CN106900077A - An intelligent terminal VPN network automatic recovery system and method - Google Patents

Abstract

The invention relates to an automatic VPN network recovery system of an intelligent terminal, which comprises a reconnection event module and a reconnection action module which are added at a VPN client, and a reconnection protocol module which is added at a VPN server, wherein the two ends are matched to finish the automatic recovery of the VPN network. Compared with the existing VPN access mode, the technical scheme of the invention has the following advantages: the use experience of the VPN network in the environment of unstable signals is improved; after the wireless network is switched, the VPN network is quickly recovered; and when the dormancy of the mobile intelligent terminal is finished, the automatic connection recovery of the VPN network is realized.

Description

An intelligent terminal VPN network automatic recovery system and method

technical field

The invention relates to the field of network application security access, in particular to an intelligent terminal VPN network automatic recovery system and method.

Background technique

VPN is a virtual private network, which establishes a temporary and secure connection through a public network (usually the Internet), and is a safe and stable tunnel through a chaotic public network. Usually, a VPN is an extension of an enterprise's intranet, through which it can help remote users, company branches, business partners, and suppliers establish credible and secure connections with the company's intranet and ensure safe data transmission. VPN can be used for global Internet access of growing mobile users to achieve secure connection; virtual private circuit can be used to realize secure communication between corporate websites, and secure extranet virtual private network can be used to cost-effectively connect to business partners and users network.

It is the development trend of the current technology that the mobile intelligent terminal accesses the Internet through Wi-Fi or cellular base station (hereinafter referred to as Cell) wirelessly, and then accesses the intranet of the enterprise through VPN. Compared with wired access to VPN, wireless access to VPN has the following problems: 1) The signal is unstable, sometimes strong and sometimes weak; 2) Various forms of network switching often occur, such as from Wi-Fi to Cell, or from Cell's 3G to 4G, etc.; 3) The network signal will be disconnected when the smart mobile terminal is dormant. These characteristics lead to the instability of the VPN network, which prevents mobile smart terminal users from accessing the corporate intranet through the VPN network.

Contents of the invention

In order to overcome the problems existing in the prior art, the purpose of the present invention is to provide a VPN network automatic recovery system based on the type of network involved in the intelligent terminal, especially:

a. After the wireless access signal is restored, the VPN network can be automatically restored;

b. When the network is switched, the VPN network can be automatically re-established;

c. When the smart terminal recovers from the dormant state, the VPN network can be automatically restored.

The invention provides a VPN network automatic recovery system for an intelligent terminal, which includes adding a reconnection event module and a reconnection action module to a VPN client, and adding a reconnection protocol module to a VPN server, and the two ends cooperate to complete the automatic recovery of the VPN network.

The reconnection protocol module is used to support automatic VPN reconnection, including adding a VPN reconnection handshake protocol submodule and a VPN reconnection key negotiation submodule on the basis of the VPN communication protocol.

The reconnection event module is used to monitor any event that needs to generate a reconnection action on the VPN client.

The reconnection action module is used for completing the reconnection agreement between the VPN client and the VPN server after a reconnection event occurs, and then setting the network environment of the VPN client according to the reconnection result.

The reconnection event includes from no network connection to Cell network connection, from no network connection to WIFI network connection, from WIFI network to Cell network, from Cell network to WIFI network, from one WIFI network to another WIFI network.

Further, the network environment settings of the client include network settings when not connected, network settings before reconnection, and network settings after reconnection; and if the reconnection protocol fails, then restore to the network settings when not connected; ; Then restore to the network settings after reconnection.

A method for automatic restoration of a VPN network of an intelligent terminal is to add a step of automatic network restoration in the VPN access process, wherein the step of automatic restoration of the network includes: a VPN client receives a reconnection event and initiates a reconnection action, and the VPN The client and the VPN server execute the reconnection protocol, and the VPN client and the server cooperate to complete the restoration of the VPN network.

Further, the VPN client receives a VPN reconnection event and initiates a reconnection action: including switching from no network connection to Cell network connection, from no network connection to WIFI network connection, switching from WIFI network to Cell network, and switching from Cell network To a WIFI network, switch from one WIFI network to another WIFI network, and initiate a VPN reconnection handshake protocol by the VPN client.

Further, the VPN server executes the reconnection protocol: after receiving the above-mentioned reconnection handshake protocol, the VPN server identifies whether it is a client that has already established a connection, and if not, ignores it; if it is, releases the previous connection, and Establish a new VPN connection.

Further, the step of cooperating between the VPN client and the server to complete the restoration of the VPN network includes: updating the symmetric encryption keys of both VPN parties after the above-mentioned VPV connection is established; and setting the network environment of the VPN client.

Furthermore, the network environment settings of the client include network settings when not connected, network settings before reconnection, and network settings after reconnection. If the reconnection protocol fails, the network settings when not connected will be restored. If the reconnection is successful , then restore to the network settings after reconnection.

Compared with the existing VPN access method, the technical solution of the present invention has the following advantages: 1) the experience of using the VPN network in an unstable signal environment is improved; 2) the VPN network recovers quickly after the wireless network is switched; 3) the mobile intelligent terminal Realize automatic recovery connection of VPN network when dormancy ends.

Description of drawings

Fig. 1 is a schematic structural diagram of the system of the present invention;

Fig. 2 is a schematic diagram of the workflow of the reconnection protocol module of the present invention;

Fig. 3 is a schematic diagram of the workflow of the reconnection event module of the present invention;

Fig. 4 is a schematic diagram of the workflow of the reconnection action module of the present invention.

detailed description

In the following description, many technical details are proposed in order to enable readers to better understand the application. However, those skilled in the art can understand that even without these technical details and various changes and modifications based on the following implementation modes, it is still the technical solution claimed by the claims of the present application.

In order to make the purpose, technical solution and advantages of the present invention clearer, the following will further describe the implementation of the present invention in detail in conjunction with the accompanying drawings.

As shown in FIG. 1 , the system of the present invention includes adding a reconnection event module 101 and a reconnection action module 102 at the VPN client 100, and adding a reconnection protocol module 201 at the VPN server 200. Both ends cooperate to complete automatic network recovery.

The described reconnection protocol module is an extension of the existing VPN protocol to support the automatic reconnection of the VPN. Its workflow is shown in Figure 2. The workflow includes adding at least two protocols on the basis of the VPN communication protocol:

●VPN reconnection handshake protocol: This protocol is initiated by the client. After receiving the protocol, the server will identify whether it is a client that has already established a connection. If not, ignore it; if it is, release the previous connection and establish a new VPN. connection; and

●VPN reconnection key negotiation protocol: After a new VPN connection is established, the symmetric encryption keys of both VPN parties are updated.

The reconnection event module is used to monitor any event that needs to generate a reconnection action on the VPN client: when the VPN enters the unconnected state, it is triggered by the VPN client reconnection event to restore or switch to the VPN connection state. The wireless access mode of smart terminals usually has three VPN connection states and two types of network reconnection events. The three VPN connection states include: unconnected (including dormant) state, WIFI connection state, and Cell connection state; two types of network reconnection events Including network recovery events and network switching events, where network recovery events include events from dormancy to wake-up, and the reconnection events include network disconnection events, WIFI connection events, and Cell connection events, as well as network recovery events and network switching events .

When a reconnection event occurs, for example, when the VPN is disconnected or the smart terminal is dormant, it enters the unconnected state, and then enters other states triggered by two types of network reconnection events, as shown in Figure 3, the possible reconnection events yes:

●Currently in the unconnected state, when a network recovery event is received and the new network is a Cell connection, perform a reconnection action, and enter the Cell connection state after successful reconnection;

●Currently in the unconnected state, when a network recovery event is received and the new network is a WIFI connection, perform a reconnection action, and enter the WIFI connection state after successful reconnection;

●Currently in the WIFI connection state, when a network switching event is received and the new network is a Cell connection, perform a reconnection action, and enter the Cell connection state after the reconnection is successful;

●Currently in the Cell connection state, when a network switching event is received and the new network is a WIFI connection, perform a reconnection action, and enter the WIFI connection state after successful reconnection;

●Currently in the Cell connection state, when a network switching event is received and the new network is a different WIFI connection, reconnection is performed, and after successful reconnection, it enters the WIFI connection state.

When a reconnection action needs to occur, first the VPN client needs to cooperate with the VPN server to complete the reconnection protocol, and then set the network environment of the VPN client according to the reconnection result. The reconnection action module is used for completing the reconnection agreement between the VPN client and the VPN server after a reconnection event is generated, and then setting the network environment of the client according to the reconnection result. As shown in Figure 4, the reconnection action module usually saves three kinds of network settings: network settings when not connected, network settings before reconnection, and network settings after reconnection (from the VPN reconnection protocol). If the reconnection protocol fails, revert to the network settings when not connected. If the reconnection is successful, restore to the network settings after reconnection.

It should be noted that each unit mentioned in each device embodiment of the present invention is a logical unit. Physically, a logical unit may be a physical unit, or a part of a physical unit, or may be a plurality of physical units. The combination of units, the physical implementation of these logic units is not the most important, the combination of functions realized by these logic units is the key to solve the technical problems raised by the present invention. In addition, in order to highlight the innovative part of the present invention, the present invention does not introduce the above-mentioned equipment implementations and units that are not closely related to solving the technical problems proposed by the present invention, but this does not mean that there are no above-mentioned equipment implementations and other related Implementation unit.

Although the present invention has been illustrated and described with reference to certain preferred embodiments thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the present invention. The spirit and scope of the invention.

Claims (12)

1. A VPN network automatic recovery system of an intelligent terminal, including adding a reconnection event module and a reconnection action module at the VPN client, and adding a reconnection protocol module at the VPN server end, and both ends cooperate to complete the automatic recovery of the VPN network. 2. The VPN network automatic recovery system of a kind of intelligent terminal according to claim 1, is characterized in that, described reconnection protocol module is used for supporting the automatic reconnection of VPN, comprises adding VPN on the basis of VPN communication protocol Reconnection handshake protocol submodule and VPN reconnection key negotiation submodule. 3. The VPN network automatic recovery system of an intelligent terminal according to claim 1, characterized in that said reconnection event module is used to monitor any event of a VPN client that needs to generate a reconnection action. 4. The VPN network automatic recovery system of an intelligent terminal according to claim 1, wherein the reconnection action module is used to complete the cooperation between the VPN client and the VPN server after a reconnection event occurs. Reconnection protocol, and then set the network environment of the client according to the reconnection result. 5. The VPN network automatic recovery system of an intelligent terminal according to claims 1 and 3, wherein said reconnection event includes from no network connection to Cell network connection, from no network connection to WIFI network connection , Switch from WIFI network to Cell network, switch from Cell network to WIFI network, switch from one WIFI network to another WIFI network. 6. The VPN network automatic recovery system of an intelligent terminal according to claim 4, wherein the network environment settings of the client include network settings when not connected, network settings before reconnection, and network settings after reconnection ; and if the reconnection protocol fails, restore to the network settings when not connected; if the reconnection succeeds; then restore to the network settings after reconnection. 7. A VPN network automatic recovery method of an intelligent terminal, characterized in that, the step of automatic network recovery comprises: the VPN client receives a reconnection event and initiates a reconnection action, the VPN server executes a reconnection protocol, and the VPN The client and the server cooperate to complete the restoration of the VPN network. 8. The method for automatic restoration of a VPN network of an intelligent terminal according to claim 7, wherein the VPN client receives a VPN reconnection event and initiates a reconnection action comprising: from no network connection to Cell network connection, From no network connection to WIFI network connection, switching from WIFI network to Cell network, switching from Cell network to WIFI network, switching from one WIFI network to another WIFI network, and the VPN reconnection handshake protocol initiated by the VPN client. 9. The method for automatic restoration of a VPN network of an intelligent terminal according to claim 7, wherein the VPN server executes the reconnection protocol: after the VPN server receives the above-mentioned reconnection handshake protocol, it identifies whether it is For customers who have already established a connection, if not, ignore it; if yes, release the previous connection and establish a new VPN connection. 10. The method for automatic restoration of a VPN network of an intelligent terminal according to claims 7 and 9, wherein the VPN client and the server cooperate to complete the restoration step of the VPN network comprising: after the above-mentioned new VPV connection is established, update The symmetric encryption key of both parties in the VPN; and the network environment settings of the VPN client. 11. The method for automatic restoration of a VPN network of an intelligent terminal according to claim 7, wherein the network environment settings of the client include network settings when not connected, network settings before reconnection, and network settings after reconnection . 12. The method for automatic restoration of a VPN network of an intelligent terminal according to claims 7 and 11, wherein, if the reconnection protocol fails, then the network setting is restored to when not connected; if the reconnection is successful, the reconnection is restored After connecting to the network settings.