Business data transmission method, device and processor readable storage medium

Abstract

The embodiment of the present disclosure relates to a kind of business data transmission method, device and processor readable storage medium, wherein method includes: by network card based on the first IP address that core network is pre-allocated, communication tunnel establishment request is sent to business management end;After establishing communication tunnel with tunnel server, the second IP address that tunnel server is fed back through communication tunnel is obtained, wherein the second IP address is allocated for wireless terminal access equipment by DHCP server;In the case where the business data that first production equipment sends is obtained, the business data packet including second IP address and business data is generated, and based on the first IP address, communication tunnel is sent to tunnel server by business data packet.In the present technical solution, the transmission cost of business data is reduced, the transmission security of business data is guaranteed, and technical support is provided for the management and control of business management end to wireless terminal access equipment and production equipment.

Description

Technical Field

[0001] This disclosure relates to the field of communication technology, and in particular to a service data transmission method, apparatus, and processor-readable storage medium. Background Technology

[0002] Currently in the communications field, with the rise of the Industrial Internet, transmitting production data from production equipment is quite common.

[0003] In related technologies, production data is transmitted by dividing the public communication network of operators into slices and deploying User Plane Functions (UPFs). That is, in the core network of the communication network, a dedicated network slice is allocated for the transmission of service data. The production equipment is connected to the wireless terminal access equipment, and the production equipment transmits production data to the service server through the network slice, the wireless terminal access equipment, and the UPF.

[0004] However, the aforementioned data transmission methods require network slicing and UPF support, resulting in high data transmission costs. Summary of the Invention

[0005] To solve the above-mentioned technical problems, or at least partially solve them, this disclosure provides a business data transmission method, apparatus, and processor-readable storage medium.

[0006] This disclosure provides a service data transmission method applied to a wireless terminal access device, which is equipped with a network interface card (NIC). The method includes: sending a communication tunnel establishment request to a service management terminal via the NIC based on a first IP address pre-allocated by the core network; wherein the service management terminal includes a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server; after establishing a communication tunnel with the tunnel server, obtaining a second IP address fed back by the tunnel server through the communication tunnel, wherein the second IP address is allocated to the wireless terminal access device by the DHCP server; and, upon receiving service data sent by a first production device, generating a service data packet including the second IP address and the service data, and sending the service data packet to the tunnel server via the communication tunnel based on the first IP address; wherein the tunnel server, after parsing the service data packet, sends the service data of the first production device to the service server based on the second IP address.

[0007] This disclosure provides a service data transmission method applied in a service management terminal, which includes a tunnel server, a DHCP server, and a service server. The method includes: obtaining a communication tunnel establishment request sent by a wireless terminal access device, wherein the communication tunnel establishment request is sent by the wireless terminal access device based on a first IP address allocated by the core network; establishing a communication tunnel with the wireless terminal access device through the tunnel server, and allocating a second IP address to the wireless terminal access device through the DHCP server; and feeding back the second IP address to the wireless terminal access device through the communication tunnel. The wireless terminal access device, after obtaining service data sent by a first production device, transmits a service data packet to the tunnel server through the first IP address, wherein the service data packet includes the service data and the second IP address.

[0008] This disclosure also provides a service data transmission apparatus, which is applied in a wireless terminal access device. The wireless terminal access device is equipped with a network interface card (NIC). The apparatus includes: a tunnel construction request module, used to send a communication tunnel establishment request to a service management terminal through the NIC based on a first IP address pre-allocated by the core network, wherein the service management terminal includes: a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server; an address acquisition module, used to acquire a second IP address fed back by the tunnel server through the communication tunnel after establishing a communication tunnel with the tunnel server, wherein the second IP address is allocated by the DHCP server for the wireless terminal access device; a data packet generation module, used to generate a service data packet including the second IP address and the service data when receiving service data sent by a first production device; and a data packet sending module, used to send the service data packet to the tunnel server through the communication tunnel based on the first IP address, wherein the tunnel server sends the service data of the first production device to the service server based on the second IP address after parsing the service data packet.

[0009] This disclosure also provides a service data transmission apparatus, which is applied in a wireless terminal access device. The wireless terminal access device is equipped with a network interface card (NIC). The apparatus includes a memory, a transceiver, and a processor: the memory stores a computer program; the transceiver is used to send and receive data under the control of the processor; the processor reads the computer program in the memory and performs the following operations: sending a communication tunnel establishment request to a service management terminal via the NIC based on a first IP address pre-allocated by the core network, wherein the service management terminal includes a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server; after establishing a communication tunnel with the tunnel server, obtaining a second IP address fed back by the tunnel server through the communication tunnel, wherein the second IP address is allocated by the DHCP server for the wireless terminal access device; and, upon receiving service data sent by a first production device, generating a service data packet including the second IP address and the service data, and sending the service data packet to the tunnel server via the communication tunnel based on the first IP address, wherein the tunnel server, after parsing the service data packet, sends the service data of the first production device to the service server based on the second IP address.

[0010] This disclosure provides a processor-readable storage medium storing a program for causing the processor-readable storage medium to execute the aforementioned business data transmission method.

[0011] The technical solution provided in this disclosure has the following advantages compared with the prior art:

[0012] The service data transmission scheme provided in this disclosure sends a communication tunnel establishment request to the service management terminal via a network interface card (NIC) based on a first IP address pre-allocated in the core network. The service management terminal includes a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server. After establishing a communication tunnel with the tunnel server, the NIC obtains a second IP address fed back by the tunnel server through the communication tunnel. This second IP address is assigned by the DHCP server to the wireless terminal access device. Then, upon receiving service data sent by the first production device, the NIC generates a service data packet including the second IP address and the service data, and sends the service data packet to the tunnel server through the communication tunnel based on the first IP address. The tunnel server, after parsing the service data packet, sends the service data of the first production device to the service server based on the second IP address. This technical solution reduces the transmission cost of service data, ensures the security of service data transmission, and provides technical support for the service management terminal to control wireless terminal access devices and production devices. Attached Figure Description

[0013] The above and other features, advantages, and aspects of the embodiments of this disclosure will become more apparent from the accompanying drawings and the following detailed description. Throughout the drawings, the same or similar reference numerals denote the same or similar elements. It should be understood that the drawings are schematic, and the originals and elements are not necessarily drawn to scale.

[0014] Figure 1 This is a schematic diagram of a business data transmission scenario using existing technology.

[0015] Figure 2 This is a schematic diagram of a business data transmission scenario provided by an embodiment of the present disclosure;

[0016] Figure 3 A flowchart illustrating a business data transmission method provided in an embodiment of this disclosure;

[0017] Figure 4 A schematic diagram of a data transmission scenario based on a 5G network provided in an embodiment of this disclosure;

[0018] Figure 5 A flowchart illustrating another business data transmission method provided in this embodiment of the disclosure;

[0019] Figure 6 A schematic diagram of a 5G terminal identity authentication scenario based on a 5G network provided in this embodiment of the disclosure;

[0020] Figure 7 A flowchart illustrating yet another business data transmission method provided in this disclosure embodiment;

[0021] Figure 8 A flowchart illustrating another business data transmission method provided in this embodiment of the disclosure;

[0022] Figure 9 This is a schematic diagram of a service data transmission scenario based on a 5G network, provided as an embodiment of the present disclosure.

[0023] Figure 10 This is a schematic diagram of the structure of a service data transmission apparatus according to an embodiment of the present disclosure;

[0024] Figure 11 This is a schematic diagram of a business data transmission apparatus according to another embodiment of the present disclosure. Detailed Implementation

[0025] In this disclosure, the term "and / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent three cases: A alone, A and B simultaneously, and B alone. The character " / " generally indicates that the preceding and following related objects have an "or" relationship.

[0026] In this disclosure, the term "multiple" refers to two or more, and other quantifiers are similar.

[0027] The technical solutions of the embodiments of this disclosure will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this disclosure, and not all embodiments. Based on the embodiments of this disclosure, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this disclosure.

[0028] The technical solutions provided in this disclosure can be applied to a variety of systems. For example, applicable systems may include Long Term Evolution (LTE) systems, LTE Frequency Division Duplex (FDD) systems, LTE Time Division Duplex (TDD) systems, Long Term Evolution Advanced (LTE-A) systems, Universal Mobile Telecommunications System (UMTS), Worldwide Interoperability for Microwave Access (WiMAX) systems, 5G New Radio (NR) systems and their evolved communication systems, and 6G (sixth generation mobile communication technology) systems. These systems may include terminal equipment and network equipment. The systems may also include a core network component, such as an Evolved Packet Core (EPC) or a 5G core network (5GC).

[0029] The network device involved in this disclosure can be a base station, which may include multiple cells providing services to terminals. Depending on the specific application, the base station may also be called an access point, or a device in the access network that communicates with wireless terminal devices through one or more sectors on the air interface, or other names. The network device can be used to exchange received air frames with Internet Protocol (IP) packets, acting as a router between the wireless terminal device and the rest of the access network, where the rest of the access network may include an Internet Protocol (IP) communication network. The network device can also coordinate the attribute management of the air interface. For example, the network device involved in this disclosure can be an evolved Node B (eNB or e-NodeB) in a long term evolution (LTE) system, a 5G base station (gNB) in a next generation system, or a Home evolved Node B (HeNB), relay node, femto, pico, network testing equipment, etc., and is not limited in this disclosure. In some network architectures, network devices may include centralized unit (CU) nodes and distributed unit (DU) nodes, which may also be geographically separated.

[0030] The wireless terminal access device in this disclosure can be a Customer Premise Equipment (CPE). In a 5G network, the wireless terminal access device can be simply referred to as a 5G terminal. The wireless terminal access device acts as a relay node between the production equipment and the service server, forwarding service data, etc. The production equipment is pre-attached to the corresponding wireless terminal access device, and one wireless terminal access device can have multiple production devices attached to it. The production equipment is related to the specific application scenario. For example, in a power distribution network scenario, the production equipment may include core equipment involved in all aspects of power generation, transmission, distribution, dispatching, and operation and maintenance. The production equipment covers multiple aspects such as power generation, transmission, substation, distribution, and consumption. For example, the production equipment may be substation equipment, transmission equipment, operation and maintenance equipment, etc.

[0031] In related technologies, taking 5G networks as an example, refer to... Figure 1The transmission of business data from production equipment relies on UPF (User-Defined Frame) and network slicing. The production equipment is pre-connected to a 5G terminal, and then a communication link is constructed based on network slices, from the production equipment to the 5G terminal, to the 5G base station, to the UPF, and finally to the business server. Business data is transmitted through this communication link. However, this method of business data transmission is costly.

[0032] To reduce the cost of transmitting business data, this disclosure utilizes public networks (e.g., Figure 1 The 5G public core network (in the context of the network) solves the problem of secure transmission of business data without the need for network slicing or deploying UPF.

[0033] In embodiments of this disclosure, such as Figure 2 As shown, the service data transmission system includes a wireless terminal access device (the 5G terminal in the diagram) and a service management terminal. Data transmission between the wireless terminal access device and the service management terminal occurs through a public network provided by the operator. This public network may include the core network and base stations. (Refer to...) Figure 2 In the embodiments disclosed herein, a production device is connected to a wireless terminal access device, and the production device transmits data via a public network. The service management terminal includes a service server, a DHCP server, a tunnel server, and a terminal authentication server, among others.

[0034] The following description focuses on the service data transmission method of the embodiments of this disclosure using wireless terminal access devices. Figure 3 This is a flowchart illustrating a service data transmission method provided in an embodiment of this disclosure. The method can be executed by a service data transmission device, which can be implemented in software and / or hardware, and is generally integrated into a wireless terminal access device. Alternatively, the service data transmission method can be directly executed by the wireless terminal access device. Figure 3 As shown, the method includes:

[0035] Step 301: Send a communication tunnel establishment request to the service management terminal through the network card based on the first IP address pre-allocated by the core network. The service management terminal includes: a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server.

[0036] The wireless terminal access device in this embodiment includes a network card, which may include a WAN port network card or a virtual network card. The virtual network card (also called a virtual network adapter) is a "logical network interface" generated in the operating system through software simulation. It can perform core network functions such as IP address allocation, data packet transmission and reception, and network protocol interaction just like a physical network card. It is a key component for building tunnel communication.

[0037] In the embodiments of this disclosure, the wireless terminal access device has been improved by adding a network card, which can build a dedicated communication tunnel with the tunnel server (TS) of the service management end.

[0038] In one embodiment of this disclosure, a communication tunnel establishment request is sent to the service management terminal via a network interface card based on a first IP address pre-allocated in the core network. The service management terminal includes a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server.

[0039] Step 302: After establishing a communication tunnel with the tunnel server, obtain the second IP address fed back by the tunnel server through the communication tunnel. The second IP address is assigned by the DHCP server to the wireless terminal access device.

[0040] In the embodiments of this disclosure, after establishing a communication tunnel with the tunnel server, a second IP address is obtained from the tunnel server through the communication tunnel. This second IP address is assigned by the DHCP server to the wireless terminal access device. It is important to emphasize that in the embodiments of this disclosure, the second IP address is an internal network address assigned by the background DHCP server of the service management terminal. Therefore, the second IP address is assigned and managed by the service management terminal, which can then control the wireless terminal access device based on the second IP address.

[0041] Step 303: Upon receiving the business data sent by the first production device, a business data packet including a second IP address and the business data is generated, and the business data packet is sent to the tunnel server through the communication tunnel based on the first IP address. The tunnel server sends the business data of the first production device to the business server based on the second IP address after parsing the business data packet.

[0042] The data content corresponding to the business data is related to the business scenario. For example, in the power grid business scenario, the business data sent by the operation and maintenance equipment may include data such as ambient temperature.

[0043] In one embodiment of this disclosure, upon receiving service data sent by the first production device, a service data packet including a second IP address and the service data is generated. Specifically, the second IP address and service data are encapsulated to generate the service data packet, which is then sent to the tunnel server via a communication tunnel based on the first IP address. Thus, in this embodiment, the wireless terminal access device sends the service data packet to the tunnel server based on the operator-provided communication network (or public network). Only the first IP address is visible on the operator's public network; the second IP address and the service data are not. This ensures the security of the service data compared to directly sending service data using the core network. In this embodiment, after parsing the service data packet, the tunnel server sends the first production device's service data to the service server based on the second IP address; that is, the tunnel server and the service server communicate based on IP addresses within the internal network.

[0044] For example, taking a 5G communication network as an example, the wireless terminal access device is a 5G terminal, referring to... Figure 4 In the embodiments disclosed herein, when a 5G terminal accesses a 5G public network, the operator's core network assigns a first IP address (referred to as IP1) to the 5G terminal. The 5G terminal initiates a communication tunnel establishment request to the tunnel server. At this time, the data sent is in the format of IP1 + data packet. After the communication tunnel is successfully established, the terminal obtains the second IP address (referred to as IP2) fed back by the tunnel server. Subsequently, on the operator's public network, the data transmission format of the wireless terminal access device is: IP1 + [service data packet (IP2 + service data)]. Only IP1 can be seen on the operator's public network, and the real service IP2 is hidden.

[0045] In one embodiment of this disclosure, before acquiring the service data sent by the first production device, the DHCP server also assigns a corresponding third IP address to the first production device. This third IP address is also the internal network IP address of the service management terminal. That is, in this embodiment, the service management terminal also assigns a corresponding internal network IP address to the production device connected to the wireless terminal access device.

[0046] In this embodiment, an IP acquisition request sent by the first production device is obtained. The IP acquisition request may be triggered when the first production device is powered on, or it may be triggered by the corresponding IP acquisition control on the first production device side. In this embodiment, the wireless terminal access device acts as a DHCP relay. In fact, the background DHCP server of the service management terminal assigns IP addresses to the production devices connected to the wireless terminal access device. In this embodiment, the wireless terminal access device sends an IP acquisition request packet to the tunnel server through the communication tunnel based on the first IP address. The IP acquisition request packet includes a second IP address. In other possible embodiments, the IP acquisition request may also include the identity information of the first production device, etc., wherein the identity information is used to uniquely identify the identity information of the first production device.

[0047] In this embodiment, the third IP address of the first production device, fed back by the tunnel server, is also obtained. This third IP address is assigned to the first production device by the DHCP server. Therefore, when generating a service data packet including the second IP address and service data, the second IP address, the third IP address, and the service data can be encapsulated to generate the service data packet. Thus, the service server can trace the source of the service data based on the third IP address.

[0048] In this embodiment, the IP addresses of other production equipment besides the first production equipment are allocated in the same way as the IP addresses of the first production equipment, and will not be listed here.

[0049] In one embodiment of this disclosure, the business management terminal can also control the production equipment based on the internal network IP address assigned to the production equipment.

[0050] In this embodiment, as Figure 5 As shown, the method also includes:

[0051] Step 501: Obtain the device control data packet sent by the tunnel server through the communication tunnel, wherein the device control data packet includes a fourth IP address and device control instructions.

[0052] In the embodiments of this disclosure, a device control data packet sent by the tunnel server through the communication tunnel is obtained. The device control data packet includes a fourth IP address and a device control command. The fourth IP address is an internal network IP address assigned by the background DHCP server of the business management terminal to the connected production equipment. The device control command is related to the specific control scenario, such as a device restart command.

[0053] Step 502: Parse the device control data packet to obtain the fourth IP address and device control instructions in the device control data packet.

[0054] In embodiments of this disclosure, the device control data packet is parsed to obtain the fourth IP address and device control instructions within the device control data packet.

[0055] Step 503: Determine the second production device corresponding to the fourth IP address in the device control data packet, and send a device control command to the second production device.

[0056] In this embodiment, the correspondence between the production equipment connected to the wireless terminal access device and the IP addresses assigned to the production equipment by the DHCP server can be stored in advance. Based on this mapping relationship, the second production equipment corresponding to the fourth IP address can be determined, and then a device control command can be sent to the second production equipment, thereby realizing reverse addressing control of the production equipment.

[0057] In one embodiment of this disclosure, to ensure the legitimacy of the accessing wireless terminal device, before sending a communication tunnel establishment request to the service management terminal via the network interface card (NIC) based on a first IP address pre-allocated by the core network, the legitimacy of the wireless terminal access device is also verified. In this embodiment, the service management terminal further includes a terminal authentication server. After the wireless terminal access device accesses the wireless communication network, it sends a terminal authentication request carrying terminal identity information to the terminal authentication server based on the first IP address. The terminal identity information may include at least one of the following: terminal username information, terminal login password, digital identity credential (CA), and terminal serial number (SN). The username information and terminal login password may be configured by the user.

[0058] In this embodiment, a communication tunnel establishment request is sent to the service management terminal only after the terminal authentication server sends a message indicating that the terminal authentication has passed.

[0059] The following example uses 5G networks, such as Figure 6As shown, users can log in to a 5G terminal via a mobile terminal (such as a mobile phone or laptop) through the terminal's network port (or WiFi connection), enter the device authentication configuration page, configure the terminal identity information corresponding to the 5G terminal, and submit the configuration. After that, the 5G terminal will send a terminal authentication request carrying the terminal identity information to the terminal authentication server. The terminal authentication server has pre-stored the terminal identity information of legitimate 5G terminals (when the terminal identity information includes multiple types of information, these types of information can be stored together or separately, which is not restricted here. For example, the terminal username information and the terminal serial number can be stored together or separately). After the terminal authentication server verifies that the terminal identity information submitted by the 5G terminal belongs to the pre-stored legitimate terminal identity information, it will return a terminal authentication pass message and simultaneously issue relevant access policies for accessing the service server. The 5G terminal can then access the corresponding service server based on the relevant access policies.

[0060] In one embodiment of this disclosure, when a wireless terminal access device needs to send its own service data to a service server, it can also send a service data packet to a tunnel server through a communication tunnel based on a first IP address. The service data packet includes a second IP address and the corresponding service data.

[0061] In summary, the service data transmission method of this embodiment sends a communication tunnel establishment request to the service management terminal via a network interface card (NIC) based on a first IP address pre-allocated in the core network. The service management terminal includes a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server. After establishing a communication tunnel with the tunnel server, the method obtains a second IP address fed back by the tunnel server through the communication tunnel. This second IP address is assigned by the DHCP server to the wireless terminal access device. Then, upon receiving service data sent by the first production device, the method generates a service data packet including the second IP address and the service data, and sends the service data packet to the tunnel server through the communication tunnel based on the first IP address. The tunnel server, after parsing the service data packet, sends the service data of the first production device to the service server based on the second IP address. This technical solution reduces the service data transmission cost, improves the service data transmission security, and provides technical support for the service management terminal to control wireless terminal access devices and production devices.

[0062] Figure 7 This is a flowchart illustrating another service data transmission method provided in this disclosure. The method can be executed by a service data transmission device, which can be implemented in software and / or hardware. It is generally integrated into a service management terminal, or the service management terminal can directly execute the service data transmission method. The service management terminal includes: a tunnel server, a DHCP server, and a service server, such as... Figure 7As shown, the method includes:

[0063] Step 701: Obtain the communication tunnel establishment request sent by the wireless terminal access device, wherein the communication tunnel establishment request is sent by the wireless terminal access device based on the first IP address allocated by the core network.

[0064] In the embodiments of this disclosure, the service management terminal obtains a communication tunnel establishment request sent by the wireless terminal access device. The communication tunnel establishment request is sent by the wireless terminal access device based on a first IP address allocated by the core network. The first IP address is allocated by the operator's core network.

[0065] In one embodiment of this disclosure, to ensure the legality of service data transmission, authentication of the wireless terminal access device can also be performed. In this embodiment, the service management terminal further includes a terminal authentication server. Before obtaining a communication tunnel establishment request, the server obtains a terminal authentication request sent by the wireless terminal access device. The terminal authentication request carries terminal identity information. The server verifies whether the terminal identity information is successfully authenticated and, upon successful authentication, sends a terminal authentication success message back to the wireless terminal access device.

[0066] Step 702: Establish a communication tunnel with the wireless terminal access device through the tunnel server, and assign a second IP address to the wireless terminal access device through the DHCP server.

[0067] In one embodiment of this disclosure, a communication tunnel is established between the wireless terminal access device and the tunnel server, and a second IP address is assigned to the wireless terminal access device by a DHCP server, wherein the second IP address is the intranet address of the service management terminal.

[0068] Step 703: Feed back the second IP address to the wireless terminal access device through the communication tunnel. After obtaining the service data sent by the first production device, the wireless terminal access device transmits the service data packet to the tunnel server through the first IP address. The service data packet includes the service data and the second IP address.

[0069] In one embodiment of this disclosure, a second IP address is fed back to a wireless terminal access device through a communication tunnel. After obtaining the service data sent by the first production device, the wireless terminal access device transmits a service data packet to the tunnel server through the first IP address. The service data packet includes the service data and the second IP address.

[0070] In some possible embodiments, when the wireless terminal access device sends its own generated service data, it can also transmit service data packets to the tunnel server through the first IP address, wherein the service data packets include service data and the second IP address.

[0071] In one embodiment of this disclosure, after the tunnel server obtains the service data packet sent by the wireless terminal access device, it parses the service data packet to obtain the second IP address and service data. Then, the tunnel server sends the service data to the service server based on the second IP address. Thus, the service data is transmitted to the service server. During the service data transmission, the second IP address and service data are invisible, ensuring the security of the service data.

[0072] In one embodiment of this disclosure, in order to further ensure the security of service data, the wireless terminal access device may also encrypt and send the service data packets based on a pre-determined encryption method. After the tunnel server obtains the service data packets, it decrypts the service data packets based on a pre-agreed decryption method to obtain the corresponding second IP address and service data.

[0073] In one embodiment of this disclosure, the service management terminal can also allocate IP addresses to the production equipment connected to the wireless terminal access device. In this embodiment, the IP acquisition request packet sent by the wireless terminal access device based on the first IP address is obtained through the communication tunnel. The second IP address is obtained by parsing the IP acquisition request packet through the tunnel server. The IP acquisition request request is sent to the DHCP server based on the second IP address through the tunnel server. The DHCP server allocates a third IP address and feeds it back to the tunnel server. The third IP address generated and fed back by the DHCP server is obtained through the tunnel server. The third IP address is fed back to the wireless terminal access device through the communication tunnel.

[0074] In one embodiment of this disclosure, when the third IP address is an IP address assigned to the first production device, the service data packet sent by the wireless terminal access device through the communication tunnel may also encapsulate the third IP address. The tunnel server parses the data packet to obtain the second IP address, the third IP address, and the service data. It then uses the second IP address to send the third IP address and the service data to the service server. Subsequently, it processes the relevant service data based on the third IP address, such as determining the production device from which the service data originates based on the third IP address and storing the service data.

[0075] In one embodiment of this disclosure, the business management terminal can also perform reverse addressing control on the production equipment. For example... Figure 8 As shown, the method also includes:

[0076] Step 801: Generate device control instructions for the second production device through the business server, and query the pre-stored mapping relationship to determine the fourth IP address of the second production device. The mapping relationship includes the correspondence between the production devices connected to the wireless terminal access device and the IP addresses assigned to the connected production devices by the DHCP server.

[0077] In this embodiment, the service management terminal pre-stores mapping relationships, which include the correspondence between the production equipment connected to the wireless terminal access device and the IP addresses assigned to the connected production equipment by the DHCP server.

[0078] In this embodiment, the service server generates device control instructions for the second production device and queries a pre-stored mapping relationship to determine the fourth IP address of the second production device. For example, the mapping relationship specifically includes the mapping relationship between the identity identifier of the production device and the fourth IP address. Then, the fourth IP address is obtained by querying the mapping relationship based on the identity identifier of the second production device.

[0079] Step 802: Send the fourth IP address of the second production device and the device control command to the tunnel server through the business server.

[0080] In this embodiment, the fourth IP address of the second production device and the device control command are sent to the tunnel server through the service server. The device control command can be determined according to the control scenario. For example, the device control command can be a device restart command.

[0081] Step 803: Generate a device control data packet by encapsulating the fourth IP address of the second production device and the device control command through the tunnel server.

[0082] Step 804: Send device control data packets to the wireless terminal access device through the communication tunnel.

[0083] In the embodiments of this disclosure, a device control data packet is generated by encapsulating the fourth IP address of the second production device and the device control command through a tunnel server. Then, the device control data packet is sent to a wireless terminal access device through a communication tunnel. The wireless terminal access device can parse the device control data packet and send the corresponding device control command to the connected second production device.

[0084] The following describes the business data transmission method of this disclosure embodiment in conjunction with a specific application scenario. In this application scenario, the public network provided by the operator is a 5G network, which includes a core network and base stations, and the network card included in the 5G terminal is a virtual network card.

[0085] In this embodiment, refer to Figure 9The service management terminal includes a DHCP server, a tunnel server, a service server, and a terminal authentication server. After a 5G terminal accesses the 5G network (public network), for example, after a Subscriber Identity Module (SIM) is inserted, the core network assigns a first IP address (IP1) to the 5G terminal. Then, after the 5G terminal accesses the operator's 5G network, it submits a terminal authentication request to the terminal authentication server. After receiving a terminal authentication success message from the terminal authentication server, the 5G terminal sends a tunnel establishment request to the service management terminal based on the first IP address pre-assigned by the core network. After establishing the communication tunnel, it obtains a second IP address (IP2) assigned by the DHCP server, which is returned by the tunnel server. The 5G terminal then sends service data packets to the tunnel server based on IP1. These service data packets may include encapsulated IP2 and related service data.

[0086] In this embodiment, after receiving an IP address request from the downstream production equipment, the 5G terminal can also send an IP address request to the tunnel server based on IP1. The IP address request is encapsulated as service data along with IP2 into a service data packet. After parsing the service data packet, the tunnel server sends an IP address request to the DHCP server based on IP2. The DHCP server assigns an IP address to the downstream production equipment and sends the assigned IP address back to the tunnel server. The tunnel server then sends the assigned IP address back to the 5G terminal, which in turn sends the assigned IP address back to the corresponding production equipment. Thus, the 5G terminal acts as a DHCP relay to achieve the allocation of IP addresses for the downstream production equipment.

[0087] In summary, the service data transmission method of this disclosure embodiment, applied in a service management terminal, obtains a communication tunnel establishment request sent by a wireless terminal access device. This request is sent by the wireless terminal access device based on a first IP address allocated by the core network. A communication tunnel is established between the wireless terminal access device and the tunnel server. A second IP address is allocated to the wireless terminal access device via a DHCP server. The second IP address is then fed back to the wireless terminal access device through the communication tunnel. After receiving service data sent by the first production device, the wireless terminal access device transmits service data packets to the tunnel server using the first IP address. These service data packets include both the service data and the second IP address. This technical solution reduces the transmission cost of service data, improves the security of service data transmission, and provides technical support for the service management terminal to control and manage the wireless terminal access device and the production device.

[0088] To implement the above embodiments, this disclosure also proposes a service data transmission apparatus. This service data transmission apparatus is applied in a wireless terminal access device. Figure 10This is a schematic diagram of the structure of a service data transmission apparatus according to an embodiment of the present disclosure, as shown below. Figure 10 As shown, the wireless terminal access device is equipped with a network card. The device includes: a memory 1000, a transceiver 1010, and a processor 1020. The memory 1000 stores computer programs; the transceiver 1010 transmits and receives data under the control of the processor; and the processor 1020 reads the computer program from the memory and performs the following operations:

[0089] The network interface card (NIC) sends a communication tunnel establishment request to the service management terminal based on the first IP address pre-assigned by the core network. The service management terminal includes: a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server.

[0090] After establishing a communication tunnel with the tunnel server, obtain the second IP address returned by the tunnel server through the communication tunnel. The second IP address is assigned by the DHCP server to the wireless terminal access device.

[0091] Upon receiving the business data sent by the first production device, a business data packet including a second IP address and the business data is generated, and the business data packet is sent to the tunnel server through the communication tunnel based on the first IP address. The tunnel server, after parsing the business data packet, sends the business data of the first production device to the business server based on the second IP address.

[0092] Among them, Figure 10 In this context, the bus architecture can include any number of interconnected buses and bridges, specifically linking various circuits of one or more processors 1020 (represented by processor 1020) and memory 1000 (represented by memory 1000). The bus architecture can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. The bus interface provides an interface. The transceiver 1010 can be multiple elements, including transmitters and receivers, providing a unit for communicating with various other devices over transmission media, including wireless channels, wired channels, optical fibers, etc. The processor 1020 is responsible for managing the bus architecture and general processing, and the memory 1000 can store data used by the processor 1020 during operation.

[0093] The processor 1020 can be a central processing unit (CPU), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or a complex programmable logic device (CPLD). The processor 1020 can also adopt a multi-core architecture.

[0094] In one possible implementation of this disclosure, the service management terminal further includes: a terminal authentication server; and, before sending a communication tunnel establishment request, the processor is further configured to:

[0095] Send a terminal authentication request carrying the terminal's identity information to the terminal authentication server based on the first IP address;

[0096] Get the terminal authentication successful message from the terminal authentication server.

[0097] In one possible implementation of this disclosure, before acquiring the service data sent by the first production device, the processor is further configured to:

[0098] The system obtains an IP acquisition request sent by the first production equipment and sends an IP acquisition request packet to the tunnel server through the communication tunnel based on the first IP address. The IP acquisition request packet includes a second IP address.

[0099] Obtain the third IP address of the first production device returned by the tunnel server, where the third IP address is assigned to the first production device by the DHCP server;

[0100] Generate a service data packet that includes a second IP address and service data, including:

[0101] Encapsulate the second IP address, the third IP address, and the business data to generate a business data packet.

[0102] In one possible implementation of this disclosure, the processor is further configured to:

[0103] Obtain the device control data packets sent by the tunnel server through the communication tunnel, wherein the device control data packets include a fourth IP address and device control instructions;

[0104] Parse the device control data packet to obtain the fourth IP address and device control command within the data packet;

[0105] Identify the second production device corresponding to the fourth IP address in the device control data packet, and send a device control command to the second production device.

[0106] It should be noted that the apparatus provided in this embodiment can implement all the method steps implemented in the above method embodiment and can achieve the same technical effect. Therefore, the parts and beneficial effects that are the same as those in the method embodiment will not be described in detail here.

[0107] To implement the above embodiments, this disclosure also proposes a business data transmission apparatus. Figure 11 This is a schematic diagram of a service data transmission apparatus according to another embodiment of the present disclosure. The service data transmission apparatus is applied in a wireless terminal access device, which is equipped with a network interface card (NIC), such as... Figure 11 As shown, the device includes: a tunnel construction request module 1110, an address acquisition module 1120, a data packet generation module 1130, and a data packet sending module 1140, wherein,

[0108] The tunnel construction request module 1110 is used to send a communication tunnel establishment request to the service management terminal through the network card based on the first IP address pre-allocated by the core network. The service management terminal includes: a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server.

[0109] The address acquisition module 1120 is used to acquire the second IP address fed back by the tunnel server through the communication tunnel after establishing a communication tunnel with the tunnel server. The second IP address is assigned by the DHCP server to the wireless terminal access device.

[0110] The data packet generation module 1130 is used to generate a business data packet including a second IP address and business data when the business data sent by the first production device is obtained;

[0111] The data packet sending module 1140 is used to send business data packets to the tunnel server through the communication tunnel based on the first IP address. The tunnel server sends the business data of the first production equipment to the business server based on the second IP address after parsing the business data packets.

[0112] In one possible implementation of this disclosure, the service management terminal further includes: a terminal authentication server, and the apparatus further includes:

[0113] The identity authentication request module is used to send a terminal authentication request carrying terminal identity information to the terminal authentication server based on the first IP address.

[0114] The authentication result acquisition module is used to obtain the terminal authentication success message returned by the terminal authentication server.

[0115] In one possible implementation of this disclosure, the apparatus further includes:

[0116] The address allocation request module is used to obtain the IP acquisition request sent by the first production equipment, and send the IP acquisition request packet to the tunnel server through the communication tunnel based on the first IP address. The IP acquisition request packet includes the second IP address.

[0117] The address acquisition module is also used to acquire the third IP address of the first production device fed back by the tunnel server, wherein the third IP address is assigned to the first production device by the DHCP server;

[0118] The data packet generation module is specifically used for:

[0119] Encapsulate the second IP address, the third IP address, and the business data to generate a business data packet.

[0120] In one possible implementation of this disclosure, the apparatus further includes:

[0121] The data packet acquisition module is used to acquire device control data packets sent by the tunnel server through the communication tunnel. The device control data packets include a fourth IP address and device control instructions.

[0122] The data packet parsing module is used to parse device control data packets to obtain the fourth IP address and device control commands within the data packets.

[0123] The instruction sending module is used to determine the second production device corresponding to the fourth IP address in the device control data packet, and send device control instructions to the second production device.

[0124] It should be noted that the apparatus provided in this embodiment can implement all the method steps implemented in the above method embodiment and can achieve the same technical effect. Therefore, the parts and beneficial effects that are the same as those in the method embodiment will not be described in detail here.

[0125] It should be noted that the division of units in the embodiments of this disclosure is illustrative and only represents one logical functional division. In actual implementation, other division methods may be used. Furthermore, the functional units in the various embodiments of this disclosure can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated units described above can be implemented in hardware or as software functional units.

[0126] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a processor-readable storage medium. Based on this understanding, the technical solution of this disclosure, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) or processor to execute all or part of the steps of the methods of the various embodiments of this disclosure.

[0127] It should be noted that the apparatus provided in this embodiment can implement all the method steps implemented in the above method embodiment and can achieve the same technical effect. Therefore, the parts and beneficial effects that are the same as those in the method embodiment will not be described in detail here.

[0128] This disclosure also provides a processor-readable storage medium storing a program for executing the aforementioned base station configuration processing method. The processor-readable storage medium can be any available medium or data storage device accessible to a processor, including but not limited to magnetic storage (e.g., floppy disks, hard disks, magnetic tapes, magneto-optical disks (MO), etc.), optical storage (e.g., CDs, DVDs, BDs, HVDs, etc.), and semiconductor storage (e.g., ROMs, EPROMs, EEPROMs, non-volatile memory (NAND flash), solid-state drives (SSDs)).

[0129] Those skilled in the art will understand that embodiments of this disclosure can be provided as methods, apparatus, or computer program products. Therefore, this disclosure can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this disclosure can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage and optical storage) containing computer-usable program code.

[0130] This disclosure is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus, and computer program products according to embodiments of this disclosure. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer-executable instructions. These computer-executable instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0131] These processor-executable instructions may also be stored in a processor-readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the processor-readable memory produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0132] Obviously, those skilled in the art can make various modifications and variations to this disclosure without departing from its spirit and scope. Therefore, if such modifications and variations fall within the scope of the claims of this disclosure and their equivalents, this disclosure is also intended to include such modifications and variations.

Claims

1. A service data transmission method, the method being applied in a wireless terminal access device, characterized in that, The wireless terminal access device is equipped with a network card, and the method includes: The network interface card sends a communication tunnel establishment request to the service management terminal based on the first IP address pre-allocated by the core network. The service management terminal includes: a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server. After establishing a communication tunnel with the tunnel server, obtain the second IP address fed back by the tunnel server through the communication tunnel, wherein the second IP address is assigned by the DHCP server to the wireless terminal access device; Upon receiving business data sent by the first production device, a business data packet including the second IP address and the business data is generated, and the business data packet is sent to the tunnel server through the communication tunnel based on the first IP address. The tunnel server, after parsing the business data packet, sends the business data of the first production device to the business server based on the second IP address.

2. The business data transmission method as described in claim 1, characterized in that, The service management terminal also includes a terminal authentication server. Before sending the communication tunnel establishment request, the method further includes: Based on the first IP address, a terminal authentication request carrying terminal identity information is sent to the terminal authentication server. Obtain the terminal authentication successful message returned by the terminal authentication server.

3. The business data transmission method as described in claim 2, characterized in that, The terminal identity information includes at least one of the following: Terminal username information, terminal login password, digital identity credential, and terminal serial number.

4. The business data transmission method as described in claim 1, characterized in that, Before acquiring the business data sent by the first production equipment, the method further includes: The system obtains an IP acquisition request sent by the first production equipment, and sends an IP acquisition request packet to the tunnel server through the communication tunnel based on the first IP address, wherein the IP acquisition request packet includes the second IP address; Obtain the third IP address of the first production device returned by the tunnel server, wherein the third IP address is assigned to the first production device by the DHCP server; The generation of the service data packet, which includes the second IP address and the service data, includes: The second IP address, the third IP address, and the service data are encapsulated to generate the service data packet.

5. The business data transmission method as described in any one of claims 1-4, characterized in that, The method further includes: Obtain the device control data packet sent by the tunnel server through the communication tunnel, wherein the device control data packet includes a fourth IP address and device control instructions; Parse the device control data packet to obtain the fourth IP address and device control instructions within the device control data packet; The second production device corresponding to the fourth IP address in the device control data packet is identified, and the device control command is sent to the second production device.

6. A method for transmitting business data, the method being applied in a business management terminal, characterized in that, The service management terminal includes: a tunnel server, a DHCP server, and a service server; the method includes: Obtain a communication tunnel establishment request sent by a wireless terminal access device, wherein the communication tunnel establishment request is sent by the wireless terminal access device based on a first IP address allocated by the core network; A communication tunnel is established between the tunnel server and the wireless terminal access device, and a second IP address is assigned to the wireless terminal access device through the DHCP server. The second IP address is fed back to the wireless terminal access device through the communication tunnel. After the wireless terminal access device obtains the service data sent by the first production device, it transmits the service data packet to the tunnel server through the first IP address. The service data packet includes the service data and the second IP address.

7. The business data transmission method as described in claim 6, characterized in that, The method further includes: The communication tunnel is used to obtain the IP acquisition request packet sent by the wireless terminal access device based on the first IP address; The tunnel server parses the IP acquisition request packet to obtain the second IP address, and sends an IP acquisition request to the DHCP server based on the second IP address; The third IP address generated and fed back by the DHCP server is obtained through the tunnel server, and then fed back to the wireless terminal access device through the communication tunnel.

8. The business data transmission method as described in claim 6, characterized in that, After the tunnel server obtains the service data packet sent by the wireless terminal access device, the method further includes: The tunnel server parses the service data packets to obtain the second IP address and service data; The tunnel server sends the service data to the service server based on the second IP address.

9. The business data transmission method as described in claim 6, characterized in that, The service management terminal also includes a terminal authentication server. Before obtaining the communication tunnel establishment request sent by the wireless terminal access device, the method further includes: The terminal authentication request sent by the wireless terminal access device is obtained through the terminal authentication server, wherein the terminal authentication request carries terminal identity information. The terminal authentication server verifies whether the terminal identity information has been successfully authenticated, and sends a terminal authentication success message to the wireless terminal access device after successful authentication.

10. The business data transmission method as described in any one of claims 6-9, characterized in that, The method further includes: The business server generates device control instructions for the second production equipment and queries a pre-stored mapping relationship to determine the fourth IP address of the second production equipment. The mapping relationship includes the correspondence between the production equipment connected to the wireless terminal access device and the IP address assigned to the connected production equipment by the DHCP server. The service server sends the fourth IP address of the second production device and the device control command to the tunnel server. The tunnel server encapsulates the fourth IP address of the second production device and the device control command to generate a device control data packet. The device control data packet is sent to the wireless terminal access device through the communication tunnel.

11. A service data transmission apparatus, the apparatus being used in a wireless terminal access device, characterized in that, The wireless terminal access device is equipped with a network card, and the device includes: The tunnel construction request module is used to send a communication tunnel establishment request to the service management terminal through the network interface card based on the first IP address pre-allocated by the core network. The service management terminal includes: a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server. The address acquisition module is used to acquire a second IP address fed back by the tunnel server through the communication tunnel after establishing a communication tunnel with the tunnel server, wherein the second IP address is assigned by the DHCP server to the wireless terminal access device; The data packet generation module is used to generate a business data packet including the second IP address and the business data when the business data sent by the first production device is obtained; The data packet sending module is used to send the service data packet to the tunnel server through the communication tunnel based on the first IP address, wherein the tunnel server sends the service data of the first production equipment to the service server based on the second IP address after parsing the service data packet.

12. The business data transmission apparatus as described in claim 11, characterized in that, The business management terminal also includes: a terminal authentication server, and the device also includes: The identity authentication request module is used to send a terminal authentication request carrying terminal identity information to the terminal authentication server based on the first IP address. The authentication result acquisition module is used to acquire the terminal authentication pass message returned by the terminal authentication server.

13. The business data transmission apparatus as described in claim 11, characterized in that, The device further includes: The address allocation request module is used to obtain the IP acquisition request sent by the first production equipment, and send the IP acquisition request packet to the tunnel server through the communication tunnel based on the first IP address, wherein the IP acquisition request packet includes the second IP address; The address acquisition module is further configured to acquire the third IP address of the first production device fed back by the tunnel server, wherein the third IP address is assigned to the first production device by the DHCP server; The data packet generation module is specifically used for: The second IP address, the third IP address, and the service data are encapsulated to generate the service data packet.

14. The service data transmission apparatus as described in any one of claims 11-13, characterized in that, The device further includes: The data packet acquisition module is used to acquire device control data packets sent by the tunnel server through the communication tunnel, wherein the device control data packets include a fourth IP address and device control instructions; The data packet parsing module is used to parse the device control data packet to obtain the fourth IP address and device control instructions in the device control data packet; The instruction sending module is used to determine the second production device corresponding to the fourth IP address in the device control data packet, and send the device control instruction to the second production device.

15. A service data transmission apparatus, the apparatus being used in a wireless terminal access device, characterized in that, The wireless terminal access device is equipped with a network card, and the device includes a memory, a transceiver, and a processor. Memory, used to store computer programs; Transceiver, used to send and receive data under the control of the processor; Processor, configured to read the computer program in the memory and perform the following operations: The network interface card sends a communication tunnel establishment request to the service management terminal based on the first IP address pre-allocated by the core network. The service management terminal includes: a tunnel server, a Dynamic Host Configuration Protocol (DHCP) server, and a service server. After establishing a communication tunnel with the tunnel server, obtain the second IP address fed back by the tunnel server through the communication tunnel, wherein the second IP address is assigned by the DHCP server to the wireless terminal access device; Upon receiving business data sent by the first production device, a business data packet including the second IP address and the business data is generated, and the business data packet is sent to the tunnel server through the communication tunnel based on the first IP address. The tunnel server, after parsing the business data packet, sends the business data of the first production device to the business server based on the second IP address.

16. The business data transmission apparatus as described in claim 15, characterized in that, The service management terminal also includes: a terminal authentication server; before sending the communication tunnel establishment request, the processor is further configured to: Based on the first IP address, a terminal authentication request carrying terminal identity information is sent to the terminal authentication server. Obtain the terminal authentication successful message returned by the terminal authentication server.

17. The business data transmission apparatus as described in claim 15, characterized in that, Before acquiring the business data sent by the first production equipment, the processor is further configured to: The system obtains an IP acquisition request sent by the first production equipment, and sends an IP acquisition request packet to the tunnel server through the communication tunnel based on the first IP address, wherein the IP acquisition request packet includes the second IP address; Obtain the third IP address of the first production device returned by the tunnel server, wherein the third IP address is assigned to the first production device by the DHCP server; The generation of the service data packet, which includes the second IP address and the service data, includes: The second IP address, the third IP address, and the service data are encapsulated to generate the service data packet.

18. The business data transmission apparatus as described in any one of claims 15-17, characterized in that, The processor is also used for: Obtain the device control data packet sent by the tunnel server through the communication tunnel, wherein the device control data packet includes a fourth IP address and device control instructions; Parse the device control data packet to obtain the fourth IP address and device control instructions within the device control data packet; The second production device corresponding to the fourth IP address in the device control data packet is identified, and the device control command is sent to the second production device.

19. A processor-readable storage medium, characterized in that, The processor-readable storage medium stores a program that causes the processor-readable storage medium to execute the business data transmission method according to any one of claims 1-10.

Images