmission in the intranet environment is realized through TURN protocol relay transmission. Compared with the dual network card configuration, the one-way network communication only transmits audio and video streams through the designated consultation end and proxy server, without the need for additional network switching settings or configuration changes on the consultation end.

[0076] The specific implementation methods described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. An audio and video communication method based on a one-way access network, characterized in that: include: The consultation terminal is set to be in the intranet environment, and initiates a video consultation invitation to the hospital information system through the intranet; The proxy server sends the media negotiation information of the consultation terminal to the designated invited terminal through the Internet hospital system; The invited end creates its own media negotiation message as a response and returns it to the inquiring end; Forwarding the audio and video streams of the consultation terminal to the proxy server; The proxy server repackages the audio and video streams of the consultation terminal and forwards them to the invited terminal through the Internet hospital system; The audio and video stream of the invited end is forwarded to the consultation end through the Internet hospital system.

2. The method for audio and video communication based on a one-way access network according to claim 1, characterized in that: include: The consultation terminal is configured with an intranet card to obtain the authority to access the hospital information system through the intranet; The invited end configures an external network card to obtain the authority to access the Internet hospital system and the hospital information system through the Internet.

3. The method for audio and video communication based on a one-way access network according to claim 1, characterized in that: The proxy server sends the media negotiation information of the consultation terminal to the designated invited terminal through the Internet hospital system, including: The proxy server forwards the media negotiation information of the inquiry terminal to a designated port of the relay server; The relay server forwards the media negotiation information of the consultation terminal to the signaling server of the Internet hospital system; The signaling server sends the media negotiation information of the inquiring terminal to the invited terminal.

4. The method for audio and video communication based on a one-way access network according to claim 3, characterized in that: The proxy server repackages the audio and video streams of the consultation terminal and forwards them to the invited terminal through the Internet hospital system, including: The proxy server transmits the repackaged audio and video stream of the consultation terminal to the relay server; The relay server selects a port to bind the invited end, so as to send the audio and video stream of the consultation end to the invited end through the Internet hospital system.

5. The method for audio and video communication based on a one-way access network according to claim 4, characterized in that: The step of forwarding the audio and video stream of the invited terminal to the consultation terminal through the Internet hospital system includes: The audio and video stream of the invited end is forwarded to the binding port of the relay server through the Internet hospital system; The relay server forwards the audio and video streams of the invited end to the consultation end.

6. The method for audio and video communication based on a one-way access network according to claim 5, characterized in that: By configuring the gatekeeper, only the proxy server is allowed to access the specified port of the relay server.

7. The method for audio and video communication based on a one-way access network according to claim 5, characterized in that: The inquiry terminal and the proxy server, the invited terminal and the designated port of the relay server, and the inquiry terminal and the designated port of the relay server all communicate through the TURN service.

8. The method for audio and video communication based on a one-way access network according to claim 5, characterized in that: The Internet hospital system and the designated port of the relay server communicate via the peer address.

9. The method for audio and video communication based on a one-way access network according to claim 1, characterized in that: After forwarding the audio and video stream of the invited end to the consultation end through the Internet hospital system, it also includes: the consultation end plays the audio and video stream of the invited end in real time.

10. An audio and video communication system based on a one-way access network, characterized in that: include: Consultation invitation module: used for the consultation terminal to be set in the intranet environment and initiate a video consultation invitation to the hospital information system through the intranet; Media negotiation module: used for the proxy server to send the media negotiation information of the consultation terminal to the designated invited terminal through the Internet hospital system; Negotiation response module: used for the invited end to create its own media negotiation message as a response and return it to the inquiring end; Video forwarding module: used for forwarding the audio and video streams of the consultation terminal to the proxy server; Consultation video module: used for the proxy server to repackage the audio and video stream of the consultation terminal and forward it to the invited terminal through the Internet hospital system; One-way video module: used to forward the audio and video stream of the invited end to the consultation end through the Internet hospital system.

Images