WO2016205998A1

WO2016205998A1 - Data transmission method, device and system

Info

Publication number: WO2016205998A1
Application number: PCT/CN2015/082071
Authority: WO
Inventors: 王永亮
Original assignee: 华为技术有限公司
Priority date: 2015-06-23
Filing date: 2015-06-23
Publication date: 2016-12-29
Also published as: CN106797308A

Abstract

An embodiment of the present invention relates to the field of communications, and provides a data transmission method, device and system. The present invention can selectively encrypt data of an application layer, thereby reducing resource consumption in a communication process and improving communication efficiency while ensuring data security. The specific solution is as follows: acquiring an access address of a first server, the access address comprising a first address and a second address, wherein the first address and the second address comprise a network layer address and a transport layer address, and the transport layer address of the first address is different from the transport layer address of the second address; transmitting a connection request message to the first server, and establishing a connection with the first server, the connection request message comprising the first address or the second address; and performing a non-encrypted communication and/or an encrypted communication with the first server via the connection. The present invention is used for data transmission.

Description

Data transmission method, device and system

Technical field

The present invention relates to the field of communications, and in particular, to a data transmission method, device, and system.

Background technique

In a communication system consisting of a user equipment (English name: User Equipment, UE for short) and a server (English: Server), the user equipment accesses the server through a locally installed client (English: Client) to perform data interaction with the server. In the process of data interaction, data encryption is often involved to improve data security and prevent data leakage. The existing encryption protocols include the Secure Sockets Layer (English name: SSL) protocol and the Transport Layer Security (English name: TLS) protocol.

These encryption protocols are the encryption protocols of the transport layer, which themselves do not distinguish between application layer data. In the prior art, when data encryption is performed by using the above existing encryption protocol, the application layer data is all encrypted.

In fact, in the actual data interaction process, some data needs to be encrypted, and some data does not need to be encrypted. Encrypting these data that does not need to be encrypted will result in waste of user equipment and server resources, and the total amount of data after encryption processing is greater than the total amount of data before encryption. Therefore, transmission of encrypted data requires more network resources and time. It consumes more traffic, which makes the data interaction process between the user equipment and the server time-consuming and energy-consuming, and the communication efficiency is low.

Summary of the invention

Embodiments of the present invention provide a data transmission method, device, and system, which are capable of selectively encrypting application layer data, reducing resource consumption in a communication process and improving communication efficiency under the premise of ensuring data security.

In order to achieve the above object, embodiments of the present invention adopt the following technical solutions:

In a first aspect, a data transmission method includes:

Obtaining an access address of the first server, where the access address includes the first address and the first a second address, wherein the first address and the second address comprise a network layer address and a transport layer address, and a transport layer address of the first address and a transport layer address of the second address are different;

Sending a connection request message to the first server, establishing a connection with the first server, where the connection request message includes the first address or the second address;

Non-encrypted communication and/or encrypted communication with the first server over the connection.

In combination with the first aspect, in a first possible implementation manner,

The sending a connection request message to the first server, and establishing a connection with the first server, includes: sending a first connection request message to the first server, and establishing a first connection with the first server, where The first connection request message includes the first address;

The performing non-encrypted communication and/or encrypted communication with the first server over the connection includes performing non-encrypted communication with the first server over the first connection.

With reference to the first aspect or the first possible implementation manner of the first aspect, in a second possible implementation manner,

The sending a connection request message to the first server, and establishing a connection with the first server, includes: sending a second connection request message to the first server, and establishing a second connection with the first server, where The second connection request message includes the second address;

The performing non-encrypted communication and/or encrypted communication with the first server through the connection includes: performing encrypted communication with the first server through the second connection.

In conjunction with the second possible implementation of the first aspect, in a third possible implementation, after the one of the first connection and the second connection is established, the method further includes:

Before sending the first connection request message to the first server, if the second connection has been established, disconnecting the second connection; or

Before sending the second connection request message to the first server, if The first connection has been established and the first connection is broken.

In conjunction with the third possible implementation of the first aspect, in a fourth possible implementation,

Performing non-encrypted communication with the first server through the first connection before the disconnecting the first connection, the method further comprising: receiving an encryption sent by the first server by using the first connection Communication request

After disconnecting the first connection and establishing the second connection, the encrypting communication with the first server by the second connection comprises: responding to the encrypted communication request, by the second connection Encrypted communication with the first server.

In conjunction with the third possible implementation of the first aspect, in a fifth possible implementation, the method further includes:

Receiving an indication message that the first server completes the encrypted communication sent by the second connection;

Disconnecting the second connection and establishing the first connection.

With reference to any one of the first possible implementation to the fifth possible implementation of the first aspect, in a sixth possible implementation,

The performing non-encrypted communication with the first server by using the first connection includes: sending, by using the first connection, customization information to the first server, where the customization information is used to indicate to the first server Customized encrypted communication content.

With reference to any one of the first possible implementation to the fifth possible implementation of the first aspect, in a seventh possible implementation,

The performing non-encrypted communication with the first server by using the first connection includes: sending a heartbeat message to the first server by using the first connection, to maintain the first connection.

With reference to the first aspect to any one of the seventh possible implementation manners of the first aspect, in the eighth possible implementation manner, the acquiring an access address of the first server includes:

Obtaining an access address of the first server from a preset server list;

Alternatively, the access address of the first server is obtained from the second server.

In a second aspect, a data transmission method includes:

Receiving a connection request message sent by the user equipment, establishing a connection with the user equipment, where the connection request message includes a first address or a second address; wherein the first address and the second address comprise a network layer address and a transmission a layer address, the transport layer address of the first address and the transport layer address of the second address are different;

Non-encrypted communication and/or encrypted communication with the user equipment over the connection.

With reference to the second aspect, in a first possible implementation, the receiving a connection request message sent by the user equipment, and establishing a connection with the user equipment, includes:

Receiving a first connection request message sent by the user equipment, and establishing a first connection with the user equipment, where the first connection request message includes the first address;

The performing non-encrypted communication and/or encrypted communication with the user equipment through the connection includes: performing non-encrypted communication with the user equipment by using the first connection.

With reference to the second aspect or a possible implementation manner of the second aspect, in a second possible implementation manner,

Receiving the connection request message sent by the user equipment, establishing a connection with the user equipment, including: receiving a second connection request message sent by the user equipment, establishing a second connection with the user equipment, where the second connection The request message includes the second address;

The performing non-encrypted communication and/or encrypted communication with the user equipment through the connection includes: performing encrypted communication with the first server by using the second connection.

With reference to the second possible implementation of the second aspect, in a third possible implementation, after the one of the first connection and the second connection is established, the method further includes:

Before receiving the first connection request message sent by the user equipment, if the second connection has been established, disconnecting the second connection; or

Before receiving the second connection request message sent by the user equipment, if the first connection has been established, disconnecting the first connection.

In conjunction with the third possible implementation of the second aspect, in a fourth possible implementation,

Before the disconnecting the first connection, performing non-encrypted communication with the user equipment by using the first connection, the method further includes: sending, by using the first connection, an encrypted communication request to the user equipment;

After disconnecting the first connection and establishing the second connection, encrypted communication is performed with the first server through the second connection.

In conjunction with the third possible implementation of the second aspect, in a fifth possible implementation, the method further includes:

Sending, by the second connection, an indication message that the encrypted communication is completed to the user equipment;

Disconnecting the second connection and establishing the first connection.

With reference to any one of the first possible implementation to the fifth possible implementation of the second aspect, in a sixth possible implementation,

The performing non-encrypted communication with the user equipment by using the first connection includes:

Receiving, by the user equipment, customized information sent by the first connection, where the customized information is used to indicate encrypted communication content customized by the user equipment.

With reference to any one of the first possible implementation to the fifth possible implementation of the second aspect, in a seventh possible implementation,

Receiving a heartbeat message sent by the user equipment by using the first connection to maintain the first connection.

In a third aspect, a user equipment includes:

An obtaining unit, configured to obtain an access address of the first server, where the access address includes a first address and a second address, where the first address and the second address comprise a network layer address and a transport layer address, The transport layer address of the first address is different from the transport layer address of the second address;

a connection unit, configured to send a connection request message to the first server by using a transceiver unit, to establish a connection with the first server, where the connection request message includes the first address or the second address;

The transceiver unit is configured to perform non-encrypted communication and/or encrypted communication with the first server by using the connection.

In combination with the third aspect, in a first possible implementation manner,

The connecting unit is configured to send a first connection request message to the first server by using the transceiver unit, and establish a first connection with the first server, where the first connection request message includes the first address;

The transceiver unit is specifically configured to perform non-encrypted communication with the first server by using the first connection.

With reference to the third aspect or the first possible implementation manner of the third aspect, in a second possible implementation manner,

The connecting unit is further configured to send, by using the transceiver unit, a second connection request message to the first server, to establish a second connection with the first server, where the second connection request message includes the Second address

The transceiver unit is specifically configured to perform encrypted communication with the first server by using the second connection.

In conjunction with the second possible implementation of the third aspect, in a third possible implementation, after one of the first connection and the second connection is established,

The connecting unit is further configured to disconnect the second connection if the second connection has been established before sending the first connection request message to the first server; or

The connecting unit is further configured to disconnect the first connection if the first connection has been established before sending the second connection request message to the first server.

In conjunction with the third possible implementation of the third aspect, in a fourth possible implementation,

The transceiver unit is further configured to receive an encrypted communication request sent by the first server by using the first connection;

The connecting unit is further configured to disconnect the first connection and establish the second connection according to the encrypted communication request;

The transceiver unit is further configured to respond to the encrypted communication request by using the second The connection is in encrypted communication with the first server.

In conjunction with the third possible implementation of the third aspect, in a fifth possible implementation manner,

The transceiver unit is further configured to receive an indication message that the first server completes the encrypted communication sent by using the second connection;

The connecting unit is further configured to disconnect the second connection according to the indication message and establish the first connection.

With reference to any one of the first possible implementation to the fifth possible implementation of the third aspect, in a sixth possible implementation,

The transceiver unit is further configured to send, by using the first connection, customization information to the first server, where the customization information is used to indicate customized encrypted communication content to the first server.

With reference to any one of the first possible implementation to the fifth possible implementation of the third aspect, in a seventh possible implementation,

The transceiver unit is further configured to send a heartbeat message to the first server by using the first connection to maintain the first connection.

With reference to any one of the third aspect to the seventh possible implementation manner of the third aspect, in an eighth possible implementation manner,

The obtaining unit is specifically configured to obtain an access address of the first server from a preset server list.

The obtaining unit is specifically configured to acquire an access address of the first server from a second server.

In a fourth aspect, a server is used as the first server, including:

a connection unit, configured to receive, by the transceiver unit, a connection request message sent by the user equipment, to establish a connection with the user equipment, where the connection request message includes a first address or a second address, where the first address and the first The second address includes a network layer address and a transport layer address, and the transport layer address of the first address and the transport layer address of the second address are different;

The transceiver unit is further configured to perform non-addition with the user equipment by using the connection Confidential communication and/or encrypted communication.

In combination with the fourth aspect, in a first possible implementation manner,

The connecting unit is configured to: receive, by the transceiver unit, a first connection request message sent by the user equipment, and establish a first connection with the user equipment, where the first connection request message includes the first address ;

The transceiver unit is specifically configured to perform non-encrypted communication with the user equipment by using the first connection.

With reference to the fourth aspect or a possible implementation manner of the fourth aspect, in a second possible implementation manner,

The connecting unit is further configured to receive, by the transceiver unit, a second connection request message sent by the user equipment, to establish a second connection with the user equipment, where the second connection request message includes the second address;

The transceiver unit is specifically configured to perform encrypted communication with the user equipment by using the second connection.

In conjunction with the second possible implementation of the fourth aspect, in a third possible implementation, after one of the first connection and the second connection is established,

The connecting unit is further configured to: before receiving the first connection request message sent by the user equipment, disconnect the second connection if the second connection has been established; or

The connecting unit is further configured to: before receiving the second connection request message sent by the user equipment, if the first connection has been established, disconnect the first connection.

In conjunction with the third possible implementation of the fourth aspect, in a fourth possible implementation manner,

The transceiver unit is further configured to send an encrypted communication request to the user equipment by using the first connection;

The connecting unit is further configured to disconnect the first connection and establish the second connection;

The transceiver unit is further configured to perform encrypted communication with the first server by using the second connection according to the encrypted communication request.

Combined with the third possible implementation of the fourth aspect, in a fifth possible implementation In the way,

The transceiver unit is further configured to send, by using the second connection, an indication message that the encrypted communication is completed to the user equipment;

The connecting unit is further configured to disconnect the second connection and establish the first connection.

With reference to any one of the first possible implementation to the fifth possible implementation of the fourth aspect, in a sixth possible implementation,

The transceiver unit is further configured to receive customized information that is sent by the user equipment by using the first connection, where the customized information is used to indicate encrypted communication content customized by the user equipment.

With reference to any one of the first possible implementation to the fifth possible implementation of the fourth aspect, in a seventh possible implementation,

The transceiver unit is further configured to receive a heartbeat message sent by the user equipment by using the first connection to maintain the first connection.

A fifth aspect is a user equipment, including a processor, a transceiver, a memory, and a bus, wherein the processor and the memory are connected to each other through the bus;

a processor, configured to acquire an access address of the first server, where the access address includes a first address and a second address, where the first address and the second address comprise a network layer address and a transport layer address, The transport layer address of the first address is different from the transport layer address of the second address;

a processor, configured to send a connection request message to the first server by using a transceiver, to establish a connection with the first server, where the connection request message includes the first address or the second address;

The transceiver is configured to perform non-encrypted communication and/or encrypted communication with the first server through the connection.

In combination with the fifth aspect, in the first possible implementation manner,

The processor is configured to send a first connection request message to the first server by using the transceiver, and establish a first connection with the first server, where the first connection request message includes the first address;

The transceiver is specifically configured to enter the first server by using the first connection Line non-encrypted communication.

With reference to the fifth aspect or the first possible implementation manner of the fifth aspect, in a second possible implementation manner,

The processor is further configured to send a second connection request message to the first server by using the transceiver, and establish a second connection with the first server, where the second connection request message includes the Second address

The transceiver is further configured to perform non-encrypted communication with the first server by using the second connection.

With reference to the second possible implementation manner of the fifth aspect, in a third possible implementation manner, after the one of the first connection and the second connection is established,

The processor is further configured to disconnect the second connection if the second connection has been established before sending the first connection request message to the first server; or

The processor is further configured to disconnect the first connection if the first connection has been established before sending the second connection request message to the first server.

In conjunction with the third possible implementation of the fifth aspect, in a fourth possible implementation manner,

The transceiver is further configured to receive an encrypted communication request sent by the first server by using the first connection;

The processor is further configured to disconnect the first connection and establish the second connection according to the encrypted communication request;

The transceiver is further configured to perform encrypted communication with the first server by using the second connection in response to the encrypted communication request.

In conjunction with the third possible implementation of the fifth aspect, in a fifth possible implementation manner,

The transceiver is further configured to receive an indication message that the first server completes the encrypted communication sent by using the second connection;

The transceiver is further configured to disconnect the second connection according to the indication message and establish the first connection.

Combining the first possible implementation of the fifth aspect with the fifth possible implementation Any one of the formulas, in a sixth possible implementation,

The transceiver is further configured to send, by using the first connection, customization information to the first server, where the customization information is used to indicate customized encrypted communication content to the first server.

With reference to any one of the first possible implementation to the fifth possible implementation of the fifth aspect, in a seventh possible implementation manner,

The transceiver is further configured to send a heartbeat message to the first server by using the first connection to maintain the first connection.

With reference to any one of the fifth aspect to the seventh possible implementation manner of the fifth aspect, in an eighth possible implementation manner,

The processor is specifically configured to obtain an access address of the first server from a preset server list.

The processor is further configured to acquire an access address of the first server from a second server.

In a sixth aspect, a server is used as a first server, including a processor, a transceiver, a memory, and a bus, and the processor and the memory are connected to each other through the bus;

The processor is configured to receive, by using a transceiver, a connection request message sent by the user equipment, to establish a connection with the user equipment, where the connection request message includes a first address or a second address, where the first address and the The second address includes a network layer address and a transport layer address, and the transport layer address of the first address and the transport layer address of the second address are different;

The transceiver is further configured to perform non-encrypted communication and/or encrypted communication with the user equipment through the connection.

In combination with the sixth aspect, in a first possible implementation manner,

The processor is configured to receive, by using the transceiver, a first connection request message sent by the user equipment, and establish a first connection with the user equipment, where the first connection request message includes the first address ;

The transceiver is specifically configured to perform non-encrypted communication with the user equipment by using the first connection.

With reference to the sixth aspect or a possible implementation manner of the sixth aspect, in a second possible implementation manner,

The processor is further configured to receive, by the transceiver, a second connection request message sent by the user equipment, to establish a second connection with the user equipment, where the second connection request message includes the second address;

The transceiver is further configured to perform encrypted communication with the user equipment by using the second connection.

With reference to the second possible implementation manner of the sixth aspect, in a third possible implementation manner, after the one of the first connection and the second connection is established,

The processor is further configured to: before receiving the first connection request message sent by the user equipment, disconnect the second connection if the second connection has been established; or

The processor is further configured to disconnect the first connection if the first connection has been established before receiving the second connection request message sent by the user equipment.

In conjunction with the third possible implementation of the sixth aspect, in a fourth possible implementation,

The transceiver is further configured to send an encrypted communication request to the user equipment by using the first connection;

The processor is further configured to disconnect the first connection and establish the second connection;

The transceiver is further configured to perform encrypted communication with the first server by using the second connection according to the encrypted communication request.

In conjunction with the third possible implementation of the sixth aspect, in a fifth possible implementation manner,

The transceiver is further configured to send, by using the second connection, an indication message that the encrypted communication is completed to the user equipment;

The processor is further configured to disconnect the second connection and establish the first connection.

With reference to any one of the first possible implementation to the fifth possible implementation of the sixth aspect, in a sixth possible implementation,

The transceiver is further configured to receive, by the user equipment, the sending by using the first connection Customized information for indicating encrypted communication content customized by the user device.

With reference to any one of the first possible implementation to the fifth possible implementation of the sixth aspect, in a seventh possible implementation,

The transceiver is further configured to receive a heartbeat message sent by the user equipment by using the first connection to maintain the first connection.

According to a seventh aspect, a data transmission system includes a user equipment and a server;

The user equipment is the user equipment provided by any one of the third aspect to the eighth possible implementation manner of the third aspect;

The server is a server provided by any one of the fourth aspect to the seventh possible implementation of the fourth aspect.

In an eighth aspect, a data transmission system includes a user equipment and a server;

The user equipment is the user equipment according to any one of the eighth aspect to the eighth possible implementation manner of the fifth aspect;

The server is the server of any one of the seventh aspect to the seventh possible implementation of the sixth aspect.

The data transmission method, device and system provided by the embodiment of the present invention, the user equipment obtains an access address of the first server, and performs non-encrypted communication and encrypted communication with the first server according to the first address and the second address. Since the transport layer addresses of the first address and the second address are the same, the non-encrypted communication and the encrypted communication share the same network layer connection while occupying different transport layer connections, so the application layer data can be selected to pass the non-encrypted communication according to the encryption requirement. Or the transport layer connection occupied by the encrypted communication is transmitted, that is, the transport layer data is selectively encrypted. For data transmitted through non-encrypted communication, the user equipment and the first server do not need to encrypt the data, thereby reducing resource occupation, shortening communication time, and improving communication efficiency. For data transmitted by encrypted communication, various existing transport layer encryption protocols such as the SSL protocol, the TLS protocol, and the like can be used. By selectively encrypting the application layer data, under the premise of ensuring data security, the resource consumption in the communication process is reduced, and the communication efficiency is improved.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only the present invention. For some embodiments, other drawings may be obtained from those of ordinary skill in the art without departing from the drawings.

1 is a schematic flowchart of a data transmission method according to Embodiment 1 of the present invention;

2 is a schematic flowchart of a data transmission method according to Embodiment 2 of the present invention;

3 is a schematic flowchart of a data transmission method according to Embodiment 3 of the present invention;

4 is a schematic structural diagram of a user equipment according to Embodiment 4 of the present invention;

FIG. 5 is a schematic structural diagram of a server according to Embodiment 5 of the present invention; FIG.

FIG. 6 is a schematic structural diagram of a user equipment according to Embodiment 6 of the present invention;

FIG. 7 is a schematic structural diagram of a server according to Embodiment 7 of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In order to facilitate the clear description of the technical solutions of the embodiments of the present invention, in the embodiments of the present invention, the words "first", "second" and the like are used to distinguish the same or similar items whose functions and functions are substantially the same, in the field. The skilled person will understand that the words "first" and "second" are not intended to limit the number and order of execution.

Embodiments of the present invention provide a data transmission method applied to a communication system including a user equipment and a server. For example, the user equipment can log in to the server through a personal account, upload various backup data to the server, and the user can also download the backup data in the server to the local, and the server can also push advertisements, user subscription information, and the like to the user. The data interaction between the user equipment and the server can be accomplished by means of encrypted communication or by means of non-encrypted communication. For example, the advertisement pushed by the server can be sent to the user equipment through non-encrypted communication, and the account and password information transmitted by the user equipment when logging in to the server can be sent to the user equipment through encrypted communication to ensure data security. In the process of encrypted communication, existing existing ones can be applied. A transport layer encryption protocol, such as the SSL protocol, the TLS protocol, and the like.

Embodiment 1

A first embodiment of the present invention provides a data transmission method, which is applied to a user equipment. Referring to FIG. 1, the method includes the following steps:

101. Obtain an access address of the first server.

The first server is a server to be accessed by the user equipment, and the access address of the first server includes a first address and a second address, which are used for performing non-encrypted communication and encrypted communication, respectively. The user equipment can access the first server through the first address, or access the first server through the second address.

The first address and the second address both include a network layer address and a transport layer address. The network layer address is used to identify the first server in the network, and the transport layer address is used to identify the transport layer port of the first server. The network layer address of the first address is the same as the network layer address of the second address, and the transport layer address of the first address is different from the transport layer address of the second address.

102. Send a connection request message to the first server to establish a connection with the first server.

The connection request message includes a first address or a second address.

Since the network layer address of the first address and the network layer address of the second address are the same, when the user equipment accesses the first server through the first address and the second address at the same time, only a network layer connection is established with the first server, that is, encryption. Communication and non-encrypted communication share a network layer connection.

Since the transport layer address of the first address and the transport layer address of the second address are different, data for encrypted communication and data for non-encrypted communication can be distinguished by the transport layer address when the user equipment simultaneously passes the first address and the second When the address accesses the first server, the user equipment establishes two transport layer connections with the first server by the transport layer address of the first address and the transport layer address of the second address, that is, the encrypted communication and the non-encrypted communication each occupy one transport layer connection.

103. Perform non-encrypted communication or encrypted communication with the first server through a connection.

The user equipment can access the first server in a time-sharing manner through the first address and the second address, or access the first server at the same time, that is, the non-encrypted communication and the encrypted communication can be separately entered. Line or at the same time.

When the user equipment determines that non-encrypted communication is required, establishing a connection with the first server according to the first address, and performing non-encrypted communication with the first server. For example, when the user equipment needs to download an application by using the first server, the user equipment sends a connection request message to the first server, where the connection request message includes the first address. After the connection is established, the download request message sent by the user equipment to the first server and the installation package data sent by the first server to the user equipment are transmitted through non-encrypted communication. Optionally, the user equipment may disconnect the first server after the non-encrypted communication ends.

When the user equipment determines that the encrypted communication is required, the user establishes a connection with the first server according to the second address, and performs encrypted communication with the first server. Further, the user equipment may disconnect the connection with the first server after the encrypted communication ends.

According to the data transmission method provided by the embodiment of the present invention, the user equipment obtains an access address of the first server, and performs non-encrypted communication and encrypted communication with the first server according to the first address and the second address. Non-encrypted communication and encrypted communication share the same network layer connection, each occupying different transport layer connections, so the application layer data can be selected to be transmitted through the transport layer connection occupied by non-encrypted communication or encrypted communication according to the encryption requirement, that is, the transport layer data Perform selective encryption processing. For data transmitted through non-encrypted communication, the user equipment and the first server do not need to encrypt the data, thereby reducing resource occupation, shortening communication time, and improving communication efficiency. For data transmitted by encrypted communication, various existing transport layer encryption protocols such as the SSL protocol, the TLS protocol, and the like can be used. By selectively encrypting the application layer data, under the premise of ensuring data security, the resource consumption in the communication process is reduced, and the communication efficiency is improved.

Embodiment 2

With reference to the embodiment corresponding to FIG. 1, the second embodiment of the present invention provides a data transmission method, which is applied to a first server, as shown in FIG. 2, and includes the following steps:

201. Receive a connection request message sent by the user equipment, and establish a connection with the user equipment, where the connection request message includes a first address or a second address.

The first address and the second address include a network layer address and a transport layer address. First The network layer address of an address is the same as the network layer address of the second address, and the transport layer address of the first address is different from the transport layer address of the second address.

When receiving the connection request message sent by the user equipment, establishing a connection with the user equipment according to the first address or the second address in the connection request message, so that the user equipment can access the first server by using the first address or the second address.

202. Perform non-encrypted communication or encrypted communication with the user equipment through the connection.

When the connection request message includes the first address, the first server performs non-encrypted communication with the user equipment after the connection between the first server and the user equipment is established. When the connection request message includes the second address, after the connection between the first server and the user equipment is established, the first server performs encrypted communication with the user equipment.

Non-encrypted communication and encrypted communication can be performed separately or simultaneously. When simultaneously, non-encrypted communication and encrypted communication share a network layer connection and each occupies a transmission layer connection, so application layer data can be selected according to encryption requirements. The transport layer connection occupied by the encrypted communication or the encrypted communication is transmitted, that is, the transport layer data is selectively encrypted.

According to the data transmission method provided by the embodiment of the present invention, the first server establishes a connection with the user equipment according to the first address or the second address by receiving the connection request message sent by the user equipment, and performs non-encrypted communication or encryption with the user equipment through the connection. Communication. Non-encrypted communication and encrypted communication share the same network layer connection, each occupying different transport layer connections, so the application layer data can be selectively encrypted according to the encryption requirements. When performing encrypted communication, various existing transport layer encryption protocols such as the SSL protocol, the TLS protocol, and the like can be used. Therefore, on the basis of the existing transport layer encryption protocol, the application layer data is selectively encrypted, and under the premise of ensuring data security, the resource consumption in the communication process is reduced, and the communication efficiency is improved.

Embodiment 3

Based on the embodiment corresponding to FIG. 1 and FIG. 2, the third embodiment of the present invention provides a data transmission method, where the user equipment and the first server establish a first connection according to the first address, and perform non-encrypted communication through the first connection, according to The second address establishes a second connection and performs encrypted communication over the second connection.

The non-encrypted communication and the encrypted communication can be performed independently, that is, the user equipment and the first server can perform non-encrypted communication through the first connection while performing encrypted communication through the second connection. Preferably, the third embodiment of the present invention alternates between encrypted communication and non-encrypted communication to reduce the occupation of resources by the user equipment and the first server during communication. That is, when the user equipment and the first server communicate via one of the first connection or the second connection, the other connection can be disconnected.

Generally, the amount of data that needs to be transmitted through the second connection is much smaller than the amount of data that needs to be transmitted through the first connection. Therefore, in the third embodiment, the first connection is used as a long connection and the second connection is used as a short connection. The communication, that is, the hold time of the first connection is relatively long, and the second connection is established only when encrypted communication is required, and is disconnected after the end of the encrypted communication, so the hold time of the second connection is relatively short.

Referring to FIG. 3, the data transmission method provided in Embodiment 3 specifically includes the following steps:

301. The user equipment acquires an access address of the first server.

Optionally, the user equipment may obtain an access address of the first server from a preset server list.

Optionally, the user equipment may also obtain an access address of the first server from the second server. For example, in a specific application scenario, the user equipment obtains description information about various services through the second server, and sends an indication message of the subscription service to the second server, and after receiving the indication message, the second server is configured according to the The indication message determines that the server providing the subscription service is the first server, and then sends the access address of the first server to the user equipment.

Optionally, the network layer address may be an Internet Protocol (English name: Internet Protocol, English abbreviation: IP) address of the first server, and the transport layer address may be a transmission control protocol (English full name: Transmission Control Protocol, English abbreviation: TCP) )The port number.

For example, if the first address is 10.11.1.0:5223 and the second address is 10.11.1.0:5224, the user equipment establishes a network layer connection with the first server by accessing the IP address of 10.11.1.0. Further, the first connection is established by TCP port number 5223 for non-encrypted communication, and the second connection is established by TCP port number 5224 for encrypted communication. Of course, the first address or the second address may also be in the form of a domain name. For example, the domain name corresponding to the first address is WWW.xxx.nonencrpt.com, and the domain name corresponding to the second address is WWW.xxx.encrpt.com.

302. The user equipment sends a first connection request message to the first server, and establishes a first connection with the first server, where the first connection request message includes the first address.

The first connection request message includes a first address.

In combination with step 301, when the transport layer address is specifically a TCP port number, the first connection is a TCP connection. A person skilled in the art can understand that the TCP connection is established after the third handshake according to the first address, and the specific process is not described again.

303. The user equipment and the first server perform non-encrypted communication through the first connection.

The non-encrypted communication specifically includes the user equipment receiving the non-encrypted information sent by the first server through the first connection. And/or the user equipment sends non-encrypted information to the first server over the first connection. The non-encrypted information may be a request for obtaining a service sent by the user equipment to the first server, and a service information sent by the first server to the user equipment, or may be a heartbeat message (English name: Heartbeat Message), and the user equipment passes the The first server sends a heartbeat message to maintain the first connection to maintain the first connection, preventing the first connection from being disconnected by the firewall or other network element.

Optionally, the user equipment customizes the content of the encrypted communication, that is, determines which data is transmitted by means of encrypted communication, and sends the customized information to the first server through the first connection, and indicates the customized encrypted communication content to the first server.

By customizing the content of encrypted communication, the user equipment can meet the user's differentiated needs for data security, and take into account the user's demand for traffic and communication efficiency. For example, in a specific application scenario, the first server provides a data backup service to the user equipment, and a service of information push. The user device adds the information service to the customized information. Then, the user equipment can upload or download the backup data through the first connection, and for the information content, the first server will push the user equipment through the second connection, thereby selecting the application layer data through the first connection and the second connection according to the customized information. Sexual encryption processing.

304. The first server sends an encrypted communication request to the user equipment by using the first connection.

When the first server needs to initiate an encrypted communication, the first connection is sent to the user equipment. Confidential communication request. For example, in combination with the application scenario pushed by the information in step 303, when the first server has new content pushed to the user equipment, the encrypted communication request is sent to the user equipment through the first connection.

305. The user equipment disconnects the first connection.

When the user device and the first server communicate via one of the first connection or the second connection, the other connection can be disconnected.

306. The user equipment sends a second connection request message to the first server, and establishes a second connection with the first server.

The second connection request message includes a second address.

After receiving the encrypted communication request sent by the first server, the user equipment disconnects the first connection, and then establishes a second connection, and alternately performs non-encrypted communication and encrypted communication through the first connection and the second connection, while maintaining two In the case of a connection, the occupation of resources by the user equipment and the first server during communication is reduced.

307. The user equipment and the first server perform encrypted communication by using the second connection.

After the second connection is established, the first server can send the encrypted information to the user equipment. The content of the encrypted information may be the content specified by the customized information sent by the user equipment, or may be the content that needs to be encrypted by the first server according to the preset classification list. At the same time, the user equipment can also request other services from the first server through the second connection.

From the application layer, as long as one of the first connection and the second connection exists, the application layer connection between the user equipment and the first server is established, and the alternate operation of the non-encrypted communication and the encrypted communication does not cause the application layer. Interruption of data transmission.

308. The first server sends an indication message that the encrypted communication is completed to the user equipment by using the second connection.

Specifically, the application scenario that is pushed by the information described in step 304 is taken as an example. After the information is pushed, the first server indicates to the user equipment that the encrypted information has been sent, so that the user equipment disconnects the second connection after receiving the indication message. .

309. The user equipment disconnects the second connection, and sends a first connection request message to the first server to establish a first connection with the first server.

Optionally, after the first connection is re-established, the user equipment maintains the first connection by sending a heartbeat message to the first server.

According to the data transmission method provided by the embodiment of the present invention, the user equipment and the first server alternately perform non-encrypted communication and encrypted communication through the first connection and the second connection, and only one connection is maintained at one time point, and two connections are maintained. In the case of a connection, the occupation of resources by the user equipment and the first server during communication is reduced. Among them, when performing encrypted communication, various existing transport layer encryption protocols, such as the SSL protocol, the TLS protocol, and the like, can be used. Therefore, on the basis of the existing transport layer encryption protocol, the application layer data is selectively encrypted, and under the premise of ensuring data security, the resource consumption in the communication process is reduced, and the communication efficiency is improved.

Embodiment 4

The fourth embodiment of the present invention provides a user equipment, which is used to perform the corresponding functions of the user equipment in the data transmission method described in the foregoing embodiments corresponding to FIG. 1 to FIG. 3. Referring to FIG. 4, the user equipment 40 specifically includes :

The obtaining unit 401 is configured to obtain an access address of the first server, where the access address includes a first address and a second address. The first address and the second address include a network layer address and a transport layer address, and the transport layer address of the first address and the transport layer address of the second address are different.

The connection unit 402 is configured to send a connection request message to the first server by using the transceiver unit 403, and establish a connection with the first server, where the connection request message includes a first address or a second address.

The transceiver unit 403 is configured to perform non-encrypted communication and/or encrypted communication with the first server by using a connection.

Optionally, the connecting unit 402 is configured to send a first connection request message to the first server by using the transceiver unit 403, and establish a first connection with the first server, where the first connection request message includes the first address.

The transceiver unit 403 is specifically configured to perform non-encrypted communication with the first server by using the first connection.

Optionally, the connecting unit 402 is specifically configured to be used by the transceiver unit 403 to The server sends a second connection request message to establish a second connection with the first server, wherein the second connection request message includes the second address.

The transceiver unit 403 is further configured to perform encrypted communication with the first server by using the second connection.

Optionally, after one of the first connection and the second connection is established,

The connecting unit 402 is further configured to disconnect the second connection if the second connection has been established before sending the first connection request message to the first server. or,

The connecting unit 402 is further configured to disconnect the first connection if the first connection has been established before sending the second connection request message to the first server.

Optionally, the transceiver unit 403 is further configured to receive an encrypted communication request sent by the first server by using the first connection.

The connection unit 402 is further configured to disconnect the first connection and establish a second connection according to the encrypted communication request.

The transceiver unit 403 is further configured to perform encrypted communication with the first server by using the second connection in response to the encrypted communication request.

Optionally, the transceiver unit 403 is further configured to receive an indication message that the first server completes the encrypted communication sent by using the second connection.

The connecting unit 402 is further configured to disconnect the second connection according to the indication message and establish a first connection.

Optionally, the transceiver unit 403 is further configured to send, by using the first connection, customization information to the first server, where the customization information is used to indicate the customized encrypted communication content to the first server.

Optionally, the transceiver unit 403 is further configured to send a heartbeat message to the first server by using the first connection to maintain the first connection.

Optionally, the obtaining unit 401 is specifically configured to obtain an access address of the first server from the preset server list.

The obtaining unit 401 is specifically configured to acquire an access address of the first server from the second server.

The user equipment provided by the embodiment of the present invention acquires an access address of the first server, and performs non-encrypted communication with the first server according to the first address and the second address. Encrypted communication. Non-encrypted communication and encrypted communication share the same network layer connection, each occupying different transport layer connections, so the application layer data can be selected to be transmitted through the transport layer connection occupied by non-encrypted communication or encrypted communication according to the encryption requirement, that is, the transport layer data Perform selective encryption processing. For data transmitted through non-encrypted communication, the user equipment and the first server do not need to encrypt the data, thereby reducing resource occupation, shortening communication time, and improving communication efficiency. For data transmitted by encrypted communication, various existing transport layer encryption protocols such as the SSL protocol, the TLS protocol, and the like can be used. By selectively encrypting the application layer data, under the premise of ensuring data security, the resource consumption in the communication process is reduced, and the communication efficiency is improved.

Embodiment 5

The fifth embodiment of the present invention provides a server for performing the corresponding functions of the first server in the data transmission method described in the foregoing embodiments corresponding to FIG. 1 to FIG. Referring to FIG. 5, the server 50 specifically includes:

The connection unit 501 is configured to receive, by using the transceiver unit 502, a connection request message sent by the user equipment, and establish a connection with the user equipment, where the connection request message includes a first address or a second address. The first address and the second address include a network layer address and a transport layer address, and the transport layer address of the first address and the transport layer address of the second address are different.

The transceiver unit 502 is further configured to perform non-encrypted communication and/or encrypted communication with the user equipment through the connection.

Optionally, the connecting unit 501 is configured to receive, by the transceiver unit 502, a first connection request message sent by the user equipment, and establish a first connection with the user equipment, where the first connection request message includes the first address.

The transceiver unit 502 is specifically configured to perform non-encrypted communication with the user equipment by using the first connection.

Optionally, the connecting unit 501 is further configured to receive, by the transceiver unit 502, a second connection request message sent by the user equipment, to establish a second connection with the user equipment, where the second connection request message includes the second address.

The transceiver unit 502 is specifically configured to perform encryption with the user equipment by using the second connection. Communication.

The connecting unit 501 is further configured to: before receiving the first connection request message sent by the user equipment, if the second connection has been established, disconnect the second connection. or,

The connecting unit 501 is further configured to: before receiving the second connection request message sent by the user equipment, disconnect the first connection if the first connection has been established.

Optionally, the transceiver unit 502 is further configured to send an encrypted communication request to the user equipment by using the first connection.

The connecting unit 501 is further configured to disconnect the first connection and establish a second connection.

The transceiver unit 502 is further configured to perform encrypted communication with the first server by using the second connection according to the encrypted communication request.

Optionally, the transceiver unit 502 is further configured to send, by using the second connection, an indication message that the encrypted communication is completed to the user equipment.

The connecting unit 501 is further configured to disconnect the second connection and establish a first connection.

Optionally, the transceiver unit 502 is further configured to receive customized information that is sent by the user equipment by using the first connection, where the customized information is used to indicate the encrypted communication content customized by the user equipment.

Optionally, the transceiver unit 502 is further configured to receive a heartbeat message sent by the user equipment by using the first connection to maintain the first connection.

The server provided by the embodiment of the present invention establishes a connection with the user equipment according to the first address or the second address by receiving the connection request message sent by the user equipment, and performs non-encrypted communication or encrypted communication with the user equipment through the connection. Non-encrypted communication and encrypted communication share the same network layer connection, each occupying different transport layer connections, so the application layer data can be selectively encrypted according to the encryption requirements. When performing encrypted communication, various existing transport layer encryption protocols such as the SSL protocol, the TLS protocol, and the like can be used. Therefore, on the basis of the existing transport layer encryption protocol, the application layer data is selectively encrypted, and under the premise of ensuring data security, the resource consumption in the communication process is reduced, and the communication efficiency is improved.

Embodiment 6

The sixth embodiment of the present invention provides a user equipment for performing the corresponding functions of the user equipment in the data transmission method described in the foregoing embodiments corresponding to FIG. 1 to FIG. 3. Referring to FIG. 6, the user equipment 60 may be embedded. Or itself is a microprocessor computer, such as a general purpose computer, a custom machine, a mobile phone terminal or a tablet device, the user device 60 includes: at least one processor 601, a transceiver 602, a memory 603, and a bus 604, the at least A processor 601, transceiver 602 and memory 603 are connected by bus 604 and communicate with each other.

The bus 604 can be an industry standard architecture (English name: Industry Standard Architecture, English abbreviation: ISA) bus, external device interconnection (English full name: Peripheral Component, English abbreviation: PCI) bus or extended industry standard architecture (English full name :Extended Industry Standard Architecture, English abbreviation: EISA) bus. The bus 604 can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 6, but it does not mean that there is only one bus or one type of bus. among them:

The memory 603 is used to execute the application code of the inventive scheme, and the application code for executing the inventive scheme is stored in a memory and controlled by the processor 601 for execution.

The memory can be a read-only memory (English full name: Read Only Memory, English abbreviation: ROM) or other types of static storage devices that can store static information and instructions. Random memory (English name: Random Access Memory, English abbreviation: RAM) Or other types of dynamic storage devices that can store information and instructions, or can be electrically erasable programmable read only memory (English full name: Electrically Erasable Programmable Read Only Memory, English abbreviation: EEPROM), read-only optical disc (English full name: Compact Disc Read Only Memory (English: CD-ROM) or other optical disc storage, optical disc storage (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), disk storage media or other magnetic storage devices, or can be used Any other medium that carries or stores the desired program code in the form of an instruction or data structure and that can be accessed by a computer, but is not limited thereto. These memories are connected to the processor via a bus.

The processor 601 may be a central processing unit (English name: Central Processing Unit, English abbreviation: CPU), or a specific integrated circuit (English name: Application Specific Integrated Circuit, English abbreviation: ASIC), or configured to implement the present invention. One or more integrated circuits of an embodiment of the invention.

The processor 601 is configured to call the program code in the memory 603. In a possible implementation manner, when the application program is executed by the processor 601, the following functions are implemented.

The processor 601 is configured to obtain an access address of the first server, where the access address includes a first address and a second address. The first address and the second address include a network layer address and a transport layer address, and the transport layer address of the first address and the transport layer address of the second address are different.

The processor 601 is configured to send a connection request message to the first server by using the transceiver 602, and establish a connection with the first server, where the connection request message includes a first address or a second address.

The transceiver 602 is configured to perform non-encrypted communication and/or encrypted communication with the first server by using a connection.

Optionally, the processor 601 is configured to send a first connection request message to the first server by using the transceiver 602, and establish a first connection with the first server, where the first connection request message includes the first address.

Optionally, the transceiver 602 is specifically configured to perform non-encrypted communication with the first server by using the first connection.

Optionally, the processor 601 is further configured to send a second connection request message to the first server by using the transceiver 602, and establish a second connection with the first server, where the second connection request message includes the second address.

Optionally, the transceiver 602 is specifically configured to perform non-encrypted communication with the first server by using the second connection.

Optionally, after the processor 601 establishes one of the first connection and the second connection through the transceiver 602,

The processor 601 is further configured to send the first connection request message to the first server. Previously, if the second connection has been established, the second connection is broken. or,

The processor 601 is further configured to disconnect the first connection if the first connection has been established before sending the second connection request message to the first server.

Optionally, the transceiver 602 is further configured to receive an encrypted communication request sent by the first server by using the first connection.

The processor 601 is further configured to disconnect the first connection and establish a second connection according to the encrypted communication request.

The transceiver 602 is further configured to perform encrypted communication with the first server through the second connection in response to the encrypted communication request.

Optionally, the transceiver 602 is further configured to receive an indication message that the first server completes the encrypted communication sent by the second connection.

The processor 601 is further configured to disconnect the second connection according to the indication message and establish a first connection.

Optionally, the transceiver 602 is further configured to send, by using the first connection, the customized information to the first server, where the customized information is used to indicate the customized encrypted communication content to the first server.

Optionally, the transceiver 602 is further configured to send a heartbeat message to the first server by using the first connection to maintain the first connection.

Optionally, the processor 601 is configured to obtain an access address of the first server from a preset server list.

The processor 601 is specifically configured to acquire an access address of the first server from the second server.

The user equipment provided by the embodiment of the present invention acquires an access address of the first server, and performs non-encrypted communication and encrypted communication with the first server according to the first address and the second address. Non-encrypted communication and encrypted communication share the same network layer connection, each occupying different transport layer connections, so the application layer data can be selected to be transmitted through the transport layer connection occupied by non-encrypted communication or encrypted communication according to the encryption requirement, that is, the transport layer data Perform selective encryption processing. For data transmitted through non-encrypted communication, the user equipment and the first server do not need to encrypt the data, thereby reducing resource occupation, shortening communication time, and improving communication efficiency. For transmission via encrypted communication Data, you can use the existing various transport layer encryption protocols, such as SSL protocol, TLS protocol and so on. By selectively encrypting the application layer data, under the premise of ensuring data security, the resource consumption in the communication process is reduced, and the communication efficiency is improved.

Example 7

The sixth embodiment of the present invention provides a server for performing the corresponding functions of the first server in the data transmission method described in the foregoing embodiments corresponding to FIG. 1 to FIG. 3. Referring to FIG. 7, the user equipment 70 may be embedded. Or itself is a microprocessor computer, such as a general purpose computer, a custom machine, a mobile phone terminal, or a tablet device, the user device 70 includes: at least one processor 701, a transceiver 702, a memory 703, and a bus 704, the at least one The processor 701, the transceiver 702, and the memory 703 are connected by a bus 704 and complete communication with each other.

The bus 704 can be an industry standard architecture (English name: Industry Standard Architecture, English abbreviation: ISA) bus, external device interconnection (English full name: Peripheral Component, English abbreviation: PCI) bus or extended industry standard architecture (English full name :Extended Industry Standard Architecture, English abbreviation: EISA) bus. The bus 704 can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 7, but it does not mean that there is only one bus or one type of bus. among them:

The memory 703 is used to execute the application code of the inventive scheme, and the application code for executing the inventive scheme is stored in a memory and controlled by the processor 701 for execution.

The memory can be a read-only memory (English full name: Read Only Memory, English abbreviation: ROM) or other types of static storage devices that can store static information and instructions. Random memory (English name: Random Access Memory, English abbreviation: RAM) Or other types of dynamic storage devices that can store information and instructions, or can be electrically erasable programmable read only memory (English full name: Electrically Erasable Programmable Read Only Memory, English abbreviation: EEPROM), read-only optical disc (English full name: Compact Disc Read Only Memory, English abbreviation: CD-ROM) or other disc storage, CD storage (including compressed discs, laser discs, CDs, digital Universal optical disc, Blu-ray disc, etc.), magnetic storage medium or other magnetic storage device, or any other medium that can be used to carry or store desired program code in the form of an instruction or data structure and accessible by a computer, but is not limited thereto . These memories are connected to the processor via a bus.

The processor 701 may be a central processing unit (English name: Central Processing Unit, English abbreviation: CPU), or a specific integrated circuit (English name: Application Specific Integrated Circuit, English abbreviation: ASIC), or configured to implement the present invention. One or more integrated circuits of an embodiment of the invention.

The processor 701 is configured to call the program code in the memory 703. In a possible implementation manner, when the application program is executed by the processor 701, the following functions are implemented.

The processor 701 is configured to receive, by using the transceiver 702, a connection request message sent by the user equipment, and establish a connection with the user equipment, where the connection request message includes a first address or a second address. The first address and the second address include a network layer address and a transport layer address, and the transport layer address of the first address and the transport layer address of the second address are different.

The transceiver 702 is further configured to perform non-encrypted communication and/or encrypted communication with the user equipment through the connection.

Optionally, the processor 701 is configured to receive, by using the transceiver 702, a first connection request message sent by the user equipment, and establish a first connection with the user equipment, where the first connection request message includes the first address.

The processor 701 is further configured to receive, by using the transceiver 702, a second connection request message sent by the user equipment, to establish a second connection with the user equipment, where the second connection request message includes the second address.

Optionally, the transceiver 702 is specifically configured to perform non-encrypted communication with the user equipment by using the first connection.

The transceiver 702 is specifically configured to perform encrypted communication with the user equipment by using the second connection.

Optionally, after the processor 701 is established by the transceiver 702 in one of the first connection and the second connection,

The processor 701 is further configured to: before receiving the first connection request message sent by the user equipment, if the second connection has been established, disconnect the second connection. or,

The processor 701 is further configured to: before receiving the second connection request message sent by the user equipment, if the first connection has been established, disconnect the first connection.

Optionally, the transceiver 702 is further configured to send an encrypted communication request to the user equipment by using the first connection.

The processor 701 is further configured to disconnect the first connection and establish a second connection.

The transceiver 702 is further configured to perform encrypted communication with the first server by using the second connection according to the encrypted communication request.

Optionally, the transceiver 702 is further configured to send, by using the second connection, an indication message that the encrypted communication is completed to the user equipment.

The processor 701 is further configured to disconnect the second connection and establish a first connection.

Optionally, the transceiver 702 is further configured to receive customized information sent by the user equipment by using the first connection, where the customized information is used to indicate the encrypted communication content customized by the user equipment.

Optionally, the transceiver 702 is further configured to receive a heartbeat message sent by the user equipment by using the first connection to maintain the first connection.

Based on the embodiments corresponding to FIG. 4 to FIG. 7 above, an embodiment of the present invention provides a data transmission system, including a user equipment and a server.

The user equipment is the user equipment described in the embodiment corresponding to FIG. 4, and the server is the server described in the embodiment corresponding to FIG. 5, and is used as the first server.

Alternatively, the user equipment is the user equipment described in the embodiment corresponding to FIG. 6, and the server is the server described in the embodiment corresponding to FIG. 7, and is used as the first server.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented in hardware, firmware implementation, or a combination thereof. When implemented in software, the functions described above may be stored in or transmitted as one or more instructions or code on a computer readable medium. Computer readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one location to another. A storage medium may be any available media that can be accessed by a computer. For example, but not limited to: the computer readable medium may include random access memory (English name: Random Access Memory, English abbreviation: RAM), read only memory (English full name: Read Only Memory, English abbreviation: ROM), electrically erasable Programmable Read Only Memory (English full name: Electrically Erasable Programmable Read Only Memory, English abbreviation: EEPROM), read-only optical disc (English full name: Compact Disc Read Only Memory, English abbreviation: CD-ROM) or other optical disc storage, disk storage media Or other magnetic storage devices, or can be used to carry or store periods with instructions or data structures Program code and any other medium that can be accessed by a computer. Also. Any connection may suitably be a computer readable medium. For example, if the software uses coaxial cable, fiber optic cable, twisted pair, digital subscriber line (English full name: Digital Subscriber Line, English abbreviation: DSL) or wireless technologies such as infrared, radio and microwave from the website, server or Other remote source transmissions, such as coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, wireless, and microwave, are included in the fixing of the associated medium. As used in the present invention, the disc and the disc include a compact disc (English full name: Compact Disc, English abbreviation: CD), a laser disc, a disc, a digital versatile disc (English full name: Digital Versatile Disc, English abbreviation: DVD), a floppy disk and Blu-ray discs, in which discs are usually magnetically replicated, while discs use lasers to optically replicate data. Combinations of the above should also be included within the scope of the computer readable media.

The above is only the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It is within the scope of the invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

A data transmission method, comprising:

Obtaining an access address of the first server, where the access address includes a first address and a second address; wherein the first address and the second address comprise a network layer address and a transport layer address, and the first address is transmitted The layer address is different from the transport layer address of the second address;

Sending a connection request message to the first server, establishing a connection with the first server, where the connection request message includes the first address or the second address;

Non-encrypted communication and/or encrypted communication with the first server over the connection.
The method of claim 1 wherein

The sending a connection request message to the first server, and establishing a connection with the first server, includes: sending a first connection request message to the first server, and establishing a first connection with the first server, where The first connection request message includes the first address;

The performing non-encrypted communication and/or encrypted communication with the first server over the connection includes performing non-encrypted communication with the first server over the first connection.
Method according to claim 1 or 2, characterized in that

The sending a connection request message to the first server, and establishing a connection with the first server, includes: sending a second connection request message to the first server, and establishing a second connection with the first server, where The second connection request message includes the second address;

The performing non-encrypted communication and/or encrypted communication with the first server through the connection includes: performing encrypted communication with the first server through the second connection.
The method of claim 3, wherein after the one of the first connection and the second connection is established, the method further comprises:

Before sending the first connection request message to the first server, if the second connection has been established, disconnecting the second connection; or

Before the sending the second connection request message to the first server, if the When a connection has been established, the first connection is broken.
The method of claim 4 wherein:

Performing non-encrypted communication with the first server through the first connection before the disconnecting the first connection, the method further comprising: receiving an encryption sent by the first server by using the first connection Communication request

After disconnecting the first connection and establishing the second connection, the encrypting communication with the first server by the second connection comprises: responding to the encrypted communication request, by the second connection Encrypted communication with the first server.
The method of claim 4, wherein the method further comprises:

Receiving an indication message that the first server completes the encrypted communication sent by the second connection;

Disconnecting the second connection and establishing the first connection.
The method according to any one of claims 2-6, wherein the non-encrypted communication with the first server by the first connection comprises:

Customizing information is transmitted to the first server through the first connection, the customization information being used to indicate customized encrypted communication content to the first server.
The method according to any one of claims 2-6, wherein the non-encrypted communication with the first server by the first connection comprises:

Sending a heartbeat message to the first server through the first connection to maintain the first connection.
The method according to any one of claims 1-8, wherein the obtaining an access address of the first server comprises:

Obtaining an access address of the first server from a preset server list;

Alternatively, the access address of the first server is obtained from the second server.
A data transmission method, comprising:

Receiving a connection request message sent by the user equipment, establishing a connection with the user equipment, where the connection request message includes a first address or a second address; wherein the first address and the second address comprise a network layer address and a transmission a layer address, the transport layer address of the first address and the transport layer address of the second address are different;

Non-encrypted communication and/or encrypted communication with the user equipment over the connection.
The method according to claim 10, wherein the receiving a connection request message sent by the user equipment, establishing a connection with the user equipment, includes:

Receiving a first connection request message sent by the user equipment, and establishing a first connection with the user equipment, where the first connection request message includes the first address;

The performing non-encrypted communication and/or encrypted communication with the user equipment through the connection includes: performing non-encrypted communication with the user equipment by using the first connection.
A method according to claim 10 or 11, wherein

Receiving the connection request message sent by the user equipment, establishing a connection with the user equipment, including: receiving a second connection request message sent by the user equipment, establishing a second connection with the user equipment, where the second connection The request message includes the second address;

The performing non-encrypted communication and/or encrypted communication with the user equipment through the connection includes: performing encrypted communication with the first server by using the second connection.
The method of claim 12, wherein after the one of the first connection and the second connection is established, the method further comprises:

Before receiving the first connection request message sent by the user equipment, if the second connection has been established, disconnecting the second connection; or

Before receiving the second connection request message sent by the user equipment, if the first connection has been established, disconnecting the first connection.
The method of claim 13 wherein:

Before the disconnecting the first connection, performing non-encrypted communication with the user equipment by using the first connection, the method further includes: sending, by using the first connection, an encrypted communication request to the user equipment;

After disconnecting the first connection and establishing the second connection, encrypted communication is performed with the first server through the second connection.
The method of claim 13 wherein the method further comprises:

Sending, by the second connection, an indication message that the encrypted communication is completed to the user equipment;

Disconnecting the second connection and establishing the first connection.
The method according to any one of claims 11 to 15, wherein the non-encrypted communication with the user equipment by using the first connection comprises:

The performing non-encrypted communication with the user equipment by using the first connection includes:

Receiving, by the user equipment, customized information sent by the first connection, where the customized information is used to indicate encrypted communication content customized by the user equipment.
The method according to any one of claims 11 to 15, wherein the non-encrypted communication with the user equipment by using the first connection comprises:

Receiving a heartbeat message sent by the user equipment by using the first connection to maintain the first connection.
A user equipment, comprising:

An obtaining unit, configured to obtain an access address of the first server, where the access address includes a first address and a second address, where the first address and the second address comprise a network layer address and a transport layer address, The transport layer address of the first address is different from the transport layer address of the second address;

a connection unit, configured to send a connection request message to the first server by using a transceiver unit, to establish a connection with the first server, where the connection request message includes the first address or the second address;

The transceiver unit is configured to perform non-encrypted communication and/or encrypted communication with the first server by using the connection.
User equipment according to claim 18, characterized in that

The connecting unit is configured to send a first connection request message to the first server by using the transceiver unit, and establish a first connection with the first server, where the first connection request message includes the first address;

The transceiver unit is specifically configured to perform non-encrypted communication with the first server by using the first connection.
User equipment according to claim 18 or 19, characterized in that

The connecting unit is further configured to send, by using the transceiver unit, a second connection request message to the first server, to establish a second connection with the first server, where the The second connection request message includes the second address;

The transceiver unit is specifically configured to perform encrypted communication with the first server by using the second connection.
The user equipment according to claim 20, after one of the first connection and the second connection is established,

The connecting unit is further configured to disconnect the second connection if the second connection has been established before sending the first connection request message to the first server; or

The connecting unit is further configured to disconnect the first connection if the first connection has been established before sending the second connection request message to the first server.
A user equipment according to claim 21, wherein

The transceiver unit is further configured to receive an encrypted communication request sent by the first server by using the first connection;

The connecting unit is further configured to disconnect the first connection and establish the second connection according to the encrypted communication request;

The transceiver unit is further configured to perform encrypted communication with the first server by using the second connection in response to the encrypted communication request.
A user equipment according to claim 21, wherein

The transceiver unit is further configured to receive an indication message that the first server completes the encrypted communication sent by using the second connection;

The connecting unit is further configured to disconnect the second connection according to the indication message and establish the first connection.
User equipment according to any one of claims 19-23, characterized in that

The transceiver unit is further configured to send, by using the first connection, customization information to the first server, where the customization information is used to indicate customized encrypted communication content to the first server.
User equipment according to any one of claims 19-23, characterized in that

The transceiver unit is further configured to send a heartbeat message to the first server by using the first connection to maintain the first connection.
User equipment according to any one of claims 18-25, characterized in that

The obtaining unit is specifically configured to obtain an access address of the first server from a preset server list.

The obtaining unit is specifically configured to acquire an access address of the first server from a second server.
A server for use as a first server, comprising:

a connection unit, configured to receive, by the transceiver unit, a connection request message sent by the user equipment, to establish a connection with the user equipment, where the connection request message includes a first address or a second address, where the first address and the first The second address includes a network layer address and a transport layer address, and the transport layer address of the first address and the transport layer address of the second address are different;

The transceiver unit is further configured to perform non-encrypted communication and/or encrypted communication with the user equipment by using the connection.
The server according to claim 27, wherein

The connecting unit is configured to: receive, by the transceiver unit, a first connection request message sent by the user equipment, and establish a first connection with the user equipment, where the first connection request message includes the first address ;

The transceiver unit is specifically configured to perform non-encrypted communication with the user equipment by using the first connection.
A server according to claim 27 or 28, wherein

The connecting unit is further configured to receive, by the transceiver unit, a second connection request message sent by the user equipment, to establish a second connection with the user equipment, where the second connection request message includes the second address;

The transceiver unit is specifically configured to perform encrypted communication with the user equipment by using the second connection.
The server according to claim 29, after one of said first connection and said second connection is established,

The connecting unit is further configured to: before receiving the first connection request message sent by the user equipment, disconnect the second connection if the second connection has been established; or

The connecting unit is further configured to receive a second connection request sent by the user equipment Before the message, if the first connection has been established, the first connection is disconnected.
A server according to claim 30, wherein

The transceiver unit is further configured to send an encrypted communication request to the user equipment by using the first connection;

The connecting unit is further configured to disconnect the first connection and establish the second connection;

The transceiver unit is further configured to perform encrypted communication with the first server by using the second connection according to the encrypted communication request.
A server according to claim 30, wherein

The transceiver unit is further configured to send, by using the second connection, an indication message that the encrypted communication is completed to the user equipment;

The connecting unit is further configured to disconnect the second connection and establish the first connection.
A server according to any of claims 28-32, characterized in that

The transceiver unit is further configured to receive customized information that is sent by the user equipment by using the first connection, where the customized information is used to indicate encrypted communication content customized by the user equipment.
A server according to any of claims 28-32, characterized in that

The transceiver unit is further configured to receive a heartbeat message sent by the user equipment by using the first connection to maintain the first connection.
A user equipment, comprising: a processor, a transceiver, a memory, and a bus, wherein the processor and the memory are connected to each other through the bus;

a processor, configured to acquire an access address of the first server, where the access address includes a first address and a second address, where the first address and the second address comprise a network layer address and a transport layer address, The transport layer address of the first address is different from the transport layer address of the second address;

a processor, configured to send a connection request message to the first server by using a transceiver, to establish a connection with the first server, where the connection request message includes the first address or the second address;

The transceiver is configured to perform non-encrypted communication and/or encrypted communication with the first server through the connection.
A user equipment according to claim 35, wherein

The processor is configured to send a first connection request message to the first server by using the transceiver, and establish a first connection with the first server, where the first connection request message includes the first address;

The transceiver is specifically configured to perform non-encrypted communication with the first server by using the first connection.
User equipment according to claim 35 or 36, characterized in that

The processor is further configured to send a second connection request message to the first server by using the transceiver, and establish a second connection with the first server, where the second connection request message includes the Second address

The transceiver is further configured to perform non-encrypted communication with the first server by using the second connection.
The user equipment according to claim 37, after one of the first connection and the second connection is established,

The processor is further configured to disconnect the second connection if the second connection has been established before sending the first connection request message to the first server; or

The processor is further configured to disconnect the first connection if the first connection has been established before sending the second connection request message to the first server.
User equipment according to claim 38, characterized in that

The transceiver is further configured to receive an encrypted communication request sent by the first server by using the first connection;

The processor is further configured to disconnect the first connection and establish the second connection according to the encrypted communication request;

The transceiver is further configured to perform encrypted communication with the first server by using the second connection in response to the encrypted communication request.
User equipment according to claim 38, characterized in that

The transceiver is further configured to receive an indication message that the first server completes the encrypted communication sent by using the second connection;

The transceiver is further configured to disconnect and establish the second connection according to the indication message The first connection.
User equipment according to any one of claims 36 to 40, characterized in that

The transceiver is further configured to send, by using the first connection, customization information to the first server, where the customization information is used to indicate customized encrypted communication content to the first server.
User equipment according to any one of claims 36 to 40, characterized in that

The transceiver is further configured to send a heartbeat message to the first server by using the first connection to maintain the first connection.
User equipment according to any of claims 35-42, characterized in that

The processor is specifically configured to obtain an access address of the first server from a preset server list.

The processor is further configured to acquire an access address of the first server from a second server.
A server for use as a first server, comprising: a processor, a transceiver, a memory, and a bus, wherein the processor and the memory are connected to each other through the bus;

The processor is configured to receive, by using a transceiver, a connection request message sent by the user equipment, to establish a connection with the user equipment, where the connection request message includes a first address or a second address, where the first address and the The second address includes a network layer address and a transport layer address, and the transport layer address of the first address and the transport layer address of the second address are different;

The transceiver is further configured to perform non-encrypted communication and/or encrypted communication with the user equipment through the connection.
A server according to claim 44, wherein

The processor is configured to receive, by using the transceiver, a first connection request message sent by the user equipment, and establish a first connection with the user equipment, where the first connection request message includes the first address ;

The transceiver is specifically configured to perform non-encrypted communication with the user equipment by using the first connection.
A server according to claim 44 or 45, wherein

The processor is further configured to receive, by the transceiver, a second connection request message sent by the user equipment, to establish a second connection with the user equipment, where the second connection request message includes the second address;

The transceiver is further configured to perform encrypted communication with the user equipment by using the second connection.
The server according to claim 46, after one of said first connection and said second connection is established,

The processor is further configured to: before receiving the first connection request message sent by the user equipment, disconnect the second connection if the second connection has been established; or

The processor is further configured to disconnect the first connection if the first connection has been established before receiving the second connection request message sent by the user equipment.
A server according to claim 47, wherein

The transceiver is further configured to send an encrypted communication request to the user equipment by using the first connection;

The processor is further configured to disconnect the first connection and establish the second connection;

The transceiver is further configured to perform encrypted communication with the first server by using the second connection according to the encrypted communication request.
A server according to claim 47, wherein

The transceiver is further configured to send, by using the second connection, an indication message that the encrypted communication is completed to the user equipment;

The processor is further configured to disconnect the second connection and establish the first connection.
A server according to any one of claims 45 to 49, characterized in that

The transceiver is further configured to receive customized information that is sent by the user equipment by using the first connection, where the customized information is used to indicate encrypted communication content customized by the user equipment.
A server according to any one of claims 45 to 49, characterized in that

The transceiver is further configured to receive a heartbeat message sent by the user equipment by using the first connection to maintain the first connection.
A data transmission system, characterized in that

Including user equipment and servers;

The user equipment is the user equipment according to any one of claims 18-26;

The server is the server of any one of claims 27-34.
A data transmission system, characterized in that

Including user equipment and servers;

The user equipment is the user equipment according to any one of claims 35-43;

The server is the server of any of claims 44-51.