Video conference system communication system based on VPN tunnel and method for establishing video conference system communication system

Abstract

The invention relates to the technical field of video conference systems, and particularly discloses a video conference system communication system based on a VPN tunnel and a method for establishing the video conference system communication system, the system comprises a headquarter topological structure, a branch topological structure and an IPSEC VPN tunnel topological structure, the headquarter topology sub-structure comprises a first access layer, a core layer and a first network boundary exit which are connected in sequence, and the first access layer comprises a first network access switch and first conference equipment connected with the first network access switch; the branch mechanism topological structure comprises a second access layer and a second network boundary exit which are connected in sequence, and the second access layer comprises a second network access switch and a second conference device connected with the second network access switch; and the IPSEC VPN tunnel topological structure comprises an IPSEC VPN tunnel protocol module which is respectively connected with the first network boundary outlet and the second network boundary outlet.

Description

Technical Field

[0001] This application relates to the technical field of video conferencing systems, and particularly to a communication system for a video conferencing system based on a VPN tunnel and a method for establishing a communication system for a video conferencing system. Background Art

[0002] Suppose there is a large enterprise. Its headquarters is located in Beijing, and it has 3 branches in other provinces and cities. There is no internal private network formed by using operator dedicated lines between the headquarters and the branches. Daily business work and communication are carried out based on enterprise-level Internet dedicated lines. When holding important meetings, considering the sensitivity and security of the meeting content, it is not appropriate to hold them online using Internet software. Personnel from the branches need to gather at the headquarters to attend the meeting offline, resulting in an increase in time costs and personnel travel costs.

[0003] Now this enterprise has a need to save meeting expenses. Therefore, building a dedicated remote video conferencing system using professional video conferencing equipment and systems has become the preferred solution. Currently, for relatively mature video conferencing equipment and systems on the market, when building based on the Internet scenario, in order to ensure that the audio and video traffic of the video conference can be mutually transmitted along a certain path, special function authorization from the manufacturer is required. Moreover, even with the manufacturer's function authorization, the overall structure of the existing network must be adjusted according to the manufacturer's requirements in terms of network architecture. Public IP addresses need to be configured for the meeting equipment and systems, making them exposed to the Internet, extremely vulnerable to various network attacks, and there is a risk of video conference traffic being stolen, presenting security hazards. Summary of the Invention

[0004] The purpose of this application is to provide a communication system for a video conferencing system based on a VPN tunnel and a method for establishing a communication system for a video conferencing system, so as to solve the problems in the prior art that video conferencing equipment and systems require special function authorization from the manufacturer, and the overall structure of the existing network must be adjusted according to the manufacturer's requirements. Public IP addresses need to be configured for the meeting equipment and systems, making them exposed to the Internet, extremely vulnerable to various network attacks, and there is a risk of video conference traffic being stolen, presenting security hazards.

[0005] To achieve the above purpose, an embodiment of this application provides a communication system for a video conferencing system based on a VPN tunnel, including: a headquarters topology structure, a branch topology structure, and an IPSEC VPN tunnel topology structure, where

[0006] The headquarters topology sub-structure includes a first access layer, a core layer, and a first network boundary exit connected in sequence. The first access layer includes: a first network access switch, and a first meeting device connected to the first network access switch;

[0007] The branch topology structure includes a second access layer and a second network boundary exit connected in sequence. The second access layer includes: a second network access switch, and a second conference device connected to the second network access switch;

[0008] The IPSEC VPN tunnel topology structure includes an IPSEC VPN tunnel protocol module respectively connected to the first network boundary exit and the first network boundary exit.

[0009] Optionally, the core layer includes a network core switch;

[0010] The first network boundary exit includes a first network boundary router;

[0011] The first conference device includes a multipoint conference control unit, a multipoint conference scheduling unit, and a local video conference client.

[0012] Optionally, the local video conference client is connected to the audio system and video system of the meeting room through audio and video cables.

[0013] Optionally, the second access layer includes a second network access switch;

[0014] The second network boundary exit includes a second network boundary router;

[0015] The second conference device includes a remote video conference client.

[0016] Optionally, the remote video conference client is connected to the audio system and video system of the meeting room through audio and video cables.

[0017] Optionally, the first network boundary router of the headquarters topology structure negotiates with the second network boundary router of the branch topology structure through the IPSEC VPN tunnel protocol module to establish an SA security association, and then forms a network channel on the Internet through an encryption algorithm.

[0018] The embodiment of the present application also provides a method for establishing a communication system of a video conferencing system, including:

[0019] Establish an IPSEC VPN tunnel protocol module between the first network boundary exit and the first network boundary exit. After the IPSEC VPN tunnel protocol module is successfully established, configure respective private IP addresses on the headquarters topology structure and each branch topology structure;

[0020] Test whether the network communication from the multipoint conference control unit, multipoint conference scheduling unit, and local video conference client of the headquarters topology structure to the remote video conference client of each branch topology structure is normal;

[0021] According to the preliminary information plan, register the local video conferencing client and the remote video conferencing client to the multi-point conference scheduling unit, and then through the multi-point conference control unit, realize conference control.

[0022] Optionally, it further includes:

[0023] Conduct off-site joint debugging tests for point-to-point and multi-point video conferencing systems. The test content includes network, sound, and image. Through the test, judge whether the network communication is normal, whether the local video conferencing client and the remote video conferencing client can join the meeting normally, and whether the conference control function is normal.

[0024] The embodiments of the present application have the following advantages:

[0025] 1. Cost savings

[0026] The networking method is more flexible, without the need to make major changes to the existing network, and does not rely on the function authorization of equipment manufacturers. While achieving the construction goal, it reduces the workload, shortens the project construction cycle, and reduces the project construction and maintenance costs;

[0027] 2. Improved forwarding efficiency

[0028] By establishing an IPSEC VPN tunnel, point-to-point routing communication is achieved between the headquarters and each branch. During the communication process, the number of routing addressing and forwarding times is reduced, the overall network overhead value is lowered, the forwarding efficiency of data and traffic is improved, and the communication quality is enhanced.

[0029] 3. Secure communication

[0030] For the enterprise internal private network communication based on the IPSEC VPN tunnel, the relevant devices do not need to directly expose the public network IP address and protocol port to the Internet, avoiding being maliciously attacked by lawbreakers. Based on the dedicated tunnel formed by the security encryption algorithm, the data in the tunnel is encrypted during transmission. Even if the traffic in the tunnel is illegally stolen, it cannot be decrypted and restored, ensuring the security of sensitive meetings.

[0031] 4. Business empowerment

[0032] Multiple interesting traffic can be added to one IPSEC VPN tunnel, which can support the forwarding of other business traffic of the enterprise and no longer serves the video conferencing system alone, helping to improve the overall operation and production efficiency of the enterprise. Description of the drawings

[0033] To more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following will briefly introduce the accompanying drawings required for the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only exemplary, and for those of ordinary skill in the art, without creative efforts, other implementation drawings can also be obtained based on the provided drawings.

[0034] Figure 1 The structural schematic diagram of a communication system for a video conferencing system based on a VPN tunnel provided by at least one embodiment of the present application;

[0035] Figure 2 The flowchart of a method for establishing a communication system for a video conferencing system provided by at least one embodiment of the present application. Specific Embodiments

[0036] The following specific embodiments illustrate the embodiments of the present application. Those familiar with this technology can easily understand other advantages and effects of the present application from the content disclosed in this specification. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of them. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present application.

[0037] In the description of the present application, it should be noted that the orientation or positional relationship indicated by the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc. is based on the orientation or positional relationship shown in the accompanying drawings. It is only for the convenience of describing the present application and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be construed as a limitation to the present application. In addition, the terms "first", "second", "third", etc. are only used for descriptive purposes and cannot be understood as indicating or implying relative importance. Unless otherwise clearly defined and limited, the terms "set", "installed", "connected", "connected" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be directly connected or indirectly connected through an intermediate medium, and it can be the communication inside two elements. For those of ordinary skill in the art, the specific meanings of the above terms in the present application can be understood according to specific circumstances.

[0038] In addition, the technical features involved in different embodiments of the present application described below can be combined with each other as long as they do not conflict with each other.

[0039] The embodiments of the present application provide a communication system for a video conferencing system based on a VPN tunnel. Refer to Figure 1, including:

[0040] (1) Headquarters topology

[0041] The headquarters topology sub-structure includes a first access layer, a core layer, and a first network boundary exit that are connected in sequence;

[0042] The first access layer includes: a first network access switch, and a first conferencing device connected to the first network access switch.

[0043] In some embodiments, the core layer includes a network core switch;

[0044] The first network boundary exit includes a first network boundary router;

[0045] The first conferencing device includes a multi-point conferencing control unit, a multi-point conferencing scheduling unit, and a local video conferencing client.

[0046] In some embodiments, the local video conferencing client is connected to the audio system and video system of the meeting room through audio and video cables. To realize the collection and playback of local audio and video signals.

[0047] (2) Branch office topology

[0048] The branch office topology includes a second access layer and a second network boundary exit that are connected in sequence;

[0049] The second access layer includes: a second network access switch, and a second conferencing device connected to the second network access switch.

[0050] In some embodiments, the second access layer includes a second network access switch;

[0051] The second network boundary exit includes a second network boundary router;

[0052] The second conferencing device includes a remote video conferencing client.

[0053] In some embodiments, the remote video conferencing client is connected to the audio system and video system of the meeting room through audio and video cables. To realize the collection and playback of remote audio and video signals.

[0054] (3) IPSEC VPN tunnel topology

[0055] The IPSEC VPN tunnel topology includes an IPSEC VPN tunnel protocol module that is respectively connected to the first network boundary exit and the first network boundary exit.

[0056] In some embodiments, the first network boundary router of the headquarters topology structure negotiates with the second network boundary router of the branch topology structure through the IPSEC VPN tunnel protocol module to establish an SA security alliance, and then forms an exclusive, virtual, and secure network channel for the enterprise on the Internet through an encryption algorithm.

[0057] Specifically, both the headquarters and the branches use enterprise-level Internet dedicated lines and have fixed public Internet IP addresses; on the network boundary routers of each unit (including the first network boundary router and the second network boundary router), the IPSEC VPN tunnel protocol is configured to establish a virtual private encrypted network channel between the headquarters and the branches. The first network boundary router of the headquarters serves as the server, and the second network boundary router of the branch serves as the client, realizing secure communication between the internal devices of the headquarters and each branch based on the Internet.

[0058] Specifically, through the establishment of an IPSEC VPN tunnel, internal private network access is realized between network nodes, solving the problem that video conference network traffic cannot be forwarded across the internal and external networks on the Internet when networking based on private IP addresses.

[0059] In some embodiments, according to actual needs, an interesting traffic policy can be established to allow the traffic of all or part of the internal private IP addresses of the unit to be forwarded and transmitted in the VPN tunnel, increasing the diversity of network functions.

[0060] Reference Figure 2 , the embodiment of the present application further provides a method for establishing a video conferencing system communication system. The video conferencing system communication system refers to the foregoing embodiments and includes:

[0061] An IPSEC VPN tunnel protocol module is established between the first network boundary exit and the first network boundary exit. After the IPSEC VPN tunnel protocol module is successfully established, the private IP addresses of each are configured on the headquarters topology structure and each branch topology structure respectively;

[0062] Test whether the network communication between the multi-point conference control unit, the multi-point conference scheduling unit of the headquarters topology structure and the remote video conference client of each branch topology structure is normal;

[0063] Register the local video conference client and the remote video conference client to the multi-point conference scheduling unit according to the previous information plan, and then realize conference control through the multi-point conference control unit;

[0064] Carry out off-site joint debugging tests for point-to-point and multi-point video conferencing systems. The test content includes conventional contents such as network, sound, and image. Through the tests, judge whether the network communication is normal, whether the local video conferencing client and the remote video conferencing client can join the meeting normally, and whether the meeting control function is normal, etc.

[0065] In summary, compared with the prior art, the advantages of the technical solution of this application include:

[0066] 1. Cost savings

[0067] The networking method is more flexible, without the need for major modifications to the existing network, and does not rely on the function authorization of equipment manufacturers. While achieving the construction goal, it reduces the workload, shortens the project construction cycle, and reduces the project construction and maintenance costs;

[0068] 2. Improved forwarding efficiency

[0069] By establishing an IPSEC VPN tunnel, point-to-point routing communication is achieved between the headquarters and each branch. During the communication process, the number of routing addressings and forwardings is reduced, the overall network overhead value is lowered, the forwarding efficiency of data and traffic is improved, and the communication quality is enhanced.

[0070] 3. Secure communication

[0071] For the enterprise internal private network communication based on the IPSEC VPN tunnel, relevant devices do not need to directly expose public IP addresses and protocol ports to the Internet, avoiding malicious attacks by lawbreakers. Based on the dedicated tunnel formed by the security encryption algorithm, the data in the tunnel is encrypted and transmitted. Even if the traffic in the tunnel is illegally stolen, it cannot be decrypted and restored, ensuring the security of sensitive meetings.

[0072] 4. Business empowerment

[0073] Multiple interesting traffic can be added to one IPSEC VPN tunnel, which can support the forwarding of other business traffic of the enterprise and no longer serves only the video conferencing system alone, helping to improve the overall operation and production efficiency of the enterprise.

[0074] Note that, unless otherwise directly stated, all features disclosed in this specification (including any appended claims, abstract, and drawings) may be replaced by alternative features serving the same, equivalent, or similar purposes. Thus, unless otherwise expressly stated, each feature disclosed is only an example of a group of equivalent or similar features. Where used, further, preferably, furthermore, and more preferably are simple introductions for elaborating another embodiment on the basis of the foregoing embodiments. The content following the further, preferably, furthermore, or more preferably in combination with the foregoing embodiments constitutes the complete composition of another embodiment. Combinations of several further, preferably, furthermore, or more preferably settings following the same embodiment can form yet another embodiment at will.

[0075] In the implementation of functions and steps, the corresponding functions and steps in each embodiment may also occur in an order different from that shown. For example, two consecutive functions and steps may actually be executed or implemented substantially in parallel, and they may sometimes be executed or implemented in the reverse order, depending on the functions involved.

[0076] Although the present application has been described in detail above with general descriptions and specific embodiments, modifications or improvements can be made thereto on the basis of the present application, which will be obvious to those skilled in the art. Therefore, these modifications or improvements made without departing from the spirit of the present application fall within the scope of protection required by the present application.

Claims

1. A video conferencing system communication system based on VPN tunnel, characterized in that: include: Headquarters topology, branch office topology and IPSEC VPN tunnel topology, where: The headquarters topology substructure includes a first access layer, a core layer and a first network boundary exit connected in sequence, wherein the first access layer includes: a first network access switch, and a first conference device connected to the first network access switch; The branch office topology structure includes a second access layer and a second network boundary exit connected in sequence, the second access layer includes: a second network access switch, and a second conference device connected to the second network access switch; The IPSEC VPN tunnel topology structure includes IPSEC VPN tunnel protocol modules respectively connected to the first network boundary exit and the first network boundary exit.

2. The VPN tunnel-based video conferencing system communication system according to claim 1, characterized in that: The core layer includes a network core switch; The first network boundary egress comprises a first network boundary router; The first conference device includes a multipoint conference control unit, a multipoint conference scheduling unit and a local video conference client.

3. The VPN tunnel-based video conferencing system communication system according to claim 2, characterized in that: The local video conference client is connected to the audio system and the video system of the conference room via an audio line and a video line.

4. The video conferencing system communication system based on VPN tunnel according to claim 1, characterized in that: The second access layer includes a second network access switch; The second network boundary egress comprises a second network boundary router; The second conference device includes a remote video conference client.

5. The VPN tunnel-based video conferencing system communication system according to claim 4, characterized in that: The remote video conference client is connected to the audio system and the video system of the conference room via an audio line and a video line.

6. The VPN tunnel-based video conferencing system communication system according to claim 1, characterized in that: The first network border router of the headquarters topology structure and the second network border router of the branch office topology structure negotiate through the IPSEC VPN tunnel protocol module to establish an SA security alliance, and then form a network channel on the Internet through an encryption algorithm.

7. A method for establishing a video conferencing system communication system as claimed in any one of claims 1 to 6, characterized in that: include: An IPSEC VPN tunnel protocol module is established between the first network boundary exit and the first network boundary exit. When the IPSEC VPN tunnel protocol module is successfully established, respective private IP addresses are configured on the headquarters topology and each branch topology; Test whether the network communication between the multipoint conference control unit, multipoint conference scheduling unit and local video conference client in the headquarters topology structure and the remote video conference client in the branch topology structure is normal; The local video conference client and the remote video conference client are registered to the multi-point conference scheduling unit according to the preliminary information planning, and then the conference control is realized through the multi-point conference control unit.

8. The method for establishing a video conference system communication system according to claim 7, characterized in that: Also includes: Conduct remote joint debugging tests on point-to-point and multi-point video conferencing systems. The test content includes network, sound and image. The test determines whether the network communication is normal, whether the local video conferencing client and the remote video conferencing client can join the conference normally, and whether the conference control function is normal.

Images