Remote cooperative control method based on dial-up cloud VPN (Virtual Private Network) and related device

Abstract

The invention provides a remote cooperative control method based on a dial-up cloud VPN and a related device, and the method comprises the steps: creating a Linux virtual machine on a notebook computer carried to a site, and enabling the Linux virtual machine to be communicated with a host in a bridging manner; the method comprises the following steps: installing Strongswan on a Linux host, configuring VPN (Virtual Private Network) connection, and dialing to a VPN Server server on a POP (Point of Performance) point; the load of the Socks5 agent is dynamically monitored and adjusted on the VPN Server server; in response to connection of the remote implementation personnel with the VPN, starting a multi-layer security authentication and encryption mechanism; an integrated remote desktop protocol tool is installed and configured on a Linux server on a construction site, and a plurality of remote personnel are simultaneously connected to a virtual desktop on the site to perform real-time cooperative operation. The method can support multiple persons to carry out remote implementation at the same time, the delivery efficiency is improved, and the number of field personnel is reduced.

Description

Technical Field

[0001] The present application belongs to the field of remote collaborative technology, and in particular, relates to a remote collaborative control method and related devices based on dial-up cloud VPN. Background Art

[0002] During the implementation of some projects, since public network was not available on site, a large number of personnel had to be dispatched to the site for delivery, which was not conducive to the parallel delivery of multiple projects and would also increase the rate cost. In order to increase efficiency, the toDesk+ hotspot method was used. Although it reduced the number of on-site delivery personnel to a certain extent, a computer on site could only allow one person to perform remote operation and could not allow multiple people to use it at the same time. In addition, this method also had many inconveniences during testing, which not only consumed a lot of network resources, but also could cause network congestion and performance degradation. Summary of the invention

[0003] In view of this, the present application aims to propose a remote collaborative control method and related devices based on dial-up cloud VPN to solve the problem that a computer on site can only allow one person to perform remote operation and cannot allow multiple people to use it at the same time, which not only consumes a large amount of network resources but also may cause network congestion and performance degradation.

[0004] To achieve the above purpose, the technical solution of this application is implemented as follows:

[0005] In a first aspect, the present application provides a remote collaborative control method based on dial-up cloud VPN, comprising:

[0006] Create a Linux virtual machine on the laptop brought to the site and connect it to the host using a bridge, so that it has access to both the public network and the intranet.

[0007] Install Strongswan on the Linux host and configure the VPN connection, dial to the VPN Server at the POP point to establish an encrypted tunnel;

[0008] Dynamically monitor and adjust the Socks5 proxy load on the VPN Server to ensure that each remote user can connect to the network through a different proxy;

[0009] In response to remote implementation personnel connecting to VPN, multi-layer security authentication and encryption mechanisms are enabled to ensure the security of data transmission between the construction site and remote personnel;

[0010] Install and configure the integrated remote desktop protocol tool on the Linux server at the construction site, and multiple remote personnel can simultaneously connect to the on-site virtual desktop for real-time collaborative operations.

[0011] In the second aspect, based on the same inventive concept, the present application also provides a remote collaborative control device based on dial-up cloud VPN, including:

[0012] The virtual machine creation module is configured to create a Linux virtual machine on the laptop brought to the site and connect it to the host using a bridge, so that it has access to both the public network and the intranet;

[0013] The host configuration module is configured to install Strongswan on the Linux host and configure the VPN connection to dial to the VPN Server at the POP point to establish an encrypted tunnel;

[0014] Load balancing module, dynamically monitors and adjusts the Socks5 proxy load on the VPN Server to ensure that each remote person can connect to the network through a different proxy;

[0015] A security encryption module is configured to enable a multi-layer security authentication and encryption mechanism in response to a remote implementation personnel connecting to a VPN, so as to ensure the security of data transmission between the construction site and the remote personnel;

[0016] The remote collaboration module is configured to install and configure an integrated remote desktop protocol tool on the Linux server at the construction site, so that multiple remote personnel can simultaneously connect to the on-site virtual desktop for real-time collaborative operations.

[0017] In a third aspect, based on the same inventive concept, the present application also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method described in the first aspect is implemented.

[0018] In a fourth aspect, based on the same inventive concept, the present application also provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the method described in the first aspect.

[0019] Compared with the prior art, the remote collaborative control method and related device based on dial-up cloud VPN described in this application have the following beneficial effects:

[0020] The remote collaborative control method and related devices based on dial-up cloud VPN described in this application can support multiple people to perform remote implementation at the same time, improve delivery efficiency, and reduce the number of on-site personnel; at the same time, during remote testing, the test environment is more friendly and the test efficiency is higher than using toDesk and other methods. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The drawings constituting a part of the present application are used to provide a further understanding of the present application. The illustrative embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0022] Figure 1 A flowchart of a remote collaborative control method based on dial-up cloud VPN described in an embodiment of the present application;

[0023] Figure 2 This is a schematic diagram of the structure of a remote collaborative control device based on dial-up cloud VPN described in an embodiment of the present application;

[0024] Figure 3 This is a schematic diagram of the hardware structure of the electronic device described in the embodiment of the present application. DETAILED DESCRIPTION

[0025] In order to make the objectives, technical solutions and advantages of the present application more clearly understood, the present application is further described in detail below in combination with specific embodiments and with reference to the accompanying drawings.

[0026] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present application should be the usual meanings understood by people with ordinary skills in the field to which the present application belongs. The "first", "second" and similar words used in the embodiments of the present application do not represent any order, quantity or importance, but are only used to distinguish different components. "Including" or "comprising" and similar words mean that the elements or objects appearing in front of the word cover the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0027] In the traditional remote collaborative control solution, each remote implementer needs to establish a connection to the construction site separately, which not only consumes a lot of network resources, but also may cause network congestion and performance degradation. In order to solve this problem, this embodiment provides a remote collaborative control method based on dial-up cloud VPN.

[0028] The embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0029] See also Figure 1 As shown, this embodiment provides a remote collaborative control method based on dial-up cloud VPN, which specifically includes the following steps:

[0030] Step S101: Create a Linux virtual machine on the laptop computer brought to the site, and connect it to the host computer using a bridge connection so that it has access to both the public network and the intranet.

[0031] Specifically, in this embodiment, a Linux virtual machine is created on a laptop computer brought to the site, and is connected to the host computer using a bridge, so that it has access to both the public network and the intranet, laying the foundation for subsequent VPN dial-up and proxy settings.

[0032] It should be noted that a Linux server is required at the construction site, which can be a virtual machine or a physical machine, and the server has the ability to access both the intranet and the public network;

[0033] Step S102: Install Strongswan on the Linux host and configure a VPN connection, and dial to the VPN Server at the POP point to establish an encrypted tunnel.

[0034] Specifically, in this embodiment, Strongswan is installed and configured on a Linux host so that it can use VPN to dial to the VPN Server at the POP point, dial VPN to the VPN Server at the POP point, and record the VPN address (such as 10.31.2.6) assigned by the VPN Server.

[0035] Step S103: Dynamically monitor and adjust the Socks5 proxy load on the VPN Server to ensure that each remote person can achieve network connection through a different proxy.

[0036] Specifically, in this embodiment, a lightweight load balancing module is deployed on the VPN Server to dynamically monitor the load of each Socks5 proxy (such as the number of connections, bandwidth consumption, response time, etc.), and automatically distribute connection requests to proxies with lower loads.

[0037] When multiple remote implementers connect at the same time, the VPN Server dynamically generates a Socks5 proxy configuration file based on the needs of the remote users and pushes it to the remote implementers' clients, allowing each user to connect through the load-balanced proxy.

[0038] At the same time, on this basis, the operating status of the Socks5 proxy is monitored in real time, and traffic distribution is adaptively adjusted to ensure that construction personnel can still access intranet resources efficiently and stably during peak hours.

[0039] In this step, since each construction site uses an independent Socks5 proxy in the traditional method and there is no load balancing strategy for multiple construction workers connecting at the same time, this embodiment introduces a proxy configuration based on dynamic load balancing, so that multiple remote personnel can efficiently access different target networks, and each remote user's request can be automatically distributed to different proxy nodes according to the real-time load, which can significantly improve the fluency of simultaneous remote collaboration of multiple people and reduce network latency and congestion problems, thereby avoiding performance bottlenecks and waste of system resources.

[0040] Step S104: In response to the remote implementation personnel connecting to the VPN, a multi-layer security authentication and encryption mechanism is enabled to ensure the security of data transmission between the construction site and the remote personnel.

[0041] Specifically, in this embodiment, when a remote person uses a VPN connection, in addition to the traditional username and password verification, a second authentication is added, that is, a one-time password (TOTP) generated by a mobile phone app or a hardware security key is used for identity authentication. Only users who pass the dual authentication can obtain VPN connection permissions.

[0042] All data transmitted through the VPN tunnel uses an end-to-end encryption (E2EE) mechanism. Even if the data passes through the VPN server, the server cannot decrypt the data content, ensuring that only remote implementation personnel and on-site servers can decrypt and access the data.

[0043] On the VPN Server side, different access permissions are set according to the different roles of construction personnel (such as engineers, technical support, managers, etc.) to ensure that construction personnel can only access network resources within their authorized scope to avoid data leakage risks.

[0044] This step ensures that data transmission between the construction site and remote personnel is encrypted and protected at multiple levels, greatly improving the security of the system.

[0045] Step S105: Install and configure an integrated remote desktop protocol tool on the Linux server at the construction site, and multiple remote personnel simultaneously connect to the virtual desktop at the site to perform real-time collaborative operations.

[0046] Specifically, in this embodiment, in order to further improve the efficiency of remote collaborative work, the present application integrates remote desktop (RDP) and collaborative operation functions, so that multiple remote personnel can simultaneously access the computer at the same construction site and perform real-time collaborative operations.

[0047] Furthermore, on the Linux server at the construction site, the integrated Remote Desktop Protocol (RDP) tool is installed and configured, allowing multiple remote personnel to simultaneously connect to the virtual desktop at the site. Through RDP, construction personnel can operate their workstations as if they were on site, and participate in different task assignments and problem solving at the same time.

[0048] Through the integrated remote desktop collaboration tool, multiple remote personnel can share desktop views in real time, mark drawings, discuss operation steps and interact. The collaborative operation function allows construction personnel to guide remote personnel through voice, text, or real-time graphics to solve on-site operational problems.

[0049] The tool also has operation recording and backtracking functions, that is, all remote desktop operations can be recorded for later backtracking, which is convenient for problem analysis and learning during the optimization process.

[0050] The method described in this embodiment can support multiple people to perform remote implementation at the same time, improve delivery efficiency, and reduce the number of on-site personnel; at the same time, during remote testing, the testing environment is more friendly and the testing efficiency is higher than using toDesk and other methods.

[0051] It should be noted that the above describes some embodiments of the present application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the above embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0052] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, an embodiment of the present application also provides a remote collaborative control device based on dial-up cloud VPN.

[0053] like Figure 2 As shown, the remote collaborative control device based on dial-up cloud VPN includes:

[0054] The virtual machine creation module 11 is configured to create a Linux virtual machine on the laptop computer brought to the site, and connect it to the host computer using a bridge connection so that it has access to both the public network and the intranet;

[0055] The host configuration module 12 is configured to install Strongswan on the Linux host and configure a VPN connection, and dial to the VPN Server at the POP point to establish an encrypted tunnel;

[0056] Load balancing module 13, dynamically monitors and adjusts the Socks5 proxy load on the VPN Server to ensure that each remote person can achieve network connection through a different proxy;

[0057] The security encryption module 14 is configured to enable a multi-layer security authentication and encryption mechanism in response to the remote implementation personnel connecting to the VPN to ensure the security of data transmission between the construction site and the remote personnel;

[0058] The remote collaboration module 15 is configured to install and configure an integrated remote desktop protocol tool on a Linux server at the construction site, so that multiple remote personnel can simultaneously connect to the virtual desktop at the site to perform real-time collaborative operations.

[0059] For the convenience of description, the above devices are described in terms of functions and are divided into various modules. Of course, when implementing the embodiments of the present application, the functions of each module can be implemented in the same or multiple software and / or hardware.

[0060] The device of the above embodiment is used to implement the corresponding method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be described in detail here.

[0061] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments and methods, an embodiment of the present application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method described in any of the above embodiments is implemented.

[0062] Figure 3 A more specific schematic diagram of the hardware structure of an electronic device provided in this embodiment is shown, and the device may include: a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040 are connected to each other through the bus 1050 in the device.

[0063] The processor 1010 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0064] The memory 1020 may be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 1020 may store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program codes are stored in the memory 1020 and are called and executed by the processor 1010.

[0065] The input / output interface 1030 is used to connect the input / output module to realize information input and output. The input / output module can be configured in the device as a component (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, etc.

[0066] The communication interface 1040 is used to connect a communication module (not shown) to realize communication interaction between the device and other devices. The communication module can realize communication through a wired mode (such as USB, network cable, etc.) or a wireless mode (such as mobile network, WIFI, Bluetooth, etc.).

[0067] The bus 1050 includes a path that transmits information between the various components of the device (eg, the processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040).

[0068] It should be noted that, although the above device only shows the processor 1010, the memory 1020, the input / output interface 1030, the communication interface 1040 and the bus 1050, in the specific implementation process, the device may also include other components necessary for normal operation. In addition, it can be understood by those skilled in the art that the above device may also only include the components necessary for implementing the embodiments of the present specification, and does not necessarily include all the components shown in the figure.

[0069] The electronic device of the above embodiment is used to implement the corresponding method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be described in detail here.

[0070] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments, the present application also provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the method described in any of the above embodiments.

[0071] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0072] The computer instructions stored in the storage medium of the above embodiments are used to enable the computer to execute the method described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0073] Those skilled in the art should understand that the discussion of any of the above embodiments is merely illustrative and is not intended to imply that the scope of the present application (including the claims) is limited to these examples. In line with the concept of the present application, the technical features in the above embodiments or different embodiments may be combined, the steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present application as described above, which are not provided in detail for the sake of simplicity.

[0074] In addition, to simplify the description and discussion, and in order not to make the embodiments of the present application difficult to understand, the known power supply / ground connection with the integrated circuit (IC) chip and other components may or may not be shown in the provided drawings. In addition, the device can be shown in the form of a block diagram to avoid making the embodiments of the present application difficult to understand, and this also takes into account the fact that the details of the implementation of these block diagram devices are highly dependent on the platform to be implemented in the embodiments of the present application (that is, these details should be fully within the scope of understanding of those skilled in the art). In the case of elaborating specific details (e.g., circuits) to describe exemplary embodiments of the present application, it is obvious to those skilled in the art that the embodiments of the present application can be implemented without these specific details or when these specific details are changed. Therefore, these descriptions should be considered to be illustrative rather than restrictive.

[0075] Although the present application has been described in conjunction with specific embodiments of the present application, many replacements, modifications and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may use the embodiments discussed.

[0076] The embodiments of the present application are intended to cover all such substitutions, modifications and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present application should be included in the scope of protection of the present application.

Claims

1. A remote collaborative control method based on dial-up cloud VPN, characterized in that: include: Create a Linux virtual machine on the laptop brought to the site and connect it to the host using a bridge, so that it has access to both the public network and the intranet. Install Strongswan on the Linux host and configure the VPN connection, dial to the VPN Server at the POP point to establish an encrypted tunnel; Dynamically monitor and adjust the Socks5 proxy load on the VPN Server to ensure that each remote user can connect to the network through a different proxy; In response to remote implementation personnel connecting to VPN, multi-layer security authentication and encryption mechanisms are enabled to ensure the security of data transmission between the construction site and remote personnel; Install and configure the integrated remote desktop protocol tool on the Linux server at the construction site, and multiple remote personnel can simultaneously connect to the on-site virtual desktop for real-time collaborative operations.

2. The method according to claim 1, characterized in that Dynamically monitor and adjust the Socks5 proxy load on the VPN Server to ensure that each remote person can connect to the network through a different proxy, including: By deploying a lightweight load balancing module on the VPN Server, the load of each Socks5 proxy is dynamically monitored and the connection request is automatically distributed to the proxy with lower load. In response to multiple remote implementers connecting at the same time, the VPN Server dynamically generates a Socks5 proxy configuration file based on the needs of the remote users and pushes it to the remote implementers' clients so that each user can connect through the load-balanced proxy.

3. The method according to claim 2, characterized in that Also includes: Monitor the running status of the Socks5 proxy in real time and adaptively adjust traffic distribution to ensure that construction personnel can stably access intranet resources during peak hours.

4. The method according to claim 1, characterized in that: The multi-layer security authentication and encryption mechanism includes a two-factor authentication mechanism and an end-to-end encryption mechanism; The two-factor authentication mechanism includes adding a second identity authentication based on username and password verification when a remote person uses a VPN connection, so that users who pass the dual authentication obtain VPN connection permissions.

5. The method according to claim 4, characterized in that The second level of identity authentication includes: Authentication is performed through a one-time password generated by a mobile app or a hardware security key.

6. The method according to claim 4, characterized in that Also includes: Multi-level user authority control: On the VPN Server side, different access rights are set according to the roles of construction personnel to ensure that construction personnel can only access network resources within their authorized scope.

7. The method according to claim 1, characterized in that Also includes: With the integrated remote desktop collaboration tool, multiple remote personnel can share desktop views in real time to annotate drawings, discuss operating procedures, and interact with each other.

8. A remote collaborative control device based on dial-up cloud VPN, characterized in that: include: The virtual machine creation module is configured to create a Linux virtual machine on the laptop brought to the site and connect it to the host using a bridge, so that it has access to both the public network and the intranet; The host configuration module is configured to install Strongswan on the Linux host and configure the VPN connection to dial to the VPN Server at the POP point to establish an encrypted tunnel; Load balancing module, dynamically monitors and adjusts the Socks5 proxy load on the VPN Server to ensure that each remote person can connect to the network through a different proxy; A security encryption module is configured to enable a multi-layer security authentication and encryption mechanism in response to a remote implementation personnel connecting to a VPN, so as to ensure the security of data transmission between the construction site and the remote personnel; The remote collaboration module is configured to install and configure an integrated remote desktop protocol tool on the Linux server at the construction site, so that multiple remote personnel can simultaneously connect to the on-site virtual desktop for real-time collaborative operations.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the method according to any one of claims 1 to 7 is implemented.

10. A non-transitory computer-readable storage medium, characterized in that: in, The non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to cause a computer to execute the method according to any one of claims 1 to 7.

Images