A method for application service registration and data transmission on a hidden network

Abstract

The present invention relates to a method for application service registration and data transmission on a hidden network, which belongs to the field of hidden communication technology and solves the problem of inflexible application terminal access in the prior art, including: an application server registers for service through a hidden network service node, including obtaining the connection relationship of each adjacent node based on each communication path obtained before registration, and binding the application server identifier with all forwarding nodes in each communication path; an application client sends user data to a hidden network access node; a destination application server identifier is obtained based on the user data, and a hidden network forwarding node with a binding relationship with the destination application server identifier is randomly selected to forward the user data, and each subsequent forwarding node selects any previous level hidden network forwarding node to forward the user data until the user data is transmitted to the hidden network service node, and the user data is sent to the destination application server. Flexible access to the application terminal is achieved.

Description

Technical Field

[0001] The present invention relates to the field of covert communication technology, and in particular to a method for registering application services and transmitting data on a covert network. Background Art

[0002] With the development of science and technology and society, enterprises and individuals often need to transmit private information on the Internet. Due to the various security requirements of privacy protection, behavior hiding, and entity hiding, Internet covert communication based on multi-hop transmission has developed rapidly. Many corporate users or individual users tend to use covert communication systems to realize the transmission protection of private services on the Internet. The more widely used covert communication systems include Tor, I2P, etc.

[0003] The current mainstream access mode of covert communication systems all uses a dedicated browser or access client. This approach imposes restrictions on the application types on the application server side and also limits the flexibility of the covert access application client. Summary of the invention

[0004] In view of the above analysis, an embodiment of the present invention aims to provide a method for application service registration and data transmission on a hidden network, so as to solve the problem that the existing hidden network application server and application client access is not flexible enough.

[0005] The embodiment of the present invention provides a method for application service registration and data transmission on a hidden network, comprising:

[0006] The application server registers the service through the hidden network service node, including: based on each communication path obtained before registration, obtaining the connection relationship between each adjacent hidden network forwarding node in each communication path, and binding the application server identifier with all the hidden network forwarding nodes in each communication path;

[0007] The registered application client sends user data to the hidden network access node; the hidden network access node obtains the destination application server identifier based on the user data, and randomly selects a hidden network forwarding node that has a binding relationship with the destination application server identifier to forward the user data. Subsequently, each forwarding node selects any previous level hidden network forwarding node to forward the user data based on the binding relationship between the destination application server identifier and all adjacent hidden network forwarding nodes, until the user data is transmitted to the hidden network service node; the hidden network service node sends the user data to the destination application server.

[0008] Based on the further improvement of the above method, the service registration of the application client includes:

[0009] The application client sends a service registration request to the hidden network access node;

[0010] The hidden network access node returns a service registration response to the application client.

[0011] Based on the further improvement of the above method, the application server registers the service through the hidden network service node and further includes:

[0012] The application server sends a service registration request to the hidden network service node; wherein the service registration request includes an identifier of the application server;

[0013] The hidden network service node broadcasts the service registration request of the application server to all hidden network forwarding nodes in each communication path;

[0014] The subsequent hidden network forwarding node in each communication path sends a service registration response to all the adjacent hidden network forwarding nodes in the previous level respectively, until a service registration response is sent to the hidden network service node; if the service registration responses are all successful, the application server is successfully registered.

[0015] Based on a further improvement of the above method, the user data includes an identifier of a destination application server, an identifier of a source application client, and the transmitted data.

[0016] Based on a further improvement of the above method, when the application server is no longer connected to the hidden network, the application server sends a service release request to the hidden network access node;

[0017] The hidden network service node deletes the binding relationship between the application server and the identifier, and returns a service release response to the application server; the hidden network service node broadcasts the service release request to each hidden network forwarding node; each hidden network forwarding node deletes the binding relationship with the application server identifier.

[0018] Based on a further improvement of the above method, when the selected hidden network forwarding node forwards the user data, it also includes:

[0019] The hidden network access node, the hidden network service node and each hidden network forwarding node participating in user data forwarding bind and record the destination application server identifier and the source application client identifier together.

[0020] Based on the further improvement of the above method, if the application server replies data to the application client, the data is transmitted back to the application server using the information of the binding record.

[0021] Based on the further improvement of the above method, the obtaining of the connection relationship between adjacent nodes in each communication path and binding the application server identifier with all the hidden network forwarding nodes in each communication path includes:

[0022] Each hidden network forwarding node participating in data transmission of the application server obtains the binding relationship between all the hidden network forwarding nodes of the adjacent previous level and the application server, as well as the binding relationship between all the hidden network forwarding nodes of the next level and the application server.

[0023] Based on the further improvement of the above method, the application server identifier\application client identifier is a 4-byte integer or a character string.

[0024] Based on the further improvement of the above method, when the hidden network is idle, heartbeat detection is used to detect the hidden network, application client and application server.

[0025] Compared with the prior art, the present invention can achieve at least one of the following beneficial effects:

[0026] 1. Shield different access methods of different hidden networks, start from directly solving the mutual addressing and data intercommunication problems of application terminals accessing hidden networks, and improve the access flexibility of hidden network application servers and application clients;

[0027] 2. The application server only needs to register the service in the hidden network to provide services; the application client can directly access the corresponding application server through the application server identifier, making access to the application server more convenient.

[0028] In the present invention, the above-mentioned technical solutions can also be combined with each other to achieve more preferred combination solutions. Other features and advantages of the present invention will be described in the subsequent description, and some advantages can become obvious from the description, or can be understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained through the contents particularly pointed out in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] The accompanying drawings are only used for the purpose of illustrating specific embodiments and are not to be considered as limiting the present invention. In the entire drawings, the same reference symbols represent the same components;

[0030] Figure 1 A flow chart of a method for application service registration and data transmission on a hidden network shown in an embodiment of the present invention;

[0031] Figure 2 A schematic diagram of a method for application service registration and data transmission on a hidden network according to an embodiment of the present invention;

[0032] Reference numerals:

[0033] 1-Application server service registration; 2-Application client sends data to the application server; 3-Application server returns data to the application client; 4-Application client service registration. DETAILED DESCRIPTION

[0034] The preferred embodiments of the present invention are described in detail below in conjunction with the accompanying drawings, wherein the accompanying drawings constitute a part of this application and are used together with the embodiments of the present invention to illustrate the principles of the present invention, but are not used to limit the scope of the present invention.

[0035] A specific embodiment of the present invention discloses a method for registering application services and transmitting data on a hidden network, such as Figure 1 As shown, the specific steps include:

[0036] S1: The application server registers the service through the hidden network service node, including: based on each communication path obtained before registration, obtaining the connection relationship between each adjacent hidden network forwarding node in each communication path, and binding the application server identifier with all the hidden network forwarding nodes in each communication path;

[0037] S2: The registered application client sends user data to the hidden network access node; the hidden network access node obtains the destination application server identifier based on the user data, and randomly selects a hidden network forwarding node that has a binding relationship with the destination application server identifier to forward the user data. Subsequently, each forwarding node selects any previous level hidden network forwarding node to forward the user data based on the binding relationship between the destination application server identifier and all adjacent hidden network forwarding nodes, until the user data is transmitted to the hidden network service node; the hidden network service node sends the user data to the destination application server.

[0038] It should be noted that the hidden network service node is located between the application server and each hidden network forwarding node, and is the entrance for the application server to access the hidden network. The hidden network service node is not easily discovered or accessed by the external network, thereby protecting user privacy and data security. The hidden network access node is located between the application client and each hidden network forwarding node, and is the entrance for the application client to access the hidden network. It is responsible for transmitting the data generated by the application server to the hidden network, or transmitting the data in the hidden network to the application client. The access node can execute the access control strategy, restrict unauthorized application clients from accessing the hidden network, and improve the security of the hidden network. The hidden network forwarding node acts as a relay in the hidden network, helping data packets to be transmitted in the hidden network. Each hidden network forwarding node can only know the adjacent previous and next hidden network forwarding nodes in the communication path, and cannot obtain the complete information of the entire communication path from a hidden network forwarding node, thus realizing the concealment of data transmission.

[0039] Specifically, if Figure 2-1 As shown, the application server registers the service through the hidden network service node including steps S11-S13:

[0040] S11: The application server sends a service registration request to the hidden network service node; wherein the service registration request includes an identifier of the application server; the identifier is unique, and the application server identifier can clearly indicate the identity of the initiator of the request, and the application client initiates communication with the corresponding application server based on the application server identifier;

[0041] S12: Based on each communication path obtained before registration, obtain the connection relationship of each adjacent hidden network forwarding node in each communication path, and bind the application server identifier with all the hidden network forwarding nodes in each communication path;

[0042] Specifically, the hidden network service node broadcasts the service registration request of the application server to all hidden network forwarding nodes in each communication path; all hidden network forwarding nodes in each communication path bind the application server identifier;

[0043] It should be noted that each hidden network forwarding node participating in the data transmission of the application server obtains the binding relationship between all the hidden network forwarding nodes of the adjacent previous level and the application server, and the binding relationship between all the hidden network forwarding nodes of the next level and the application server in turn;

[0044] It is worth noting that before registration, the node management server activates the hidden network forwarding node, and the path manager obtains each communication path using strategies and algorithms based on the activated hidden network forwarding node; illustratively, the node management server and the path manager are deployed in a central computer room or on a laptop computer as needed;

[0045] S13: The subsequent hidden network forwarding node in each communication path sends a service registration response to all the adjacent hidden network forwarding nodes in the previous level respectively, until a service registration response is sent to the hidden network service node; if the service registration responses are all successful, the application server is successfully registered, and the hidden network service node sends a registration success response to the application server; otherwise, enter the error identification procedure.

[0046] It is worth noting that when the application server is no longer connected to the hidden network, the application server sends a service release request to the hidden network access node; illustratively, when the application server is removed from the shelf and no longer provides services, the application server sends a service release request to the hidden network access node;

[0047] The hidden network service node deletes the binding relationship between the application server and the identifier, and returns a service release response to the application server; the hidden network service node broadcasts the service release request to each hidden network forwarding node; each hidden network forwarding node deletes the binding relationship with the application server identifier.

[0048] In addition, Figure 2 -4, the service registration of the application client includes:

[0049] The application client sends a service registration request to the hidden network access node; the service registration request includes the application client identifier;

[0050] The hidden network access node returns a service registration response to the application client; if the service registration response is successful, it indicates that the registration is successful; otherwise, it indicates that the registration has failed.

[0051] Further, after registration, the method for data transmission between the application client and the application server includes steps S21-S23, such as Figure 2-2 As shown:

[0052] S21: The registered application client sends user data to the hidden network access node; the user data includes the identifier of the destination application server, the identifier of the source application client and the transmitted data;

[0053] S22: The hidden network access node obtains the destination application server identifier based on the user data, randomly selects a hidden network forwarding node that has a binding relationship with the destination application server identifier to forward the user data, and each subsequent forwarding node selects any previous level hidden network forwarding node to forward the user data based on the binding relationship between the destination application server identifier and all adjacent hidden network forwarding nodes, until the user data is delivered to the hidden network service node;

[0054] It should be noted that the hidden network access node, the hidden network service node and each hidden network forwarding node participating in user data forwarding bind and record the destination application server identifier and the source application client identifier together;

[0055] S23: The hidden network service node sends the user data to the destination application server.

[0056] If the application server replies data to the application client, such as Figure 2 -3, the data is transmitted back to the application server using the information of the binding record; the information of the binding record includes the application client identifier and the application server identifier.

[0057] It is worth noting that when the hidden network is idle, heartbeat detection is used to detect the hidden network, application client and application server. Heartbeat detection confirms the availability of the hidden network by regularly sending small data packets to ensure reliable data transmission and timely response. If the heartbeat detection data is sent three or five times without a response, it is considered that there may be a problem with the connection, and timely measures are taken to repair it.

[0058] The interface message set for application service registration and data transmission on a hidden network designed in the embodiment of the present invention is shown in Table 1:

[0059] Table 1 Interface message set

[0060] Message Name Message macro definition Message direction Service Registration REGISTER Hidden Network←Application Service termination UN_REGISTER Hidden Network←Application Heartbeat detection ACTIVE_TEST Hidden network ←→ application end Data Transfer DATA Hidden Network←Application

[0061] The specific message body structure of the embodiment of the present invention for application service registration and data transmission on a hidden network is shown in Table 2:

[0062] Table 2 Service registration message body composition

[0063]

[0064] The embodiment of the present invention designs the release message body structure for application service registration and data transmission on a hidden network as shown in Table 3:

[0065] Table 3 Service release message body composition

[0066]

[0067] The embodiment of the present invention designs the heartbeat detection message body structure of application service registration and data transmission on a hidden network as shown in Table 4:

[0068] Table 4 Device heartbeat detection message body composition

[0069] parameter Req Ack Parameter Description sourUserID M M Unique ID of the application

[0070] The embodiment of the present invention designs the heartbeat detection message body structure of application service registration and data transmission on a hidden network as shown in Table 5:

[0071] Table 5 Data transmission message body composition

[0072]

[0073]

[0074] The abbreviations for application service registration and data transmission on a hidden network according to the embodiment of the present invention are shown in Table 5:

[0075] Table 5 Abbreviations

[0076] Abbreviations / special terms explain Req Request Message Ack Response Message M Fixed parameters N No such parameter O Optional parameters

[0077] The embodiment of the present invention designs the interface message body parameter encoding for application service registration and data transmission on a hidden network as shown in Table 6:

[0078] Table 6 Abbreviations

[0079]

[0080] It should be noted that the application server identifier\application client identifier is a 4-byte integer or string.

[0081] Compared with the prior art, the method for application service registration and data transmission on a hidden network provided in this embodiment shields different access methods of different hidden networks, directly solves the problem of mutual addressing and data transmission of application terminals accessing the hidden network, and improves the access flexibility of hidden network application servers and application clients; and, the application server only needs to register for services in the hidden network to provide services; the application client can directly access the corresponding application server through the application server identifier, making access to the application server more convenient.

[0082] Those skilled in the art will appreciate that all or part of the processes of the above-mentioned embodiments can be implemented by instructing related hardware through a computer program, and the program can be stored in a computer-readable storage medium, wherein the computer-readable storage medium is a disk, an optical disk, a read-only storage memory, or a random access memory, etc.

[0083] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by any technician familiar with the technical field within the technical scope disclosed by the present invention should be covered within the protection scope of the present invention.

Claims

1. A method for application service registration and data transmission on a hidden network, characterized in that: include: The application server registers the service through the hidden network service node, including: based on each communication path obtained before registration, obtaining the connection relationship between each adjacent hidden network forwarding node in each communication path, and binding the application server identifier with all the hidden network forwarding nodes in each communication path; The registered application client sends user data to the hidden network access node; the hidden network access node obtains the destination application server identifier based on the user data, and randomly selects a hidden network forwarding node that has a binding relationship with the destination application server identifier to forward the user data. Subsequently, each forwarding node selects any previous level hidden network forwarding node to forward the user data based on the binding relationship between the destination application server identifier and all adjacent hidden network forwarding nodes, until the user data is transmitted to the hidden network service node; the hidden network service node sends the user data to the destination application server.

2. The method for application service registration and data transmission on a hidden network according to claim 1, characterized in that: The service registration of the application client includes: The application client sends a service registration request to the hidden network access node; The hidden network access node returns a service registration response to the application client.

3. The method for application service registration and data transmission on a hidden network according to claim 2, characterized in that: The application server registers the service through the hidden network service node and further includes: The application server sends a service registration request to the hidden network service node; wherein the service registration request includes an identifier of the application server; The hidden network service node broadcasts the service registration request of the application server to all hidden network forwarding nodes in each communication path; The subsequent hidden network forwarding node in each communication path sends a service registration response to all the adjacent hidden network forwarding nodes in the previous level respectively, until a service registration response is sent to the hidden network service node; if the service registration responses are all successful, the application server is successfully registered.

4. The method for application service registration and data transmission on a hidden network according to claim 3, characterized in that: The user data includes the identifier of the destination application server, the identifier of the source application client, and the transmitted data.

5. The method for application service registration and data transmission on a hidden network according to claim 3, characterized in that: When the application server is no longer connected to the hidden network, the application server sends a service release request to the hidden network access node; The hidden network service node deletes the binding relationship between the application server and the identifier, and returns a service release response to the application server; the hidden network service node broadcasts the service release request to each hidden network forwarding node; each hidden network forwarding node deletes the binding relationship with the application server identifier.

6. The method for application service registration and data transmission on a hidden network according to claim 2, characterized in that: When the selected hidden network forwarding node forwards the user data, it also includes: The hidden network access node, the hidden network service node and each hidden network forwarding node participating in user data forwarding bind and record the destination application server identifier and the source application client identifier together.

7. The method for application service registration and data transmission on a hidden network according to claim 6, characterized in that: If the application server replies data to the application client, the data is transmitted back to the application server using the information in the binding record.

8. The method for application service registration and data transmission on a hidden network according to claim 1, characterized in that: The obtaining of the connection relationship between adjacent nodes in each communication path and binding the application server identifier to all hidden network forwarding nodes in each communication path includes: Each hidden network forwarding node participating in data transmission of the application server obtains the binding relationship between all the hidden network forwarding nodes of the adjacent previous level and the application server, as well as the binding relationship between all the hidden network forwarding nodes of the next level and the application server.

9. The method for application service registration and data transmission on a hidden network according to claims 1-8, characterized in that: The application server identifier\application client identifier is a 4-byte integer or a string.

10. The method for application service registration and data transmission on a hidden network according to any one of claims 1 to 8, characterized in that: When the hidden network is idle, heartbeat detection is used to detect the hidden network, application client and application server.

Images