WO2018098633A1

WO2018098633A1 - Data transmission method, data transmission apparatus, electronic device and computer program product

Info

Publication number: WO2018098633A1
Application number: PCT/CN2016/107745
Authority: WO
Inventors: 王华涛
Original assignee: 深圳前海达闼云端智能科技有限公司
Priority date: 2016-11-29
Filing date: 2016-11-29
Publication date: 2018-06-07
Also published as: CN106797335B; CN106797335A

Abstract

Provided are a data transmission method, a data transmission apparatus, an electronic device and a computer program product, applied to the technical field of wireless communications. The method comprises: establishing a VPN tunnel, and modifying a routing rule of an access apparatus; after routing an uplink data packet to a first virtual transmission network device according to the modified routing rule, acquiring the uplink data packet from the first virtual transmission network device; and selecting a network transmission unit according to a network transmission unit selection policy, and when performing VPN packaging on the uplink data packet, setting a source address IP of the VPN-packaged uplink data packet to be the IP of the selected network transmission unit, and setting a destination IP to be the IP address of a VPN server. According to the method provided in the present invention, a network transmission unit may be selected according to a network transmission unit selection policy, and uplink data is transmitted by means of the selected network transmission unit, so that the network transmission unit is selected flexibly and reasonably according to the transmitted data.

Description

Data transmission method, data transmission device, electronic device and computer program product

Technical field

The present invention relates to the field of wireless communication technologies, and in particular, to a data transmission method, a data transmission device, an electronic device, and a computer program product.

Background technique

With the rapid development of wireless communication related technologies, through wireless routers, wireless data terminals (such as 3G (third generation mobile communication technology) / 4G (fourth generation mobile communication technology) terminals (such as SIM (Subscriber Identification Module) Card transmission, such as a cable network transmission unit, is one of the common methods for data transmission.

For example, the first terminal (such as a user's smart phone) establishes a transmission path with the second terminal in advance through the wireless router by using a wifi technology (one end of the transmission path is connected to the wireless router, and the other end is connected to the second terminal). When the first terminal transmits the data stream, each data in the data stream transmits its data to the second terminal (such as an application server) through a pre-established transmission path.

For another example, the first terminal establishes a transmission path with the second terminal by using the 3G/4G technology in advance through the 3G/4G terminal (one end of the transmission path is connected to the 3G/4G terminal, and the other end is connected to the second terminal). When the first terminal transmits the data stream, each data in the data stream transmits its data to the second terminal through a pre-established transmission path.

If the first terminal is connected to two network transmission units, namely a wireless router and a 4G terminal, the transmission path is established in advance with the second terminal through the 4G terminal, as shown in FIG. 1 , including a 4G terminal-base station (such as EnodeB)-Internet-second. terminal. When the first terminal sends the data stream, each data in the data stream is transmitted to the base station via the 4G terminal, and the base station transmits each data to the second terminal via the Internet.

In the above method, each data in the data stream of the first terminal is transmitted through a path established by the pre-established network transmission unit and the second terminal, and the bandwidth in the 4G technology is fixed, but the data stream transmitted by the method is used. The amount of data included is unstable, if the data transmitted by this method If the amount of data included in the stream is large, the available bandwidth of each data in the data stream is small. For a single data, the available bandwidth cannot satisfy the transmission requirement of the data, and the transmission time of the data is prolonged, and the transmission quality is degraded.

Summary of the invention

In order to improve the transmission quality, an embodiment of the present invention provides a data transmission method, a data transmission device, an electronic device, and a computer program product.

In a first aspect, an embodiment of the present invention provides a data transmission method, where the method is applied to an access device, where the method includes:

Establishing a VPN tunnel between the first transmission virtual network device on the access device side and the second transmission virtual network device on the VPN server side, and modifying a routing rule of the access device; the modified routing rule is such that the uplink data packet is accessed by the access device. The routing unit routes to the first transmission virtual network device, so that the source address IP is the IP address of the network transmission unit corresponding to the access device, and the data packet whose destination IP is the VPN server is routed to the network transmission unit by the routing unit of the access device. a gateway of the corresponding network transmission unit;

After the routing unit of the access device routes the uplink data packet to the first transmission virtual network device according to the modified routing rule, acquiring the uplink data packet from the first transmission virtual network device;

Selecting a network transmission unit according to the pre-acquired network transmission unit selection policy, and when performing VPN encapsulation on the uplink data packet, setting the source address IP of the VPN encapsulated uplink data packet to the IP of the selected network transmission unit, destination IP Set to the IP address of the VPN server.

In a second aspect, an embodiment of the present invention provides a data transmission apparatus, including:

a establishing unit, configured to establish a VPN tunnel between the first transmission virtual network device on the access device side and the second transmission virtual network device on the VPN server end;

a modifying unit, configured to modify a routing rule of the access device; the modified routing rule causes the uplink data packet to be routed by the routing unit of the access device to the first transmission virtual network device, so that the source address IP is the IP address of the network transmission unit corresponding to the access device, and the data packet whose destination IP is the VPN server is routed by the routing unit of the access device to the gateway of the network transmission unit corresponding to the network transmission unit;

a first acquiring unit, configured to acquire an uplink data packet from the first transmission virtual network device after the routing unit of the access device routes the uplink data packet to the first transmission virtual network device according to the modified routing rule ;

a selecting unit, configured to select a network transmission unit according to a pre-acquired network transmission unit selection policy; and when performing VPN encapsulation on the uplink data packet, setting a source address IP of the VPN encapsulated uplink data packet to the selected network transmission unit IP, destination IP is set to the IP address of the VPN server.

In a third aspect, an embodiment of the present invention provides an electronic device, where the electronic device includes:

a memory, one or more processors; and one or more modules, the one or more modules being stored in the memory and configured to be executed by the one or more processors, the one or The plurality of modules includes instructions for performing the various steps in the method of the first aspect.

In a fourth aspect, an embodiment of the present invention provides a computer program product for use in conjunction with an electronic device including a display, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer The program mechanism includes instructions for performing the various steps in the method of the first aspect.

In a fifth aspect, an embodiment of the present invention provides a data transmission method, which is applied to a VPN server, where the method includes:

Establishing a VPN tunnel between the first transmission virtual network device on the access device side and the second transmission virtual network device on the VPN server side;

Determining respective network transmission units corresponding to the access device side;

After receiving the uplink data packet of the access device, the data packet is VPN decapsulated and sent to the second transmission virtual network device.

In a sixth aspect, an embodiment of the present invention provides a data transmission apparatus, including:

a determining unit, configured to determine each network transmission unit corresponding to the access device side;

The processing unit is configured to perform VPN decapsulation on the data packet after receiving the uplink data packet of the access device, and send the data packet to the second transmission virtual network device.

In a seventh aspect, an embodiment of the present invention provides an electronic device, where the electronic device includes:

a memory, one or more processors; and one or more modules, the one or more modules being stored in the memory and configured to be executed by the one or more processors, the one or The plurality of modules includes instructions for performing the various steps of the method of the fifth aspect.

In an eighth aspect, an embodiment of the present invention provides a computer program product for use in conjunction with an electronic device including a display, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer The program mechanism includes instructions for performing the various steps of the methods described in the method of the fifth aspect.

The benefits are as follows:

The method provided by the embodiment of the present invention may select a network transmission unit according to a network transmission unit selection policy, and transmit the uplink data through the selected network transmission unit, so as to flexibly select the network transmission unit according to the transmitted data, and thereby utilize the network transmission unit reasonably.

DRAWINGS

Specific embodiments of the present invention will be described below with reference to the accompanying drawings, in which:

1 is a schematic diagram of data transmission in the prior art;

2 is a schematic structural diagram of a data transmission system according to an embodiment of the present invention;

3 is a schematic flowchart of a VPN tunnel establishment process according to an embodiment of the present invention;

4 is a schematic flowchart of a data transmission method according to an embodiment of the present invention;

FIG. 5 is a schematic flowchart of another data transmission method according to an embodiment of the present invention;

6 is a schematic structural diagram of a data transmission apparatus according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of an electronic device according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of another data transmission apparatus according to an embodiment of the present invention; FIG.

FIG. 9 is a schematic structural diagram of another electronic device according to an embodiment of the present invention.

detailed description

The embodiments of the present invention are further described in detail with reference to the accompanying drawings, in which FIG. An exhaustive example. And in the case of no conflict, the embodiments of the present invention and the features in the embodiments can be combined with each other.

The inventor noticed during the invention:

The current data transmission method is: the first terminal establishes a transmission path with the second terminal in advance through a network transmission unit (such as a wireless router or a wireless data terminal). When the first terminal transmits data, its data is transmitted to the second terminal through a pre-established transmission path. The bandwidth corresponding to the network transmission unit is fixed, but the amount of data transmitted by the method is unstable. If the amount of data transmitted by the method is large, the available bandwidth of each data is small, and available for a single data. The bandwidth cannot meet the transmission requirement of the data, causing the transmission time of the data to be prolonged and the transmission quality to be degraded.

Based on this, the present invention provides a data transmission method, which can select a network transmission unit according to a network transmission unit selection policy, and transmit uplink data through a selected network transmission unit, thereby implementing flexible selection of a network according to the transmitted data. The transmission unit, and then the network transmission unit is rationally utilized to improve the data transmission quality.

The data transmission method provided by the present invention can be applied to a data transmission system composed of an access device and a VPN server. As shown in FIG. 2, the data transmission system includes an access device 202 and a VPN server 203. In addition, it can also include a data generating end - the first terminal 201 and the data most The final receiving end - the second terminal 204.

The access device 202 can be located in the first terminal 201 (as shown in FIG. 2( a )). The access device 202 can also be located outside the first terminal 201, and the access device 202 is connected to the first terminal 201 (as shown in FIG. 2(b)).

The access device 202 is connected to n network transmission units at the same time, wherein the n network transmission units may be n wireless terminals, or may be n line network transmission units, or may be, m wireless terminals and nm line network transmissions. Unit, m is a positive integer greater than 0 and m is less than n.

The n wireless terminals may be n wireless routers, or n wireless data terminals, or t network transmission units and n-t wireless data terminals, where t is a positive integer greater than 0 and m is less than n. m wireless terminals, which may be m wireless routers, or m wireless data terminals, or i network transmission units and m-i wireless data terminals, i being a positive integer greater than 0 and m being less than n.

In the meantime, for the case where the access device 202 is connected to multiple wireless terminals at the same time, the services provided for each wireless terminal may be the same operator or different operators.

In addition, before performing the data transmission method provided by the embodiment, the access device 202 establishes a VPN (Virtual Private Network) tunnel in advance with the VPN server 203. The specific establishment process is: after the access device 202 determines that the open condition is met, the VPN tunnel between the first transmission virtual network device on the access device 202 side and the second transmission virtual network device on the VPN server end 203 is established, and the access is modified. The routing rules of the device.

The modified routing rule may enable the uplink data packet to be routed by the routing unit of the access device 202 to the first transmission virtual network device, where the source address IP is the IP of the network transmission unit corresponding to the access device 202. The inter-connected protocol) address, and the packet whose destination IP is the VPN server 203 is routed by the routing unit of the access device 202 to the gateway of the network transmission unit corresponding to the network transmission unit. In a specific implementation, in order for the uplink data packet to be routed by the routing unit of the access device 202 to the first transmission virtual network device, the routing unit may be The next hop is directed to the network transmission unit; in addition, in order to enable the destination IP to be the data packet of the VPN server 203 to be routed by the routing unit of the access device 202 to the gateway of the network transmission unit corresponding to the network transmission unit, N policy routes and N routing tables, (N is equal to the number of network transmission units), that is, adding a policy route and a routing table to each network transmission unit. The policy routing content is that the source address is the IP address of the network transmission unit, and the destination IP address is the data packet of the VPN server IP address, and the routing table of the network transmission unit is queried. The content of the routing table is the default gateway is the gateway of the network transmission unit. .

In addition, the opening condition includes: monitoring that the preset button is triggered by the user; and/or, the real-time network transmission parameter does not satisfy the transmission requirement.

FIG. 3 shows a specific implementation method for establishing a VPN tunnel between the first transmission virtual network device on the access device 202 side and the second transmission virtual network device of the VPN server 203, and modifying the routing rules of the access device. Figure 3. The method includes:

301. The access device 202 sends the type information of each network transmission unit to the VPN server 203.

In order for the VPN server 203 to determine a more reasonable network transmission unit selection policy, the access device 202 needs to transmit the type information of each network transmission unit it accesses to the VPN server 203.

302. The VPN server 203 determines a network transmission unit selection policy according to information of each network transmission unit, creates a second transmission virtual network device, allocates a VPN tunnel establishment resource, and changes a next hop in the second routing rule to a second transmission virtual Internet equipment.

The manner in which the VPN server 203 creates the second transmission virtual network device may be an existing manner, for example, establishing a TUN (point-to-point device) type second transmission virtual network device through a Linux virtual network card, or establishing a TAP through a Linux virtual network card (Ethernet) Device) type of second transmission virtual network device.

The VPN server 203 acquires a corresponding network transmission unit selection policy according to the real-time network transmission parameters. Wherein, the network transmission unit selection strategy may be a load balancing selection strategy, or A selection strategy for bandwidth aggregation.

In order for the established second transmission virtual network device to process the data received by the VPN server 203 and route it to the receiving terminal second terminal 204 of the data, the VPN server 203 determines the network transmission unit selection policy according to the information of each network transmission unit. After the second transmission virtual network device is created, the next hop in the second routing rule is changed to the second transmission virtual network device, and the VPN server 203 is received according to the second routing rule. The data is routed to the second transport virtual network device.

303. The VPN server 203 sends the network transmission unit selection policy, the type of the second transmission virtual network device, and the VPN tunnel establishment resource to the access device 202.

The type of the second transmission virtual network device is TUN, or the type of the second transmission virtual network device is TAP.

In addition, the VPN server 203 also determines available network transmission units based on real-time network transmission parameters, and returns the available network transmission units to the access device 202 in the form of first information.

304. The access device 202 receives the network transmission unit selection policy, the type of the second transmission virtual network device, and the VPN tunnel establishment resource.

If the VPN server 203 returns the available network transmission unit to the access device 202 in the form of the first information in step 302, the access device 202 also receives the first information.

In addition, the access device 202 also actively receives the network transmission unit selection policy. For example, when the access device 202 detects that the preset button is triggered by the user, the corresponding network transmission unit selection policy is acquired; or the access device 202 acquires the corresponding network transmission unit selection policy according to the real-time network transmission parameter.

305. The access device 202 creates a first transmission virtual network device of the same type as the second transmission virtual network device, and establishes one VPN tunnel according to the VPN tunnel establishment resource.

306. The access device 202 access device changes the next hop in the first routing rule to the first transmission virtual network device.

Through steps 301 to 306, a VPN tunnel is established between the access device 202 and the VPN server 203, and the first transmission virtual network device can simultaneously connect multiple network transmission units of the access device 202 according to the network transmission unit selection policy. The network transmission unit is selected to transmit data to the VPN server 203 via the VPN tunnel through the selected network transmission unit, and the second transmission virtual network device in the VPN server 203 routes the data to the second terminal 204. In this way, based on the VPN tunnel, each network transmission unit has independent network access capability, and each network transmission unit can use its independent network access capability to transmit data to the VPN server 203 through the VPN tunnel to implement network transmission. Flexible selection of units and rational use to improve data transmission quality.

After the VPN device establishes a VPN tunnel between the access device 202 and the VPN server 203, the first terminal 201 can select a network transmission unit from among multiple network transmission units that simultaneously connect the access device. The data is transmitted to the VPN server 203 through the VPN tunnel through the selected network transmission unit. The second transmission virtual network device in the VPN server 203 then routes the data to the second terminal 204. For details, refer to FIG. 4.

401. The access device 202 acquires uplink data.

The uplink data may be the first data in the first terminal 201.

There are various acquisition methods. If the access device 202 is located in the first terminal 201, the first data can be directly read from the first data storage location in the first terminal 201. If the access device 202 is located outside the first terminal 201, the first data sent by the first terminal 201 may be received.

402. The access device 202 obtains an uplink data packet from the first transmission virtual network device after the routing unit routes the uplink data packet to the first transmission virtual network device according to the modified first routing rule.

403. The access device 202 selects a network transmission unit according to the pre-acquired network transmission unit selection policy, and sets a source address IP of the VPN encapsulated uplink data packet to the selected network transmission when performing VPN encapsulation on the uplink data packet. Unit IP, destination IP is set to VPN The IP address of the server.

The source IP address of the encapsulated uplink data packet is the IP of the selected network transmission unit, and the destination IP address is the IP address of the VPN server.

The specific implementation process of the access device 202 selecting a network transmission unit according to the pre-acquired network transmission unit selection policy may be: the access device 202 selects one transmission unit from the available network transmission units indicated by the first information.

The specific implementation process of performing the VPN encapsulation of the uplink data packet may be: encapsulating the uplink data packet and performing VPN encapsulation.

The access device 202 selects a network transmission unit according to the network transmission unit selection policy, and transmits the first data to the VPN server 203 via the VPN tunnel through the selected network transmission unit.

In addition, the implementation of the data transmission through the VPN tunnel may be an existing implementation, for example, a UDP (User Datagram Protocol) transmission, and details are not described herein again.

404. The VPN server 203 determines, according to each network transmission unit corresponding to the access device 202, after receiving the uplink data packet of the access device 202, the VPN packet is decapsulated and sent to the second transmission virtual network device.

After the VPN server 203 performs VPN decapsulation on the data sent by the access device 202, the VPN server 203 sends the decapsulated data to the second transmission virtual network device according to the changed second routing rule.

If the data sent by the access device 202 is encrypted in step 403, the second transmission virtual network device decrypts the access device 202 to send data in the step, and the decrypted data is routed to the second terminal 204.

Through steps 401 to 404, the first terminal 201 sends data to the access device 202, and the access device 202 selects a network transmission unit according to the network transmission unit selection policy, and passes the data through the selected network transmission unit through the VPN tunnel. Transfer to the VPN server 203, and route the data to the second terminal 204 via the VPN server 203, not only implementing the first terminal 201 The purpose of transmitting the data to the second terminal 204 can also reasonably utilize the network transmission unit to improve the data transmission quality.

After the VPN tunnel is established between the access device 202 and the VPN server 203, the access device 202 shown in FIG. 4 can select the network transmission unit, and the access device 202 and the VPN server 203 can be implemented. The process of transmitting the data to the VPN server 203 between the established VPN tunnels, and the process of transmitting the data from the VPN tunnel established between the VPN server 203 and the access device 202 to the access device 202 may also be implemented. 5.

501. The VPN server 203 receives the data packet addressed to the access device 202.

The data packet can be the second data in the second terminal 204.

502. The VPN server 203 routes the data packet to the second transmission virtual network device according to the changed second routing rule, and selects a network transmission unit according to the network transmission unit selection policy.

Before the VPN server 203 selects a network transmission unit according to the network transmission unit selection policy, it is also required to determine each network transmission unit corresponding to the access device side.

503. The VPN server 203 performs VPN encapsulation on the data packet and sends the data packet to the public network.

The destination address of the encapsulated data packet is the IP address of the selected network transmission unit.

In order to ensure the security of the transmission of the data packet, the VPN server 203 may first encrypt the data packet, and then VPN encapsulate the encrypted data packet and send it to the public network.

504. After the access device 202 routes the second data to the first transmission virtual network device according to the changed first routing rule, the encrypted data is obtained from the first transmission virtual network device, and the encrypted data is decrypted. The data is sent to the routing module of access device 202.

The routing module can route the decrypted data to the first terminal 201.

Through the steps 501 to 504, the VPN server 203 transmits the data in the second terminal 204 to the access device 202, and the access device 202 routes to the first terminal 201, not only to transmit the data in the second terminal 204 to the first terminal. The purpose of the terminal 201 is also to flexibly select to transmit data. The way to rationally utilize the network transmission unit to improve the quality of data transmission.

The following takes the smart terminal to transmit the video data obtained by the instant messaging software to the VPN server corresponding to the instant messaging software as an example, and describes the implementation methods of the prior art and the present solution again.

If the access device is located in the smart terminal, the smart terminal includes both a wireless router and a 4G terminal, and the smart terminal currently transmits data through the 4G terminal.

In the prior art method, the smart terminal transmits all the video data acquired by the instant communication software to the VPN server corresponding to the instant communication software through the 4G terminal.

For the prior art method, if the amount of video data is large, and the bandwidth that the 4G terminal can provide cannot satisfy the video data requirement, the transmission time of the video data is prolonged, and the video data transmission quality is degraded.

According to the method provided by the present application, the intelligent terminal transmits the image data acquired by the instant communication software to the VPN server corresponding to the instant communication software through the 4G terminal according to the real-time situation of the VPN tunnel corresponding to the 4G terminal and the wireless router, and acquires the voice by the instant communication software. The data is transmitted to the VPN server corresponding to the instant messaging software through the wireless router.

For the method provided by the present application, although the amount of video data is large, the bandwidth that the 4G terminal can provide cannot satisfy the video data requirement, but the bandwidth that the 4G terminal can provide can meet the transmission requirement of the voice data by using the image data in the video data and The voice data is separated, the voice data is transmitted through the 4G terminal, and the image data is transmitted through the wireless router, which does not cause the transmission time of the video data to be prolonged, and the quality of the video data transmission is degraded.

In order to flexibly control the data transmission method provided by the present application, the access device 202 continues to determine whether the shutdown condition is satisfied after determining that the ON condition is satisfied, and terminates the data transmission if the access device 202 determines that the shutdown condition is satisfied. Process, disconnect the VPN tunnel, and restore the routing rules to the pre-modification.

For example, the access device 202 sends a VPN tunnel disconnection instruction to the VPN server 203, and restores the next hop in the changed first routing rule to the next hop before the change; the VPN server The 203 VPN server releases the VPN tunnel establishment resource according to the VPN tunnel disconnection command, and restores the next hop in the changed second routing rule to the next hop before the change.

The specific implementation manner of obtaining the preset shutdown control signal is: when the preset button is detected to be triggered by the user, the access device 202 determines that the shutdown condition is satisfied; or, according to the currently acquired network transmission unit selection policy, only one application is determined. The network transmission unit transmits, and the access device 202 determines that the shutdown condition is satisfied.

Beneficial effects:

In addition, the method provided by the present application can be flexibly controlled by the control signal.

It should be noted that, in the above embodiments, the network transmission unit is a wireless network terminal, but in practical applications, the network transmission unit may also be a wired network port.

Based on the same inventive concept, the present embodiment provides a data transmission apparatus, and the principle of solving the problem by the data transmission apparatus is similar to the method performed by the access apparatus in the data transmission method shown in FIG. 3 to FIG. 5, and thus the transmission is performed. For the implementation of the terminal, reference may be made to the implementation of the method performed by the access device in FIG. 3 to FIG. 5, and the repeated description is not repeated.

Referring to FIG. 6, the data transmission device includes:

The establishing unit 601 is configured to establish a VPN tunnel between the first transmission virtual network device on the access device side and the second transmission virtual network device on the VPN server end;

The modifying unit 602 is configured to modify the routing rule of the access device. The modified routing rule is configured to route the uplink data packet by the routing unit of the access device to the first transmission virtual network device, so that the source address IP is the network corresponding to the access device. The IP address of the transmission unit and the destination IP address of the VPN server are routed by the routing unit of the access device to the network transmission corresponding to the network transmission unit. The gateway of the unit;

The first obtaining unit 603 is configured to: after the routing unit of the access device routes the uplink data packet to the first transmission virtual network device according to the modified routing rule, obtain the uplink data packet from the first transmission virtual network device;

The selecting unit 604 is configured to select a network transmission unit according to the pre-acquired network transmission unit selection policy, and set the source address IP of the VPN encapsulated uplink data packet to the selected network transmission when performing VPN encapsulation on the uplink data packet. The IP address of the unit and the destination IP address are set to the IP address of the VPN server.

Optionally, the network transmission unit selection policy is a load balancing selection policy; or a bandwidth aggregation selection policy.

Optionally, the data transmission device further includes:

a second sending unit, configured to send type information of each network transmission unit to a VPN server;

a first receiving unit, configured to receive first information returned by the VPN server; the first information is used to indicate an available network transmission unit;

The selecting unit 604 includes:

A transmission unit is selected from available network transmission units indicated by the first information.

Optionally, the data transmission device further includes:

The second receiving unit is configured to receive a network transmission unit selection policy returned by the VPN server.

Optionally, the selecting unit 604 is configured to encrypt the uplink data packet and perform VPN encapsulation.

Optionally, the data transmission device further includes:

a second acquiring unit, configured to obtain encrypted downlink data from the first transmission virtual network device;

a decryption unit for decrypting encrypted downlink data;

And a third sending unit, configured to send the decrypted downlink data to a routing module of the access device.

Optionally, the establishing unit 601 is configured to establish a VPN tunnel when the opening condition is met;

Opening conditions include:

Monitoring that the preset button is triggered by the user; and/or,

Real-time network transmission parameters do not meet the transmission requirements.

Optionally, the data transmission device further includes:

The disconnect unit is used to determine that the shutdown condition is met, disconnect the VPN tunnel, and restore the routing rule to the pre-modification.

Optionally, the data transmission device further includes:

a determining unit, configured to determine that the closing condition is satisfied after detecting that the preset button is triggered by the user; or determining, according to the currently acquired network transmission unit selection policy, that only one network transmission unit is used for transmission, and determining that the closing condition is satisfied.

Optionally, the data transmission device further includes:

The third acquiring unit is configured to: when the preset button is triggered by the user, obtain a corresponding network transmission unit selection policy; or obtain a corresponding network transmission unit selection policy according to the real-time network transmission parameter.

Beneficial effects:

The data transmission apparatus provided by the embodiment of the present invention may select a network transmission unit according to a network transmission unit selection policy, and transmit the uplink data through the selected network transmission unit, thereby flexibly selecting a network transmission unit according to the transmitted data, and thereby rationally utilizing the network transmission. unit.

Based on the same inventive concept, the present embodiment provides an electronic device. Referring to FIG. 7, the electronic device includes a memory 701, one or more processors 702, and one or more modules 703, the one or more modules 703. Stored in the memory 701 and configured to be executed by the one or more processors 702, the one or more modules 703 including methods for performing the operations performed by the access devices of Figures 3-5 The instructions in each step.

Beneficial effects:

The electronic device provided by the embodiment of the present invention may select a network transmission unit according to a network transmission unit selection policy, and transmit the uplink data through the selected network transmission unit to implement the The transmitted data flexibly selects the network transmission unit to make reasonable use of the network transmission unit.

Based on the same inventive concept, the present embodiment provides a computer program product for use in conjunction with an electronic device including a display, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer The program mechanism includes instructions for performing the various steps in the method performed by the access device of Figures 3 through 5.

Beneficial effects:

The computer program product provided by the embodiment of the present invention may select a network transmission unit according to a network transmission unit selection policy, and transmit the uplink data through the selected network transmission unit, thereby flexibly selecting a network transmission unit according to the transmitted data, thereby appropriately utilizing the network transmission. unit.

Based on the same inventive concept, the present embodiment provides a data transmission apparatus. The principle of solving the problem by the data transmission apparatus is similar to the method performed by the VPN server in the data transmission method shown in FIG. 3 to FIG. 5, and thus the transmission end is For the implementation, refer to the implementation of the method performed by the VPN server in FIG. 3 to FIG. 5, and the repeated description is not repeated.

Referring to FIG. 8, the data transmission device includes:

The establishing unit 801 is configured to establish a VPN tunnel between the first transmission virtual network device on the access device side and the second transmission virtual network device on the VPN server end;

a determining unit 802, configured to determine each network transmission unit corresponding to the access device side;

The processing unit 803 is configured to perform VPN decapsulation on the data packet after receiving the uplink data packet of the access device, and send the data packet to the second transmission virtual network device.

Optionally, the data transmission device further includes:

The obtaining unit is configured to obtain a corresponding network transmission unit selection policy according to the real-time network transmission parameter.

Beneficial effects:

The data transmission apparatus provided by the embodiment of the present invention selects a policy according to a network transmission unit selection policy. Selecting a network transmission unit to receive data, and flexibly selecting a network transmission unit according to the transmitted data, thereby rationally utilizing the network transmission unit.

Based on the same inventive concept, the present embodiment provides an electronic device. Referring to FIG. 9, the electronic device includes a memory 901, one or more processors 902, and one or more modules 903, the one or more modules 903 Stored in the memory 901 and configured to be executed by the one or more processors 902, the one or more modules 903 comprising methods for performing the VPN server of Figures 3 through 5 Instructions for each step.

Beneficial effects:

The electronic device provided by the embodiment of the present invention selects a network transmission unit to receive data according to a network transmission unit selection policy, and implements flexible selection of a network transmission unit according to the transmitted data, thereby appropriately utilizing the network transmission unit.

Based on the same inventive concept, the present embodiment provides a computer program product for use in conjunction with an electronic device including a display, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer The program mechanism includes instructions for performing the various steps in the method performed by the VPN server of Figures 3 through 5.

Beneficial effects:

The computer program product provided by the embodiment of the present invention selects a network transmission unit to receive data according to a network transmission unit selection policy, and implements flexible selection of a network transmission unit according to the transmitted data, thereby appropriately utilizing the network transmission unit.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the present invention may employ computer usable storage media (including but not included) in one or more of the computer usable program code embodied therein. It is limited to the form of a computer program product implemented on a disk storage, a CD-ROM, an optical storage, or the like.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

While the preferred embodiment of the invention has been described, it will be understood that Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and the modifications and

Claims

A data transmission method, characterized in that the method is applied to an access device, the method comprising:

Establishing a VPN tunnel between the first transmission virtual network device on the access device side and the second transmission virtual network device on the VPN server side, and modifying a routing rule of the access device; the modified routing rule is such that the uplink data packet is accessed by the access device. The routing unit routes to the first transmission virtual network device, so that the source address IP is the IP address of the network transmission unit corresponding to the access device, and the data packet whose destination IP is the VPN server is routed to the network transmission unit by the routing unit of the access device. a gateway of the corresponding network transmission unit;

After the routing unit of the access device routes the uplink data packet to the first transmission virtual network device according to the modified routing rule, acquiring the uplink data packet from the first transmission virtual network device;

Selecting a network transmission unit according to the pre-acquired network transmission unit selection policy, and when performing VPN encapsulation on the uplink data packet, setting the source address IP of the VPN encapsulated uplink data packet to the IP of the selected network transmission unit, destination IP Set to the IP address of the VPN server.
The method according to claim 1, wherein the network transmission unit selection policy is a load balancing selection policy; or a bandwidth aggregation selection policy.
The method of claim 1 further comprising:

Sending type information of each network transmission unit to the VPN server;

Receiving first information returned by the VPN server; the first information is used to indicate an available network transmission unit;

The selecting a network transmission unit according to the pre-acquired network transmission unit selection policy includes:

A transmission unit is selected from available network transmission units indicated by the first information.
The method of claim 1 further comprising: receiving the location The network transmission unit selection policy returned by the VPN server.
The method according to claim 1, wherein the performing the VPN encapsulation of the uplink data packet comprises: encrypting the uplink data packet and performing VPN encapsulation.
The method of claim 1 further comprising:

Obtaining encrypted downlink data from the first transmission virtual network device, decrypting the encrypted downlink data, and transmitting the decrypted downlink data to a routing module of the access device.
The method according to claim 1, wherein the establishing a VPN tunnel between the first transmission virtual network device on the access device side and the second transmission virtual network device on the VPN server side means: determining that the opening condition is When satisfied, the VPN tunnel is established;

The opening conditions include:

Monitoring that the preset button is triggered by the user; and/or,

Real-time network transmission parameters do not meet the transmission requirements.
The method according to claim 1, wherein after the VPN tunnel is established, the method further includes:

After determining that the shutdown condition is met, disconnect the VPN tunnel and restore the routing rules to the pre-modification.
The method according to claim 8, wherein the method further comprises: determining that the shutdown condition is satisfied after detecting that the preset button is triggered by the user; or determining that the network transmission unit selection policy is only applicable according to the currently acquired network transmission unit selection policy; A network transmission unit transmits and determines that the shutdown condition is satisfied.
The method according to claim 1, further comprising: when detecting that the preset button is triggered by the user, acquiring a corresponding network transmission unit selection policy; or acquiring a corresponding network transmission unit selection strategy according to the real-time network transmission parameter; .
A data transmission device, comprising:

Establishing a unit for establishing a first transmission virtual network device and a VPN service on the access device side The second transmission of the VPN tunnel between the virtual network devices;

a modifying unit, configured to modify a routing rule of the access device; the modified routing rule causes the uplink data packet to be routed by the routing unit of the access device to the first transmission virtual network device, so that the source address IP is a network transmission corresponding to the access device The IP address of the unit and the destination IP address of the VPN server are routed by the routing unit of the access device to the gateway of the network transmission unit corresponding to the network transmission unit;

a first acquiring unit, configured to acquire an uplink data packet from the first transmission virtual network device after the routing unit of the access device routes the uplink data packet to the first transmission virtual network device according to the modified routing rule ;

a selecting unit, configured to select a network transmission unit according to a pre-acquired network transmission unit selection policy; and when performing VPN encapsulation on the uplink data packet, setting a source address IP of the VPN encapsulated uplink data packet to the selected network transmission unit IP, destination IP is set to the IP address of the VPN server.
The data transmission apparatus according to claim 11, wherein the network transmission unit selection policy is a load balancing selection policy; or a bandwidth aggregation selection policy.
The data transmission device according to claim 11, wherein the data transmission device further comprises:

a second sending unit, configured to send type information of each network transmission unit to a VPN server;

a first receiving unit, configured to receive first information returned by the VPN server; the first information is used to indicate an available network transmission unit;

The selecting unit includes:

A transmission unit is selected from available network transmission units indicated by the first information.
The data transmission device according to claim 11, wherein the data transmission device further comprises:

a second receiving unit, configured to receive a network transmission unit selection policy returned by the VPN server slightly.
The data transmission device according to claim 11, wherein the selection unit is configured to encrypt the uplink data packet and perform VPN encapsulation.
The data transmission device according to claim 11, wherein the data transmission device further comprises:

a second acquiring unit, configured to obtain encrypted downlink data from the first transmission virtual network device;

a decryption unit, configured to decrypt the encrypted downlink data;

And a third sending unit, configured to send the decrypted downlink data to a routing module of the access device.
The data transmission device according to claim 11, wherein the establishing unit is configured to establish the VPN tunnel when the opening condition is satisfied;

The opening conditions include:

Monitoring that the preset button is triggered by the user; and/or,

Real-time network transmission parameters do not meet the transmission requirements.
The data transmission device according to claim 11, wherein the data transmission device further comprises:

The disconnecting unit is configured to disconnect the VPN tunnel after the closing condition is satisfied, and restore the routing rule to the pre-modification.
The data transmission device according to claim 18, wherein the data transmission device further comprises:

a determining unit, configured to determine that the closing condition is satisfied after detecting that the preset button is triggered by the user; or determining, according to the currently acquired network transmission unit selection policy, that only one network transmission unit is used for transmission, and determining that the closing condition is satisfied.
The data transmission device according to claim 11, wherein the data transmission device further comprises:

The third acquiring unit is configured to: when the preset button is triggered by the user, obtain a corresponding network transmission unit selection policy; or obtain a corresponding network transmission unit selection policy according to the real-time network transmission parameter.
An electronic device, comprising:

a memory, one or more processors; and one or more modules, the one or more modules being stored in the memory and configured to be executed by the one or more processors, the one or The plurality of modules includes instructions for performing the various steps of the method of any of claims 1-10.
A computer program product for use with an electronic device including a display, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer program mechanism comprising for performing claim 1 The instructions of the various steps in any of the methods described in 10.
A data transmission method is characterized in that it is applied to a VPN server, and the method includes:

Establishing a VPN tunnel between the first transmission virtual network device on the access device side and the second transmission virtual network device on the VPN server side;

Determining respective network transmission units corresponding to the access device side;

After receiving the uplink data packet of the access device, the data packet is VPN decapsulated and sent to the second transmission virtual network device.
The method according to claim 23, wherein the method further comprises: acquiring a corresponding network transmission unit selection policy according to the real-time network transmission parameter.
A data transmission device, comprising:

a establishing unit, configured to establish a VPN tunnel between the first transmission virtual network device on the access device side and the second transmission virtual network device on the VPN server end;

a determining unit, configured to determine each network transmission unit corresponding to the access device side;

The processing unit is configured to perform VPN decapsulation on the data packet after receiving the uplink data packet of the access device, and send the data packet to the second transmission virtual network device.
The data transmission device according to claim 25, wherein the VPN server further comprises:

The obtaining unit is configured to obtain a corresponding network transmission unit selection policy according to the real-time network transmission parameter.
An electronic device, comprising:

a memory, one or more processors; and one or more modules, the one or more modules being stored in the memory and configured to be executed by the one or more processors, the one or The plurality of modules includes instructions for performing the various steps of the method of claim 23 or 24.
A computer program product for use with an electronic device comprising a display, the computer program product comprising a computer readable storage medium and a computer program mechanism embedded therein, the computer program mechanism comprising for performing claim 23 or 24 instructions for each step in the method.