Multi-network-type intercommunication online communication system

Abstract

The invention relates to the technical field of online communication, in particular to a multi-network-type intercommunication online communication system which comprises a management information large area, when the system is used, resources in an intranet are mapped to an extranet through an Nginx proxy server, so that remote access of the resources is achieved, and the management information large area is expanded. Data forwarding and load balancing are carried out among different servers by using the Nginx proxy server, the efficiency and stability of data transmission are improved, data can be simultaneously sent and received between two network nodes by using an mqtt protocol, the efficiency and reliability of data interaction are improved, and the data transmission efficiency and reliability are improved. The method is beneficial to providing real-time message transmission and multi-terminal data sharing synchronization of applications such as communication exchange and file storage across two network types, is beneficial to solving the problem that a user cannot perform direct communication exchange and file transmission due to network boundary limitation, crosses regional limitation and time limitation, is beneficial to realizing flexible office, and is convenient to use. The production efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of online communication, and in particular to an online communication system for intercommunication of multiple network types. Background Art

[0002] The development of online communication systems began in the late 20th century, with the rise of the Internet, which brought about various forms of communication such as email, instant messaging services, and video conferencing. With the popularization of mobile Internet and smart devices, this field has developed rapidly, and various innovative applications have emerged, such as social media platforms and cloud-based collaboration tools.

[0003] The patent application number is CN201110340414.5. It states in the specification that “the present invention discloses an online communication system and method for multiple participants. The system includes a session control module for controlling the creation and closing of a session, message sending, user operation, and message display. The session control module includes a session creation unit, a message server, a message display unit, a user name display control unit, etc. The user name display control unit receives the settings of the session created by the session creation unit or the settings of the message sending user for sending a message, and sends the “user name or identification or code name of the message sending user” to the participating user interface. For anonymous sessions or anonymous messages, the user name display control unit only displays the message sending user’s name. The user's identification or code is sent to the participating user interface. The present invention is based on a topic-based conversation mode, which can organically combine users in the form of proprietary topics, and the user group participating in the conversation is targeted. The present invention also provides an anonymous chat method, allowing users to speak freely without scruples. Although the above technology provides an anonymous chat method with the advantage of protecting the privacy of users, when chatting and communicating in two network types such as the Internet and information intranet areas, it is necessary to maintain two sets of application services and databases on the internal and external networks at the same time, resulting in low application efficiency across network areas, and low adaptability of data sharing and synchronization between mobile terminals, web pages and clients, making it difficult to meet the needs of users for flexible application in multiple network types.

[0004] In summary, developing an online communication system that can communicate with multiple network types is still a key issue that needs to be urgently addressed in the field of online communication technology. Summary of the invention

[0005] The purpose of the present invention is to solve the problem in the prior art that although the above technology provides an anonymous chatting method with the advantage of protecting the privacy between users, when chatting and communicating in two network types such as the Internet and the information intranet area, it is necessary to maintain two sets of application services and databases of the internal and external networks at the same time, resulting in low efficiency of cross-network area application, low adaptability of data sharing and synchronization between mobile terminals, web pages and clients, and difficulty in satisfying users' flexible application under various network types.

[0006] To achieve the above object, the present invention provides an online communication system for multiple network types to communicate with each other, comprising: A management information zone, wherein the management information zone is connected to an isolation device, and the isolation device is connected to an Internet zone; The management information area includes an application service area, a data storage area and an Nginx proxy server; The Internet region includes an external network application server and a security monitoring scanning server, which are used to deploy mobile terminal front-end pages and external network uploaded file security scanning services.

[0007] Furthermore, the management information area includes: The Nginx proxy server is used to map the IP and port of the intranet application service to the information extranet, and deploy the front-end page of the intranet at the same time. The Nginx proxy server is connected to the intranet firewall.

[0008] Furthermore, the management information area includes: The intranet firewall is connected to an internal network, and the internal network is connected to intranet Web users and intranet client users.

[0009] Furthermore, the Internet mega-region includes: The security scanning service is used to perform virus scanning when uploading files on the external network mobile terminal. The Internet region is connected to a security interaction platform, and the security interaction platform authenticates the front-end page service accessing the Internet region in the external network mobile terminal.

[0010] Furthermore, the Internet mega-region includes: The external network application server and the security monitoring scanning server are connected to an external network firewall, and the external network firewall is connected to a PC user.

[0011] Furthermore, the management information large area operation process includes: The management information is divided into two parts: front-end application and back-end service. The back-end service is deployed based on Docker container, and the front-end service deploys ECS elastic cloud server. The structured database adopts MySql database, relational data adopts RDS storage, and unstructured data adopts MongoDB database and OBS object storage.

[0012] Furthermore, the management information large area operation process includes: The CCE microservice deployment architecture is adopted, and the Docker containers are used to deploy basic services and application services respectively. The basic services include registration center, gateway service, file management, log management and system management, and the application services include file transfer assistant, user organization management, search and client settings.

[0013] Furthermore, the management information large area operation process includes: The ECS elastic cloud server deploys communication IM service, front-end service, and document online preview and editing service respectively. The RDS stores relational data, MongoDB stores non-relational data, and unstructured data such as documents, pictures, and audio are stored in OBS object storage.

[0014] Furthermore, the Internet region operation process includes: Mobile users on the external network first access the front-end page of the platform. The access operation needs to be authenticated by the secure interaction platform. When the user uploads a file on the front-end page, the file is sent to the secure interaction platform and the external network application server through the external network, and then passes through the security monitoring scanning server for a security check. After passing the security scan, the file is marked as qualified and transmitted to the intranet for storage through the isolation device.

[0015] Furthermore, the Nginx proxy server operation process includes: The external network mobile terminal sends message A; The external network server nginx forwards message A to the interface B of the internal network server through the MQTT protocol address mapped by the proxy internal network; The intranet server sends message A to other terminals through interface B and stores it in the database; The intranet client replies to message C and sends message C to the external network mobile terminal through the MQTT protocol; The external network mobile terminal receives real-time reply information from the internal network client by subscription. Beneficial Effects

[0016] Compared with the known public technology, the technical solution provided by the present invention has the following beneficial effects: When the present invention is in use, the resources in the intranet are mapped to the extranet through the Nginx proxy server, thereby realizing remote access to the resources, and utilizing the Nginx proxy server to perform data forwarding and load balancing between different servers, thereby improving the efficiency and stability of data transmission, and utilizing the MQTT protocol to enable data to be sent and received simultaneously between two network nodes, thereby improving the efficiency and reliability of data interaction, and facilitating real-time message transmission and multi-terminal data sharing and synchronization for applications such as communication and file storage across two types of networks, thereby solving the problem of users being unable to perform direct communication and file transfer due to network boundary restrictions, and simultaneously transcending geographical restrictions and time restrictions, thereby facilitating flexible office work and improving production efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 A system diagram of an online communication system for communicating with multiple network types according to the present invention.

[0018] Figure 2 The present invention is a block diagram of a design scheme for an online communication system with multiple network types interconnected.

[0019] Figure 3 The software architecture diagram of an online communication system for communicating with multiple network types according to the present invention.

[0020] Figure 4 This is a data architecture diagram of an online communication system with multiple network types interconnected according to the present invention. DETAILED DESCRIPTION

[0021] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0022] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but includes other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0023] The present invention is further described in detail with reference to the accompanying drawings: Example

[0024] like Figure 1 As shown, the present invention provides an online communication system for intercommunication of multiple network types, including: a management information area, the management information area is connected to an isolation device, and the isolation device is connected to an Internet area; The management information area includes the application service area, data storage area and Nginx proxy server; Furthermore, the management information area includes: The Nginx proxy server is used to map the IP and port of the intranet application service to the information extranet, and deploy the front-end page of the intranet. The Nginx proxy server is connected to the intranet firewall.

[0025] Furthermore, the management information area includes: The intranet firewall is connected to the internal network, and the internal network is connected to the intranet web users and intranet client users; Furthermore, the management information zone operation process includes: The management information area is divided into two parts: front-end applications and back-end services. The back-end services are deployed based on Docker containers, and the front-end services are deployed on ECS elastic cloud servers. The structured database uses MySql database, relational data is stored in RDS, and unstructured data uses MongoDB database and OBS object storage.

[0026] Furthermore, the management information zone operation process includes: The CCE microservice deployment architecture is adopted, and the basic services and application services are deployed in Docker containers respectively. The basic services include registration center, gateway service, file management, log management and system management, and the application services include file transfer assistant, user organization management, search and client settings.

[0027] Furthermore, the management information zone operation process includes: The ECS elastic cloud server deploys communication IM services, front-end services, and document online preview and editing services. RDS stores relational data, MongoDB stores non-relational data, and unstructured data such as documents, pictures, and audio are stored in OBS object storage. The Nginx proxy server operation process includes: The external network mobile terminal sends message A; The external network server nginx forwards message A to the interface B of the internal network server through the MQTT protocol address mapped by the proxy internal network; The intranet server sends message A to other terminals through interface B and stores it in the database; The intranet client replies to message C and sends message C to the external network mobile terminal through the MQTT protocol; The external network mobile terminal receives real-time reply information from the internal network client through subscription; Specifically, the management information area maps the IP and port of the intranet service to the external network through the Nginx proxy server and connects it to the intranet firewall, which is conducive to improving the security of data transmission. At the same time, the use of the Nginx proxy server makes intranet and extranet communications more efficient and controllable. The use of MySql database, RDS storage, MongoDB database and OBS object storage facilitates the efficient storage and access of different types of data, especially the processing of unstructured data. The combination of microservice architecture and Docker containers makes the system highly scalable and flexible, and can be dynamically expanded according to business needs. The message push mechanism based on the MQTT protocol ensures instant information exchange between intranet and extranet users of the system, which is especially suitable for real-time interaction between mobile terminals and intranet users, and is conducive to the interconnection of multiple network types and ensures the security, stability and scalability of the system.

[0028] The Internet area includes external network application servers and security monitoring scanning servers, which are used to deploy mobile front-end pages and external network uploaded file security scanning services; Furthermore, the Internet Region includes: The security scanning service is used to perform virus scanning when uploading files on the external network mobile terminal. The Internet region is connected to a security interaction platform, which authenticates the front-end page service that accesses the Internet region from the external network mobile terminal.

[0029] Furthermore, the Internet Region includes: The external network application server and security monitoring scanning server are connected to the external network firewall, and the external network firewall is connected to the PC user; Furthermore, the Internet region operation process includes: Mobile users on the external network first access the front-end page of the platform. The access operation needs to be authenticated by the secure interactive platform. When the user uploads a file on the front-end page, the file is sent to the secure interactive platform and the external network application server through the external network, and then passes through the security monitoring scanning server for security inspection. After the file passes the security scan, it is marked as qualified and transmitted to the internal network for storage through the isolation device; Specifically, the Internet region deploys mobile front-end pages and external network uploaded file security scanning services through external network application servers and security monitoring scanning servers, and uses a secure interactive platform to authenticate users who access the front-end pages from external mobile terminals. The external network firewall is connected to PC users to improve the security of external access, which is conducive to further strengthening the security and access control of the system, while protecting the data and resources of the internal network from external threats.

[0030] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements will not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An online communication system for intercommunication between multiple network types, characterized in that: include: A management information zone, wherein the management information zone is connected to an isolation device, and the isolation device is connected to an Internet zone; The management information area includes an application service area, a data storage area and an Nginx proxy server; The Internet region includes an external network application server and a security monitoring scanning server, which are used to deploy mobile terminal front-end pages and external network uploaded file security scanning services.

2. The online communication system for multiple network types according to claim 1, characterized in that: The management information area includes: The Nginx proxy server is used to map the IP and port of the intranet application service to the information extranet, and deploy the front-end page of the intranet at the same time. The Nginx proxy server is connected to the intranet firewall.

3. The online communication system for multiple network types according to claim 2, characterized in that: The management information area includes: The intranet firewall is connected to an internal network, and the internal network is connected to intranet Web users and intranet client users.

4. The online communication system for multiple network types according to claim 3, characterized in that: The Internet mega-regions include: The security scanning service is used to perform virus scanning when uploading files on the external network mobile terminal. The Internet region is connected to a security interaction platform, and the security interaction platform authenticates the front-end page service accessing the Internet region in the external network mobile terminal.

5. The online communication system for multiple network types according to claim 4, characterized in that: The Internet mega-regions include: The external network application server and the security monitoring scanning server are connected to an external network firewall, and the external network firewall is connected to a PC user.

6. The online communication system for multiple network types according to claim 5, characterized in that: The management information zone operation process includes: The management information is divided into two parts: front-end application and back-end service. The back-end service is deployed based on Docker container, and the front-end service deploys ECS elastic cloud server. The structured database adopts MySql database, relational data adopts RDS storage, and unstructured data adopts MongoDB database and OBS object storage.

7. The online communication system for multiple network types according to claim 6, characterized in that: The management information zone operation process includes: The CCE microservice deployment architecture is adopted, and the Docker containers are used to deploy basic services and application services respectively. The basic services include registration center, gateway service, file management, log management and system management, and the application services include file transfer assistant, user organization management, search and client settings.

8. The online communication system for multiple network types according to claim 7, characterized in that: The management information zone operation process includes: The ECS elastic cloud server deploys communication IM service, front-end service, and document online preview and editing service respectively. The RDS stores relational data, MongoDB stores non-relational data, and unstructured data such as documents, pictures, and audio are stored in OBS object storage.

9. The online communication system for multiple network types according to claim 8, characterized in that: The Internet zone operation process includes: Mobile users on the external network first access the front-end page of the platform. The access operation needs to be authenticated by the secure interaction platform. When the user uploads a file on the front-end page, the file is sent to the secure interaction platform and the external network application server through the external network, and then passes through the security monitoring scanning server for a security check. After passing the security scan, the file is marked as qualified and transmitted to the intranet for storage through the isolation device.

10. The online communication system for multiple network types according to claim 9, characterized in that: The Nginx proxy server operation process includes: The external network mobile terminal sends message A; The external network server nginx forwards message A to the interface B of the internal network server through the MQTT protocol address mapped by the proxy internal network; The intranet server sends message A to other terminals through interface B and stores it in the database; The intranet client replies to message C and sends message C to the external network mobile terminal through the MQTT protocol; The external network mobile terminal receives real-time reply information from the internal network client by subscription.

Images