14 results about "STUN" patented technology

The invention discloses an interactive connection establishment method and system based on an ICE protocol and electronic equipment. The method comprises the steps that a client configures STUN and SFU server addresses to support ICE connection; the client initiates a request to the STUN server and obtains a local candidate, and initiates a request to the SFU server and obtains a relay candidate, and the relay candidate is used as an opposite terminal candidate; the local candidates are packaged into an ICE candidate list, the client and the opposite end exchange the ICE candidate list through a signaling server, and the relay candidates are added into PeerConsection; initiating bidirectional connectivity check based on the candidate list; the low-delay P2P direct connection is preferentially established through a preset overtime verification mechanism, and the low-delay P2P direct connection is degraded to an SFU relay channel according to levels when the low-delay P2P direct connection fails. Seamless connection from intranet penetration to cloud relay is realized, and high-reliability and low-delay end-to-end connection support is provided for network communication.

Two electronic devices attempt to communicate and exchange Internet Protocol (IP) packets over a cellular communication network, and at least one of the two devices is behind a symmetric Network Address Translation (NAT) service. At least one of the two devices executes a Session Traversal Utilities for NAT (STUN) protocol, which provides to that device a pair of external IP address and port of that device; which that device then informs to a Message Broker Unit that is accessible to both devices via the public Internet. The Message Broker Unit provides the external IP address and port of that device, to the other device; which then connects to a Virtual Private Network (VPN) server and sends to the first device one or more User Datagram Protocol (UDP) packets that penetrate or puncture the NAT service in an application-agnostic manner.

Embodiments herein relate to a method performed by a network node for handling communication related to a UE in a communications network. The network node transmits a message to another network node, wherein the message is related to a proxy capability such as requesting or indicating a TURN and / or STUN capability in a communication.

The application relates to the technical field of the Internet of Things, in particular to a remote control method and device, equipment and a computer storage medium, the method comprises the following steps: acquiring user information; judging whether the user information has control authority; if the user information has control authority, receiving a user instruction; acquiring a target device based on the user instruction and a device list; establishing a WebRTC data channel based on a stun server and the target device; and sending a remote control signal to the target device based on the user instruction and the WebRTC data channel. The application has the effect of reducing data transmission delay.

The invention provides a network address translation type detection method and device. The method comprises the following steps: sending a detection packet carrying first detection step information and a first timestamp to STUN service; if a response packet fed back by the STUN service is received within the first timeout time and the first detection step information is consistent with second detection step information in the response packet, determining communication time consumption according to a current timestamp and a second timestamp; recording the communication time consumption into a linked list, determining a second timeout time according to all the communication time consumption in the linked list, and configuring the second timeout time as a first timeout time of a next detection step of the current detection step; determining a network address translation type or next detection step information according to the detection step information, the feedback information, the public network information and the intranet information; according to the method, the reasonable timeout time of the post step is dynamically calculated according to the communication time consumption of the pre-step, and the detection speed is increased while the network address translation type is accurately detected by dynamically adjusting the timeout time.

This invention discloses a cloud-edge container network connectivity and optimization system based on network performance awareness. The system includes: a control and management module for centralized management and storage of edge node information, also functioning as a STUN server, which evaluates the cost of the current routing path in real time and dynamically decides and optimizes to obtain the optimal cloud-edge / edge-edge routing path; and a tunnel agent module deployed on each edge node and cloud node to establish network connectivity tunnels between edge nodes. This tunnel agent module uses IPSec or WireGuard network protocol suites, combined with information from other edge nodes obtained from the control and management module and the optimal cloud-edge / edge-edge routing path, to achieve network connectivity. This invention can make real-time and efficient decisions and establish cloud-edge / edge-edge routes, thereby connecting edge containers in different regions and network environments, significantly improving communication efficiency while reducing cloud bandwidth consumption.

This invention relates to the field of computer multimedia communication, and in particular to a WebRTC video conferencing system and media stream conversion method compatible with GB / T28181 devices. The system adopts a layered architecture, including a service layer, a STUN / TURN server, a signaling layer, and a media layer. The service layer provides service interfaces for WebRTC clients and stores service data. The STUN / TURN server is used to implement NAT traversal. The signaling layer includes a WebRTC signaling module, a signaling protocol conversion module, and a GB / T28181 signaling module. The media layer includes a WebRTC media module, a media transcoding module, a congestion control module, and a GB / T 28181 media module. This solution proposes the IGCC-A algorithm to reduce frequent jitter in the transmission rate caused by small fluctuations in network latency, and realizes the structure of a WebRTC video conferencing system that accesses GB28181 devices.

A full-link voice communication security protection system, method and device based on a national secret algorithm and a medium, the system comprising a user end and a server, the user end comprising: a registration login module; a security protection module; an audio / video call module; the server is deployed with multiple functional servers, including a signaling server; a STUN / TURN server; a service server; a verification code server; a CA server; a KGC server; based on the above system, the identity legitimacy of the access system user is ensured by using a man-machine verification code mechanism, and the signaling interaction process of the audio / video communication parties is protected by using the SM2 national secret algorithm, the SM4 national secret algorithm and the SM9 national secret algorithm based on the user identity identification in combination with the PKI system; at the same time, in order to improve the system efficiency and enhance the system compatibility, the P2P communication is constructed by using the WebRTC audio / video call framework, and the transmission safety of the audio / video data is ensured by using the related security transmission protocol, so as to protect the legality of the user and the full-link safety of the data in the instant audio / video communication.

The application discloses an ICE protocol-based interactive connection establishment method and system and electronic equipment, and the method comprises the following steps: a client configures a STUN and a SFU server address to support ICE connection; the client initiates a request to a STUN server to obtain a local candidate and initiates a request to a SFU server to obtain a relay candidate, wherein the relay candidate is used as a peer candidate; the local candidate is encapsulated into an ICE candidate list, ICE candidate lists are exchanged between the client and a peer through a signaling server, and the relay candidate is added into a PeerConnection; two-way connectivity checking is initiated based on the candidate list; a preset timeout verification mechanism is used to preferentially establish a low-delay P2P direct connection, and when the low-delay P2P direct connection fails, the method is degraded to an SFU relay channel in stages. The seamless connection from an intranet to a cloud relay is realized, and high-reliability and low-delay end-to-end connection support is provided for network communication.

The application provides a network address conversion type detection method, system and electronic equipment, relates to the field of cloud computing, and the method comprises the following steps: a STUN server returns reply messages corresponding to a plurality of NAT type detection request messages in response to the plurality of NAT type detection request messages sent in parallel by a client for a plurality of public network address information, so that the client determines the NAT type according to the plurality of reply messages, wherein the local port is determined by mapping the plurality of public network address information through a load balancing server. In the embodiment, the demand of the client for sending the NAT type detection request message in parallel is met through the two-level service architecture of the STUN server and the load balancing server, the interaction process of the STUN server and the client is simplified, and the NAT type detection efficiency is improved.

Techniques for creating an optimal and secure data plane based on network constraints. The techniques may include establishing an initial networking connection for a data flow between a client device and a resource such that data plane traffic of the data flow is routed through a relay node disposed between the client device and the resource. In some examples, the techniques may include determining, using a Session Traversal Utilities for Network Address Translators (STUN) server, an alternate networking connection for the data flow that bypasses the relay node. Based at least in part on a determination that the alternate networking connection is a more optimal path for the data plane traffic than the initial networking connection, the techniques may include causing the data plane traffic of the data flow to be routed over the alternate networking connection.

The application discloses a kind of RTP media stream protection and talk migration smooth method and device, belong to VoIP technical field.In the method, maintain three-state security state machine including open state, learning state and locking state for each RTP transmission instance;In learning state, the continuity of candidate source address is counted, and after timeout, it is forced to lock, and the count is reset based on packet interval analysis detection flooding attack;Tracking SDP negotiation target address, give it priority through right;When detecting talk migration event, recalibrate RTP sequence number offset increment, so that output sequence number keeps continuous increment;In RTCP-MUX multiplexing mode, RTP media packet, RTCP control packet and STUN probe packet are distinguished according to flag bit and payload type range.The application is guaranteed by multidimensional source address security learning and cross-session sequence number continuity, effectively resist address spoofing and flooding attack, realize sequence number seamless continuation in talk transfer scene, ensure downstream receiving end no perception and DTMF signaling integrity.

The invention relates to the technical field of smart home security and protection, in particular to a visual doorbell active security and protection remote interaction control method which comprises the following closed-loop processes: triggering sensing, multi-network networking activation, multi-terminal notification pushing, user interaction response, danger judgment and conventional interaction ending if no danger exists. According to the invention, barriers of mobile phone and computer systems are broken, interface layout is controlled in a unified manner, video, interaction, expelling and alarm functions are integrated, an operation path is simplified, dual modes of a public network and an independent carry-on Wi-Fi are supported, basic security interaction under extreme scenes (such as field network disconnection) is ensured, and the security and protection interaction is realized. Passive alarm is upgraded into active control of interaction, judgment, expelling and re-interaction, dangerous behaviors are directly intervened by remotely triggering physical devices (spotlights and water guns), and special expelling means such as capture nets, shocking bullets, landmines and bullets in special environments are not excluded.

This invention relates to a method for sharing real-time IPTV content to a mobile terminal for playback, belonging to the field of wireless communication and terminals. The method includes: the IPTV device and the mobile terminal sending a STUN request to a public STUN server to bypass NAT and automatically obtain the corresponding public IP address; the IPTV device and the mobile terminal establishing an IPSec encrypted tunnel based on the IPSec protocol; the IPTV device receiving the operator's playback stream, extracting video and audio data, re-encapsulating it into RTP format, encrypting it, and transmitting it to the mobile terminal through the IPSec encrypted tunnel; the mobile terminal decrypting and verifying the integrity of the data packets, extracting the RTP payload, and playing the corresponding video and audio data in real time; the mobile terminal sending control commands to the IPTV device through the IPSec encrypted tunnel; the IPTV device parsing the control commands and calling an API to switch channels, synchronously updating the electronic program guide information to the mobile terminal. This method enables mobile devices to remotely receive and play television channel content from a home IPTV device via the public network, overcoming spatial limitations.