Multilayer networking adaptive transmission method, device, equipment, medium and product

Abstract

The embodiment of the invention provides a multilayer networking adaptive transmission method, device and equipment, a medium and a product, and is applied to the technical field of wireless communication networks. The method is applied to a core network, the core network comprises client terminal equipment, and the method comprises the following steps: acquiring an access address and a topology level of a target terminal; wherein the topology hierarchy refers to a hierarchy at which the target terminal accesses the network through the client terminal equipment, and comprises a single-layer topology and a multi-layer topology; determining a data transmission strategy based on the access address and the topology level, and establishing a communication path between the target terminal and the target network based on the data transmission strategy; the target network refers to a public network or a private network; and performing data stream processing based on the communication path, and adjusting resource allocation of the communication path based on the buffer area state of the client terminal equipment in the communication path. The technical effect of meeting the requirement of the production network terminal for accessing the public network is achieved.

Description

Multi-layer network adaptive transmission methods, devices, equipment, media and products Technical Field

[0001] This application relates to the field of wireless communication network technology, and in particular to a multi-layer network adaptive transmission method, apparatus, device, medium and product. Background Technology

[0002] In 5G industrial IoT scenarios, production networks in open areas typically deploy a large number of terminal devices. These devices connect to the 5G private network via 5G Customer Premise Equipment (5G CPE) to enable data backhaul and remote control. Due to the complex network topology in industrial sites, in multi-layered scenarios, terminal devices may be distributed across different network segments, and the hierarchical relationships may change dynamically. This makes it difficult for traditional network architectures to penetrate multi-layered topologies, creating data transmission bottlenecks.

[0003] In existing technologies, to solve the routing penetration problem of multi-layered devices, a common approach is to deploy gateway devices between the private network UPF and the enterprise data center. By establishing a virtual extended LAN tunnel between the 5G CPE and the gateway, the Layer 2 physical address packets of the multi-layered switches and terminal devices connected to the 5G CPE are encapsulated and then directly transmitted to the enterprise private network, thereby achieving transparent penetration of the multi-layered topology.

[0004] Since the existing routing traversal methods are mainly for transmitting private network data streams in enterprise production networks, they cannot achieve data stream transmission to the public network. This results in a technical problem in the existing technology where terminal devices cannot directly access the public network. Summary of the Invention

[0005] This application provides a multi-layer networking adaptive transmission method, apparatus, device, medium, and product to achieve the technical effect of meeting the needs of production network terminals to access the public network.

[0006] In a first aspect, embodiments of this application provide a multi-layer network adaptive transmission method applied to a core network, the core network including client terminal equipment, the method comprising:

[0007] Obtain the access address and topology level of the target terminal; where topology level refers to the level at which the target terminal accesses the network through the client terminal equipment, including single-layer topology and multi-layer topology;

[0008] The data transmission strategy is determined based on the access address and topology level, and the communication path between the target terminal and the target network is established based on the data transmission strategy; the target network refers to the public network or the private network.

[0009] Data stream processing is performed based on the communication path, and resource allocation of the communication path is adjusted based on the buffer status of the client terminal devices in the communication path.

[0010] In one possible implementation, the data transmission strategy is determined based on the access address and the topology level, including:

[0011] Based on the access address, determine the network type of the target network;

[0012] When the network type is a private network and the topology is a single-layer topology, the data transmission strategy is determined to be a post-routing strategy.

[0013] When the network type is a private network and the topology is a multi-layer topology, the data transmission strategy is determined to be the Virtual Extended LAN strategy.

[0014] When the network type is public, the data transmission strategy is determined to be an interruption recovery strategy.

[0015] In one possible implementation, the core network also includes a private network authentication, authorization, and accounting system, as well as private network user plane function elements, which establish communication paths between the target terminal and the target network based on data transmission policies, including:

[0016] When the data transmission strategy is a post-routing strategy, the signaling face based on the private network authentication, authorization and billing system performs secondary authentication on the target terminal to obtain the authentication result;

[0017] When the authentication result indicates that the secondary authentication is successful, the private network authentication authorization and billing system sends the post-routing address segment to the private network user plane function network element corresponding to the target terminal.

[0018] Based on the post-routing address range, the client terminal equipment is used to perform route penetration, and a first communication path is established from the target terminal, through the client terminal equipment, the private network user plane functional network elements and the private network authentication, authorization and billing system signaling plane to the private network server.

[0019] In one possible implementation, the client terminal device further includes a tunnel module, and the private network authentication, authorization, and billing system further includes a software gateway. The system establishes a communication path between the target terminal and the target network based on a data transmission policy, including:

[0020] When the data transmission strategy is a virtual extended LAN strategy, the signaling face based on the private network authentication, authorization and billing system performs secondary authentication on the target terminal to obtain the authentication result.

[0021] When the authentication result indicates that the secondary authentication has passed, a virtual extended local area network tunnel is established based on the tunnel module of the customer terminal device and the soft gateway of the private network authentication, authorization and billing system.

[0022] Based on the virtual extended LAN tunnel, a second communication path is established from the target terminal through the client terminal equipment, the virtual extended LAN tunnel, the software gateway of the private network authentication, authorization and billing system to the private network server.

[0023] In one possible implementation, the client terminal device further includes a queuing module, an interrupt module, and a synchronization module. The core network also includes public network user plane function elements. A communication path between the target terminal and the target network is established based on a data transmission strategy, including:

[0024] When the data transmission strategy is an interruption recovery strategy, the public network access data of the target terminal is temporarily stored in the buffer of the client terminal device based on the queue module;

[0025] When the data in the buffer reaches the upper limit, the private network data flow in the current core network is interrupted by the interrupt module, and the software gateway of the private network authentication, authorization and billing system is notified by the synchronization module to release the virtual extended LAN tunnel.

[0026] A third communication path is established from the target terminal through the client terminal equipment, the private network user plane function network element, the public network user plane function network element to the public Internet, and the public network access data in the buffer is diverted to the public Internet through the private network user plane function network element.

[0027] In one possible implementation, adjusting the resource allocation of the communication path based on the buffer state of the client terminal device in the communication path includes:

[0028] When the storage amount in the buffer does not exceed the preset threshold, priority is given to ensuring the resource usage of the private network communication path, and a preset proportion of basic resources are allocated to the public network communication path.

[0029] When the storage amount in the buffer reaches a preset threshold, resource reallocation is triggered, suspending the resource supply of the private network communication path and prioritizing the allocation of resources to the public network communication path until the data transmission in the buffer is completed, at which point the resource supply of the private network communication path is restored.

[0030] Secondly, embodiments of this application provide a multi-layer network adaptive transmission device applied to a core network, the core network including client terminal equipment, the device comprising:

[0031] The acquisition module is used to acquire the access address and topology level of the target terminal; where the topology level refers to the level at which the target terminal accesses the network through the client terminal equipment, including single-layer topology and multi-layer topology;

[0032] The first processing module is used to determine the data transmission strategy based on the access address and topology level, and to establish the communication path between the target terminal and the target network based on the data transmission strategy; the target network refers to the public network or the private network.

[0033] The second processing module is used to process data streams based on the communication path and adjust the resource allocation of the communication path based on the buffer status of the client terminal devices in the communication path.

[0034] In one possible implementation, the first processing module is further configured to:

[0035] Based on the access address, determine the network type of the target network;

[0036] When the network type is a private network and the topology is a single-layer topology, the data transmission strategy is determined to be a post-routing strategy.

[0037] When the network type is a private network and the topology is a multi-layer topology, the data transmission strategy is determined to be the Virtual Extended LAN strategy.

[0038] When the network type is public, the data transmission strategy is determined to be an interruption recovery strategy.

[0039] In one possible implementation, the first processing module is further configured to:

[0040] When the data transmission strategy is a post-routing strategy, the signaling face based on the private network authentication, authorization and billing system performs secondary authentication on the target terminal to obtain the authentication result;

[0041] When the authentication result indicates that the secondary authentication is successful, the private network authentication authorization and billing system sends the post-routing address segment to the private network user plane function network element corresponding to the target terminal.

[0042] Based on the post-routing address range, the client terminal equipment is used to perform route penetration, and a first communication path is established from the target terminal, through the client terminal equipment, the private network user plane functional network elements and the private network authentication, authorization and billing system signaling plane to the private network server.

[0043] In one possible implementation, the first processing module is further configured to:

[0044] When the data transmission strategy is a virtual extended LAN strategy, the signaling face based on the private network authentication, authorization and billing system performs secondary authentication on the target terminal to obtain the authentication result.

[0045] When the authentication result indicates that the secondary authentication has passed, a virtual extended local area network tunnel is established based on the tunnel module of the customer terminal device and the soft gateway of the private network authentication, authorization and billing system.

[0046] Based on the virtual extended LAN tunnel, a second communication path is established from the target terminal through the client terminal equipment, the virtual extended LAN tunnel, the software gateway of the private network authentication, authorization and billing system to the private network server.

[0047] In one possible implementation, the first processing module is further configured to:

[0048] When the data transmission strategy is an interruption recovery strategy, the public network access data of the target terminal is temporarily stored in the buffer of the client terminal device based on the queue module;

[0049] When the data in the buffer reaches the upper limit, the private network data flow in the current core network is interrupted by the interrupt module, and the software gateway of the private network authentication, authorization and billing system is notified by the synchronization module to release the virtual extended LAN tunnel.

[0050] A third communication path is established from the target terminal through the client terminal equipment, the private network user plane function network element, the public network user plane function network element to the public Internet, and the public network access data in the buffer is diverted to the public Internet through the private network user plane function network element.

[0051] In one possible implementation, the second processing module is further configured to:

[0052] When the storage amount in the buffer does not exceed the preset threshold, priority is given to ensuring the resource usage of the private network communication path, and a preset proportion of basic resources are allocated to the public network communication path.

[0053] When the storage amount in the buffer reaches a preset threshold, resource reallocation is triggered, suspending the resource supply of the private network communication path and prioritizing the allocation of resources to the public network communication path until the data transmission in the buffer is completed, at which point the resource supply of the private network communication path is restored.

[0054] Thirdly, embodiments of this application provide an electronic device, including: a memory and a processor;

[0055] The memory stores the instructions that the computer executes;

[0056] The processor executes computer execution instructions stored in memory, causing the processor to perform the first aspect above and various possible implementations of the first aspect.

[0057] Fourthly, embodiments of this application provide a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, are used to implement the first aspect and various possible implementations thereof.

[0058] Fifthly, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the first aspect and various possible implementations thereof.

[0059] This application provides a multi-layer network adaptive transmission method, apparatus, device, medium, and product. The method is applied to the core network. Specifically, it determines the data transmission strategy of the target terminal by obtaining the access address and topology level of the target terminal. This data transmission strategy corresponds to the public or private network accessed by the target terminal, and the single-layer or multi-layer topology corresponding to the target terminal. A communication path from the target terminal to the target network is established based on the data transmission strategy. Data flow processing between the target terminal and the target network is implemented based on this communication path, and resource allocation of the communication path is adjusted according to the state of the client terminal device's buffer during the processing. Compared with the prior art, this application utilizes the public or private network corresponding to the access address and the single-layer or multi-layer topology corresponding to the topology level to determine the strategy for data transmission, thereby constructing communication paths for different network types and topology levels, adapting to the transmission needs under different networking scenarios, solving the technical problem of multi-layer routing penetration being unable to access the public network in the prior art, and achieving the technical effect of meeting the needs of production network terminals to access the public network. Attached Figure Description

[0060] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0061] Figure 1 is a schematic diagram of the architecture of the multi-layer networking core network provided in this application;

[0062] Figure 2 is a flowchart illustrating the multi-layer network adaptive transmission method provided in this application.

[0063] Figure 3 is a schematic flowchart of the multi-layer network adaptive transmission method provided in this application.

[0064] Figure 4 is a schematic diagram of the structure of the multi-layer network adaptive transmission system provided in this application;

[0065] Figure 5 is a schematic diagram of the structure of the multi-layer network adaptive transmission device provided in this application;

[0066] Figure 6 is a schematic diagram of the structure of the electronic device provided in this application.

[0067] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0068] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0069] First, let me explain the terms used in this application:

[0070] Virtual Extensible Local Area Network (VxLAN): refers to a network virtualization technology that encapsulates Layer 2 Ethernet frames based on the UDP protocol, enabling the construction of large Layer 2 virtual networks on Layer 3 networks.

[0071] User Datagram Protocol (UDP) is a connectionless transport layer protocol.

[0072] User Plane Function (UPF): refers to the core network elements of the 5G core network user plane, which are used for packet routing, packet forwarding, security control, traffic reporting, address translation, and service slicing.

[0073] Customer Premises Equipment (CPE) refers to a terminal device deployed on the user side that can convert the base station's wireless signal into WiFi or wired Ethernet signal.

[0074] Wireless Fidelity (WiFi) is a wireless local area network technology used to enable wireless access for multiple devices.

[0075] Data Network - Authentication, Authorization and Accounting (DN-AAA): This refers to the AAA service function for data networks, which is responsible for authenticating, authorizing, and billing users accessing a specific data network.

[0076] Network Address Translation (NAT) is a technology that translates private network addresses into public network addresses.

[0077] Quality of Service (QoS) refers to the technical system by which a network provides differentiated services for different types of traffic, with the aim of ensuring the transmission quality of critical services.

[0078] In existing technologies, in complex production network scenarios, multi-layer routing traversal is used to address the routing traversal problem of devices connected across multiple layers in order to ensure data transmission from terminal devices. This is achieved by establishing a virtual extended LAN tunnel, encapsulating Layer 2 physical address packets from multi-layer switches and terminal devices, and then directly transmitting them to the enterprise private network, thus realizing transparent traversal of the multi-layer topology.

[0079] However, since the existing routing traversal methods are mainly for transmitting private network data streams, when terminal devices need to access the public network, they must rely on the enterprise's office network exit. However, in order to ensure data security, there is usually a physical isolation between the enterprise's production network and office network, which leads to the technical problem that terminal devices cannot directly access the public network in the existing technology.

[0080] To address the aforementioned technical problems, this application proposes the following technical concept: By obtaining the access address and topology level of the target terminal, the public or private network corresponding to the access address, and the single-layer or multi-layer topology corresponding to the topology level, a strategy for data transmission is determined; a communication path for data transmission is established based on the determined data transmission strategy, and data flow processing between the target terminal and the target network is performed based on this communication path; compared with the prior art, this application combines the access address and topology level of the target terminal to determine different transmission strategies, thereby constructing communication paths for different network types and topology levels, adapting to the transmission needs under different networking scenarios, solving the technical problem of multi-layer routing penetration being unable to access the public network in the prior art, and achieving the technical effect of meeting the needs of production network terminals to access the public network.

[0081] The technical solution of this application and how the technical solution of this application solves the above-mentioned technical problems are described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will now be described with reference to the accompanying drawings.

[0082] Figure 1 is a schematic diagram of the architecture of the multi-layer network core network provided in this application. As shown in Figure 1, the core network includes: multiple IoT device terminals 101, multiple switches 102, customer terminal equipment 103, base station 104, private network user plane function network element 105, public network user plane function network element 106, private network authentication, authorization and billing system 107, public internet 109, private network 108, and public internet 109.

[0083] The client terminal device 103 is connected to a multi-layer switch 102 and IoT device terminals 101. The switch 102 is connected to multiple IoT device terminals 101 or other switches. The client terminal device 103 is connected to a private network user plane function element 105 via a base station 104, and then to a public network user plane function element 106 via the private network user plane function element 105, and finally to the public internet 109 via the public network user plane function element 106. It is also connected to a private network authentication, authorization, and billing system 107 via the private network user plane function element 105, and then to a private network 108 via the private network authentication, authorization, and billing system 107.

[0084] Optionally, in this embodiment, the core network is a 5G core network, the customer terminal equipment 103 is a 5G CPE, the base station 104 is a 5G base station 104, and the connected private network 108 can be regarded as the data center of the enterprise private network 108. Furthermore, the private network authentication, authorization, and billing system 107 is identified by DN-AAA, and this system includes a soft gateway and a signaling plane; the signaling plane is used for secondary authentication; and the soft gateway is used for constructing virtual extended local area network tunnels.

[0085] The client terminal device 103 includes a tunnel module, a queue module, an interrupt module, and a synchronization module. The tunnel module is used to build a virtual extended LAN tunnel with the soft gateway of the private network authentication, authorization, and accounting system 107. The queue module is used to store data streams in the form of queues. The interrupt module is used to interrupt the data stream of private network 108 in the core network. The synchronization module is used to synchronize the information of the interrupted private network 108 data stream to the private network authentication, authorization, and accounting system 107 and release the virtual extended LAN tunnel.

[0086] Based on the embodiment shown in Figure 1, this application provides a multi-layer network adaptive transmission method based on the core network shown in Figure 1. Figure 2 is a flowchart of the multi-layer network adaptive transmission method provided in this application. As shown in Figure 2, the method includes:

[0087] S201. Obtain the access address and topology level of the target terminal.

[0088] In this step, the topology level refers to the level at which the target terminal accesses the network through the client terminal device, including single-layer and multi-layer topologies. The target terminal refers to the terminal device accessing the network and is the initiator of data transmission. The access address refers to the destination network address carried when the target terminal initiates an access request, used to distinguish whether the target network is a private network or a public network. The network refers to the architecture of the core network, used to enable data exchange between multiple IoT terminal devices and the private or public network.

[0089] For example, in an industrial network within a company's production workshop, the target terminal can be an industrial sensor, intelligent control terminal, camera, or office equipment. A single-layer topology means the target terminal is directly connected to the network port of the client terminal device, or connected to the client terminal device via a switch. A multi-layer topology means the target terminal is first connected to a Layer 2 switch, which then connects to a Layer 1 switch, which finally connects to the client terminal device; in this case, the connection between the target terminal and the client terminal device involves multiple levels of switch forwarding.

[0090] It should be noted that the client terminal equipment is a bridge built between the target terminal and the target network, responsible for the target terminal's network access and data forwarding.

[0091] In this step, the access address and topology level of the target terminal can be obtained in the following ways:

[0092] Based on the client terminal equipment used by the target terminal to access the network, the access information stored in the target terminal is collected. When the target terminal initiates an access request, the access data packets intercepted by the client terminal equipment are obtained. The access information is parsed to obtain the topology layer of the target terminal, and the access data packets are parsed to obtain the access address of the target terminal. The access information can be a port mapping information table built into the client terminal equipment. This table records the physical addresses of the devices connected to each network port and the downstream switches. When the target terminal accesses the network, the number of switch layers between the target terminal and the client terminal equipment can be determined by tracing the forwarding path of the physical address, thereby accurately identifying the topology layer of the target terminal.

[0093] For example, in an automobile manufacturing workshop, the client terminal equipment deployed is a 5G CPE, and the welding robot in the workshop is the target terminal. The target terminal is directly connected to the network port of the 5G CPE, and the 5G CPE identifies the topology level of the target terminal as a single-layer topology. When the welding robot initiates an access request and needs to retrieve the welding parameters of the workshop server, the 5G CPE extracts the corresponding access address.

[0094] S202. Determine the data transmission strategy based on the access address and topology level, and establish the communication path between the target terminal and the target network based on the data transmission strategy.

[0095] In this step, the target network refers to either a public network or a private network. A public network refers to the public internet; a private network refers to a network specifically built by an enterprise or organization for a particular purpose, group, or business. These networks typically employ physical isolation or strict logical isolation to ensure the security, stability, and reliability of the business, preventing external interference or data leakage. The data transmission strategy refers to the differentiated data transmission path scheme selected for the target terminal based on the target network type and topology, including post-routing strategies, virtual extended LAN strategies, and interruption recovery strategies.

[0096] For example, a private network can be: an enterprise's internal production network used to transmit business data such as production data and control commands; a public network can be the Internet used to access external resources or download upgrade packages.

[0097] Alternatively, one possible implementation of the data transmission strategy is as follows:

[0098] S2021. Determine the network type of the target network based on the access address.

[0099] In this step, the method for determining the network type of the target network based on the access address can be as follows: compare the access address with a preset private network address segment whitelist. If the access address belongs to a segment in the whitelist, the target network corresponding to the access address is determined to be a private network; if the access address does not belong to any segment in the whitelist, the target network corresponding to the access address is determined to be a public network. The preset private network address segment whitelist is a pre-stored configuration file, which is stored in a preset database corresponding to the core network.

[0100] It should be noted that the private network authentication, authorization, and billing system is responsible for receiving the access address and topology level sent by the client terminal device and determining the data transmission strategy based on this. The preset database corresponding to the preset private network address segment whitelist used for network type determination can be the preset database of the private network authentication, authorization, and billing system in the core network.

[0101] S2022. When the network type is a private network and the topology is a single-layer topology, the data transmission strategy is determined to be a post-routing strategy.

[0102] In this step, the post-routing strategy refers to the strategy of establishing a communication path from the terminal to the private network by using the post-routing address range issued by the private network authentication, authorization and billing system to achieve route penetration through the customer terminal device. It is suitable for scenarios with private network access and simple topology.

[0103] It should be noted that there is a mapping relationship between data transmission strategy, network type, and topology level. The corresponding data transmission strategy can be queried based on the network type and topology level. This mapping relationship can be stored in the core business database of the core network or in the preset database corresponding to the private network authentication, authorization, and billing system in the core network.

[0104] S2023. When the network type is a private network and the topology is a multi-layer topology, the data transmission strategy is determined to be the Virtual Extended LAN strategy.

[0105] In this step, the virtual extended LAN policy refers to establishing a communication channel between the client terminal equipment and the private network authentication, authorization, and billing system, and implementing a data transmission strategy from the target terminal to the private network under a multi-layer topology based on tunneling.

[0106] For example, the client terminal equipment connected to the smart shelf terminal in the warehouse area via a Layer 3 switch is a 5G CPE, and the private network authentication, authorization, and billing system used is the DN-AAA system. When the smart shelf terminal accesses the warehouse management system, based on the DN-AAA system's determination of a private network and multi-layer topology, a virtual extended LAN policy is triggered. After negotiation between the 5G CPE's tunnel module and the DN-AAA system's soft gateway, a virtual extended LAN tunnel with the identifier 1001 is established, and the target terminal's data is forwarded to the private network server through the tunnel.

[0107] S2024. When the network type is public network, the data transmission strategy is determined to be the interruption recovery strategy.

[0108] In this step, the interruption recovery strategy refers to the strategy of temporarily storing public network data in the buffer of the client terminal device when the target terminal accesses the public network; when the buffer is full, interrupting the current private network data flow, releasing tunnel resources, and prioritizing the transmission of public network data; and restoring the private network data flow after the public network data transmission is completed. This strategy solves the problem of public network access in the isolation scenario between production network and office network in the existing technology.

[0109] Optionally, the interruption recovery strategy can be configured with priority thresholds. For high-priority private network services, their buffer thresholds can be increased to prevent them from being easily interrupted.

[0110] For example: Set the control command service of the welding robot to the highest priority, and set the preset threshold for the corresponding buffer to reach the upper limit to 95%. The service will only be interrupted when the buffer capacity reaches 95%, so as to ensure that the core production is not affected.

[0111] It should be noted that the specific implementation of constructing the corresponding communication path based on the data transmission strategy will be further explained in the embodiment shown in Figure 3 below, and will not be elaborated here.

[0112] S203. Perform data stream processing based on the communication path, and adjust the resource allocation of the communication path based on the buffer status of the client terminal device in the communication path.

[0113] In this step, data stream processing refers to operations such as forwarding, encapsulating, and decapsulating the terminal's private network or public network data according to the established communication path.

[0114] For example, when private network data adopts a post-routing strategy, it is forwarded directly through route penetration; when adopting a virtual extended LAN strategy, it needs to be forwarded after tunnel encapsulation; public network data needs to be forwarded through the private network user plane function network element.

[0115] The buffer status refers to the storage capacity occupancy of the buffer in the client terminal device, which is divided into two states: not reaching the upper limit and reaching the upper limit.

[0116] For example, if the total buffer capacity is set to 100MB and the current storage is 60MB, it means the limit has not been reached; if the current storage is 100MB, it means the limit has been reached.

[0117] Resource allocation refers to the core network's dynamic allocation of bandwidth, tunnel resources, and other resources for communication paths.

[0118] Alternatively, one possible implementation of resource allocation based on buffer state is as follows:

[0119] S2031. When the storage amount in the buffer is detected to be less than the preset threshold, priority is given to ensuring the resource occupation of the private network communication path, and a preset proportion of basic resources are allocated to the public network communication path.

[0120] In this step, the preset threshold refers to a pre-set critical value for the buffer capacity, which is used to trigger the switching of resource allocation mode. It can be set to 70% to 90% of the total buffer capacity.

[0121] For example, the total buffer capacity is 100MB, and the preset threshold is set to 90MB. This step is executed when the storage amount is ≤90MB.

[0122] Basic resources refer to the minimum guaranteed resources allocated to public network paths to prevent public network data from being completely unable to be transmitted.

[0123] For example, 90% of the bandwidth is allocated to the private network and 10% to the public network. The 10% bandwidth is the basic resource of the public network.

[0124] Alternatively, one possible implementation of resource allocation is as follows:

[0125] Based on the storage volume of the monitoring buffer of the client terminal equipment, when the storage volume of the buffer does not exceed the preset threshold, the status is reported to the core network; the private network priority resource allocation mode is triggered, allocating a high proportion of bandwidth to the private network communication path and a basic proportion of bandwidth to the public network path; the data stream is transmitted according to this resource allocation ratio.

[0126] S2032. When the storage amount in the buffer reaches a preset threshold, resource reallocation is triggered, the resource supply of the private network communication path is suspended, and the resources are preferentially allocated to the public network communication path until the data transmission in the buffer is completed, and then the resource supply of the private network communication path is restored.

[0127] In this step, resource reallocation refers to the core network switching its resource allocation mode from private network priority to public network priority, suspending some resource supply for private network paths, and prioritizing the resource needs of public network paths. Restoring private network resources means that after public network data transmission is completed, the core network switches its resource allocation mode back to private network priority, restoring normal resource supply for private network paths.

[0128] This application provides a multi-layer network adaptive transmission method. This method determines the data transmission strategy of the target terminal by obtaining its access address and topology level. The data transmission strategy corresponds to the public or private network accessed by the target terminal, and the single-layer or multi-layer topology corresponding to the target terminal. A communication path from the target terminal to the target network is established based on the data transmission strategy. Data flow processing between the target terminal and the target network is implemented based on this communication path, and resource allocation of the communication path is adjusted according to the state of the client terminal device's buffer during processing. Compared with existing technologies, this application utilizes the public or private network corresponding to the access address and the single or multi-layer topology corresponding to the topology level to determine the strategy for data transmission. This allows for the construction of communication paths for different network types and topology levels, adapting to the transmission needs of different networking scenarios. It solves the technical problem in existing technologies where multi-layer routing penetration cannot access the public network, achieving the technical effect of meeting the needs of production network terminals to access the public network.

[0129] Figure 3 is a schematic flowchart of the multi-layer network adaptive transmission method provided in this application. As shown in Figure 3, the method includes:

[0130] S301. When the data transmission strategy is a post-routing strategy, the signaling face based on the private network authentication, authorization and billing system performs secondary authentication on the target terminal to obtain the authentication result.

[0131] In this step, the signaling plane of the private network authentication, authorization, and billing system refers to the core control module of the system, which has three core functions: secondary authentication, fixed IP address allocation, and post-routing management. Secondary authentication refers to the core network's secondary identity verification of the terminal. The first authentication is the basic authentication for the target terminal to access the private network, while the secondary authentication is a dedicated authentication for the target terminal to access the private network, used to enhance the security of the private network.

[0132] For example, after the target terminal initiates a private network access request, the core network reports the target terminal's identity information to the signaling plane of the private network authentication, authorization, and billing system based on the client terminal device. The signaling plane calls the authentication database to verify the terminal's identity. If the verification is successful, an authentication success result is output; if the verification fails, access is denied. The target terminal's identity information can include the device serial number, authentication key, etc. The authentication database stores the authentication information of terminals that have already registered or undergone initial authentication.

[0133] Optionally, secondary authentication can also combine the terminal's location information and access time for comprehensive authentication. Comprehensive authentication refers to determining whether the target terminal is within the private network coverage area based on its location information and whether it initiated the access request within the specified time based on the access time, thereby achieving strict secondary authentication.

[0134] S302. When the authentication result indicates that the secondary authentication is successful, the private network authentication authorization and billing system issues the post-routing address segment to the private network user plane function network element corresponding to the target terminal.

[0135] In this step, the private network user plane function element refers to the module in the core network specifically responsible for forwarding private network data. After successful authentication, the issued post-routing address range uses the routing instruction carrier between the private network authentication, authorization, and accounting system and the private network user plane function element, namely the Framed-Route attribute. The post-routing address range refers to the internal network IP address range of the terminals connected to the client terminal device. It is the exclusive address range of the target terminal in the private network, used to solve the problem that the private network user plane function element cannot recognize the target terminal due to the NAT mechanism of the client terminal device.

[0136] For example, the method for distributing the back-route address range can be as follows: after the signaling plane of the private network authentication, authorization, and billing system outputs the authentication pass result, it extracts the back-route address range to which the target terminal belongs and encapsulates it in the Framed-Route attribute; it then distributes the attribute to the corresponding private network user plane function element via the RADIUS protocol; after receiving the data, the private network user plane function element updates its local routing table and adds the forwarding rules for the back-route address range.

[0137] S303. Based on the post-routing address range, the client terminal equipment is used to perform route penetration, and a first communication path is established from the target terminal, through the client terminal equipment, the private network user plane functional network element and the private network authentication, authorization and billing system signaling plane to the private network server.

[0138] In this step, route traversal refers to bypassing the NAT mechanism of the client terminal device through post-routing address calculation, allowing the private network user plane function elements to directly identify the internal network address of the target terminal connected to the client terminal device, thus enabling direct communication between the target terminal and the private network server. The first communication path refers to the communication path from the target terminal to the private network server under the post-routing strategy.

[0139] For example, the first communication path can be constructed in the following ways:

[0140] The routing table is updated based on the private network user plane function network element, and route penetration is achieved based on the client terminal equipment and the subsequent routing address range; the private network data of the target terminal is forwarded to the private network user plane function network element through the client terminal equipment, and the private network user plane function network element forwards the data to the signaling plane of the private network authentication, authorization and billing system according to the routing table, and finally forwards it to the private network server by the signaling plane, thus completing the establishment of the first communication path.

[0141] S304. When the data transmission strategy is a virtual extended LAN strategy, the signaling face based on the private network authentication, authorization and billing system performs secondary authentication on the target terminal to obtain the authentication result.

[0142] In this step, the secondary authentication method is the same as in step S301 above. The purpose of secondary authentication is to ensure the security of the target terminal accessing the private network under the multi-layer topology.

[0143] For example, when a smart shelf terminal in a multi-layered warehouse accesses the warehouse management system, it also needs to undergo secondary authentication through the signaling plane of the dedicated network authentication and authorization billing system to prevent unauthorized devices from accessing the system.

[0144] It should be noted that when performing secondary authentication on target terminals with multi-layer topologies, a topology validity check can be added to verify whether the access layer of the target terminal is consistent with the preset layer, preventing the terminal from changing the access topology without authorization. The preset layer corresponding to the target terminal refers to the topology layer registered in the core network when the target terminal first accesses the network. This data can be stored in the core database of the core network, and the storage format can be a structured storage based on the mapping relationship between the terminal identifier and the preset layer.

[0145] S305. When the authentication result indicates that the secondary authentication has passed, a virtual extended local area network tunnel is established based on the tunnel module of the customer terminal device and the soft gateway of the private network authentication, authorization and billing system.

[0146] In this step, the tunnel module of the client terminal device refers to the tunnel entry point in the client terminal device used to initiate virtual extended LAN tunnel establishment requests, encapsulate or decapsulate tunnel data, and realize communication between the terminal and the private network under a multi-layer topology.

[0147] A software gateway refers to the data plane function module of a private network authentication, authorization, and billing system. It has the function of virtual extended local area network tunnel and can keep the status synchronized with the client terminal equipment. It is the other end of the tunnel entrance.

[0148] Virtual extended LAN tunnels refer to communication tunnels that span multiple topologies. By encapsulating Layer 2 data in Layer 3 UDP packets, they can penetrate the NAT nesting of multiple layers of switches and enable communication between terminals and private networks.

[0149] For example, a way to establish a virtual extended LAN tunnel can be:

[0150] After the target terminal passes secondary authentication, the client terminal device activates the tunnel module and sends a tunnel establishment request to the software gateway of the private network authentication, authorization and billing system. The request includes parameters such as tunnel identifier and encapsulation format. After receiving the request, the software gateway of the private network authentication, authorization and billing system verifies the legality of the parameters. If the verification is successful, it negotiates the tunnel parameters with the client terminal device. After the parameters are agreed upon by both parties, a virtual extended local area network tunnel is established.

[0151] S306. Based on the virtual extended LAN tunnel, establish a second communication path from the target terminal through the client terminal equipment, the virtual extended LAN tunnel, the software gateway of the private network authentication, authorization and billing system to the private network server.

[0152] In this step, the second communication path refers to the communication path from the target terminal to the private network under the virtual extended LAN policy.

[0153] For example, data from the smart shelf terminal is forwarded to the client terminal device via a three-layer switch. The client terminal device encapsulates the data and sends it into a virtual extended local area network tunnel. The other end of the tunnel is a soft gateway of the private network authentication, authorization, and billing system. The soft gateway decapsulates the data and forwards the extracted raw data to the private network server, thereby completing the establishment of the second communication path.

[0154] Optionally, the second communication path supports encrypted data transmission, and encryption algorithms can be used to encrypt the data within the tunnel to prevent data leakage during transmission.

[0155] S307. When the data transmission strategy is an interruption recovery strategy, the public network access data of the target terminal is temporarily stored in the buffer of the client terminal device based on the queue module.

[0156] In this step, the queue module refers to the functional module of the client terminal device, including two types: a public network queue module and an internal network queue module. These are used to cache and queue public network access data and internal network data, respectively, to achieve orderly temporary storage and transmission of data and prevent data loss. The buffer is used to store the public network access data temporarily stored by the queue module, and its capacity can be configured according to actual needs.

[0157] For example, the method of temporarily storing public network access data in the buffer can be as follows: in response to the public network access request initiated by the target terminal, trigger the interruption recovery strategy based on the private network authentication, authorization and billing system; based on the client terminal device enabling the queue module, intercept the terminal's public network access data; temporarily store the data in the buffer of the client terminal device in the order of receipt, and record the amount of data stored in real time.

[0158] It should be noted that when the intranet data stream is interrupted, the intranet data can be temporarily stored in a buffer based on the intranet queue module. When the intranet data stream resumes transmission, the data in the buffer will be transmitted according to the restored communication path.

[0159] S308. When the data in the buffer reaches the upper limit, the private network data flow in the current core network is interrupted based on the interrupt module, and the software gateway of the private network authentication, authorization and billing system is notified through the synchronization module to release the virtual extended LAN tunnel.

[0160] In this step, the interrupt module refers to a functional module in the client terminal device used to interrupt the current private network data flow when the buffer is full. It is an executor used for switching resource allocation modes. The synchronization module refers to a functional module in the client terminal device specifically used to send a tunnel release notification to the software gateway of the private network authentication, authorization, and billing system after the private network data flow is interrupted. The purpose is to achieve state synchronization between the client terminal device and the private network authentication, authorization, and billing system. Releasing the virtual extended LAN tunnel refers to the software gateway based on the private network authentication, authorization, and billing system closing the currently established virtual extended LAN tunnel, releasing the network resources occupied by the tunnel, and freeing up network resources for the transmission of public network data flow.

[0161] For example, the method for releasing the virtual extended LAN tunnel can be as follows: The target terminal is a welding robot, and there is a request to download an upgrade package for repairing the target terminal. After determining that the data transmission strategy is an interruption recovery strategy, the request is temporarily stored in a buffer. When the amount of data in the buffer reaches a preset threshold, the interrupt module immediately interrupts the welding robot's production data transmission; the synchronization module sends a notification to the soft gateway of the private network authentication, authorization, and billing system; upon receiving the notification, the soft gateway releases the virtual extended LAN tunnel numbered 1001, releasing bandwidth resources. Then, all public network access data in the buffer is forwarded sequentially.

[0162] It should be noted that the interrupt module in this step can use a gradual interruption method when interrupting the private network data stream, progressively reducing the bandwidth of the private network data stream instead of directly interrupting it, thereby reducing the impact on private network services. For example, when the buffer capacity reaches 80%, the private network bandwidth can be reduced by 50%; when the capacity reaches 90%, the private network bandwidth can be reduced to 20%; and when the capacity reaches 100%, a complete interruption can be performed.

[0163] S309. Establish a third communication path from the target terminal through the client terminal equipment, the private network user plane function network element, the public network user plane function network element to the public Internet, and divert the public network access data in the buffer to the public Internet through the private network user plane function network element.

[0164] In this step, the third communication path refers to the communication path from the target terminal to the public network under the interruption recovery strategy. The public network user plane function element refers to the module in the core network responsible for forwarding public network data, and it needs to be deployed independently from the private network user plane function elements. The uplink classifier strategy is used to offload public network data streams to the public internet. This is a offloading strategy in the core network used to distinguish between private network and public network data, guiding the private network user plane function module to offload public network data to the public network user plane function module.

[0165] For example, if multiple maintenance terminals need to be upgraded, the third communication path can be constructed as follows:

[0166] a1. The maintenance terminal generates an upgrade package download request data packet and sends it to the corresponding customer terminal device.

[0167] a2. The client terminal equipment extracts the access address of the data packet and the topology level of the maintenance terminal, and reports it to the private network authentication, authorization and billing system in the form of signaling information.

[0168] a3. The private network authentication, authorization, and billing system compares the whitelist stored locally, determines that the target network is a public network, determines that the data transmission policy is an interruption recovery policy, and sends the policy instructions to the client terminal device.

[0169] a4. After receiving the policy instruction, the client terminal device starts the queue module to temporarily store the download request data packet of the maintenance terminal in the buffer.

[0170] a5. As subsequent data from download requests continues to be stored, the buffer's storage capacity reaches a preset threshold.

[0171] a6. The client terminal module enables the interrupt module, interrupts the current private network data flow, and sends a signaling request to the private network authentication, authorization, and billing system to release the virtual extended LAN tunnel through the synchronization module.

[0172] a7. After receiving the tunnel release signal, the private network authentication, authorization and billing system controls the soft gateway to release the virtual extended LAN tunnel.

[0173] a8. After the tunnel is released, the client terminal equipment will forward the download request data packets in the buffer to the private network user plane function element.

[0174] a9. Private network user plane function elements identify the public network attributes of data packets through uplink classifier strategies and divert them to public network user plane function elements.

[0175] a10. The public network user plane function element forwards the data packet to the public Internet and sends it to the public server where the upgrade package is located.

[0176] a11. The public network user plane function element receives the downlink data packet of the upgrade package issued by the public network server and forwards it to the corresponding private network user plane function element.

[0177] a12. The private network user plane function element uses the downlink classifier strategy to match the internal network address of the maintenance terminal and forwards the data packet to the corresponding customer terminal device.

[0178] a13. The customer terminal equipment forwards the data packet to the corresponding maintenance terminal, thereby completing the download of the upgrade package.

[0179] Figure 4 is a schematic diagram of the multi-layer network adaptive transmission system provided in this application. As shown in Figure 4, the system includes two modules: a 5G CPE device architecture and a DN-AAA device architecture. Specifically, the 5G CPE device architecture includes: a policy layer 401, a buffer layer 402, a transport layer 403, and a network layer 404; the DN-AAA device architecture includes: a control plane 405, a management plane 406, and a data plane 407.

[0180] The policy layer 401 includes a judgment module and an interrupt module. The judgment module is mainly used to determine whether the terminal connected to the switch is accessing the enterprise private network or the public network, and whether the number of connected layers is single-layer or multi-layer, thereby enabling different data transmission strategies. The interrupt module is mainly used to interrupt the original private network data flow transmission when the public network queue module's buffer is full, and to resume the original private network data flow transmission after the public network data flow transmission is completed.

[0181] The buffer layer 402 includes an internal network queue module and a public network queue module. The internal network queue module is primarily used to temporarily store internal network data streams in a buffer when the internal network data stream is interrupted, and to release the internal network data stream in the buffer after the interrupt command ends. The public network queue module is primarily used to temporarily store public network data streams in a buffer after the interrupt command ends, and to release the public network data stream in the buffer after the interrupt command begins. The buffer sizes for both the internal network queue module and the public network queue module can be dynamically adjusted according to the actual traffic volume model.

[0182] Transport layer 403 includes a tunnel module and a synchronization module. The tunnel module is mainly used to establish VxLAN tunnels with the soft gateway of the DN-AAA system and release the VxLAN tunnels after an interrupt command occurs. The synchronization module is mainly used to keep the 5G CPE and the DN-AAA system in state synchronization, including the post-routing enable or release status, VxLAN tunnel establishment or release status, and heartbeat synchronization.

[0183] Network layer 404 includes modules such as 4G / 5G, Wi-Fi, and Ethernet.

[0184] The control plane 405 includes modules such as secondary authentication, fixed IP address allocation, and routing management behind CPE.

[0185] The management interface 406 includes modules such as alarm management, log management, and system monitoring.

[0186] Data plane 407 includes a tunnel module, a synchronization module, and a flow control module. The tunnel module is primarily used to establish a VxLAN tunnel with the 5G CPE and release the VxLAN tunnel after an interrupt command occurs. The synchronization module is mainly used to maintain state synchronization between the 5G CPE and the DN-AAA system. The flow control module mainly performs load balancing, QoS assurance, hierarchical access control, and source auditing on internal network data flows passing through the DN-AAA system's soft gateway, to ensure more secure access to the private network server.

[0187] Figure 5 is a schematic diagram of the structure of the multi-layer network adaptive transmission device provided in this application. As shown in Figure 5, the multi-layer network adaptive transmission device provided in this embodiment includes:

[0188] The acquisition module 501 is used to acquire the access address and topology level of the target terminal; wherein, the topology level refers to the level at which the target terminal accesses the network through the client terminal equipment, including single-layer topology and multi-layer topology.

[0189] The first processing module 502 is used to determine the data transmission strategy based on the access address and topology level, and to establish a communication path between the target terminal and the target network based on the data transmission strategy; the target network refers to a public network or a private network.

[0190] The second processing module 503 is used to perform data stream processing based on the communication path and adjust the resource allocation of the communication path based on the buffer status of the client terminal device in the communication path.

[0191] Optionally, in one possible implementation, the first processing module 502 is further configured to:

[0192] Based on the access address, determine the network type of the target network.

[0193] When the network type is a private network and the topology is a single-layer topology, the data transmission strategy is determined to be a post-routing strategy.

[0194] When the network type is a private network and the topology is a multi-layer topology, the data transmission strategy is determined to be the Virtual Extended LAN strategy.

[0195] When the network type is public, the data transmission strategy is determined to be an interruption recovery strategy.

[0196] Optionally, in one possible implementation, the first processing module 502 is further configured to:

[0197] When the data transmission strategy is a post-routing strategy, the signaling face based on the private network authentication, authorization and billing system performs secondary authentication on the target terminal to obtain the authentication result.

[0198] When the authentication result indicates that the secondary authentication is successful, the private network authentication authorization and billing system issues the post-routing address range to the private network user plane function network element corresponding to the target terminal.

[0199] Based on the post-routing address range, the client terminal equipment is used to perform route penetration, and a first communication path is established from the target terminal, through the client terminal equipment, the private network user plane functional network elements and the private network authentication, authorization and billing system signaling plane to the private network server.

[0200] Optionally, in one possible implementation, the first processing module 502 is further configured to:

[0201] When the data transmission strategy is a virtual extended LAN strategy, the signaling face based on the private network authentication, authorization and billing system performs secondary authentication on the target terminal to obtain the authentication result.

[0202] When the authentication result indicates that the secondary authentication has passed, a virtual extended local area network tunnel is established based on the tunnel module of the client terminal device and the soft gateway of the private network authentication, authorization and billing system.

[0203] Based on the virtual extended LAN tunnel, a second communication path is established from the target terminal through the client terminal equipment, the virtual extended LAN tunnel, the software gateway of the private network authentication, authorization and billing system to the private network server.

[0204] Optionally, in one possible implementation, the first processing module 502 is further configured to:

[0205] When the data transmission strategy is an interruption recovery strategy, the public network access data of the target terminal is temporarily stored in the buffer of the client terminal device based on the queue module.

[0206] When the data in the buffer reaches its limit, the private network data flow in the current core network is interrupted by the interrupt module, and the software gateway of the private network authentication, authorization and billing system is notified by the synchronization module to release the virtual extended LAN tunnel.

[0207] A third communication path is established from the target terminal through the client terminal equipment, the private network user plane function network element, the public network user plane function network element to the public Internet, and the public network access data in the buffer is diverted to the public Internet through the private network user plane function network element.

[0208] Alternatively, in one possible implementation, the second processing module 503 is further configured to:

[0209] When the storage amount in the buffer does not exceed the preset threshold, priority is given to ensuring the resource usage of the private network communication path, and a preset proportion of basic resources are allocated to the public network communication path.

[0210] When the storage amount in the buffer reaches a preset threshold, resource reallocation is triggered, suspending the resource supply of the private network communication path and prioritizing the allocation of resources to the public network communication path until the data transmission in the buffer is completed, at which point the resource supply of the private network communication path is restored.

[0211] The apparatus provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0212] Figure 6 is a schematic diagram of the structure of the electronic device provided in this application. As shown in Figure 6, the electronic device provided in this embodiment includes at least one processor 601 and a memory 602. Optionally, the device further includes a communication component 603. The processor 601, memory 602, and communication component 603 are connected via a bus 604.

[0213] In the specific implementation process, at least one processor 601 executes computer execution instructions stored in memory 602, causing at least one processor 601 to execute the above-mentioned multi-layer network adaptive transmission method or method.

[0214] The specific implementation process of processor 601 can be found in the above method embodiments, and its implementation principle and technical effect are similar. It will not be repeated here.

[0215] In the above embodiments, it should be understood that the processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), etc. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in this invention can be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules within the processor.

[0216] The memory may include random access memory (RAM) and may also include non-volatile memory (NVM), such as at least one disk storage device.

[0217] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of illustration, the buses shown in the accompanying drawings are not limited to a single bus or a single type of bus.

[0218] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the above-described method.

[0219] This application also provides a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, implement the above-described method.

[0220] The aforementioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. The readable storage medium can be any available medium accessible to a general-purpose or special-purpose computer.

[0221] An exemplary readable storage medium is coupled to a processor, enabling the processor to read information from and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can reside in an Application Specific Integrated Circuit (ASIC). Alternatively, the processor and the readable storage medium can exist as discrete components in the device.

[0222] The division of units is merely a logical functional division; in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be indirect coupling or communication connection through some interfaces, devices, or units, and may be electrical, mechanical, or other forms.

[0223] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0224] In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0225] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0226] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0227] Finally, it should be noted that other embodiments of the invention will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This invention is intended to cover any variations, uses, or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not disclosed herein, and is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of the invention is limited only by the appended claims.

Claims

1. A multi-layer network adaptive transmission method, characterized in that, The method, applied to a core network including client terminal equipment, includes: obtaining the access address and topology level of a target terminal; wherein, the topology level refers to the level at which the target terminal accesses the network through the client terminal equipment, including single-layer topology and multi-layer topology; determining a data transmission strategy based on the access address and the topology level, and establishing a communication path between the target terminal and the target network based on the data transmission strategy; the target network refers to a public network or a private network; performing data stream processing based on the communication path, and adjusting the resource allocation of the communication path based on the buffer state of the client terminal equipment in the communication path.

2. The method according to claim 1, characterized in that, The step of determining the data transmission strategy based on the access address and the topology level includes: determining the network type of the target network based on the access address; when the network type is a private network and the topology level is a single-layer topology, determining the data transmission strategy as a post-routing strategy; when the network type is a private network and the topology level is a multi-layer topology, determining the data transmission strategy as a Virtual Extended Local Area Network (VLAN) strategy; and when the network type is a public network, determining the data transmission strategy as an interruption recovery strategy.

3. The method according to claim 2, characterized in that, The core network also includes a private network authentication, authorization, and accounting system, and private network user plane function elements. Establishing a communication path between the target terminal and the target network based on the data transmission strategy includes: when the data transmission strategy is a post-routing strategy, performing secondary authentication on the target terminal based on the signaling plane of the private network authentication, authorization, and accounting system to obtain an authentication result; when the authentication result indicates that the secondary authentication is successful, issuing a post-routing address segment to the private network user plane function element corresponding to the target terminal based on the private network authentication, authorization, and accounting system; and using the client terminal equipment to perform route traversal based on the post-routing address segment to establish a first communication path from the target terminal, through the client terminal equipment, the private network user plane function elements, and the signaling plane of the private network authentication, authorization, and accounting system to the private network server.

4. The method according to claim 3, characterized in that, The client terminal device further includes a tunnel module, and the private network authentication, authorization, and billing system further includes a software gateway. Establishing a communication path between the target terminal and the target network based on the data transmission strategy includes: when the data transmission strategy is a Virtual Extended LAN strategy, performing secondary authentication on the target terminal based on the signaling face of the private network authentication, authorization, and billing system to obtain an authentication result; when the authentication result indicates that the secondary authentication is successful, establishing a Virtual Extended LAN tunnel based on the tunnel module of the client terminal device and the software gateway of the private network authentication, authorization, and billing system; and establishing a second communication path from the target terminal through the client terminal device, the Virtual Extended LAN tunnel, the software gateway of the private network authentication, authorization, and billing system to the private network server based on the Virtual Extended LAN tunnel.

5. The method according to claim 3, characterized in that, The client terminal device further includes a queue module, an interrupt module, and a synchronization module. The core network also includes public network user plane function elements. Establishing a communication path between the target terminal and the target network based on the data transmission strategy includes: when the data transmission strategy is an interrupt recovery strategy, temporarily storing the public network access data of the target terminal in the buffer of the client terminal device based on the queue module; when the data in the buffer reaches the upper limit, interrupting the current private network data flow in the core network based on the interrupt module, and notifying the soft gateway of the private network authentication, authorization, and billing system to release the virtual extended LAN tunnel through the synchronization module; establishing a third communication path from the target terminal through the client terminal device, the private network user plane function elements, and the public network user plane function elements to the public Internet, and diverting the public network access data in the buffer to the public Internet through the private network user plane function elements.

6. The method according to claim 1, characterized in that, The method of adjusting the resource allocation of the communication path based on the buffer status of the client terminal device in the communication path includes: when it is detected that the storage amount in the buffer does not exceed a preset threshold, prioritizing the resource occupation of the private network communication path and allocating a preset proportion of basic resources to the public network communication path; when it is detected that the storage amount in the buffer reaches the preset threshold, triggering resource reallocation, suspending the resource supply of the private network communication path, and prioritizing the allocation of resources to the public network communication path until the data transmission in the buffer is completed, and then restoring the resource supply of the private network communication path.

7. A multi-layer network adaptive transmission device, characterized in that, The device is applied to a core network, which includes client terminal equipment. The device comprises: an acquisition module for acquiring the access address and topology level of a target terminal; wherein the topology level refers to the level at which the target terminal accesses the network through the client terminal equipment, including single-layer and multi-layer topologies; a first processing module for determining a data transmission strategy based on the access address and the topology level, and establishing a communication path between the target terminal and a target network based on the data transmission strategy; the target network refers to a public network or a private network; and a second processing module for performing data stream processing based on the communication path, and adjusting the resource allocation of the communication path based on the buffer state of the client terminal equipment in the communication path.

8. An electronic device, characterized in that, include: Memory, processor; The memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory, causing the processor to perform the method as described in any one of claims 1-6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method as described in any one of claims 1-6.

10. A computer program product, characterized in that, Includes a computer program that, when executed by a processor, implements the method described in any one of claims 1-6.

Images