CN110636149A - Remote access method, device, router and storage medium - Google Patents

Abstract

The present invention provides a remote access method, including: obtaining a first identification of a first device, and obtaining a second identification of a second device; according to the first identification and the second identification, judging whether the first device and the second device are in the same In a virtual network; if the first device and the second device are in the same virtual network, determine the target virtual network address of the second device; according to the network address resource conversion type detection algorithm, determine the network address of the target route to which the second device belongs Whether the type of resource translation is cone network address resource translation; if the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, according to the target virtual network address, through the peer-to-peer network transmission method, The access request of the first device is sent to the second device. The invention also provides a remote access device, a router and a storage medium. The present invention can utilize simple equipment to realize remote access.

Description

Remote access method, device, router and storage medium

technical field

The invention relates to the technical field of network transmission, in particular to a remote access method, device, router and storage medium.

Background technique

At present, when performing remote access, it is necessary to build a network structure with higher requirements and use high-end equipment to build a hardware environment. Based on the above hardware environment, enterprises can conduct remote access to enjoy Internet technology services.

However, for ordinary users, the network structure used by ordinary users is usually relatively simple, and the Internet access equipment is also low-end. Ordinary users cannot build a remote access hardware environment based on a simpler network structure and lower-end Internet access equipment. Therefore, when ordinary users are in different places, they cannot perform remote access.

Therefore, how to use simple devices for remote access is a technical problem that needs to be solved urgently.

Contents of the invention

In view of the above, it is necessary to provide a remote access method, device, router and storage medium, which can use simple equipment for remote access.

A first aspect of the present invention provides a remote access method, the method comprising:

When the first device needs to perform remote access to the second device, obtain the first identification of the first device, and obtain the second identification of the second device;

judging whether the first device and the second device are in the same virtual network according to the first identifier and the second identifier;

If the first device and the second device are in the same virtual network, determine a target virtual network address of the second device;

According to the network address resource translation type detection algorithm, it is judged whether the type of network address resource translation of the target route to which the second device belongs is cone-shaped network address resource translation;

If the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, according to the target virtual network address, transmit the access request of the first device through a peer-to-peer network sent to the second device, wherein the access request carries the target virtual network address.

In a possible implementation manner, the sending the access request of the first device to the second device through peer-to-peer network transmission according to the target virtual network address includes:

Obtaining the first external network address of the second device from the first server according to the target virtual network address;

According to the first external network address, sending the access request of the first device to a target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, sending the access request to the second device.

In a possible implementation, the method further includes:

If the NAT resource translation type of the target route to which the second device belongs is not cone-shaped NAT resource translation, according to the target virtual network address, send the access request of the first device through server forwarding to the second device.

In a possible implementation manner, the sending the access request of the first device to the second device through server forwarding according to the target virtual network address includes:

mapping the source address of the access request of the first device to the second external network address of the second server;

determining a third external network address of the second device from a plurality of external network addresses stored in the second server according to the target virtual network address;

Send the access request to the second device according to the second external network address and the third external network address.

In a possible implementation, the method further includes:

If the first device and the second device are not in the same virtual network, add the first device and the second device to a target virtual network according to the first identifier and the second identifier middle;

Selecting a first virtual network address from the virtual address pool of the target virtual network and assigning the first virtual network address to the first device, and selecting from the virtual network address pool of the target virtual network a second virtual network address and assigning the second virtual network address to the second device.

In a possible implementation manner, the second server is configured to store identification information, virtual network addresses, external network addresses, and configuration information of all devices in the virtual network.

A second aspect of the present invention provides a remote access device, the device comprising:

An obtaining module, configured to obtain a first identification of the first device and a second identification of the second device when the first device needs to perform remote access to the second device;

A judging module, configured to judge whether the first device and the second device are in the same virtual network according to the first identifier and the second identifier;

A determination module, configured to determine a target virtual network address of the second device if the first device and the second device are in the same virtual network;

The judging module is further configured to judge whether the NAT resource translation type of the target route to which the second device belongs is cone-shaped NAT resource translation according to the NAT resource translation type detection algorithm;

The sending module is configured to: if the type of network address resource translation of the target route to which the second device belongs is cone-shaped network address resource translation, according to the target virtual network address, transmit the second An access request of a device is sent to the second device, wherein the access request carries the target virtual network address.

A third aspect of the present invention provides a router, which includes a processor and a memory, and the processor is configured to implement the remote access method when executing a computer program stored in the memory.

A fourth aspect of the present invention provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the remote access method is implemented.

Based on the above technical solution, in the present invention, when the first device needs to remotely access the second device, the first identification of the first device is obtained, and the second identification of the second device is acquired; according to the first An identifier and the second identifier, judging whether the first device and the second device are in the same virtual network; if the first device and the second device are in the same virtual network, determine the The target virtual network address of the second device; according to the network address resource translation type detection algorithm, determine whether the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation; if the second The type of network address resource translation of the target route to which the device belongs is cone-shaped network address resource translation. According to the target virtual network address, the access request of the first device is sent to the second device through peer-to-peer network transmission. The second device, wherein the access request carries the target virtual network address. It can be seen that in the present invention, each device in the same virtual network can directly communicate with each other through the virtual network address, so as to realize remote access of simple devices, provide Internet technology services for ordinary users, and transmit information through a peer-to-peer network. Transmission in the same way does not need to consume the bandwidth of intermediate server nodes, which saves bandwidth resources.

Description of drawings

Fig. 1 is a flowchart of a preferred embodiment of a remote access method disclosed in the present invention.

Fig. 2 is a functional block diagram of a preferred embodiment of a remote access device disclosed in the present invention.

Fig. 3 is a schematic structural diagram of a router in a preferred embodiment of the present invention for realizing the remote access method.

Detailed ways

In order to more clearly understand the above objects, features and advantages of the present invention, the present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that, in the case of no conflict, the embodiments of the present invention and the features in the embodiments can be combined with each other.

Apparently, the described embodiments are only some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the technical field of the invention. The terms used herein in the description of the present invention are for the purpose of describing specific embodiments only, and are not intended to limit the present invention.

The remote access method of the embodiment of the present invention is applied in a router, and can also be applied in a hardware environment composed of a router and a server connected to the router through a network, and is jointly executed by the server and the router. Networks include, but are not limited to: Wide Area Networks, Metropolitan Area Networks, or Local Area Networks.

Please refer to FIG. 1 , which is a flowchart of a preferred embodiment of a remote access method disclosed in the present invention. Wherein, according to different requirements, the order of the steps in the flow chart can be changed, and some steps can be omitted.

S11. When the first device needs to remotely access the second device, the router acquires the first identifier of the first device, and acquires the second identifier of the second device.

Wherein, the first device and the second device may be Internet access devices connected to a router, or may be mobile terminals installed with a router client, wherein the router client is used to simulate and implement functions of a router.

Wherein, the first identifier may be a device serial number of the first device, which is used to identify the identity of the first device.

Wherein, the first device and the second device may be devices located in different places and connected to different routers respectively.

In this embodiment of the present invention, the first identifier of the first device and the second identifier of the second device may be pre-stored in the server. If the first device wants to access the second device, the first The device will generate an access request to be sent to the second device, that is, a data packet, and the data packet will contain relevant information of the second device, such as network address information, and the router may, based on the relevant information of the second device, Obtain the second identifier of the second device from the server, because the first device is connected to the router, therefore, the router can obtain the first identifier of the first device, or obtain the first identifier from the server. The first identifier of the device.

S12. The router judges whether the first device and the second device are in the same virtual network according to the first identifier and the second identifier. If yes, execute step S13. If not, end this process.

In this embodiment of the present invention, according to the first identifier and the second identifier, the virtual network to which the first device and the second device respectively belong can be queried from the server, so as to determine whether the first device and the second device belong to each other. Whether the second device is in the same virtual network, if the router stores a member list of the virtual network, it can be determined whether the member list of the virtual network exists according to the first identifier and the second identifier For the first device and the second device, if the first device and the second device exist in the member list of the virtual network, determine that the first device and the second device are in the same virtual network If the first device or the second device does not exist in the member list of the virtual network, it is determined that the first device and the second device are not in the same virtual network.

S13. The router determines the target virtual network address of the second device.

Wherein, the virtual network address may be a network address allocated to device members forming the virtual network from a network address pool of the same network segment.

As an optional implementation, the method also includes:

If the first device and the second device are not in the same virtual network, add the first device and the second device to a target virtual network according to the first identifier and the second identifier middle;

Selecting a first virtual network address from the virtual address pool of the target virtual network and assigning the first virtual network address to the first device, and selecting from the virtual network address pool of the target virtual network a second virtual network address and assigning the second virtual network address to the second device.

In this optional implementation manner, if the first device and the second device are not in the same virtual network, the first device and the The second device is added to the target virtual network, and the target virtual network will generate a plurality of virtual network addresses whose network segments are consistent with the target network segment according to the pre-configured target network segment, that is, a virtual network address pool, which can be From the virtual network address pool of the target virtual network, randomly select a first virtual network address that has not been used, and assign the first virtual network address to the first device, and randomly select a virtual network address that has not been used yet. using a second virtual network address, and assigning the second virtual network address to the second device.

Optionally, the first identifier of the first device, the first virtual network address, the second identifier of the second device, and the second virtual network address may be stored in a server, and the server may also storing relevant information such as the external network address used by the first device and the external network address used by the second device.

S14. According to the network address resource translation type detection algorithm, the router judges whether the network address resource translation type of the target route to which the second device belongs is cone-shaped network address resource translation. If yes, perform step S15, and if not, end this process .

Wherein, the network address resource translation (Network Address Translation, NAT) type detection algorithm may be used to detect the type of NAT configured by the router.

Wherein, the types of the NAT may include full cone NAT, restricted cone NAT, port restricted cone NAT, and symmetric NAT.

Wherein, the cone NAT may include the full cone NAT, the restricted cone NAT, and the port restricted cone NAT.

S15. The router sends the access request of the first device to the second device through peer-to-peer network transmission according to the target virtual network address, wherein the access request carries the target virtual network address .

Wherein, the peer-to-peer network (Peer-to-peer networking, P2P) is a distributed application architecture that distributes tasks and workloads among peers (Peers), and is formed by a peer-to-peer computing model at the application layer. A form of networking or networking. In the P2P network environment, multiple computers connected to each other are in an equal position. Each computer has the same function, and there is no master-slave distinction. One computer can be used as a server and set shared resources for the network. Used by other computers, it can also be used as a workstation. Generally speaking, the entire network does not rely on a dedicated centralized server, nor does it have a dedicated workstation. Each computer in the network can not only act as a requester of network services, but also respond to requests from other computers and provide resources, services and content.

In the embodiment of the present invention, if the NAT resource translation type of the destination route to which the second device belongs is cone-shaped NAT resource translation, the external network address and port number stored in the server by the second device can be used by other devices, That is, data packets sent to the second device by other devices with different source addresses using the external network address stored in the server by the second device will not be intercepted by the destination route to which the second device belongs, so that The first device can directly communicate with the second device through a peer-to-peer network transmission without processing by other servers, thus saving bandwidth resources of other servers.

Specifically, the sending the access request of the first device to the second device through peer-to-peer network transmission according to the target virtual network address includes:

Obtaining the first external network address of the second device from the first server according to the target virtual network address;

According to the first external network address, sending the access request of the first device to a target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, sending the access request to the second device.

In this optional implementation manner, when adding the second device to the virtual network, the second device will communicate with the first server, and the first server will store the second The external network address used by the device and the target virtual network address of the second device. Therefore, the first external network address of the second device can be queried and obtained from the first service according to the target virtual network address. After obtaining the first external network address, the router may map the destination address of the data packet with the access request sent by the first device to the second device to the first external network address, so that the access request can sending to the target route to which the second device belongs, wherein the target route sends the access request to the second device according to the target virtual network address carried in the access request.

Wherein, the first server is used to store identification information, virtual network address, external network address and configuration information of all devices in the virtual network.

Optionally, all devices in the virtual network will regularly communicate with the first server, so that the first server can regularly save or update identification information, virtual network addresses, external network addresses and configuration information of all devices.

As an optional implementation, the method also includes:

If the NAT resource translation type of the target route to which the second device belongs is not cone-shaped NAT resource translation, according to the target virtual network address, send the access request of the first device through server forwarding to the second device.

In this optional implementation manner, if the type of NAT resource translation of the target route to which the second device belongs is not cone-shaped NAT, that is, the second device communicates with a device with a different source address In this case, the external network address used by the second device is different, that is, the external network address of the second device stored in the server can only be used by the server to communicate with the second device, if other devices use The external network address of the second device stored in the server is used to communicate with the device, because the source address used by other devices is different from the source address of the server, and all access requests sent by other devices to the second device ( data packet) will be intercepted by the target route to which the second device belongs, that is, other devices cannot directly communicate with the second device. Therefore, it is necessary to send the access request of the first device to the second device through server forwarding.

Specifically, the sending the access request of the first device to the second device through server forwarding according to the target virtual network address includes:

mapping the source address of the access request of the first device to the second external network address of the second server;

determining a third external network address of the second device from a plurality of external network addresses stored in the second server according to the target virtual network address;

Send the access request to the second device according to the second external network address and the third external network address.

In this optional implementation manner, the access request of the first device may be sent to the second server, and the second server may map the source address of the access request to the first address of the second server. Two external network addresses, and according to the target virtual network address, determine the third external network address of the second device from the multiple external network addresses stored in the second server, and the purpose of the access request can be The address is mapped to the third external network address, so that when the access request is accessed to the second device by using the third external network address stored in the second server by the second device, it will not be blocked intercepting, thereby ensuring that the access request can be sent to the second device.

Wherein, the second server is used to store identification information, virtual network address, external network address and configuration information of all devices in the virtual network.

Optionally, all devices in the virtual network will regularly communicate with the second server, so that the first server can regularly save or update identification information, virtual network addresses, external network addresses and configuration information of all devices.

In the method flow described in FIG. 1, when the first device needs to remotely access the second device, the first identification of the first device is obtained, and the second identification of the second device is obtained; according to the The first identifier and the second identifier determine whether the first device and the second device are in the same virtual network; if the first device and the second device are in the same virtual network, determine The target virtual network address of the second device; according to the network address resource translation type detection algorithm, determine whether the type of network address resource translation of the target route to which the second device belongs is cone-shaped network address resource translation; if the first The type of network address resource translation of the target route to which the second device belongs is cone network address resource translation. According to the target virtual network address, the access request of the first device is sent to the The second device, wherein the access request carries the target virtual network address. It can be seen that each device in the same virtual network can directly communicate with each other through the virtual network address, so as to realize remote access of simple devices, provide Internet technical services for ordinary users, and transmit through peer-to-peer network transmission. It does not need to consume the bandwidth of intermediate server nodes, saving bandwidth resources.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. For those of ordinary skill in the art, without departing from the inventive concept of the present invention, it is also possible to make Improvements, but these all belong to the protection scope of the present invention.

Please refer to FIG. 2 . FIG. 2 is a functional block diagram of a preferred embodiment of a remote access device disclosed in the present invention.

In some embodiments, the remote access device runs in a router. The remote access device may include multiple functional modules composed of program code segments. The program codes of the various program segments in the remote access device may be stored in a memory and executed by at least one processor to perform some or all of the steps in the remote access method described in FIG. 1 .

In this embodiment, the remote access device can be divided into multiple functional modules according to the functions it performs. The functional modules may include: an acquiring module 201 , a judging module 202 , a determining module 203 and a sending module 204 . The module referred to in the present invention refers to a series of computer program segments that can be executed by at least one processor and can complete fixed functions, and are stored in memory.

The obtaining module 201 is configured to obtain a first identification of the first device and obtain a second identification of the second device when the first device needs to remotely access the second device.

Wherein, the first device and the second device may be Internet access devices connected to a router, or may be mobile terminals installed with a router client, wherein the router client is used to simulate and implement functions of a router.

Wherein, the first identifier may be a device serial number of the first device, which is used to identify the identity of the first device.

Wherein, the first device and the second device may be devices located in different places and connected to different routers respectively.

In this embodiment of the present invention, the first identifier of the first device and the second identifier of the second device may be pre-stored in the server. If the first device wants to access the second device, the first The device will generate an access request to be sent to the second device, that is, a data packet, and the data packet will contain relevant information of the second device, such as network address information, and the router may, based on the relevant information of the second device, Obtain the second identifier of the second device from the server, because the first device is connected to the router, therefore, the router can obtain the first identifier of the first device, or obtain the first identifier from the server. The first identifier of the device.

A judging module 202, configured to judge whether the first device and the second device are in the same virtual network according to the first identifier and the second identifier.

In this embodiment of the present invention, according to the first identifier and the second identifier, the virtual network to which the first device and the second device respectively belong can be queried from the server, so as to determine whether the first device and the second device belong to each other. Whether the second device is in the same virtual network, if the router stores a member list of the virtual network, it can be determined whether the member list of the virtual network exists according to the first identifier and the second identifier For the first device and the second device, if the first device and the second device exist in the member list of the virtual network, determine that the first device and the second device are in the same virtual network If the first device or the second device does not exist in the member list of the virtual network, it is determined that the first device and the second device are not in the same virtual network.

A determining module 203, configured to determine a target virtual network address of the second device if the first device and the second device are in the same virtual network.

Wherein, the virtual network address may be a network address allocated to device members forming the virtual network from a network address pool of the same network segment.

The judging module 202 is further configured to judge whether the NAT resource translation type of the target route to which the second device belongs is cone-shaped NAT resource translation according to the NAT resource translation type detection algorithm.

Wherein, the network address resource translation (Network Address Translation, NAT) type detection algorithm may be used to detect the type of NAT configured by the router.

Wherein, the types of the NAT may include full cone NAT, restricted cone NAT, port restricted cone NAT, and symmetric NAT.

Wherein, the cone NAT may include the full cone NAT, the restricted cone NAT, and the port restricted cone NAT.

The sending module 204 is configured to: if the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, according to the target virtual network address, transmit the said The access request of the first device is sent to the second device, where the access request carries the target virtual network address.

Wherein, the peer-to-peer network (Peer-to-peer networking, P2P) is a distributed application architecture that distributes tasks and workloads among peers (Peers), and is formed by a peer-to-peer computing model at the application layer. A form of networking or networking. In the P2P network environment, multiple computers connected to each other are in an equal position. Each computer has the same function, and there is no master-slave distinction. One computer can be used as a server and set shared resources for the network. It is used by other computers and can also be used as a workstation. Generally speaking, the entire network does not rely on a dedicated centralized server, nor does it have a dedicated workstation. Each computer in the network can not only act as a requester of network services, but also respond to requests from other computers and provide resources, services and content.

In the embodiment of the present invention, if the NAT resource translation type of the destination route to which the second device belongs is cone-shaped NAT resource translation, the external network address and port number stored in the server by the second device can be used by other devices, That is, data packets sent to the second device by other devices with different source addresses using the external network address stored in the server by the second device will not be intercepted by the route to which the second device belongs, so that Through peer-to-peer network transmission, the first device communicates directly with the second device without processing by other servers, thus saving bandwidth resources of other servers.

As an optional implementation manner, the remote access device may also include:

Adding a module, configured to add the first device and the second device according to the first identifier and the second identifier if the first device and the second device are not in the same virtual network Add to the target virtual network;

An allocation module, configured to select a first virtual network address from a virtual address pool of the target virtual network and allocate the first virtual network address to the first device, and select a first virtual network address from the virtual network of the target virtual network From the address pool, select a second virtual network address and assign the second virtual network address to the second device.

In this optional implementation manner, if the first device and the second device are not in the same virtual network, the first device and the The second device is added to the target virtual network, and the target virtual network will generate a plurality of virtual network addresses whose network segments are consistent with the target network segment according to the pre-configured target network segment, that is, a virtual network address pool, which can be From the virtual network address pool of the target virtual network, randomly select a first virtual network address that has not been used, and assign the first virtual network address to the first device, and randomly select a virtual network address that has not been used yet. using a second virtual network address, and assigning the second virtual network address to the second device.

Optionally, the first identifier of the first device, the first virtual network address, the second identifier of the second device, and the second virtual network address may be stored in a server, and the server may also storing relevant information such as the external network address used by the first device and the external network address used by the second device.

As an optional implementation manner, the sending module 204 sends the access request of the first device to the second device through peer-to-peer network transmission according to the target virtual network address as follows: :

Obtaining the first external network address of the second device from the first server according to the target virtual network address;

According to the first external network address, sending the access request of the first device to a target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, sending the access request to the second device.

In this optional implementation manner, when adding the second device to the virtual network, the second device will communicate with the first server, and the first server will store the second The external network address used by the device and the target virtual network address of the second device. Therefore, the first external network address of the second device can be queried and obtained from the first service according to the target virtual network address. After obtaining the first external network address, the router may map the destination address of the data packet with the access request sent by the first device to the second device to the first external network address, so that the access request can sending to the target route to which the second device belongs, wherein the target route sends the access request to the second device according to the target virtual network address carried in the access request.

Wherein, the first server is used to store identification information, virtual network address, external network address and configuration information of all devices in the virtual network.

Optionally, all devices in the virtual network will regularly communicate with the first server, so that the first server can regularly save or update identification information, virtual network addresses, external network addresses and configuration information of all devices.

As an optional implementation manner, the sending module 204 is further configured to: if the type of NAT resource translation of the target route to which the second device belongs is not cone NAT resource translation, according to the target virtual network address, and send the access request of the first device to the second device through forwarding by the server.

In this optional implementation manner, if the type of NAT resource translation of the target route to which the second device belongs is not cone-shaped NAT, that is, the second device communicates with a device with a different source address In this case, the external network address used by the second device is different, that is, the external network address of the second device stored in the server can only be used by the server to communicate with the second device, if other devices use The external network address of the second device stored in the server is used to communicate with the device, because the source address used by other devices is different from the source address of the server, and all access requests sent by other devices to the second device ( data packet) will be intercepted by the target route to which the second device belongs, that is, other devices cannot directly communicate with the second device. Therefore, it is necessary to send the access request of the first device to the second device through server forwarding.

As an optional implementation manner, the sending module 204 sends the access request of the first device to the second device through forwarding by a server according to the target virtual network address as follows:

mapping the source address of the access request of the first device to the second external network address of the second server;

determining a third external network address of the second device from a plurality of external network addresses stored in the second server according to the target virtual network address;

Send the access request to the second device according to the second external network address and the third external network address.

In this optional implementation manner, the access request of the first device may be sent to the second server, and the second server may map the source address of the access request to the first address of the second server. Two external network addresses, and according to the target virtual network address, determine the third external network address of the second device from the multiple external network addresses stored in the second server, and the purpose of the access request can be The address is mapped to the third external network address, so that when the access request is accessed to the second device by using the third external network address stored in the second server by the second device, it will not be blocked intercepting, thereby ensuring that the access request can be sent to the second device.

Wherein, the second server is used to store identification information, virtual network address, external network address and configuration information of all devices in the virtual network.

Optionally, all devices in the virtual network will regularly communicate with the second server, so that the first server can regularly save or update identification information, virtual network addresses, external network addresses and configuration information of all devices.

In the remote access device described in FIG. 2 , in the present invention, when the first device needs to remotely access the second device, the first identification of the first device is obtained, and the second identification of the second device is obtained. Identification; according to the first identification and the second identification, determine whether the first device and the second device are in the same virtual network; if the first device and the second device are in the same In the virtual network, determine the target virtual network address of the second device; according to the network address resource translation type detection algorithm, determine whether the type of network address resource translation of the target route to which the second device belongs is cone-shaped network address resource translation ; If the type of network address resource translation of the target route to which the second device belongs is cone-shaped network address resource translation, according to the target virtual network address, through peer-to-peer network transmission, the access of the first device The request is sent to the second device, where the access request carries the target virtual network address. It can be seen that each device in the same virtual network can directly communicate with each other through the virtual network address, so as to realize remote access of simple devices, provide Internet technical services for ordinary users, and transmit through peer-to-peer network transmission. It does not need to consume the bandwidth of intermediate server nodes, saving bandwidth resources.

As shown in FIG. 3 , FIG. 3 is a schematic structural diagram of a router in a preferred embodiment of the present invention for realizing the remote access method. The router 3 includes a memory 31 , at least one processor 32 , a computer program 33 stored in the memory 31 and executable on the at least one processor 32 , and at least one communication bus 34 .

Those skilled in the art can understand that the schematic diagram shown in FIG. 3 is only an example of the router 3, and does not constitute a limitation on the router 3. It may include more or less components than those shown in the figure, or combine some components, or different components, for example, the router 3 may also include input and output devices, network access devices, and the like.

The network where the router 3 is located includes, but is not limited to, the Internet, a wide area network, a metropolitan area network, a local area network, a virtual private network (Virtual Private Network, VPN) and the like.

The at least one processor 32 may be a central processing unit (Central Processing Unit, CPU), and may also be other general-purpose processors, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC ), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, transistor logic devices, discrete hardware components, etc. This processor 32 can be a microprocessor or this processor 32 also can be any conventional processor etc., described processor 32 is the control center of described router 3, utilizes various interfaces and lines to connect each of the whole router 3 part.

The memory 31 can be used to store the computer program 33 and/or module/unit, and the processor 32 runs or executes the computer program and/or module/unit stored in the memory 31, and calls the computer program stored in the memory 31 to realize various functions of the router 3. The memory 31 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application program required by a function (such as a sound playback function, an image playback function, etc.); Data created according to use of the router 3 (such as audio data, etc.) and the like are stored. In addition, the memory 31 may include non-volatile memory, such as hard disk, internal memory, plug-in hard disk, smart memory card (Smart Media Card, SMC), secure digital (Secure Digital, SD) card, flash memory card (Flash Card), At least one disk storage device, flash memory device, etc.

Referring to FIG. 1, the memory 31 in the router 3 stores multiple instructions to implement a remote access method, and the processor 32 can execute the multiple instructions to implement:

When the first device needs to perform remote access to the second device, obtain the first identification of the first device, and obtain the second identification of the second device;

judging whether the first device and the second device are in the same virtual network according to the first identifier and the second identifier;

If the first device and the second device are in the same virtual network, determine a target virtual network address of the second device;

According to the network address resource translation type detection algorithm, it is judged whether the type of network address resource translation of the target route to which the second device belongs is cone-shaped network address resource translation;

If the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, according to the target virtual network address, transmit the access request of the first device through a peer-to-peer network sent to the second device, wherein the access request carries the target virtual network address.

In an optional implementation manner, the sending the access request of the first device to the second device through peer-to-peer network transmission according to the target virtual network address includes:

Obtaining the first external network address of the second device from the first server according to the target virtual network address;

According to the first external network address, sending the access request of the first device to a target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, sending the access request to the second device.

In an optional implementation manner, the processor 32 may execute the multiple instructions to achieve:

If the NAT resource translation type of the target route to which the second device belongs is not cone-shaped NAT resource translation, according to the target virtual network address, send the access request of the first device through server forwarding to the second device.

In an optional implementation manner, the processor 32 may execute the multiple instructions to achieve:

The sending the access request of the first device to the second device by means of server forwarding according to the target virtual network address includes:

mapping the source address of the access request of the first device to the second external network address of the second server;

determining a third external network address of the second device from a plurality of external network addresses stored in the second server according to the target virtual network address;

Send the access request to the second device according to the second external network address and the third external network address.

In an optional implementation manner, the processor 32 may execute the multiple instructions to achieve:

If the first device and the second device are not in the same virtual network, add the first device and the second device to a target virtual network according to the first identifier and the second identifier middle;

Selecting a first virtual network address from the virtual address pool of the target virtual network and assigning the first virtual network address to the first device, and selecting from the virtual network address pool of the target virtual network a second virtual network address and assigning the second virtual network address to the second device.

In an optional implementation manner, the second server is configured to store identification information, virtual network addresses, external network addresses, and configuration information of all devices in the virtual network.

Specifically, for the specific implementation method of the above instruction by the processor 32, reference may be made to the description of the relevant steps in the embodiment corresponding to FIG. 1 , which will not be repeated here.

In the router 3 described in FIG. 3, when the first device needs to perform remote access to the second device, obtain the first identification of the first device, and obtain the second identification of the second device; according to the The first identifier and the second identifier determine whether the first device and the second device are in the same virtual network; if the first device and the second device are in the same virtual network, determine The target virtual network address of the second device; according to the network address resource translation type detection algorithm, determine whether the type of network address resource translation of the target route to which the second device belongs is cone-shaped network address resource translation; if the first The type of network address resource translation of the target route to which the second device belongs is cone network address resource translation. According to the target virtual network address, the access request of the first device is sent to the The second device, wherein the access request carries the target virtual network address. It can be seen that each device in the same virtual network can directly communicate with each other through the virtual network address, so as to realize remote access of simple devices, provide Internet technical services for ordinary users, and transmit through peer-to-peer network transmission. It does not need to consume the bandwidth of intermediate server nodes, saving bandwidth resources.

If the integrated modules/units of the router 3 are realized in the form of software function units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the present invention realizes all or part of the processes in the methods of the above embodiments, and can also be completed by instructing related hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer When the program is executed by the processor, the steps in the above-mentioned various method embodiments can be realized. Wherein, the computer program includes computer program code, and the computer program code may be in the form of source code, object code, executable file or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying the computer program code, a recording medium, a U disk, a removable hard disk, a magnetic disk, an optical disk, a computer memory, and a read-only memory (ROM, Read-Only Memory) .

In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the modules is only a logical function division, and there may be other division methods in actual implementation.

The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional module in each embodiment of the present invention may be integrated into one processing unit, or each unit may physically exist separately, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware, or in the form of hardware plus software function modules.

It will be apparent to those skilled in the art that the invention is not limited to the details of the above-described exemplary embodiments, but that the invention can be embodied in other specific forms without departing from the spirit or essential characteristics of the invention. Accordingly, the embodiments should be regarded in all points of view as exemplary and not restrictive, the scope of the invention being defined by the appended claims rather than the foregoing description, and it is therefore intended that the scope of the invention be defined by the appended claims rather than by the foregoing description. All changes within the meaning and range of equivalents of the elements are embraced in the present invention. Any reference sign in a claim should not be construed as limiting the claim concerned. In addition, it is obvious that the word "comprising" does not exclude other elements or steps, and the singular does not exclude the plural. A plurality of units or devices stated in the system claims may also be realized by one unit or device through software or hardware. Secondary terms are used to denote names without implying any particular order.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention without limitation. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be Modifications or equivalent replacements can be made without departing from the spirit and scope of the technical solutions of the present invention.

Claims (10)

1. A remote access method, applied to a router, is characterized in that the method comprises: When the first device needs to perform remote access to the second device, obtain the first identification of the first device, and obtain the second identification of the second device; judging whether the first device and the second device are in the same virtual network according to the first identifier and the second identifier; If the first device and the second device are in the same virtual network, determine a target virtual network address of the second device; According to the network address resource translation type detection algorithm, it is judged whether the type of network address resource translation of the target route to which the second device belongs is cone-shaped network address resource translation; If the type of network address resource translation of the target route to which the second device belongs is cone network address resource translation, according to the target virtual network address, transmit the access request of the first device through a peer-to-peer network sent to the second device, wherein the access request carries the target virtual network address. 2. The method according to claim 1, wherein the sending the access request of the first device to the second device through peer-to-peer network transmission according to the target virtual network address comprises : Obtaining the first external network address of the second device from the first server according to the target virtual network address; According to the first external network address, sending the access request of the first device to a target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, sending the access request to the second device. 3. The method according to claim 1, characterized in that the method further comprises: If the NAT resource translation type of the target route to which the second device belongs is not cone-shaped NAT resource translation, according to the target virtual network address, send the access request of the first device through server forwarding to the second device. 4. The method according to claim 3, wherein the sending the access request of the first device to the second device by means of server forwarding according to the target virtual network address comprises: mapping the source address of the access request of the first device to the second external network address of the second server; determining a third external network address of the second device from a plurality of external network addresses stored in the second server according to the target virtual network address; Send the access request to the second device according to the second external network address and the third external network address. 5. The method according to any one of claims 1 to 4, characterized in that the method further comprises: If the first device and the second device are not in the same virtual network, add the first device and the second device to a target virtual network according to the first identifier and the second identifier middle; Selecting a first virtual network address from the virtual address pool of the target virtual network and assigning the first virtual network address to the first device, and selecting from the virtual network address pool of the target virtual network a second virtual network address and assigning the second virtual network address to the second device. 6. The method according to claim 4, wherein the second server is used to store identification information, virtual network addresses, external network addresses and configuration information of all devices in the virtual network. 7. A remote access device, characterized in that the remote access device comprises: An obtaining module, configured to obtain a first identification of the first device and a second identification of the second device when the first device needs to perform remote access to the second device; A judging module, configured to judge whether the first device and the second device are in the same virtual network according to the first identifier and the second identifier; A determination module, configured to determine a target virtual network address of the second device if the first device and the second device are in the same virtual network; The judging module is further configured to judge whether the NAT resource translation type of the target route to which the second device belongs is cone-shaped NAT resource translation according to the NAT resource translation type detection algorithm; The sending module is configured to: if the type of network address resource translation of the target route to which the second device belongs is cone-shaped network address resource translation, according to the target virtual network address, transmit the second An access request of a device is sent to the second device, wherein the access request carries the target virtual network address. 8. The remote access device according to claim 7, wherein the sending module sends the access request of the first device to the The method of the second device is as follows: Obtaining the first external network address of the second device from the first server according to the target virtual network address; According to the first external network address, sending the access request of the first device to a target route to which the second device belongs, wherein the target route is based on the target virtual network address carried in the access request, sending the access request to the second device. 9. A router, characterized in that the router comprises a processor and a memory, and the processor is configured to execute a computer program stored in the memory to implement the remote access method according to any one of claims 1 to 6. 10. A computer-readable storage medium, characterized in that, the computer-readable storage medium stores at least one instruction, and when the at least one instruction is executed by a processor, it realizes any one of claims 1 to 6. remote access method.

Images