Communication system and networking method for communication system

Abstract

The invention discloses a communication system and a networking method for the communication system, and relates to the technical field of communication. The system comprises a network delay optimization module for optimizing and managing the network delay of the communication system; the fault self-checking and redundancy design module is used for carrying out fault detection and redundancy design on a network link of the communication system; the data protection and access control module is used for carrying out data encryption on network data of the communication system and carrying out access control and identity verification on a network access user; and the comprehensive optimization management module is used for dynamically scheduling and intelligently distributing network resources of the communication system. The real-time performance, reliability and safety of the communication system are effectively improved through the comprehensive action of network delay optimization, fault self-inspection and redundancy design, data protection and access control and comprehensive optimization management, and it is ensured that the communication system stably operates in various complex and high-requirement environments.

Description

Technical Field

[0001] The present invention belongs to the field of communication technology, and in particular relates to a communication system and a networking method for the communication system. Background Art

[0002] A communication system refers to a collection of technologies and facilities used to transmit information between different devices, terminals or users. It consists of communication equipment, transmission media, network protocols, data processing units, etc., and is designed to ensure that information can be transmitted efficiently and reliably between various nodes. Communication systems can include wired or wireless technologies, such as telephone networks, the Internet, satellite communications, radio communications, etc., and are widely used in daily life, industry, military, medical and other fields.

[0003] Existing communication systems are usually a combination of wired and wireless, but in general, the application of wired communication systems is closer to infrastructure, while the application of wireless communication systems is more extensive and diversified. It can be seen that the existing communication systems are also mainly based on the problems of wireless communication systems. For example, with the increase of data traffic, there will be security issues such as bandwidth resource limitations, signal interference in network transmission, network congestion, and network information leakage or tampering. Therefore, there is an urgent need for a communication system that can solve real-time problems such as delays and interference while still ensuring the security and reliability of the network system. Summary of the invention

[0004] The object of the present invention is to provide a communication system and a networking method for the communication system, which can be implemented by the following technical solutions: In a first aspect, an embodiment of the present application provides a communication system, including: Network delay optimization module, used to optimize and manage the network delay of the communication system; A fault self-checking and redundancy design module, used for performing fault detection and redundancy design on the network link of the communication system; A data protection and access control module, used to encrypt the network data of the communication system and perform access control and identity authentication on network access users; A comprehensive optimization management module for dynamically scheduling and intelligently allocating network resources of the communication system; Wherein, the network delay optimization module includes: The transmission protocol configuration unit is used to configure different transmission protocols and network architectures for different network structure layers, including: Configure the QUIC protocol or WebRTC architecture in the application layer; Configure SD-WAN architecture in the network layer; Configure the UDP protocol or QUIC protocol in the transport layer; The transmission priority control unit uses the traffic priority management mechanism and the traffic control mechanism to coordinate and manage the traffic during the data transmission process; Edge computing unit, used to set up edge nodes and perform data caching and data processing; The load balancing unit uses intelligent traffic scheduling technology and load balancer to balance service requests between multiple different loads; The routing path control unit adopts dynamic routing technology and adjusts the routing path according to network traffic and real-time network status.

[0005] Preferably, the use of a traffic priority management mechanism and a traffic control mechanism to coordinately regulate and manage traffic during data transmission specifically includes: Module 1: Use the traffic priority management mechanism to prioritize and schedule different types of traffic, including: Traffic classification: Classify traffic according to its type, protocol or application requirements; Traffic marking: Use traffic marking methods to mark different priorities for classified traffic; Traffic scheduling: Queue and schedule traffic according to different traffic priorities; Module 2: Use flow control mechanisms to monitor and control flow, including: Window control: Use sliding window mechanism to dynamically control the sending rate of data sender; Congestion control: When network congestion occurs, different congestion control strategies are adopted according to the priority of traffic; Traffic shaping: setting bandwidth cap and traffic quota as network bandwidth limit, and adjusting the sending rate of data packets through traffic shaping algorithm so that the traffic meets the network bandwidth limit; wherein, the traffic shaping algorithm includes token bucket algorithm and leaky bucket algorithm; Traffic monitoring: Monitor traffic transmission in real time and make adaptive adjustments based on current network conditions.

[0006] Preferably, the intelligent traffic scheduling technology and the load balancer are used to balance the service requests between multiple different loads, specifically including: Through intelligent traffic scheduling algorithms, traffic distribution strategies are adjusted according to real-time network conditions, request types, and load conditions; The intelligent traffic scheduler identifies traffic priority, latency requirements, and bandwidth requirements, and dynamically adjusts the traffic delivery path in combination with the load balancing algorithm of the load balancer.

[0007] Preferably, the dynamic routing technology is used to adjust the routing path according to the network traffic and the real-time network status, specifically including: Monitor the performance indicators of the communication system network in real time under real-time data transmission conditions to obtain the current network status and current network traffic; Performing abnormal analysis on the current network status and the current network traffic; Select dynamic routing protocols and path algorithms to calculate the optimal routing path based on anomaly analysis results; The current routing path is dynamically adjusted based on the optimal routing path.

[0008] Preferably, the fault self-checking and redundancy design module includes: A fault self-checking unit is used to perform real-time fault detection on network nodes using a fault detection mechanism. If a fault is detected, the network is repaired and a detection and repair record is generated; Redundancy design unit, used for data backup and distributed storage of network data; also used for establishing multiple network links and routing paths and dynamically switching based on fault detection results; The fault detection mechanism includes Ping detection, path tracing detection and link quality detection.

[0009] Preferably, the data protection and access control module includes: A data protection unit, used for screening communication information in the system network and encrypting the communication information; An access control unit, which is used to authenticate users who access the system network and manage their access rights based on their identities; Wherein, the communication information is encrypted using a first encryption method and a second encryption method.

[0010] Preferably, the first encryption method includes: Obtaining an IP address of an information receiving end and an IP address of an information sending end of network communication information to be encrypted, and constructing a transceiver matrix according to the IP address of the information receiving end and the IP address of the information sending end, wherein the number of elements of the transceiver matrix is ​​a preset value; Obtaining a name of a coding method for the network communication information to be encrypted, and determining a coding value according to the name of the coding method; Obtaining the information length of the network communication information to be encrypted, and determining a rotation value according to the information length and the encoding value, wherein the number of bits of the rotation value is a set value; Acquire the sending time of the network communication information to be encrypted, and construct a convolution kernel according to the sending time and the rotation value; Using the convolution kernel to perform a convolution operation on the transceiver matrix to obtain a key matrix, and expanding the element values ​​in the key matrix according to a set rule to obtain an encryption key; The network communication information to be encrypted is encrypted using the encryption key to obtain an encrypted ciphertext, and the encrypted ciphertext is transmitted.

[0011] Preferably, the second encryption method includes: The information receiving end sends an encryption negotiation request to the information sending end to start the encryption negotiation; The information receiving end and the information sending end generate initial symmetric keys respectively through an asymmetric encryption interaction to complete encryption negotiation; The information sending end encrypts the data packet using the initial symmetric key to obtain an encrypted data packet, and updates the initial symmetric key using a predetermined algorithm, and uses the updated initial symmetric key as the symmetric key for the next encryption, and the information sending end sends the encrypted data packet to the information receiving end; The information receiving end uses the initial symmetric key to decrypt the encrypted data packet, and uses the same predetermined algorithm to update the initial symmetric key, and uses the updated initial symmetric key as the symmetric key for the next decryption; The information receiving end and the information sending end use the transmission control protocol TCP to transmit data packets, so as to ensure that for the same data packet, the symmetric key used by the information sending end for encryption is the same as the symmetric key used by the information receiving end for decryption; or The encrypted data packet sent by the information sending end to the information receiving end carries a data packet indication mark to ensure that for the same data packet, the symmetric key used by the information sending end for encryption and the symmetric key used by the information receiving end for decryption are the same.

[0012] Preferably, the initial symmetric key includes an initial one-dimensional array, and the predetermined algorithm is: Changing the positions of elements in the initial one-dimensional array according to a predetermined rule to obtain an updated one-dimensional array; The updated one-dimensional array and the initial one-dimensional array are XORed to obtain a symmetric key for the next encryption or a symmetric key for the next decryption.

[0013] In a second aspect, an embodiment of the present application provides a networking method for a communication system, wherein the communication system is the communication system as described above, and the networking method comprises the following steps: Network delay optimization: Optimize and manage the network delay of the communication system; Fault self-detection and redundancy design: perform fault detection and redundancy design on the network lines of the communication system; Data protection and access control: encrypt the network data of the communication system, and perform access control and identity authentication on network access users; Comprehensive optimization management: dynamic scheduling and intelligent allocation of network resources of the communication system.

[0014] The beneficial effects of the present invention are as follows: the present invention optimizes and manages network delays through a network delay optimization module, performs fault detection and redundant design on network lines through a fault self-detection and redundant design module, encrypts network data and performs access control and identity authentication on network access users through a data protection and access control module, and dynamically schedules and intelligently allocates network resources of a communication system through a comprehensive optimization management module. Through the combined effects of the above modules, the real-time, reliability and security of the communication system are effectively improved, ensuring stable operation of the system in various complex and high-demand environments. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] For better understanding and implementation, the technical solution of the present application is described in detail below with reference to the accompanying drawings.

[0016] Figure 1 A schematic diagram of the structure of a communication system provided in an embodiment of the present application; Figure 2 A schematic diagram of the structure of a network delay optimization module provided in an embodiment of the present application; Figure 3 A flowchart of the steps of the second encryption method provided in an embodiment of the present application; Figure 4 A flowchart of a method for networking a communication system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0017] In order to further explain the technical means and effects taken by the present invention to achieve the predetermined invention purpose, exemplary embodiments will be described in detail here, and examples thereof are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are only examples of methods and systems consistent with some aspects of the present application as detailed in the attached claims.

[0018] The terms used in this application are only for the purpose of describing specific embodiments and are not intended to limit this application. The singular forms of "a", "said" and "the" used in this application and the appended claims are also intended to include plural forms unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used in this article refers to any or all possible combinations of one or more associated listed items.

[0019] The specific implementation methods, features and effects of the present invention are described in detail below in conjunction with the accompanying drawings and preferred embodiments.

[0020] Example 1 See also Figure 1 , an embodiment of the present application provides a communication system, including: Network delay optimization module, used to optimize and manage the network delay of the communication system; A fault self-checking and redundancy design module, used for performing fault detection and redundancy design on the network link of the communication system; A data protection and access control module, used to encrypt the network data of the communication system and perform access control and identity authentication on network access users; The comprehensive optimization management module is used for dynamically scheduling and intelligently allocating the network resources of the communication system.

[0021] Specifically, since the communication system in the prior art may face various problems such as network delay, interference, congestion, failure, data tampering or loss, in order to ensure the real-time, security and reliability of the communication system network, the present application provides an improved communication system, which optimizes and manages the network delay through a network delay optimization module, performs fault detection and redundant design on the network link through a fault self-detection and redundant design module, encrypts network data and performs access control and identity authentication on network access users through a data protection and access control module, and dynamically schedules and intelligently allocates the network resources of the communication system through a comprehensive optimization management module. Through the combined effect of the above modules, the real-time, reliability and security of the communication system are effectively improved, ensuring the stable operation of the system in various complex and high-demand environments.

[0022] like Figure 2 As shown, in one embodiment provided in the present application, the network delay optimization module includes: A transmission protocol configuration unit, used to configure different transmission protocols and network architectures for different network structure layers; The transmission priority control unit uses the traffic priority management mechanism and the traffic control mechanism to coordinate and manage the traffic during the data transmission process; Edge computing unit, used to set up edge nodes and perform data caching and data processing; The load balancing unit uses intelligent traffic scheduling technology and load balancer to balance service requests between multiple different loads; The routing path control unit uses dynamic routing technology and adjusts the routing path according to network traffic and real-time network status; The configuration of different transmission protocols and network architectures for different network structure layers specifically includes: Configure the QUIC protocol or WebRTC architecture in the application layer; Configure SD-WAN architecture in the network layer; Configure the UDP protocol or QUIC protocol in the transport layer.

[0023] Specifically, the network delay optimization module of this embodiment is mainly aimed at the real-time performance of the communication system. It processes and regulates network delays by configuring multiple protocols and utilizing technologies such as edge computing and intelligent routing, and improves the real-time performance of the communication system by reducing network delays. Specifically, it includes: configuring different transmission protocols and network architectures for different network structure layers through a transmission protocol configuration unit, such as: configuring the QUIC protocol or the WebRTC architecture in the application layer; configuring the SD-WAN architecture in the network layer; configuring the UDP protocol or the QUIC protocol in the transport layer; using the transmission priority control unit to coordinately regulate and manage the traffic in the data transmission process using the traffic priority management mechanism and the traffic control mechanism; setting edge nodes and performing data caching and data processing through the edge computing unit; using the load balancing unit to use intelligent traffic scheduling technology and a load balancer to balance service requests between multiple different loads; using the routing path control unit to use dynamic routing technology and adjust the routing path according to network traffic and the real-time status of the network.

[0024] It should be noted that the QUIC protocol is a transport layer network protocol based on UDP (User Datagram Protocol). It improves network performance by optimizing connection establishment and congestion control, especially in unstable network or high latency conditions, and can provide better performance; WebRTC (Web Real-Time Communication) is a technology that enables real-time audio and video communication and data sharing between browsers; SD-WAN (Software-Defined Wide Area Network) is a wide area network architecture based on software-defined networking (SDN) technology. It manages network connections distributed in different locations through centralized control and virtualization, and can manage and optimize wide area network traffic more flexibly and efficiently, while reducing costs and improving network reliability and security.

[0025] In an embodiment provided in the present application, the use of a traffic priority management mechanism and a traffic control mechanism to coordinately regulate and manage traffic during data transmission specifically includes: Module 1: Use the traffic priority management mechanism to prioritize and schedule different types of traffic, including: Traffic classification: Classify traffic according to its type, protocol or application requirements; Traffic marking: Use traffic marking methods to mark different priorities for classified traffic; Traffic scheduling: Queue and schedule traffic according to different traffic priorities; Module 2: Use flow control mechanisms to monitor and control flow, including: Window control: Use sliding window mechanism to dynamically control the sending rate of data sender; Congestion control: When network congestion occurs, different congestion control strategies are adopted according to the priority of traffic; Traffic shaping: setting bandwidth cap and traffic quota as network bandwidth limit, and adjusting the sending rate of data packets through traffic shaping algorithm so that the traffic meets the network bandwidth limit; wherein, the traffic shaping algorithm includes token bucket algorithm and leaky bucket algorithm; Traffic monitoring: Monitor traffic transmission in real time and make adaptive adjustments based on current network conditions.

[0026] Specifically, this embodiment uses a traffic priority management mechanism and a traffic control mechanism to regulate the priority of data transmission, with the aim of ensuring that key traffic in the network is given priority, while avoiding network congestion and ensuring the reasonable allocation of network resources. The traffic priority management mechanism classifies and schedules different types of data streams to ensure that high-priority data can be transmitted preferentially in the network, especially in the case of limited bandwidth or network congestion; the purpose of the traffic control mechanism is to prevent packet loss, excessive delay or network congestion due to insufficient processing capacity of the receiver or network bandwidth bottleneck during data transmission; the traffic control mechanism can be negotiated between the sender and the receiver to adapt to the actual situation of the network. In order to ensure that data transmission in the network has both reasonable priority allocation and effective traffic control, the traffic priority management mechanism and the traffic control mechanism need to work together. Therefore, this comprehensive regulation mechanism not only improves the utilization rate of network resources, but also ensures the priority processing of key applications and services, and ensures the stability and efficiency of the communication system network.

[0027] In an embodiment provided in the present application, the use of intelligent traffic scheduling technology and a load balancer to balance service requests between multiple different loads specifically includes: Through intelligent traffic scheduling algorithms, traffic distribution strategies are adjusted according to real-time network conditions, request types, and load conditions; The intelligent traffic scheduler identifies traffic priority, latency requirements, and bandwidth requirements, and dynamically adjusts the traffic delivery path in combination with the load balancing algorithm of the load balancer.

[0028] Specifically, this embodiment uses intelligent traffic scheduling technology and load balancer to balance service requests between multiple different loads, which is the key to ensure efficient and stable operation of the system, optimize resource utilization, avoid overload of a certain node and improve response speed. Intelligent traffic scheduling technology combines multiple factors such as network status, service request characteristics and system load to dynamically determine how to allocate requests to each node. Through the intelligent traffic scheduling algorithm, the traffic allocation strategy is adjusted according to the real-time network conditions, request type and load status to ensure that requests for different services can get reasonable resource support, thereby achieving optimal resource allocation; the load balancer can identify service requests such as traffic priority, delay requirements, bandwidth requirements, etc., and dynamically adjust the traffic transmission path in combination with the load balancer algorithm to ensure that the load flow of each path or node is within a reasonable range. For example, high-priority requests can be allocated to nodes with stronger performance or better network conditions to avoid single-point overload, thereby improving the scalability and reliability of the system. Through the collaborative work of intelligent traffic scheduling and load balancing, high-priority requests can be processed in a timely manner, low-priority requests can be processed in the background, and efficient use of resources can be guaranteed. The traffic path can also be quickly adjusted when a service node fails to ensure that the user experience is not affected and avoid the occurrence of single point failures.

[0029] In an embodiment provided in the present application, the dynamic routing technology is used to adjust the routing path according to the network traffic and the real-time network status, specifically including: Monitor the performance indicators of the communication system network in real time under real-time data transmission conditions to obtain the current network status and current network traffic; Performing abnormal analysis on the current network status and the current network traffic; Select dynamic routing protocols and path algorithms to calculate the optimal routing path based on anomaly analysis results; The current routing path is dynamically adjusted based on the optimal routing path.

[0030] Specifically, this embodiment adopts dynamic routing technology and adjusts the routing path according to network traffic and real-time status, aiming to dynamically optimize the forwarding path of data packets according to changes in the network, thereby improving the performance, reliability and scalability of the network. Dynamic routing technology uses algorithms to adjust the routing path of data flows in real time according to the network status, topology and traffic load, ensuring that the network can be adaptively adjusted according to actual conditions, reducing data transmission delays, and effectively responding to traffic changes and network congestion.

[0031] In an embodiment provided in the present application, the fault self-detection and redundancy design module includes: A fault self-checking unit is used to perform real-time fault detection on network nodes using a fault detection mechanism. If a fault is detected, the network is repaired and a detection and repair record is generated; Redundancy design unit, used for data backup and distributed storage of network data; also used for establishing multiple network links and routing paths and dynamically switching based on fault detection results; The fault detection mechanism includes Ping detection, path tracing detection and link quality detection.

[0032] Specifically, the fault detection and redundancy design of this embodiment can ensure that the network has high availability and reliability. Through a reasonable detection mechanism and redundancy design, the network interruption time can be minimized to ensure that the service can be maintained without interruption when a fault occurs. The purpose of fault detection is to promptly discover problems in the network, quickly locate the source of the fault and take effective recovery measures; the goal of redundancy design is to ensure that when a fault occurs, the network can automatically switch to a backup path or device to ensure service continuity and high network availability.

[0033] In an embodiment provided in the present application, the data protection and access control module includes: A data protection unit, used for screening communication information in the system network and encrypting the communication information; An access control unit, which is used to authenticate users who access the system network and manage their access rights based on their identities; Wherein, the communication information is encrypted using a first encryption method and a second encryption method.

[0034] Specifically, this embodiment encrypts the network data of the communication system through the data protection and access control module, and performs access control and identity authentication on network access users, thereby ensuring the security, privacy and data integrity of the communication system, effectively improving the security of the communication system, and preventing data leakage, tampering and unauthorized access.

[0035] In an embodiment provided in the present application, the first encryption method includes: Obtaining an IP address of an information receiving end and an IP address of an information sending end of network communication information to be encrypted, and constructing a transceiver matrix according to the IP address of the information receiving end and the IP address of the information sending end, wherein the number of elements of the transceiver matrix is ​​a preset value; Obtaining a name of a coding method for the network communication information to be encrypted, and determining a coding value according to the name of the coding method; Obtaining the information length of the network communication information to be encrypted, and determining a rotation value according to the information length and the encoding value, wherein the number of bits of the rotation value is a set value; Acquire the sending time of the network communication information to be encrypted, and construct a convolution kernel according to the sending time and the rotation value; Using the convolution kernel to perform a convolution operation on the transceiver matrix to obtain a key matrix, and expanding the element values ​​in the key matrix according to a set rule to obtain an encryption key; The network communication information to be encrypted is encrypted using the encryption key to obtain an encrypted ciphertext, and the encrypted ciphertext is transmitted.

[0036] Specifically, the first encryption method of this embodiment adaptively generates an encryption key by combining the information of the network communication information to be encrypted, and combining the IP address of the sender and receiver and the sending time. There is no need to obtain the encryption key through network negotiation, which enhances the security of the key and makes network communication information more secure.

[0037] like Figure 3 As shown, in an embodiment provided in the present application, the second encryption method includes: The information receiving end sends an encryption negotiation request to the information sending end to start the encryption negotiation; The information receiving end and the information sending end generate initial symmetric keys respectively through an asymmetric encryption interaction to complete encryption negotiation; The information sending end encrypts the data packet using the initial symmetric key to obtain an encrypted data packet, and updates the initial symmetric key using a predetermined algorithm, and uses the updated initial symmetric key as the symmetric key for the next encryption, and the information sending end sends the encrypted data packet to the information receiving end; The information receiving end uses the initial symmetric key to decrypt the encrypted data packet, and uses the same predetermined algorithm to update the initial symmetric key, and uses the updated initial symmetric key as the symmetric key for the next decryption; The information receiving end and the information sending end use the transmission control protocol TCP to transmit data packets, so as to ensure that for the same data packet, the symmetric key used by the information sending end for encryption is the same as the symmetric key used by the information receiving end for decryption; or The encrypted data packet sent by the information sending end to the information receiving end carries a data packet indication mark to ensure that for the same data packet, the symmetric key used by the information sending end for encryption and the symmetric key used by the information receiving end for decryption are the same.

[0038] In an embodiment provided in the present application, the initial symmetric key includes an initial one-dimensional array, and the predetermined algorithm is: Changing the positions of elements in the initial one-dimensional array according to a predetermined rule to obtain an updated one-dimensional array; The updated one-dimensional array and the initial one-dimensional array are XORed to obtain a symmetric key for the next encryption or a symmetric key for the next decryption.

[0039] Specifically, the second encryption method of this embodiment generates an initial symmetric key through a more secure encryption negotiation process, and then executes an encrypted communication process for the data packet. Although this communication process uses an interactive mechanism of symmetric encryption, it can continuously and dynamically update the symmetric keys of the communicating parties during the encrypted communication process, thereby ensuring the security of network communications.

[0040] Example 2 See also Figure 4 The embodiment of the present application provides a networking method for a communication system, wherein the communication system is the communication system as described above, and the networking method comprises the following steps: Network delay optimization: Optimize and manage the network delay of the communication system; Fault self-detection and redundancy design: perform fault detection and redundancy design on the network links of the communication system; Data protection and access control: encrypt the network data of the communication system, and perform access control and identity authentication on network access users; Comprehensive optimization management: dynamic scheduling and intelligent allocation of network resources of the communication system.

[0041] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0042] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0043] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0044] The above description is only a preferred embodiment of the present invention and does not limit the present invention in any form. Although the present invention has been disclosed as a preferred embodiment as above, it is not used to limit the present invention. Any technical personnel in this field can make some changes or modify the technical contents disclosed above into equivalent embodiments without departing from the scope of the technical solution of the present invention. However, any simple modification, equivalent change and modification made to the above embodiments according to the technical essence of the present invention without departing from the content of the technical solution of the present invention still fall within the scope of the technical solution of the present invention.

Claims

1. A communication system, characterized in that: include: Network delay optimization module, used to optimize and manage the network delay of the communication system; A fault self-checking and redundancy design module, used for performing fault detection and redundancy design on the network link of the communication system; A data protection and access control module, used to encrypt the network data of the communication system and perform access control and identity authentication on network access users; A comprehensive optimization management module for dynamically scheduling and intelligently allocating network resources of the communication system; Wherein, the network delay optimization module includes: The transmission protocol configuration unit is used to configure different transmission protocols and network architectures for different network structure layers, including: Configure the QUIC protocol or WebRTC architecture in the application layer; Configure SD-WAN architecture in the network layer; Configure the UDP protocol or QUIC protocol in the transport layer; The transmission priority control unit uses the traffic priority management mechanism and the traffic control mechanism to coordinate and manage the traffic during the data transmission process; Edge computing unit, used to set up edge nodes and perform data caching and data processing; The load balancing unit uses intelligent traffic scheduling technology and load balancer to balance service requests between multiple different loads; The routing path control unit adopts dynamic routing technology and adjusts the routing path according to network traffic and real-time network status.

2. The communication system according to claim 1, characterized in that: The use of the traffic priority management mechanism and the traffic control mechanism to coordinately regulate and manage the traffic during data transmission specifically includes: Module 1: Use the traffic priority management mechanism to prioritize and schedule different types of traffic, including: Traffic classification: Classify traffic according to its type, protocol or application requirements; Traffic marking: Use traffic marking methods to mark different priorities for classified traffic; Traffic scheduling: Queue and schedule traffic according to different traffic priorities; Module 2: Use flow control mechanisms to monitor and control flow, including: Window control: Use sliding window mechanism to dynamically control the sending rate of data sender; Congestion control: When network congestion occurs, different congestion control strategies are adopted according to the priority of traffic; Traffic shaping: setting bandwidth cap and traffic quota as network bandwidth limit, and adjusting the sending rate of data packets through traffic shaping algorithm so that the traffic meets the network bandwidth limit; wherein, the traffic shaping algorithm includes token bucket algorithm and leaky bucket algorithm; Traffic monitoring: Monitor traffic transmission in real time and make adaptive adjustments based on current network conditions.

3. The communication system according to claim 1, characterized in that: The use of intelligent traffic scheduling technology and load balancer to balance service requests between multiple different loads specifically includes: Through intelligent traffic scheduling algorithms, traffic distribution strategies are adjusted according to real-time network conditions, request types, and load conditions; The intelligent traffic scheduler identifies traffic priority, latency requirements, and bandwidth requirements, and dynamically adjusts the traffic delivery path in combination with the load balancing algorithm of the load balancer.

4. The communication system according to claim 1, characterized in that: The dynamic routing technology is used to adjust the routing path according to the network traffic and the real-time network status, specifically including: Monitor the performance indicators of the communication system network in real time under real-time data transmission conditions to obtain the current network status and current network traffic; Performing abnormal analysis on the current network status and the current network traffic; Select dynamic routing protocols and path algorithms to calculate the optimal routing path based on anomaly analysis results; The current routing path is dynamically adjusted based on the optimal routing path.

5. The communication system according to claim 1, characterized in that: The fault self-checking and redundancy design module includes: A fault self-checking unit is used to perform real-time fault detection on network nodes using a fault detection mechanism. If a fault is detected, the network is repaired and a detection and repair record is generated; Redundancy design unit, used for data backup and distributed storage of network data; also used for establishing multiple network links and routing paths and dynamically switching based on fault detection results; The fault detection mechanism includes Ping detection, path tracing detection and link quality detection.

6. The communication system according to claim 1, characterized in that: The data protection and access control module includes: A data protection unit, used for screening communication information in the system network and encrypting the communication information; An access control unit, which is used to authenticate users who access the system network and manage their access rights based on their identities; Wherein, the communication information is encrypted using a first encryption method and a second encryption method.

7. The communication system according to claim 6, characterized in that: The first encryption method includes: Obtaining an IP address of an information receiving end and an IP address of an information sending end of network communication information to be encrypted, and constructing a transceiver matrix according to the IP address of the information receiving end and the IP address of the information sending end, wherein the number of elements of the transceiver matrix is ​​a preset value; Obtaining a name of a coding method for the network communication information to be encrypted, and determining a coding value according to the name of the coding method; Obtaining the information length of the network communication information to be encrypted, and determining a rotation value according to the information length and the encoding value, wherein the number of bits of the rotation value is a set value; Acquire the sending time of the network communication information to be encrypted, and construct a convolution kernel according to the sending time and the rotation value; Using the convolution kernel to perform a convolution operation on the transceiver matrix to obtain a key matrix, and expanding the element values ​​in the key matrix according to a set rule to obtain an encryption key; The network communication information to be encrypted is encrypted using the encryption key to obtain an encrypted ciphertext, and the encrypted ciphertext is transmitted.

8. The communication system according to claim 6, characterized in that: The second encryption method includes: The information receiving end sends an encryption negotiation request to the information sending end to start the encryption negotiation; The information receiving end and the information sending end generate initial symmetric keys respectively through an asymmetric encryption interaction to complete encryption negotiation; The information sending end encrypts the data packet using the initial symmetric key to obtain an encrypted data packet, and updates the initial symmetric key using a predetermined algorithm, and uses the updated initial symmetric key as the symmetric key for the next encryption, and the information sending end sends the encrypted data packet to the information receiving end; The information receiving end uses the initial symmetric key to decrypt the encrypted data packet, and uses the same predetermined algorithm to update the initial symmetric key, and uses the updated initial symmetric key as the symmetric key for the next decryption; The information receiving end and the information sending end use the transmission control protocol TCP to transmit data packets, so as to ensure that for the same data packet, the symmetric key used by the information sending end for encryption is the same as the symmetric key used by the information receiving end for decryption; or The encrypted data packet sent by the information sending end to the information receiving end carries a data packet indication mark to ensure that for the same data packet, the symmetric key used by the information sending end for encryption and the symmetric key used by the information receiving end for decryption are the same.

9. The communication system according to claim 8, characterized in that: The initial symmetric key includes an initial one-dimensional array, and the predetermined algorithm is: Changing the positions of elements in the initial one-dimensional array according to a predetermined rule to obtain an updated one-dimensional array; The updated one-dimensional array and the initial one-dimensional array are XORed to obtain a symmetric key for the next encryption or a symmetric key for the next decryption.

10. A networking method for a communication system, characterized in that: The communication system is the communication system according to any one of claims 1 to 9, and the networking method comprises the following steps: Network delay optimization: Optimize and manage the network delay of the communication system; Fault self-detection and redundancy design: perform fault detection and redundancy design on the network lines of the communication system; Data protection and access control: encrypt the network data of the communication system, and perform access control and identity authentication on network access users; Comprehensive optimization management: dynamic scheduling and intelligent allocation of network resources of the communication system.

Images