CN100426801C - Data transmission method and system in instant communication - Google Patents

Abstract

The present invention is applicable to the field of instant communication, and provides a data transmission method and transmission system in instant communication, which transfers and transmits data between an access client and a target client, and the method includes: A. Selecting a data transfer capability B. Select a node that provides data transfer services for the access client and the target client, and assign a node key to the node; C. Establish a node transfer communication channel; D. Pass the node The transit communication channel transmits data between the access client and the target client. The present invention can reduce the communication bandwidth of the transfer server, reduce the equipment purchase investment of the operator, and improve the instant communication efficiency of the client.

Description

Method and system for data transmission in instant messaging

technical field

The invention belongs to the field of instant messaging, and in particular relates to a data transmission method and a data transmission system in instant messaging.

Background technique

In the process of instant messaging, the interaction of information and data between clients needs to be realized through the transfer server. The client requests the IP address of the other party from the central server, and uses the IP address to send a direct connection request to the other client. If the request is approved by the other party’s client, a direct connection will be established for communication. If the direct connection cannot be achieved due to the firewall of the other party’s client, the initiator’s client will send a relay request to the relay server and communicate through the relay server.

At present, since most users access the Internet through a LAN, in order to achieve the purpose of network security, the LAN often sets up a firewall or takes other measures to restrict access. Objectively, a large number of users cannot directly connect to the data, and need to use a relay server for relay communication. It occupies a large amount of transit server bandwidth, reduces communication efficiency, and is not convenient for user communication. In order to ensure the communication efficiency of users, operators must purchase more transit servers, which increases the investment in equipment purchase.

Contents of the invention

The purpose of the present invention is to solve the problem that the communication efficiency of the user is reduced through the transfer of limited transfer server resources in the process of instant messaging.

In order to achieve the purpose of the invention, the present invention provides a data transmission method in instant messaging, which relays and transmits data between an access client and a target client, and the method includes the following steps:

A. Select a client with data transfer capability as a node;

B. Select a node that provides data transfer services for the access client and the target client, and assign a node key to the node that provides data transfer services;

C. The node providing the data transfer service opens communication ports for the access client and the target client to establish a node transfer communication channel;

D. Transmitting data between the access client and the target client through the node relay communication channel.

Described step A comprises the following steps:

A1. Receive device environment information and network traffic information reported by the client;

A2. According to the device environment information and network traffic information reported by the client, select the client with data transfer capability as the node;

A3. Save the device environment information, network flow information and node signature of the node.

Said step B comprises the following steps:

B1. Receive the node access request initiated by the access client;

B2. Select a node that provides data transfer services for access clients and target clients;

B3. Assign a node key to the node providing data transfer service, and use the node signature of the node providing data transfer service to generate an access client signature and a target client signature;

B4. Return the node access request response to the access client.

Described step C comprises the following steps:

C1. The access client will send node connection information to the target client;

C2. The target client performs a ping command on each node in the node connection information, and returns the node ping command response information to the access client;

C3. The access client selects a node for data transmission according to the ping command response information of the target client and the node ping command response information obtained by itself, and notifies the target client;

C4. The access client and the target client initiate an access request to the node providing the data transfer service;

C5. The node that provides the data transfer service verifies the access client and the target client;

C6. The node opens communication ports for the access client and the target client that pass the verification.

Said step D comprises the following steps:

D1. The access client sends the data encrypted with the node key to the node providing the data transfer service;

D2. The node providing the data transfer service forwards the data to the target client;

D3. The target client uses the node key to decrypt the data forwarded by the node.

The node access request response includes a node signature, a node IP and port, a node key, and an access client signature and a target client signature generated using the node signature.

The node connection information includes node signature, node IP and port, node key and target client signature.

Said step D further comprises the following steps:

D4. The central server sends network flow control information to the node providing the data transfer service;

D5. Nodes that provide data transfer services receive network traffic control information and control local network traffic;

D6. The node providing the data transfer service returns the local network flow control result to the central server.

The node that provides data transfer services for the access client and the target client is a node with an IP close to the IP of the access client or the IP of the target client.

In order to better realize the purpose of the invention, the present invention further provides a data transmission system in instant messaging, which is used to transfer and transmit data between the access client and the target client. The system includes a central server subsystem, a node Subsystem and Client Subsystem, where:

The central server subsystem is used to select nodes that provide data transfer services for access clients and target clients, and assign a node key to each node;

The node subsystem is used to establish a node transit communication channel, and forward the data submitted by the access client and the target client through the node transit communication channel;

The client subsystem is used to select a node that provides data transfer service, and submit the data to the node for forwarding.

The central server subsystem includes a node access management module, a node information storage module, a key and signature generation module, and a node allocation module, wherein:

The node accesses the management module, receives the device environment information and network flow information regularly reported by the client, selects a node that provides data transfer services to the client, and submits the device environment information, network flow information and node signature of the node to the node information The storage module saves; sends the network flow control information to the node, and receives the network flow control result returned by the node;

The node information storage module receives and stores the device environment information, network flow information and node signature of the node submitted by the node access management module; receives the node query request from the node allocation module, selects the node that provides data transfer services for the client, and transfers all The IP of the node and the port information are sent to the node allocation module, and the node signature of the node is sent to the key and signature generation module;

The key and signature generation module receives the node signature sent by the node information storage module, uses the node signature to generate the access client signature and the target client signature, and assigns a node key to each node; the access client Terminal signature, target client signature and node key are sent to the node distribution module;

The node allocation module receives the node access request submitted by the access client, sends the node query request to the node information storage module, receives the IP and port of the node sent by the node information storage module, and sends the key and signature generation module The access client signature, the target client signature and the node key, return the node access request response to the access client.

The node subsystem includes an information reporting module and an access transfer module, wherein:

The information reporting module reports the device environment information and the network flow information to the central server; receives the network flow control information issued by the central server, forwards the network flow control information to the access transfer module, and receives the information returned by the access transfer module Network flow control results, and report the network flow control results to the central server;

Access the transit module, receive the ping command sent by the client, and return the ping response information to the client; receive the access request of the access client and the target client, and verify the access client according to the signature of the access client and the signature of the target client and the identity of the target client, open the communication port to the authenticated access client and the target client, and establish a transit communication channel; receive the data submitted by the access client for transit, verify the legality of the data, and pass the verified data Forwarding to the target client; receiving the network flow control information forwarded by the information reporting module, adjusting the local network flow, and returning the network flow control result to the information reporting module.

The client subsystem includes a node request module, a transmission module and a data encryption and decryption module, wherein:

The node access request module submits the node access request to the central server, receives the node access request response returned by the central server; sends the node connection information to the transmission module;

The transmission module receives the node connection information sent by the node request access module, and sends the node connection information to the target client; sends a ping command to the node, receives the ping command response information returned by the node; receives the node ping command returned by the target client Command response information; select the node for data transmission according to the ping command response information of itself and the ping command response information returned by the target client, and notify the selected node to the target client; receive the data encrypted by the data encryption and decryption module, and send The data is forwarded to the node; the data forwarded by the node is received, and the data is forwarded to the data encryption and decryption module;

The data encryption and decryption module uses the node key to encrypt data, and forwards the data to the transmission module; receives the data forwarded by the transmission module, and uses the node key to decrypt the data.

The node access request response includes a node signature, a node IP and port, a node key, and an access client signature and a target client signature generated using the node signature.

The node connection information includes node signature, node IP and port, node key and target client signature.

The node providing data transfer service for the client is a node whose IP is close to the IP of the access client or the IP of the target client.

The present invention borrows client resources participating in instant messaging, selects clients with data transfer capabilities as nodes for data transmission, and the central server distributes node keys to encrypt data to ensure the security of data transmission. The present invention can reduce the communication bandwidth of the transfer server, reduce the equipment purchase investment of the operator, and improve the instant communication efficiency of the client.

Description of drawings

Fig. 1 is the realization flowchart of the data transmission method provided by the present invention;

Fig. 2 is a structural diagram of the data transmission system provided by the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

As shown in Figure 1, in the present invention, the central server 101 uses the client whose network traffic meets the data transmission requirements and has an external IP as an instant messaging node to transfer and transmit the instant messaging data between the clients, thereby achieving The purpose of saving the bandwidth of the transit server. Whether the client can become a node is judged and selected by the central server 101 .

In step S101, the central server 101 judges whether the client has the ability to transmit data according to the information reported by the client, and selects a node that provides data transfer services for the client.

The client regularly reports device environment information and network flow information to the central server 101, and the central server 101 judges whether the client can be used as a node according to the device environment information and network flow information reported by the client, and saves the node's device environment information, network Traffic information and node signatures.

The device environment information reported by the client to the central server 101 includes network device names, local time, whether large data volumes such as voice calls, videos, file transfers, CPU information, memory information, local IP and port (ports) have been performed. Network traffic information includes the number of connections, the request time of the initiator, the amount of channel data packets, and the flow of channel data packets. The node signature includes a key and a validity period. The central server 101 uses the signature of the node to generate a pair of client signatures, that is, the access client signature and the target client signature, which are used for the node to verify the identity of the client when the client accesses; the validity period is The normal connection establishment time when the client accesses the node. When the client accesses the node, the node verifies whether the key is correct, and compares the validity period of the key with the local time. If it times out, the signature is considered invalid. .

In step S102, when the client 103A and the target client 103B need to transmit data through nodes, the client 103A initiates a node access request to the central server 101; the central server 101 selects multiple IPs to be close to the client according to the principle of IP proximity The node 103A or 103B provides data transfer service for the client 103A, randomly assigns an SN_key (node key) to each node, and uses a pair of client signatures generated by the node signature, that is, the access client signature and the target client signature signature, and then return the node access request response to the client 103A, which includes the node signature, node IP and port, SN_key, and the client signature of the client 103A generated by the node signature and the client 103B client terminal signature.

In step S103, the client 103A sends the node connection information such as node signature, node IP and port, SN_key and target client signature to the client 103B through the communication channel provided by the instant messaging system.

In step S104, after receiving the node connection information sent by the client 103A, the client 103B executes a ping command on each node in the node connection information, and returns the ping command response information of each node 102 to the client 103A.

In step S105, the client 103A selects a node for data transfer and transmission according to the ping command response information of the client 103B and the ping command response information obtained by itself after executing the ping command for each node, and notifies the client of the selected node Terminal 103B.

In step S106, the clients 103A and 103B respectively initiate access requests to the node 102, and the node 102 verifies the clients according to the client signatures of the clients 103A and 103B, and judges whether the identity of the clients is legal and whether the validity period of the signature is valid, If the identity of the client is legal and the signature is valid, the node 102 opens communication ports for the clients 103A and 103B respectively, and establishes a transit communication channel.

In step S107, the client 103A uses the SN_key corresponding to the node 102 to encrypt the data to be transmitted, and sends the encrypted data to the node 102; after the node 102 receives the data sent by the client 103A, it judges whether the data is legal, and then forward the verified legal data to the client 103B; after receiving the data forwarded by the node 102, the client 103B uses the SN_key of the node 102 to decrypt the data.

In the process that node 102 provides data transfer services for clients 103A and 103B, central server 101 requires node 102 to regularly report local network traffic information, and central server 101 is based on the network traffic information reported by node 102 to the maximum number of connections to node 102, The initiator requests real-time control of the timeout value, the maximum packet size of the channel, and the maximum flow rate of the channel to ensure the quality of instant communication when it acts as a client. The node 102 controls the local network traffic according to the network control information of the central server 101 , and returns the network traffic control result to the central server 101 .

During the instant messaging between the clients 103A and 103B, if the communication of the node 102 becomes unstable, such as power outage, disconnection, etc., the clients 103A and 103B will automatically switch to another node for communication.

Fig. 2 shows the structure of the data transmission system provided by the present invention, including the server subsystem 201 running on the central server 101, the node subsystem 202 running on the node 102 and the client subsystem 203 running on the client 103 . In the present invention, since the node 102 is also a client that provides data transfer services, in practice, the node 102 and the client 103 are the same entity, and both run the node subsystem 202 and the client subsystem 203, for easy understanding , described separately.

The server subsystem 201 includes a node access management module 2011, a node information storage module 2012, a key and signature generation module 2013, and a node allocation module 2014, wherein:

The node access management module 2011 receives the device environment information and network flow information regularly reported by the client, selects the client with data transmission capability as a node, and reports the device environment information, network flow information and node signature of the node to the node information storage Module 2012 stores; sends network flow control information to the node, controls the maximum number of connections of the node, the request timeout value of the initiator, the maximum packet size of the channel, and the maximum flow of the channel, etc., and receives the network flow control result returned by the node;

The node information storage module 2012 stores the device environment information, network flow information and node signature reported by the node access management module 2011; receives the node query request from the node allocation module 2014, and selects to provide data transfer services for the access client and the target client For example, a node whose IP is close to the IP of the access client or the IP of the target client, returns the IP and port information of the node to the node distribution module 2014, and at the same time sends the node signature of the node to the key and signature generation module 2013 ;

The key and signature generation module 2013 receives the node signature sent by the node information storage module 2012, uses the node signature to generate the access client signature and the target client signature, and assigns an SN_key to each node for use between clients Encrypt the data that needs to be transferred, and at the same time, use the node signature to generate a client signature for the client, including the access client signature and the target client signature, which are used for the node to verify the client identity, and then SN_key and the access client signature and The target client signature is sent to the node distribution module 2014;

The node distribution module 2014 receives the node access request submitted by the client, submits the node query request to the node information storage module 2012, receives the IP and port of the node returned by the node information storage module 2012, and sends the key and signature generation module 2013 The signature of the access client, the signature of the target client and SN_key, and return the node access request response to the access client.

The node subsystem 202 includes an information reporting module 2021 and an access transfer module 2022, wherein:

The information reporting module 2021 regularly reports the device environment information and network flow information to the node access management module 2011; receives the network flow control information sent by the node access management module 2011, forwards the network flow control information to the data transfer module 2023 for execution, and Return the execution result to the node access management module 2011;

The access transfer module 2022 receives the ping command sent by the client, and returns the ping response information to the client; receives the access request of the access client and the target client, and verifies the access client according to the signature of the access client and the signature of the target client The identity of the terminal and the target client, open the communication port to the authenticated access client and target client, and establish a transit communication channel; receive the data submitted by the access client, verify the legality of the data, and pass the verification Forward the data to the target client; receive the network flow control information forwarded by the information reporting module 2021, adjust the local network flow, and return the network flow control result to the information reporting module 2021.

The client subsystem 203 includes a node access request module 2031, a transmission module 2032, and a data encryption and decryption module 2033, wherein:

The node access request module 2031 submits a node access request to the node allocation module 2014, receives the node access response returned by the node allocation module 2014, and sends node connection information such as node IP and port, node key, and target client signature to the transmission module 2032;

The transmission module 2032 receives the node connection information sent by the node access request module 2031, and uses the instant transfer communication channel to send the node connection information to the target client; sends a ping command to the node, and receives the ping command response information returned by the node; receives the target client The node ping command response information returned by the client; select the node for data transmission according to its own ping command response information and the ping command response information returned by the target client, and notify the target client of the selected node; receive data encryption and decryption module The encrypted data at 2033 is submitted to the node for forwarding, and at the same time, the data forwarded by the node is received, and the data is sent to the data encryption and decryption module 2033 for decryption processing;

The data encryption and decryption module 2033 uses the SN_key to encrypt data, and forwards the encrypted data to the transmission module 2032; receives the data forwarded by the transmission module 2032, and uses the SN_key to decrypt the data.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention should be included in the protection of the present invention. within range.

Claims (16)

1, the data transmission method in a kind of instant messaging, transfer transmission inserts the data between client and the destination client, and described method comprises the steps:

A. select to possess the client of data relay ability as node;

B. be chosen as access client and destination client the node of data relay service is provided, and be that the described node of data relay service that provides distributes a node key;

C. the described node of data relay service that provides is for inserting client and destination client open communication port, to set up node transfer communication passage;

D. by the data between described node transfer communication channel transfer access client and the destination client.

2, data transmission method as claimed in claim 1 is characterized in that, described steps A comprises the steps:

A1. receive facility environment information and network traffic information that client reports;

A2. facility environment information and the network traffic information that reports according to client selects to possess the client of data relay ability as node;

A3. preserve facility environment information, network traffic information and the node signature of described node.

3, data transmission method as claimed in claim 1 is characterized in that, described step B comprises the steps:

B1. receive the node access request that client is initiated that inserts;

B2. being chosen as access client and destination client provides the node of data relay service;

B3. be that the described node that provides data relay to serve distributes a node key, and use the described node signature of the node of data relay service that provides to generate access client signature and destination client signature;

B4. insert request-reply to inserting the client return node.

4, data transmission method as claimed in claim 1 is characterized in that, described step C comprises the steps:

C1. inserting client will be to destination client sending node link information;

C2. the ping instruction is carried out to each node in the node link information in the destination client, and to inserting client return node ping commanded response information;

C3. insert client according to the ping commanded response information of destination client and the node ping commanded response information that self obtains, select to carry out the node of transfer of data, and the notification target client;

C4. insert client and destination client and initiate to insert request to the node that the data relay service is provided;

C5. provide the node of data relay service to verify to inserting client and destination client;

C6., the node that the data relay service is provided is for verifying access client and the destination client open communication port that passes through.

5, data transmission method as claimed in claim 1 is characterized in that, described step D comprises the steps:

D1. insert client and utilize the node key ciphered data to the node transmission that the data relay service is provided;

D2., the node that data relay service is provided with described data forwarding to the destination client;

D3. the destination client utilizes the data that the node key decryption node is transmitted.

6, data transmission method as claimed in claim 3 is characterized in that, described node inserts access client signature and the destination client signature that request-reply comprises node signature, node IP and port, node key and utilizes described node signature to generate.

7, data transmission method as claimed in claim 4 is characterized in that, described node link information comprises node signature, node IP and port, node key and destination client signature.

8, data transmission method as claimed in claim 5 is characterized in that, described step D further comprises the steps:

D4. central server issues the network traffics control information to the described node of data relay service that provides;

D5. provide the node of data relay service to receive the network traffics control information, control local network flow;

D6. provide the node of data relay service to return local network flow control result to central server.

9, data transmission method as claimed in claim 1 is characterized in that, described the node of data relay service is provided is the node of IP near described access client ip or destination client IP in order to insert client and destination client.

10, the data transmission system in a kind of instant messaging is used for the data between transfer transmission access client and the destination client, and described system comprises central server subsystem, node subsystem and client-end subsystem, wherein:

The central server subsystem is used to be chosen as the access client and the destination client provides the node of data relay service, and is that each node distributes a node key;

The node subsystem is used to set up node transfer communication passage, and transmits the data that insert client and destination client submission by described node transfer communication passage;

Client-end subsystem is used to select provide the node of data relay service, submits to described node to transmit data.

11, data transmission system as claimed in claim 10 is characterized in that, described central server subsystem comprises node Access Management, nodal information memory module, key and signature generation module and node distribution module, wherein:

The node Access Management, receive facility environment information and network traffic information that client regularly reports, selection provides the node of data relay service to client, and submits to the nodal information memory module to preserve facility environment information, network traffic information and the node signature of described node; Issue the network traffics control information to node, the network traffics control result that receiving node returns;

The nodal information memory module receives and facility environment information, network traffic information and the node of the node that the memory node Access Management is submitted to are signed; The querying node request of receiving node distribution module is chosen as the node that client provides the data relay service, and the IP and the port information of described node are delivered the node distribution module, and the node signature of described node is delivered key and signature generation module;

Key and signature generation module, the node signature that the receiving node information storage module is delivered utilizes described node to sign and generates access client signature and destination client signature, and is node key of each node distribution; To insert client signature, destination client signature and node key and deliver the node distribution module;

The node distribution module, receive the node access request that client is submitted to that inserts, to nodal information memory module sending node query requests, the IP of the node that the receiving node information storage module is delivered and port, and key and signature generation module access client signature, destination client signature and the node key delivered, insert request-reply to inserting the client return node.

12, data transmission system as claimed in claim 10 is characterized in that, described node subsystem comprises information reporting module and access transit module, wherein:

The information reporting module reports central server with facility environment information and described network traffic information; The network traffics control information that the receiving center server issues is transmitted to the access transit module with described network traffics control information, receives to insert the network traffics control result that transit module returns, and described network traffics control result is reported central server;

Insert transit module, receive the ping instruction that client sends, return ping response information to client; Receive the access request that inserts client and destination client, according to inserting the identity that client signature and destination client signature verification insert client and destination client, to access client and destination client open communication port, set up the transfer communication passage by checking; Receive and insert the data that client is submitted transfer to, data are carried out legitimate verification, and will verify that the data forwarding of passing through is to the destination client; The local network flow is adjusted in the network traffics control information that reception information reporting module is transmitted, and network traffics are controlled return information reporting module as a result.

13, data transmission system as claimed in claim 10 is characterized in that, described client-end subsystem comprises node request module, delivery module and data encrypting and deciphering module, wherein:

Node inserts request module, submits to node to insert request to central server, and the node that the receiving center server returns inserts request-reply; The node link information is sent to delivery module;

Delivery module, the node link information that receiving node request access module sends sends to the destination client with described node link information; Send ping instruction, the ping commanded response information that receiving node returns to node; The node ping commanded response information that the receiving target client is returned; According to ping commanded response information and the ping commanded response Information Selection returned of the destination client node that carries out transfer of data of self, and with selected node notification target client; Receive the data of data encrypting and deciphering module encrypt, and give node described data forwarding; The data that receiving node is transmitted, and give the data encrypting and deciphering module with described data forwarding;

The data encrypting and deciphering module is utilized the node key enciphered data, and gives delivery module with described data forwarding; Receive the data that delivery module is transmitted, utilize node key to decipher described data.

14, as claim 11 or 13 described data transmission systems, it is characterized in that described node inserts access client signature and the destination client signature that request-reply comprises node signature, node IP and port, node key and utilizes described node signature to generate.

15, data transmission system as claimed in claim 13 is characterized in that, described node link information comprises node signature, node IP and port, node key and destination client signature.

16, data transmission system as claimed in claim 10 is characterized in that, described is the node of IP near described access client ip or destination client IP for client provides the node of data relay service.

Images