Internal and external network webtc video communication method and system in network isolation environment

Abstract

The invention provides an internal and external network webtc video communication method and system in a network isolation environment, and relates to the technical field of secure cross-network transmission, and the method comprises the steps: initializing an external network terminal and an internal network terminal, and obtaining to-be-exchanged SDP data; in a cross-domain process, cross-domain interaction of data is realized through a signaling proxy service, a p2p proxy path is dynamically created, the signaling proxy service dynamically generates a DTLS proxy service for an extranet terminal according to a p2p address in SDP data of the extranet terminal, the p2p address in the SDP protocol is converted into a DTLS proxy address, and the DTLS proxy address is transmitted to the extranet terminal. The extranet terminal can realize cross-domain p2p communication with the intranet terminal on the other side of the network through the proxy address; wherein the DTLS is a man-in-the-middle proxy, in the DTLS proxy process, the encrypted data is decrypted by using the secret key to obtain plaintext data, and the plaintext data is ferried to an intranet terminal on the other side of the network after being subjected to security check to realize cross-domain p2p communication.

Description

Technical Field

[0001] This disclosure relates to the field of secure cross-network transmission technology, specifically to a WebRTC video communication method and system for internal and external networks in a network isolation environment. Background Technology

[0002] The statements in this section are merely background information relating to this disclosure and do not necessarily constitute prior art.

[0003] Traditional network isolation and data exchange products typically require pre-configuring the proxy address and proxy port of the target server. The proxy port then receives, processes, and forwards network protocol data in real time. When one proxy receives network protocol data, it strips away the application layer and lower layers of the data, only forwarding the application layer data to the other side of the network. When the other proxy receives the forwarded application layer data, it reassembles it into complete network protocol data using protocol reassembly, and finally forwards it to the target network.

[0004] For client / server cross-domain access models with fixed communication addresses and ports, secure cross-domain access can be achieved through technologies such as pre-configured proxy addresses and ports, protocol stripping and reassembly, application data security checks, and data transfer. However, due to the inherent characteristics of the WebRTC protocol, current combinations of these technologies cannot meet the requirements, and the specific problems are as follows: (1) Inability to proxy dynamic communication addresses. The WebRTC communication model includes two types of communication channels: the signaling channel between the terminal and the signaling server, and the P2P data channel between terminals. The server communication address and port of the signaling channel are fixed and can be predicted in advance; however, the communication address and port of the P2P data channel are dynamic and cannot be predicted in advance. Since the WebRTC protocol requires any terminal to exchange their P2P communication addresses and ports with the signaling server before conducting P2P data communication, their communication addresses and ports are dynamically generated. Therefore, existing technical implementations cannot pre-set the proxy address and proxy port of the target terminal when the target terminal's communication address and port cannot be predicted in advance, and cannot meet the cross-domain access requirements of the P2P channel in the WebRTC scenario.

[0005] (2) Security checks cannot be performed on data in encrypted data channels. In cross-domain access scenarios, since the two sides of the network belong to different security domains, their security levels, compliance requirements, and security environments are inconsistent. Therefore, it is necessary to perform security checks on data exchanged across network domains to meet the security requirements of each security domain. The traditional technical implementation is to strip the network protocol data from the application layer protocol and then perform security checks on the application layer data through methods such as protocol analysis. The checks include protocol instruction filtering, access control, content filtering, and virus scanning. Only after passing the checks can the data be transmitted to the other side of the network domain. However, in the WebRTC protocol framework, its p2p data channel uses the DTLS (Datagram Transport Layer Security) encryption protocol. This protocol is a UDP-adapted version of the TLS protocol, designed specifically for unreliable transport layers (such as UDP), providing encryption, authentication, and data integrity. Therefore, encrypted application layer data cannot be security checked. Summary of the Invention

[0006] To address the aforementioned issues, this disclosure proposes a WebRTC video communication method and system for internal and external networks in a network isolation environment. It employs a dynamically created proxy path method to implement communication proxying for dynamic WebRTC P2P communication addresses, and a DTLS man-in-the-middle proxy method to implement security checks on the DTLS data channel. Ultimately, it solves the problem of secure cross-network P2P transmission of WebRTC by dynamically creating DTLS man-in-the-middle proxy paths.

[0007] According to some embodiments, the present disclosure adopts the following technical solutions: A method for WebRTC video communication between internal and external networks in a network isolation environment includes: Initialize external and internal network terminals and obtain the SDP data to be exchanged; During cross-domain communication, data interaction across domains is achieved through a signaling proxy service. A p2p proxy path is dynamically created. The signaling proxy service dynamically generates a DTLS proxy service for the external terminal based on the p2p address in the SDP data of the external terminal, and converts the p2p address in the SDP protocol into a DTLS proxy address. The external terminal can then communicate with the internal terminal on the other side of the network through the proxy address. DTLS is a man-in-the-middle proxy. During the DTLS proxy process, the encrypted data is decrypted using a key to obtain plaintext data. After security checks, the plaintext data is transferred to the intranet terminal on the other side of the network, realizing cross-domain p2p communication.

[0008] According to some embodiments, the present disclosure adopts the following technical solutions: A WebRTC video communication system for internal and external networks in a network isolation environment includes: The initialization module is used to initialize external network terminals and internal network terminals and obtain SDP data to be exchanged. The cross-network communication module is used to realize cross-network domain data interaction through signaling proxy service during cross-network domain processes. It dynamically creates p2p proxy paths. The signaling proxy service dynamically generates DTLS proxy service for the external network terminal based on the p2p address in the SDP data of the external network terminal, and converts the p2p address in the SDP protocol into the DTLS proxy address. The external network terminal can realize cross-network domain p2p communication with the internal network terminal on the other side of the network through the proxy address. DTLS is a man-in-the-middle proxy. During the DTLS proxy process, the encrypted data is decrypted using a key to obtain plaintext data. After security checks, the plaintext data is transferred to the intranet terminal on the other side of the network, realizing cross-domain p2p communication.

[0009] According to some embodiments, the present disclosure adopts the following technical solutions: A computer program product includes a computer program that, when executed by a processor, implements the WebRTC video communication method for internal and external networks in a network isolation environment.

[0010] According to some embodiments, the present disclosure adopts the following technical solutions: A non-transitory computer-readable storage medium is provided for storing computer instructions, which, when executed by a processor, implement the WebRTC video communication method between internal and external networks in a network isolation environment.

[0011] According to some embodiments, the present disclosure adopts the following technical solutions: An electronic device includes a processor, a memory, and a computer program; wherein the processor is connected to the memory, the computer program is stored in the memory, and when the electronic device is running, the processor executes the computer program stored in the memory to enable the electronic device to perform a WebRTC video communication method between internal and external networks in a network isolation environment.

[0012] Compared with the prior art, the beneficial effects of this disclosure are as follows: This disclosure discloses a WebRTC video communication method for internal and external networks in a network isolation environment. In cross-domain scenarios, external and internal network terminals exchange signaling addresses for subsequent P2P communication through a signaling proxy service. During the exchange, the signaling proxy service dynamically generates a DTLS proxy service for the terminal based on its P2P address and replaces the P2P address in the SDP protocol with the DTLS proxy address. Subsequently, terminals in different network domains can communicate with each other via the proxy address, solving the problem that the original P2P communication addresses cannot communicate directly.

[0013] This disclosure discloses a WebRTC video communication method for internal and external networks in a network isolation environment. During the DTLS proxy process, when an external network terminal sends data to the proxy server, the proxy server uses a key to decrypt the encrypted data, obtaining plaintext data. After security checks, the plaintext data is relayed to the other side of the network. The proxy client on the other side receives the plaintext data, uses the SSL transmission encryption key on this side to encrypt the plaintext data, and then sends it to the internal network terminal via the network. When the internal network server responds to the proxy client, the proxy client uses a key to decrypt the response data, obtaining plaintext data. After security checks, the plaintext data is relayed to the other side of the network. The proxy server on the other side receives the plaintext data, uses the SSL transmission encryption key on this side to encrypt the plaintext data, and then sends it to the external network client via the network. Because DTLS is a man-in-the-middle proxy, it has the ability to decrypt SSL data, solving the problem that DTLS encrypted data must undergo security checks before cross-network transmission.

[0014] This disclosure discloses a WebRTC video communication method for internal and external networks in a network isolation environment, which enables secure P2P communication between a terminal in one network domain and another network domain, while also ensuring that P2P communication with other terminals in the same network domain is not affected. Attached Figure Description

[0015] The accompanying drawings, which form part of this disclosure, are used to provide a further understanding of this disclosure. The illustrative embodiments of this disclosure and their descriptions are used to explain this disclosure and do not constitute an undue limitation of this disclosure.

[0016] Figure 1 This is a combination of protocol proxy technologies for existing network isolation environments; Figure 2 A schematic diagram of the communication channel for the existing WebRTC communication model; Figure 3 This is a schematic diagram of a cross-domain proxy for Wetrtc, as described in an embodiment of this disclosure. Figure 4This is a schematic diagram of a DTLS man-in-the-middle proxy in a network isolation environment according to an embodiment of this disclosure; Figure 5 This is a diagram illustrating the communication effects of WebRTC terminals across and within the same network domain, according to an embodiment of this disclosure. Detailed Implementation

[0017] The present disclosure will be further described below with reference to the accompanying drawings and embodiments.

[0018] It should be noted that the following detailed descriptions are illustrative and intended to provide further explanation of this disclosure. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure pertains.

[0019] It should be noted that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the exemplary embodiments according to this disclosure. As used herein, the singular form is intended to include the plural form as well, unless the context clearly indicates otherwise. Furthermore, it should be understood that when the terms “comprising” and / or “including” are used in this specification, they indicate the presence of features, steps, operations, devices, components, and / or combinations thereof.

[0020] Example 1 One embodiment of this disclosure provides a method for WebRTC video communication between internal and external networks in a network isolation environment, the steps of which are as follows: Step 1: Initialize the external network terminal and the internal network terminal, and obtain the SDP data to be exchanged; Step 2: During cross-domain communication, data interaction across domains is achieved through the signaling proxy service. A p2p proxy path is dynamically created. The signaling proxy service dynamically generates a DTLS proxy service for the external terminal based on the p2p address in the external terminal's SDP data, and converts the p2p address in the SDP protocol into a DTLS proxy address. The external terminal can then communicate with the internal terminal on the other side of the network through the proxy address. DTLS is a man-in-the-middle proxy. During the DTLS proxy process, the encrypted data is decrypted using a key to obtain plaintext data. After security checks, the plaintext data is transferred to the intranet terminal on the other side of the network, realizing cross-domain p2p communication.

[0021] As one embodiment, this disclosure discloses a WebRTC video communication method for internal and external networks in a network isolation environment. For WebRTC P2P dynamic communication address proxying, it employs a dynamically created proxy path. The proxy path includes a proxy server and a proxy client, providing proxy services for internal and external terminals by configuring the proxy server and client. For DTLS data channel security checks, a DTLS man-in-the-middle proxy method is used, ultimately solving the WebRTC P2P secure cross-network transmission problem by dynamically creating a DTLS man-in-the-middle proxy path. The specific implementation process is as follows: Step 1: Initialize the external network terminal and the internal network terminal, and obtain the SDP data to be exchanged; Specifically, in the WebRTC communication framework, terminals exchange addresses with other terminals by sending SDP data encapsulated with their local communication addresses to the signaling server. The format of the SDP protocol is shown in Table 1 below.

[0022] Table 1. Protocol format fragments of SDP data

[0023] In this context,

m=video 5002 UDP / TLS 96

a=candidate:1 1 UDP 2113929471 192.168.1.100 5002 typ host

[0024] Step 2: During cross-domain communication, data exchange across domains is achieved through the signaling proxy service. A p2p proxy path is dynamically created. The signaling proxy service dynamically generates a DTLS proxy service for the external terminal based on the p2p address in the SDP data of the external terminal, and converts the p2p address in the SDP protocol into a DTLS proxy address. The external terminal can then communicate with the internal terminal on the other side of the network through the proxy address. Specifically, firstly, based on the relevant SDP data information in step 1, a P2P proxy path is dynamically created, such as... Figure 3 As shown, the specific steps are as follows: 1) Based on the address and port of the signaling server, a proxy path from the external network side to the internal network side signaling server is pre-configured, that is, a proxy server and a proxy client are set up. On the external network side, a signaling server proxy server, an external network terminal proxy client, and an internal network terminal proxy server are set up. On the internal network side, a signaling server proxy client, an external network terminal proxy server, and an internal network terminal proxy client are set up to provide signaling proxy services to the external network side.

[0025] 2) When an external network terminal B accesses the network through a proxy, the signaling service proxy client on the internal network side intercepts and parses the SDP data sent by the external network terminal B to the signaling server to obtain the local address and local port of the external network terminal B. Then, using an idle address and port on the proxy server, a proxy path (proxy server and proxy client) is created from the internal network side to the external network terminal B, thereby providing proxy services for this terminal on the internal network side.

[0026] 3) On the intranet-side signaling server proxy client, replace the local address and local port of the terminal in SDP with the proxy address and proxy port in step 2, and send the modified SDP data to the signaling server.

[0027] 4) When intranet terminal A receives SDP information from external terminal B forwarded by the signaling server, it needs to respond with an SDP. Intranet terminal A will encapsulate its local address into an SDP and send it to the signaling server, which will then forward it to the intranet signaling server proxy client through the original path.

[0028] 5) When the external network signaling server proxy server receives the SDP information of the network terminal A that has been transferred, it intercepts and parses the local address and port of the terminal. Then, it uses the idle address and port on the proxy server to create a proxy path (proxy server and proxy client) from the external network to the internal network terminal A, thereby providing the terminal with proxy services on the external network.

[0029] 6) On the external network signaling server proxy server, replace the local address and local port of the terminal in SDP with the proxy address and proxy port in step 5, and send the modified SDP data to the external network terminal B.

[0030] 7) At this point, both internal network terminal A and external network terminal B, which are isolated from each other's internal networks, receive the proxy service address of the other end on their respective networks without the other end's knowledge, rather than the other end's local address. Through these dynamically created proxy services, external network terminal B on the external network side and internal network terminal A on the internal network side can achieve cross-domain P2P communication.

[0031] Furthermore, DTLS is a man-in-the-middle proxy. During the DTLS proxy process, the encrypted data is decrypted using a key to obtain plaintext data. After security checks, the plaintext data is then relayed to the intranet terminal on the other side of the network, realizing cross-domain p2p communication. The specific proxy process is as follows: 1) On the proxy server side, an SSL-encrypted UDP socket listening service is created using OpenSSL. This service is the DTLS proxy listening service, which waits for terminal requests and establishes an SSL connection with the client.

[0032] 2) On the proxy client side, OpenSSL is also used to create an SSL-encrypted UDP socket client and establish an SSL (Secure Sockets Layer) encrypted connection with the server.

[0033] 3) At this point, the SSL (Secure Sockets Layer) encrypted connections between the proxy service and both sides of the network have been established. During the establishment of the SSL (Secure Sockets Layer) encrypted connections, both SSL proxy ends obtained the negotiated keys for data transmission encryption.

[0034] 4) When the client sends data to the proxy server, the proxy server uses the key to decrypt the encrypted data, obtaining the plaintext data. After security checks, the plaintext data is relayed to the other side of the network. Upon receiving the plaintext data, the proxy client on the other side uses the SSL (Secure Sockets Layer) encrypted connection on this side to transmit the encryption key, encrypts the plaintext data, and then sends it to the target service over the network.

[0035] 5) When the server responds to the proxy client with data, the proxy client uses the key to decrypt the response data, obtaining plaintext data. After security checks, the plaintext data is relayed to the other side of the network. Upon receiving the plaintext data, the proxy server on the other side uses the SSL (Secure Sockets Layer) encrypted connection on this side to transmit the encryption key, encrypts the plaintext data, and then sends it to the target client over the network.

[0036] As one embodiment, this disclosure combines dynamically created P2P proxy path technology and DTLS man-in-the-middle proxy technology, such as Figure 5 As shown, the final communication process is as follows: In cross-domain scenarios, external and internal network terminals exchange signaling addresses for subsequent peer-to-peer (P2P) communication through a signaling proxy service. During this exchange, the signaling proxy service dynamically generates a DTLS proxy service for each terminal based on its P2P address and replaces the P2P address in the SDP protocol with the DTLS proxy address. This allows other terminals to communicate across domains with terminals on the other side of the network via the proxy address.

[0037] Specifically, the P2P communication process between intranet terminals and extranet terminals includes: 1) Configure the signaling server address for internal network terminal A as a signaling service.

[0038] 2) Configure the signaling server proxy server address as the signaling service on external network terminal B.

[0039] 3) When A and B need to have a video call, A and B enter the same "room" according to the "room number", that is, a long connection with the signaling service is established. At this time, terminals A and B in the room can see each other's accounts.

[0040] 4) When B initiates a video call to A, B will send its own communication address to the signaling broker service on the established long connection and request A's communication address.

[0041] 5) The signaling proxy service forwards B's communication address and request to the real signaling service, and then the signaling service forwards B's address and request to terminal A based on the long connection established at the beginning.

[0042] 6) When terminal A receives B's address and request and agrees to accept the video call, it will return its own communication address and forward it to terminal B through the signaling service and the signaling proxy service.

[0043] 7) During the forwarding process, the signaling proxy service changes the communication addresses of A and B to the newly created DTLS proxy address as needed, and establishes the DTLS proxy path.

[0044] 8) Subsequently, A and B both receive each other's DTLS proxy address and send video data to the proxy address to achieve video communication between them.

[0045] As one embodiment, the two terminals across network domains in this disclosure use a DTLS proxy path for video transmission, and the process is as follows: 1) The sending terminal sends video communication data to the DTLS proxy based on the communication address (DTLS proxy address) sent by the receiving terminal.

[0046] 2) After receiving the video data sent by the sending terminal, the DTLS proxy service performs SSL decryption on the data to obtain the plaintext data.

[0047] 3) Perform security checks on plaintext data, such as video cleaning, virus scanning, and keyword filtering. 4) After the plaintext data has been checked, it is transmitted to the other side of the gateway through the gateway interface.

[0048] 5) The DTLS proxy service on the other side re-encrypts the plaintext data and sends it to the target receiving terminal.

[0049] 6) Similarly, the data sent by the other terminal follows the same processing procedure.

[0050] Example 2 One embodiment of this disclosure provides a WebRTC video communication system for internal and external networks in a network isolation environment, including: The initialization module is used to initialize external network terminals and internal network terminals and obtain SDP data to be exchanged. The cross-network communication module is used to realize cross-network domain data interaction through signaling proxy service during cross-network domain processes. It dynamically creates p2p proxy paths. The signaling proxy service dynamically generates DTLS proxy service for the external network terminal based on the p2p address in the SDP data of the external network terminal, and converts the p2p address in the SDP protocol into the DTLS proxy address. The external network terminal can realize cross-network domain p2p communication with the internal network terminal on the other side of the network through the proxy address. DTLS is a man-in-the-middle proxy. During the DTLS proxy process, the encrypted data is decrypted using a key to obtain plaintext data. After security checks, the plaintext data is transferred to the intranet terminal on the other side of the network, realizing cross-domain p2p communication.

[0051] Example 3 One embodiment of this disclosure provides a computer program product, including a computer program that, when executed by a processor, implements the WebRTC video communication method between internal and external networks in a network isolation environment.

[0052] Example 4 One embodiment of this disclosure provides a non-transitory computer-readable storage medium for storing computer instructions. When these computer instructions are executed by a processor, they implement the WebRTC video communication method between internal and external networks in a network isolation environment.

[0053] Example 5 One embodiment of this disclosure provides an electronic device, including a processor, a memory, and a computer program; wherein the processor is connected to the memory, the computer program is stored in the memory, and when the electronic device is running, the processor executes the computer program stored in the memory to enable the electronic device to perform a WebRTC video communication method between internal and external networks in a network isolation environment.

[0054] This disclosure is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this disclosure. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create a machine for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1A device that provides the functions specified in one or more boxes.

[0055] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0056] While the specific embodiments of this disclosure have been described above in conjunction with the accompanying drawings, this is not intended to limit the scope of protection of this disclosure. Those skilled in the art should understand that various modifications or variations that can be made by those skilled in the art without creative effort based on the technical solutions of this disclosure are still within the scope of protection of this disclosure.

Claims

1. A WebRTC video communication method for internal and external networks in a network isolation environment, characterized in that, include: Initialize the external network terminal and the internal network terminal, and obtain the SDP video data to be exchanged; During cross-domain communication, data interaction across domains is achieved through a signaling proxy service. A p2p proxy path is dynamically created. The signaling proxy service dynamically generates a DTLS proxy service for the external terminal based on the p2p address in the SDP data of the external terminal, and converts the p2p address in the SDP protocol into a DTLS proxy address. The external terminal can then communicate with the internal terminal on the other side of the network through the proxy address. DTLS is a man-in-the-middle proxy. During the DTLS proxy process, the encrypted data is decrypted using a key to obtain plaintext data. After security checks, the plaintext data is transferred to the intranet terminal on the other side of the network, realizing cross-domain p2p communication.

2. The WebRTC video communication method for internal and external networks in a network isolation environment as described in claim 1, characterized in that, In the WebRTC communication framework, external network terminals exchange addresses with internal network terminals by sending SDP data encapsulating their local communication addresses to the signaling server.

3. The WebRTC video communication method for internal and external networks in a network isolation environment as described in claim 1, characterized in that, Dynamically create a p2p proxy path, including: pre-setting a proxy path from the external network side to the internal network side signaling server based on the signaling server's address and port, i.e., a proxy server and a proxy client, to provide signaling proxy services; when an external network terminal B accesses through the proxy, the signaling service proxy client on the internal network side intercepts and parses the SDP data sent by the external network terminal B to the signaling server, obtains the local address and local port of the external network terminal B, and then uses an idle address and port on the proxy server to create a proxy server and proxy client from the internal network side to the external network terminal B, thereby providing proxy services for the external network terminal B on the internal network side.

4. The WebRTC video communication method for internal and external networks in a network isolation environment as described in claim 3, characterized in that, On the intranet-side signaling service agent client, the local address and local port of the terminal in the SDP are replaced with the agent address and agent port, and the modified SDP data is sent to the signaling server. When intranet terminal A receives the SDP information of external terminal B from the external network forwarded by the signaling server, it needs to respond with an SDP. Intranet terminal A encapsulates its local address into an SDP and sends it to the signaling server, which then forwards it to the intranet-side signaling service agent client through the original path.

5. The WebRTC video communication method for internal and external networks in a network isolation environment as described in claim 4, characterized in that, When the external network signaling service proxy server receives the SDP information from the internal network terminal A, it intercepts and parses the terminal's local address and port. Then, using an idle address and port on the proxy server, it creates a proxy server and proxy client connection from the external network to the internal network terminal A, thereby providing proxy services on the external network side. On the external network signaling service proxy server, it replaces the terminal's local address and local port in the SDP with the proxy address and proxy port, and sends the modified SDP data to the external network terminal B.

6. The WebRTC video communication method for internal and external networks in a network isolation environment as described in claim 1, characterized in that, When an external network terminal sends data to a proxy server, the proxy server uses a key to decrypt the encrypted data, obtaining plaintext data. After security checks, the plaintext data is relayed to the other side of the network. Upon receiving the plaintext data, the proxy client on the other side uses the SSL certificate on this side to transmit the encryption key, encrypts the plaintext data, and then sends it to the internal network terminal via the network. When the internal network server responds to the proxy client, the proxy client uses a key to decrypt the response data, obtaining plaintext data. After security checks, the plaintext data is relayed to the other side of the network. Upon receiving the plaintext data, the proxy server on the other side uses the SSL certificate on this side to transmit the encryption key, encrypts the plaintext data, and then sends it to the external network client via the network.

7. A WebRTC video communication system for internal and external networks in a network isolation environment, characterized in that, include: The initialization module is used to initialize external network terminals and internal network terminals and obtain SDP data to be exchanged. The cross-network communication module is used to realize cross-network domain data interaction through signaling proxy service during cross-network domain processes. It dynamically creates p2p proxy paths. The signaling proxy service dynamically generates DTLS proxy service for the external network terminal based on the p2p address in the SDP data of the external network terminal, and converts the p2p address in the SDP protocol into the DTLS proxy address. The external network terminal can realize cross-network domain p2p communication with the internal network terminal on the other side of the network through the proxy address. DTLS is a man-in-the-middle proxy. During the DTLS proxy process, the encrypted data is decrypted using a key to obtain plaintext data. After security checks, the plaintext data is transferred to the intranet terminal on the other side of the network, realizing cross-domain p2p communication.

8. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the WebRTC video communication method between internal and external networks in a network isolation environment as described in any one of claims 1-6.

9. A non-transitory computer-readable storage medium, characterized in that, The non-transitory computer-readable storage medium is used to store computer instructions, which, when executed by a processor, implement a WebRTC video communication method for internal and external networks in a network isolation environment as described in any one of claims 1-6.

10. An electronic device, characterized in that, include: The device includes a processor, a memory, and a computer program; wherein the processor is connected to the memory, the computer program is stored in the memory, and when the electronic device is running, the processor executes the computer program stored in the memory to enable the electronic device to perform a WebRTC video communication method for internal and external networks in a network isolation environment as described in any one of claims 1-6.

Images