Edge computing proxy method and device, wireless access system, equipment and medium

Abstract

The invention provides an edge computing proxy method and device, a wireless access system, equipment and a medium. The wireless access system comprises an application identification module and a mobile edge computing (MEC) proxy module, and the application identification module is used for receiving all client messages from a client, identifying application messages in all the client messages and forwarding the application messages to the MEC proxy module; and the MEC proxy module is used for performing edge computing proxy on the application message so as to cache a target message in the application message to the MEC cache server. The problem of data leakage caused by the fact that the terminal communicates with the external cloud server through the Wlan network in the prior art can be solved, and the technical effect of improving information security is achieved.

Description

Technical Field

[0001] The present application relates to wireless local area network technology, and in particular to an edge computing proxy method, apparatus, wireless access system, equipment and medium. Background Art

[0002] The current mainstream wireless local area network Wlan is Figure 1 As shown, it is composed of a wireless controller (English: Access Control, abbreviated as AC) and an access point (English: Access Point, abbreviated as AP), for example, Figure 1 The WLAN network composed of AP1 and AP2, client 1 and client 2 are connected to the Internet through the WLAN network to communicate with the external cloud server. The current technical problems are:

[0003] 1. The Wlan network is used as a data pipeline, and all data is transmitted transparently. This is fine for home use scenarios, but for enterprise-level use scenarios, it will cause internal data leakage.

[0004] 2. The data interaction between client 1 and client 2 (non-person-to-person (partner-to-partner) P2P software, additional promotion of P2P in enterprises often leads to resistance) often needs to go through an external server, resulting in reduced network efficiency and poor performance.

[0005] It can be seen that in the related technology, there is a problem that the terminal communicates with the external cloud server through the Wlan network, resulting in data leakage. Summary of the invention

[0006] The present application provides an edge computing proxy method, apparatus, wireless access system, equipment and medium, which are used to solve the problem of data leakage caused by the terminal communicating with the external cloud server through the Wlan network in the related technology, and achieve the technical effect of improving information security.

[0007] On the one hand, the present application provides a wireless access system, the wireless access system comprising an application identification module and a mobile edge computing MEC agent module, wherein:

[0008] The application identification module is used to receive all client messages from the client, identify application messages in all client messages, and forward the application messages to the MEC proxy module;

[0009] The MEC proxy module is used to perform edge computing proxy on the application message to cache the target message in the application message to the MEC cache server.

[0010] In an optional implementation manner, the wireless access system further includes:

[0011] The wireless access system further includes: the MEC control module, configured to configure edge computing proxy content for the MEC proxy module and the application identification module;

[0012] The application identification module is also used to identify application messages among all the client messages based on the edge computing proxy content.

[0013] In an optional implementation manner, if the MEC proxy module and the application identification module are arranged in an access point of the wireless access system, the MEC proxy module and the application identification module both forward the application message in a one-by-one forwarding manner;

[0014] If the MEC proxy module and the application identification module are arranged in the wireless controller of the wireless access system, the MEC proxy module and the application identification module both forward the application message in a centralized forwarding manner.

[0015] In an optional implementation manner, the edge computing proxy content configured by the above-mentioned MEC control module includes:

[0016] Determine a target application in the client that needs to execute the edge computing agent, and a function in the target application that needs to execute the edge computing agent;

[0017] An intermediary certificate is configured for the client, wherein the intermediary certificate is used to support secure communication between the client and the MEC proxy module, or between the client and an external cloud server.

[0018] In an optional implementation manner, the above-mentioned MEC control module also responds to the certificate acquisition request received from the client and issues a corresponding intermediary certificate to the client.

[0019] In an optional implementation, the MEC proxy module is also used to forward other messages except the target message to an external cloud server, wherein the target message at least includes: messages involving information security, and / or messages that need to be accelerated.

[0020] On the other hand, the present application provides an edge computing agent method, comprising:

[0021] Receiving an application message from a client forwarded by an application identification module, wherein the application identification module is used to receive all client messages from the client and identify the application message among all the client messages;

[0022] Perform edge computing proxy on the above application message to determine the target message in the above application message;

[0023] The above target message is cached to the edge computing MEC cache server.

[0024] On the other hand, the present application provides an edge computing agent device, the device comprising:

[0025] A receiving module, used for receiving an application message from a client forwarded by an application identification module, wherein the application identification module is used for receiving all client messages from the client and identifying the application message among all the client messages;

[0026] A proxy module, used to perform edge computing proxy on the above application message to determine the target message in the above application message;

[0027] The processing module is used to cache the above target message to the edge computing MEC cache server.

[0028] On the other hand, the present application provides an electronic device, comprising: a processor, and a memory connected to the processor; the memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory to implement any of the above methods.

[0029] On the other hand, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a processor, they are used to implement any of the above methods.

[0030] The edge computing proxy method and device, and the wireless access system provided by the present application use an application identification module to receive all client messages from the client, identify application messages in all client messages, and forward the application messages to the MEC proxy module; the MEC proxy module is also used to perform edge computing proxy on the application messages, so as to cache the target messages in the identified application messages to the MEC cache server. The embodiment of the present application intercepts, identifies, and performs edge computing processing on the application messages of the client by using an application identification module and an MEC proxy module, so as to improve the processing security of the message information, and cache the target messages, thereby reducing the communication overhead and delay between the client and the external cloud server. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0032] Figure 1 A schematic diagram of the architecture of a Wlan network system provided in the related art;

[0033] Figure 2A schematic diagram of the architecture of a wireless access system provided in an embodiment of the present application;

[0034] Figure 3a A schematic diagram of an optional wireless access system architecture provided in an embodiment of the present application;

[0035] Figure 3b A schematic diagram of an optional wireless access system architecture provided in an embodiment of the present application;

[0036] Figure 4 This is a flowchart of requesting and issuing an intermediary certificate provided by an embodiment of the present application;

[0037] Figure 5 It is a flow chart of forwarding messages other than the target message provided by an embodiment of the present application;

[0038] Figure 6 It is a schematic diagram of a process of forwarding a target message provided by an embodiment of the present application;

[0039] Figure 7 It is a flowchart of an edge computing proxy method provided in an embodiment of the present application;

[0040] Figure 8 A structural block diagram of an edge computing agent device provided in an embodiment of the present application;

[0041] Fig. 9 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

[0042] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0043] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0044] First, the terms involved in this application are explained:

[0045] Mobile Edge Computing (MEC), also known as edge computing, can use wireless access networks to provide telecom users with the required services and cloud computing nearby. By accelerating various content, services and applications in the network, it creates a telecom-grade service environment with high performance, low latency and high bandwidth for consumers, allowing consumers to enjoy an uninterrupted, high-quality network experience.

[0046] The wireless controller (AC) is the core device of the wireless network and is responsible for the management and control of access points, including configuration, monitoring and troubleshooting of access points.

[0047] Access Point (AP) is used to connect wireless terminal devices and provide wireless network services for them.

[0048] WLAN refers to a local area network that uses wireless channels to replace traditional wired transmission media. It is a technology that uses wireless technology to achieve fast access to Ethernet. Depending on product performance and propagation environment, it can cover a range of tens to hundreds of meters.

[0049] The current mainstream Wlan networks are Figure 1 As shown, it is a WLAN network composed of a wireless controller AC and an access point AP. Client 1 and client 2 are connected to the Internet through the WLAN network to communicate with an external cloud server.

[0050] The current technical problems are:

[0051] 1. As the data pipeline, all data is transparently transmitted through the WLAN network, which may lead to data leakage. This problem is more serious for enterprise users.

[0052] 2. The data interaction between client 1 and client 2 (non-person-to-person (partner-to-partner) P2P software, additional promotion of P2P in enterprises often leads to resistance) often needs to go through an external server, resulting in reduced network efficiency and poor performance.

[0053] The edge computing proxy method provided by this application is intended to solve the above technical problems of related technologies. The technical solution of this application and how the technical solution of this application solves the above technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0054] This edge computing proxy method can be applied to Figure 2A schematic diagram of the architecture of a wireless access system is shown in FIG. Figure 2 As shown, the wireless access system includes an application identification module and an MEC proxy module, wherein:

[0055] The application identification module 10 is used to receive all client messages from the client, identify application messages in all client messages, and forward the application messages to the MEC proxy module.

[0056] The MEC proxy module 20 is used to perform edge computing proxy on the received application message to cache the target message in the application message to the MEC cache server.

[0057] The wireless access system provided in the embodiment of the present application intercepts, identifies and performs edge computing processing on the application message of the client by adopting an application identification module and an MEC proxy module to improve the processing security of message information, and caches the target message, thereby reducing the communication overhead and delay between the client and the external cloud server.

[0058] The embodiments of the present application can be applied to various scenarios that require protection of sensitive information or provision of rapid response, such as online payment, video conferencing, virtual reality, etc. The caching method of the target message can more securely access the client's data.

[0059] For example, it can be applied to wired campus networks and places with high data security requirements, and can be applied to various scenarios that require high speed, low latency, and high security, such as smart transportation, smart medical care, smart manufacturing, etc. Edge computing agents can make client application services more flexible, reliable, and efficient, improving user satisfaction and service competitiveness.

[0060] In the embodiment of the present application, there are many messages in the client, and the application identification module only forwards the application messages in the client messages (that is, the relevant messages of the target application that needs to execute the edge computing agent in the client) to the MEC proxy module; the MEC proxy module performs edge computing agent on the received application messages to cache the target messages in the application messages (the messages in the application messages that need to be securely protected and are not suitable for sending to external cloud servers) to the MEC cache server.

[0061] In one example, the target message includes but is not limited to: messages involving information security, and / or messages that need to be processed faster, for example, messages involving sensitive information exchanged between the client and the cloud server, and / or messages that need to be responded to quickly, for example, messages involving login verification, payment transactions, real-time video, etc. Optionally, the MEC proxy module performs edge computing proxy on the application message, that is, it identifies the target message in these application messages as an intermediary to process the target message securely and reliably, such as caching it on the MEC cache server (internal server to ensure information security and non-leakage), and not sending it to an external cloud server.

[0062] In the embodiment of the present application, edge computing proxy is performed on the received application message, that is, the MEC proxy module can act as an intermediary between the client and the MEC cache server to perform data interaction, identify the target message in the application message, and cache the target message to the MEC cache server, thereby avoiding the transmission and exposure of the target message in the network and enhancing information security. At the same time, the target message is cached in the MEC cache server, and the client can directly obtain the required message data from the MEC cache server without waiting for the processing and reply of the cloud server, thereby improving the response speed and reliability.

[0063] Optionally, the client is a wireless terminal, which may be a device that provides voice and / or other business data connectivity to a user, a handheld device with a wireless connection function, or other processing devices connected to a wireless modem. The wireless terminal may be a mobile terminal, such as a mobile phone (or "cellular" phone) and a computer with a mobile terminal, for example, a portable, pocket-sized, handheld, computer-built-in or vehicle-mounted mobile device that exchanges language and / or data with a wireless access network. For another example, the wireless terminal may also be a personal communication service (English: Personal Communication Service, abbreviated as PCS) phone, a cordless phone, a session initiation protocol (English: Session Initiation Protocol, abbreviated as SIP) phone, a wireless local loop (Wireless Local Loop, abbreviated as WLL) station, a personal digital assistant (English: Personal Digital Assistant, abbreviated as PDA) and other devices. The wireless terminal may also be referred to as a system, a subscriber unit (English: Subscriber Unit), a subscriber station (English: Subscriber Station), a mobile station (English: Mobile Station), a mobile station (English: Mobile), a remote station (English: Remote Station), a remote terminal (English: Remote Terminal), an access terminal (English: Access Terminal), a user terminal (English: User Terminal), a user agent (English: User Agent), a user device (English: User Device or User Equipment), and is not limited here. Optionally, the above-mentioned terminal device may also be a smart watch, a tablet computer, or other device.

[0064] In an optional embodiment, the wireless access system includes: a wireless controller AC and an access point AP. Optionally, in the embodiment of the present application, the wireless controller AC and the access point AP can be set separately, or can be set in an integrated unit, that is, a fat AP in which the wireless controller AC and the access point AP are integrated, for example, Figure 3a As shown, the MEC proxy module 20 and the application identification module 10 are both arranged in the access point AP, and the MEC control module 30 is arranged in the wireless controller AC; or as Figure 3b As shown, the MEC proxy module 20, the application identification module 10 and the MEC control module 30 are all arranged in the wireless controller AC; or the wireless controller AC and the access point AP can be set as an integrated unit, and the above-mentioned MEC proxy module 20, the application identification module 10 and the MEC control module 30 can all be arranged in the integrated unit.

[0065] Optionally, the wireless access system further includes: the MEC control module 30, for example, Figure 3a As shown, the MEC control module 30 is arranged in the wireless controller AC, as shown in Figure 3b As shown, the MEC control module 30 is set in the wireless controller AC, and the MEC control module 30 is connected to the MEC proxy module 20 to configure the edge computing proxy content for the above-mentioned MEC proxy module. The above-mentioned edge computing proxy content refers to the guidance information configured by the MEC control module to the MEC proxy module, for example, it may include the target application and target function that need to execute the edge computing proxy, as well as the middleman certificate configured for the client, etc.

[0066] In an optional example, the above-mentioned application identification module 10 is also used to identify the application message in all the above-mentioned client messages according to the above-mentioned edge computing agent content, so as to forward the above-mentioned application message to the above-mentioned MEC agent module.

[0067] It can be understood that the embodiment of the present application provides a faster, safer and smarter service for the client by utilizing the resources and capabilities of the network edge based on the MEC proxy module 20. In the embodiment of the present application, the MEC proxy module caches the target message containing information security and / or messages that need to be accelerated to the internal MEC cache server according to the edge computing proxy content configured by the MEC control module, and then directly obtains the target message from the MEC cache server, thereby reducing the communication overhead and delay between the client and the external cloud server.

[0068] In an optional implementation manner, the MEC control module 30 is further used to configure edge computing proxy content for the MEC proxy module and the application identification module, and the edge computing proxy content includes:

[0069] First, determine the target application in the client that needs to execute the edge computing agent, and the function of the edge computing agent in the target application. Specifically, the MEC control module determines the target application in the client that needs to execute the edge computing agent, and the function of the edge computing agent in the target application by issuing an intermediary certificate to the client.

[0070] It should be noted that not all application software in the client needs to perform edge computing. The application identification module can determine the target application that needs to perform edge computing and the specific functions of the edge computing agent that need to be executed in the target application through the edge computing configuration content of the MEC control module. Only these target applications that execute edge computing agents and application messages related to the specific functions that need to execute edge computing agents will be forwarded to the MEC agent module. Other messages that do not need to execute edge computing agents will still connect to the Internet to the external cloud server through the wireless controller AC.

[0071] For example, if a communication software needs to perform edge computing, then the communication software is the target application, and the functions that need to execute the edge computing agent can be the video function and transfer function in the communication software.

[0072] Second, configure an intermediary certificate for the client, wherein the intermediary certificate is used to support secure communication between the client and the MEC proxy module, or between the client and the external cloud server.

[0073] Third, when the application identification module receives a client message, it automatically starts the application identification function. It can be understood that the application identification module is a module in the forwarding component used to identify application messages that need to execute edge computing agents, and is used to identify whether all received client messages are application messages of the target application, and forward the application message to the MEC proxy module.

[0074] In one example, the MEC control module can determine that the communication application software is the target application that needs to execute the edge computing agent, and the transfer and payment functions are the functions that need to execute the edge computing agent based on the needs and characteristics of the client, such as the communication needs in the communication application software, while taking into account the characteristics of transfer and payment. In other words, the edge computing agent content can be customized to provide the client with a more suitable and optimized edge computing agent service.

[0075] Optionally, the application identification function adopts an application identification module to identify the application messages in all the client messages according to the edge computing proxy content, so as to forward the application messages to the MEC proxy module.

[0076] Optionally, in the embodiment of the present application, the intermediary certificate is a certificate used to implement a Secure Socket Layer (SSL) proxy. SSL proxy is a technology for establishing an encrypted channel between a client and a server. It can be applied to various scenarios that require encrypted communication or prevention of network attacks, such as e-commerce, social networking, remote office, etc.

[0077] By using the middleman certificate, the MEC proxy module can act as a middleman between the client and the cloud server to decrypt, analyze, and encrypt the messages sent or received by the client, thereby realizing the edge computing proxy function. At the same time, the middleman certificate can also ensure the communication security between the client and the MEC proxy module or external cloud server, because any unauthorized third party cannot obtain or tamper with the encrypted message.

[0078] For example, in a smart manufacturing scenario, if the client is an industrial robot that needs to perform some complex computing and control tasks, and these tasks are one of the target applications or target functions configured by the MEC control module, the MEC control module can configure the edge computing proxy content, including the task type, parameters, priority, etc. that need to execute the edge computing proxy, as well as the middleman certificate configured for the client, etc. In this way, the client can use the edge computing resources and capabilities provided by the MEC proxy module and the MEC cache server to achieve faster, more accurate, and more stable task execution and data exchange.

[0079] In another example, the MEC control module can configure and issue a middleman certificate for the client for the specific application identified, support secure communication between the client and the MEC proxy module or external cloud server, thereby preventing man-in-the-middle attacks and data leakage. For example, in a social network scenario, if the client is a smartphone user and needs to send or receive some messages involving privacy or sensitive information, and these messages are one of the target applications or target functions configured by the MEC control module, the MEC control module can configure a middleman certificate for the client to support secure communication between the client and the MEC proxy module or external cloud server. This enables the client to encrypt, decrypt, analyze and process these messages through the MEC proxy module, and cache target messages involving information security and / or that need to be accelerated to the MEC cache server. Furthermore, the client can be prevented from suffering man-in-the-middle attacks or data leakage in the network, protecting the privacy and security of the client.

[0080] An optional embodiment, still as Figure 3a As shown, if the MEC proxy module 20 and the application identification module 10 are arranged in the access point AP of the wireless access system, the MEC proxy module 20 and the application identification module 10 both forward the application messages one by one.

[0081] Another optional embodiment, still as Figure 3b As shown, if the MEC proxy module 20 and the application identification module 10 are arranged in the wireless controller AC of the wireless access system, the MEC proxy module 20 and the application identification module 10 both forward the application message in a centralized forwarding manner.

[0082] In general, for example, the wireless controller AC and the access point AP can be set separately. For the case of forwarding messages one by one, the MEC proxy module 20 and the application identification module 10 can be set in the access point AP. However, for the case of centralized forwarding of messages, the application identification module 10 and the MEC proxy module 20 can also be set on the wireless controller AC.

[0083] It should be noted that there are differences in the application scenarios between the centralized message forwarding and the individual message forwarding methods. Centralized message forwarding can improve the forwarding efficiency. By setting the application identification module 10 and the MEC agent module 20 on the wireless controller AC, the forwarding efficiency can be improved while taking into account the forwarding accuracy. Forwarding messages one by one is more accurate. By setting the MEC agent module 20 and the application identification module 10 in the access point AP, the forwarding efficiency can be improved while taking into account the message forwarding accuracy.

[0084] Since not all application software in the client needs to perform edge computing, the application identification module can determine the target application that needs to perform edge computing and the specific functions of the edge computing agent that need to be executed in the target application through the edge computing agent content configured by the MEC control module. Only the application messages of these target applications will be forwarded to the MEC agent module.

[0085] In the wireless access system provided by the present application, an application identification module is provided to receive all client messages from the client, and identify the application messages therein according to the edge computing proxy content, so as to forward the application messages to the MEC proxy module, and the MEC proxy module performs edge computing proxy on the application messages, that is, identifies the target messages in these application messages as an intermediary to process the target messages securely and reliably, such as caching them to the MEC cache server. This embodiment can be applied to various wireless access scenarios, such as wireless local area networks, wireless metropolitan area networks, wireless wide area networks, etc. The application identification module can dynamically adjust the edge computing proxy content according to the client's access method, location, device type, user preferences and other information, thereby providing the client with a more personalized and intelligent edge computing proxy service.

[0086] Optionally, the above application message refers to a message involving a specific application service exchanged between the client and the cloud server, such as web browsing, video playback, game running, etc. The application identification module is a module that can determine the application type and function to which the message belongs based on the characteristics and content of the message.

[0087] As shown above, the above edge computing proxy content refers to the guidance information configured by the MEC control module to the MEC proxy module, including the target application and target function that need to execute the edge computing proxy, as well as the middleman certificate configured for the client, etc.

[0088] In the embodiment of the present application, the application identification module can classify and filter the client messages according to the edge computing proxy content configured by the MEC control module, so that only the application messages that need to execute the edge computing proxy are forwarded to the MEC proxy module, instead of forwarding all client messages to the MEC proxy module. This can avoid the MEC proxy module from performing invalid or repeated processing on messages that are irrelevant or do not need to execute the edge computing proxy, thereby improving the accuracy and efficiency of the edge computing proxy.

[0089] For example, if the client sends a message to query the weather, and the weather query is not one of the target applications or target functions configured by the MEC control module, the MEC proxy module can directly forward the message to the external cloud server. By adopting the embodiment of the present application, the load and overhead of the MEC proxy module can be reduced, because the MEC proxy module only needs to process the application message forwarded by the application identification module, and does not need to process all client messages. This can save resources and time of the MEC proxy module and improve the performance and stability of the edge computing agent.

[0090] For another example, if the client sends a message for video playback, and video playback is one of the target applications or target functions configured by the MEC control module, the application identification module can forward the message to the MEC proxy module, allowing the MEC proxy module to perform edge computing on the message and cache the target messages involving information security and / or requiring accelerated processing to the MEC cache server. This can reduce the amount of data transmission and latency between the client and the external cloud server, and improve the quality and experience of video playback.

[0091] For example, in an intelligent transportation scenario, if the client sends a video surveillance message, and video surveillance is one of the target applications or target functions configured by the MEC control module, the application identification module can forward the message to the MEC proxy module, allowing the MEC proxy module to perform edge computing on the message and cache the target messages involving information security and / or requiring accelerated processing to the MEC cache server. This can reduce the amount of data transmission and latency between the client and the external cloud server, and improve the quality and real-time performance of video surveillance.

[0092] In an optional implementation manner, the above-mentioned MEC control module is also used to respond to the certificate acquisition request received from the above-mentioned client and issue the corresponding intermediary certificate to the above-mentioned client.

[0093] In the present application embodiment, Figure 4As shown in Scheme 1 shown in , the MEC control module is also used to receive the client's certificate acquisition request and issue the corresponding intermediary certificate to the client. For example, communication software 1 requires intermediary certificate 1 corresponding to communication software 1, communication software 2 requires intermediary certificate 2 of communication software 2, and so on; Figure 4 As shown in Scheme 2 shown in , the external cloud server is also used to receive the client's certificate acquisition request and issue the middleman certificate to the client. In this way, the client can easily obtain and use the middleman certificate, thereby achieving secure communication with the MEC proxy module or the external cloud server. It should be noted that the specific adoption of Scheme 1 or Scheme 2 can generally be determined by negotiation between Party A and the client manufacturer.

[0094] By using the middleman certificate, the MEC proxy module can act as a middleman between the client and the cloud server to decrypt, analyze, and encrypt the messages sent or received by the client, thereby realizing the edge computing proxy function.

[0095] There is also an optional embodiment. For example, in a virtual reality scenario, if the client is a virtual reality helmet user who needs to send or receive some high-definition video messages, and these messages are one of the target applications or target functions configured by the MEC control module, the MEC control module can automatically provide the client with an intermediary certificate when the client accesses. This can simplify the operation and configuration of the client and improve the access and use efficiency of the client. This allows the client to quickly establish secure communication with the MEC proxy module or external cloud server and enjoy high-quality and low-latency virtual reality services.

[0096] In addition, there is another optional embodiment, in which the MEC control module can customize the provision of an intermediary certificate to the client based on the identity and attributes of the client, thereby ensuring the validity and legitimacy of the intermediary certificate. This can prevent the intermediary certificate from being stolen or abused, and protect the security and trust of the client. For example, in an e-commerce scenario, if the client is an online shopping user who needs to send or receive some messages involving payment information or personal information, and these messages are one of the target applications or target functions configured by the MEC control module, the MEC control module can provide the client with a dedicated intermediary certificate based on the client's registration information, shopping records, payment methods and other information, and verify the identity and authority of the client. This enables the client to process these messages securely and reliably through the MEC proxy module, and cache target messages involving information security and / or that need to be accelerated to the MEC cache server, thereby preventing the client from being defrauded or theft in the network, and protecting the interests and rights of the client.

[0097] Since only the target applications that execute edge computing agents and application messages related to the functions that specifically need to execute edge computing agents will be forwarded to the MEC agent module, other data is still connected to the Internet to the external cloud server through the wireless controller AC. In an optional implementation, the above-mentioned MEC agent module is also used to forward other messages except the above-mentioned target messages to the external cloud server.

[0098] Optionally, the above-mentioned other messages refer to messages exchanged between the client and the cloud server that do not involve information security and / or require accelerated processing, such as ordinary text, pictures, audio, etc. The MEC proxy module can simply forward these messages without complex processing or caching.

[0099] In one example, the MEC proxy module can perform edge computing proxy for these messages within the wireless controller or access point. Since the client has configured a trusted middleman certificate, it can ensure normal message sending and receiving without errors. Figure 5 As shown, when the MEC proxy module receives other messages other than the target message forwarded by the application identification module (other messages are messages that do not involve information security and do not require accelerated processing), the MEC proxy module, as an intermediary between the client and the external cloud server, can directly forward the other messages to the external cloud server.

[0100] like Figure 6 As shown in the figure, the MEC proxy module can also act as an intermediary between the client and the MEC cache server, caching target messages involving information security and / or requiring accelerated processing to the MEC cache server. This can reduce the amount of video data transmission and latency between the client and the external cloud server, and improve the clarity and fluency of the video conference.

[0101] By adopting the embodiment of the present application, the integrity and compatibility of the edge computing agent can be improved, because the MEC agent module can process all application messages of the client, not just the target message. This ensures that the application service of the client will not be missing or abnormal due to the edge computing agent, and improves the service experience and satisfaction of the client. For example, in an online education scenario, if the client is an online learning user and needs to send or receive some messages involving exams or homework, and these messages are one of the target applications or target functions configured by the MEC control module, the MEC agent module can perform edge computing proxy for these messages, and cache the target messages involving information security and / or requiring accelerated processing to the MEC cache server. This ensures that the client can complete the exam or homework safely and quickly. At the same time, if the client also needs to send or receive some messages involving course content or discussion, and these messages are not one of the target applications or target functions configured by the MEC control module, the MEC agent module can forward these messages directly to the external cloud server without edge computing proxy. This ensures that the client can participate in the course content or discussion completely and normally.

[0102] In addition, there is another optional embodiment, in which the MEC proxy module can dynamically adjust the processing method and forwarding path of the target message and other messages according to the needs and characteristics of the client, thereby providing the client with a more suitable and optimized edge computing proxy service.

[0103] For example, in a remote office scenario, if the client is a remote work user who needs to send or receive some messages involving work files or collaboration, and these messages are one of the target applications or target functions configured by the MEC control module, the MEC proxy module can perform edge computing proxy for these messages and cache the target messages involving information security and / or requiring accelerated processing to the MEC cache server. This ensures that the client can complete work files or collaboration safely and efficiently.

[0104] For another example, if the client needs to send or receive some entertainment or leisure messages, and these messages are not one of the target applications or target functions configured by the MEC control module, the MEC proxy module can choose whether to perform edge computing proxy for these messages and select a suitable forwarding path based on the client's network status, traffic consumption, battery remaining, and other information. This ensures that the client can enjoy entertainment or leisure services flexibly and adaptively.

[0105] The present application also provides an edge computing proxy method. Figure 7 It is a flow chart of an edge computing proxy method provided by an embodiment of the present application, such as Figure 7 As shown, the method includes:

[0106] S101, receiving an application message from a client forwarded by an application identification module, wherein the application identification module is used to receive all client messages from the client and identify the application message among all the client messages.

[0107] S102, performing edge computing proxy on the above application message to determine the target message in the above application message.

[0108] S103, cache the above target message to the edge computing MEC cache server.

[0109] Optionally, the edge computing proxy method can be applied to the wireless access system provided in the above embodiment, which is a method of using the MEC proxy module inside the wireless controller or access point to provide edge computing services to the client. That is, the execution subject is the MEC proxy module in the wireless access system, and the edge computing service is a service that provides computing, storage, analysis and other functions to the client at the edge of the network.

[0110] In an embodiment of the present application, the MEC proxy module performs edge computing proxy on the application message, and can intercept, identify and process the client's application message inside the wireless controller and / or access point, thereby improving information security and processing efficiency. In an embodiment of the present application, the MEC proxy module performs edge computing proxy on the application message, that is, it acts as an intermediary to identify the target message in these application messages to process the target message securely and reliably, such as caching it on the MEC cache server (internal server to ensure information security and non-leakage), and not sending it to an external cloud server.

[0111] For example, the embodiments of the present application can be applied to various scenarios that require protection of sensitive information or provision of rapid response, such as online payment, video conferencing, virtual reality, etc. The caching method of the target message can access the client data more securely.

[0112] For example, it can be applied to various scenarios that require high speed, low latency, and high security, such as smart transportation, smart medical care, smart manufacturing, etc. It can enable clients to enjoy faster, safer, and smarter application services in a wireless access environment without relying on remote cloud servers.

[0113] The embodiment of the present application intercepts, identifies and processes the application message of the client inside the wireless controller or access point, thereby reducing the data transmission volume and delay between the client and the external cloud server, and improving the service quality and user experience of the client.

[0114] For example, in a video conference scenario, if the client is a video conference user who needs to send or receive some high-definition video messages, and these messages are one of the target applications or target functions configured by the MEC control module, the MEC proxy module can perform edge computing proxy for these messages inside the wireless controller or access point, and cache the target messages involving information security and / or requiring accelerated processing to the MEC cache server. This can reduce the amount of video data transmission and latency between the client and the external cloud server, and improve the clarity and fluency of the video conference.

[0115] In an embodiment of the present application, the wireless access system also uses an MEC control module to configure edge computing proxy content for the MEC proxy module. The above edge computing proxy content refers to the guidance information configured by the MEC control module to the MEC proxy module, for example, it may include target applications and target functions that need to execute edge computing proxy, as well as intermediary certificates configured for the client, etc.

[0116] In an optional example, the wireless access system also uses an application identification module to receive all client messages from the above-mentioned client, and identify the application messages in all the above-mentioned client messages according to the above-mentioned edge computing agent content, so as to forward the above-mentioned application messages to the above-mentioned MEC agent module.

[0117] In the embodiment of the present application, there are many messages in the client, and the application identification module only forwards the application messages in the client messages (that is, the relevant messages of the target application that needs to execute the edge computing agent in the client) to the MEC proxy module; the MEC proxy module performs edge computing agent on the received application messages to cache the target messages in the application messages (the messages in the application messages that need to be securely protected and are not suitable for sending to external cloud servers) to the MEC cache server.

[0118] In one example, according to the edge computing proxy content and middleman certificate configured by the MEC control module, the client's application message is encrypted, decrypted, analyzed and encrypted, thereby preventing middleman attacks and data leakage, and protecting the client's security and trust. For example, in an online payment scenario, if the client is an online payment user and needs to send or receive some messages involving payment information or personal information, and these messages are one of the target applications or target functions configured by the MEC control module, then the MEC proxy module can perform edge computing proxy for these messages within the wireless controller and / or access point. For example, the MEC proxy module can act as a middleman between the client and the MEC cache server to interact with data, identify the target message in the application message, and use the middleman certificate configured by the MEC control module to encrypt, decrypt, analyze and encrypt these target messages, and cache the target message to the MEC cache server, which can avoid the transmission and exposure of the target message in the network and enhance information security. At the same time, the target message is cached in the MEC cache server. The client can directly obtain the required message data from the MEC cache server without waiting for the cloud server to process and reply, thereby improving the response speed and reliability.

[0119] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0120] According to one or more embodiments of the present application, an edge computing agent device is provided. Figure 8 A structural block diagram of an edge computing agent device provided in an embodiment of the present application, such as Figure 8 As shown, the above device comprises:

[0121] A receiving module 201, configured to receive an application message from a client forwarded by an application identification module, wherein the application identification module is configured to receive all client messages from the client and identify the application message among all the client messages;

[0122] The proxy module 202 is used to perform edge computing proxy on the above application message to determine the target message in the above application message;

[0123] The processing module 203 is used to cache the above-mentioned target message to the edge computing MEC cache server.

[0124] In an exemplary embodiment, the present application also provides an electronic device, including: a processor, and a memory connected to the processor;

[0125] The memory stores computer-executable instructions;

[0126] The processor executes the computer-executable instructions stored in the memory to implement any of the above methods.

[0127] In an exemplary embodiment, the embodiment of the present application further provides a computer-readable storage medium, in which computer-executable instructions are stored. When the computer-executable instructions are executed by a processor, they are used to implement any of the above methods.

[0128] In an exemplary embodiment, the present application also provides a computer program product, including a computer program, which implements any of the above methods when executed by a processor.

[0129] In order to implement the above embodiment, the present application also provides an electronic device. Fig. 9 , which shows a schematic diagram of the structure of an electronic device 700 suitable for implementing the embodiment of the present application, and the electronic device 700 may be a terminal device or a server. The terminal device may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, message transceiver devices, game consoles, medical equipment, fitness equipment, personal digital assistants (English: Personal Digital Assistant, abbreviated as PDA), tablet computers (English: Portable Android Device, abbreviated as PAD), portable multimedia players (English: Portable Media Player, abbreviated as PMP), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Fig. 9 The electronic device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0130] like Fig. 9As shown, the electronic device 700 may include a processing device (e.g., a central processing unit, a graphics processor, etc.) 701, which can perform various appropriate actions and processes according to a program stored in a read-only memory (English: Read Only Memory, abbreviated as ROM) 702 or a program loaded from a storage device 708 to a random access memory (English: Random Access Memory, abbreviated as RAM) 703. In the RAM 703, various programs and data required for the operation of the electronic device 700 are also stored. The processing device 701, the ROM 702, and the RAM 703 are connected to each other via a bus 704. An input / output (I / O) interface 705 is also connected to the bus 704.

[0131] Typically, the following devices may be connected to the I / O interface 705: input devices 706 including, for example, a touch screen, a touch pad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; output devices 707 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; storage devices 708 including, for example, a magnetic tape, a hard disk, etc.; and communication devices 709. The communication device 709 may allow the electronic device 700 to communicate with other devices wirelessly or by wire to exchange data. Although Fig. 9 The electronic device 700 is shown with various devices, but it should be understood that it is not required to implement or possess all the devices shown. More or fewer devices may be implemented or possessed instead.

[0132] In particular, according to an embodiment of the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present application includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication device 709, or installed from the storage device 708, or installed from the ROM 702. When the computer program is executed by the processing device 701, the above-mentioned functions defined in the method of the embodiment of the present application are executed.

[0133] It should be noted that the computer-readable medium mentioned above in the present application may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present application, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. The computer readable signal medium may also be any computer readable medium other than a computer readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0134] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.

[0135] The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device executes the method shown in the above embodiment.

[0136] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as an independent software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0137] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0138] The units involved in the embodiments described in the present application may be implemented by software or hardware. The name of the unit does not limit the unit itself in some cases. For example, the first acquisition unit may also be described as a "unit for acquiring at least two Internet Protocol addresses".

[0139] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0140] In the context of the present application, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0141] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the following claims.

[0142] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A wireless access system, characterized in that: The wireless access system includes an application identification module and a mobile edge computing MEC agent module, wherein: The application identification module is used to receive all client messages from the client, identify application messages in all client messages, and forward the application messages to the MEC proxy module; The MEC proxy module is used to perform edge computing proxy on the application message to cache the target message in the application message to the MEC cache server.

2. The wireless access system according to claim 1, characterized in that: The wireless access system further includes: a MEC control module, configured to configure edge computing proxy content for the MEC proxy module and the application identification module; The application identification module is also used to identify application messages among all the client messages based on the edge computing proxy content.

3. The wireless access system according to claim 1, characterized in that: If the MEC proxy module and the application identification module are arranged in the access point of the wireless access system, the MEC proxy module and the application identification module both forward the application message in a one-by-one forwarding manner; If the MEC proxy module and the application identification module are arranged in the wireless controller of the wireless access system, the MEC proxy module and the application identification module both forward the application message in a centralized forwarding manner.

4. The wireless access system according to claim 2, characterized in that: The edge computing agent content configured by the MEC control module includes: Determine a target application in the client that needs to execute the edge computing agent, and a function in the target application that needs to execute the edge computing agent; An intermediary certificate is configured for the client, wherein the intermediary certificate is used to support secure communication between the client and the MEC proxy module, or between the client and an external cloud server.

5. The wireless access system according to any one of claims 1 to 4, characterized in that: The MEC control module is also used to respond to the certificate acquisition request received from the client and issue the corresponding intermediary certificate to the client.

6. The wireless access system according to any one of claims 1 to 4, characterized in that: The MEC proxy module is also used to forward other messages except the target message to an external cloud server, and the target message at least includes: messages involving information security, and / or messages that need to be accelerated.

7. An edge computing proxy method, characterized in that: include: Receiving an application message from a client forwarded by an application identification module, wherein the application identification module is used to receive all client messages from the client and identify the application message among all the client messages; Performing edge computing proxy on the application message to determine a target message in the application message; The target message is cached to the edge computing MEC cache server.

8. An edge computing agent device, characterized in that: The device comprises: A receiving module, used for receiving an application message from a client forwarded by an application identification module, wherein the application identification module is used for receiving all client messages from the client and identifying the application message among all the client messages; A proxy module, used to perform edge computing proxy on the application message to determine a target message in the application message; The processing module is used to cache the target message to the edge computing MEC cache server.

9. An electronic device, characterized in that: include: A processor, and a memory connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to claim 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to claim 7 when executed by a processor.

Images