📚 Core Functions and Application Scenarios of the Internet | 互联网的核心功能与应用场景解析
The Internet is a global system of interconnected computer networks that communicate using the TCP/IP protocol suite. It underpins modern digital life, from web browsing and email to cloud computing and the Internet of Things. In the CIE Computer Science syllabus, understanding the core functions of the Internet and its typical application scenarios is essential for both theoretical examinations and practical problem solving.
互联网是一个由遵循 TCP/IP 协议族进行通信的全球互联计算机网络系统。它支撑着现代数字生活，从网页浏览、电子邮件到云计算和物联网。在 CIE 计算机科学考纲中，理解互联网的核心功能与典型应用场景，对理论考试和实际解题都至关重要。
1. Fundamental Architecture of the Internet | 互联网的基本架构
The Internet is not a single network, but a network of networks. It is composed of end systems (clients and servers), communication links (fiber optics, copper cables, wireless channels) and packet switches (routers and switches). Data is transmitted using packet switching, where messages are broken into packets and routed independently toward their destination.
互联网不是一个单一网络，而是网络的网络。它由端系统（客户端和服务器）、通信链路（光纤、铜缆、无线信道）以及分组交换机（路由器和交换机）组成。数据采用分组交换方式传输，即将报文拆分为分组，并使其独立路由至目的地。
Each device on the Internet is identified by a unique Internet Protocol (IP) address. The Domain Name System (DNS) translates human-friendly domain names such as http://www.aleveler.com into machine-readable IP addresses. This layered design, often described using the TCP/IP model, enables scalable and reliable communication across heterogeneous systems.
互联网上的每台设备都有一个唯一的互联网协议（IP）地址。域名系统（DNS）将类似 http://www.aleveler.com 的便于人记的域名转换为机器可读的 IP 地址。这种常以 TCP/IP 模型描述的层次化设计，使得跨异构系统的可扩展且可靠的通信成为可能。
2. The World Wide Web and Web Browsing | 万维网与网页浏览
The World Wide Web (WWW) is one of the most widely used services over the Internet. It is a distributed system of interlinked hypertext documents accessed via web browsers. A uniform resource locator (URL) specifies the protocol, domain name, port and path of a resource. For example, in the URL https://www.aleveler.com/login, ‘https’ is the protocol, ‘www.aleveler.com’ is the host, and ‘/login’ is the path.
万维网（WWW）是互联网上使用最广泛的服务之一。它是一个通过网页浏览器访问的、由相互链接的超文本文档构成的分布式系统。统一资源定位符（URL）指明资源的协议、域名、端口和路径。例如，在网址 https://www.aleveler.com/login 中，’https’ 是协议，’www.aleveler.com’ 是主机名，’/login’ 是路径。
When a user enters a URL, the browser resolves the domain name via DNS, then establishes a TCP connection with the server. If the protocol is HTTPS, a transport layer security (TLS) handshake is performed to encrypt the session. The server then responds with the requested web page, typically formatted in HTML, CSS and JavaScript, which the browser renders for the user.
当用户输入网址后，浏览器通过 DNS 解析域名，然后与服务器建立 TCP 连接。若协议为 HTTPS，则进行传输层安全（TLS）握手来加密会话。随后服务器返回请求的网页，网页通常由 HTML、CSS 和 JavaScript 编写，浏览器将其渲染呈现给用户。
3. Electronic Mail and Messaging Protocols | 电子邮件与消息协议
Electronic mail is a store-and-forward service that enables asynchronous message exchange. CIE emphasises the roles of three key protocols: SMTP (Simple Mail Transfer Protocol) for sending messages, and POP3 or IMAP for retrieving messages from a mailbox. SMTP uses TCP port 25 or 587, while POP3 uses port 110 and IMAP uses port 143.
电子邮件是一种存储转发服务，支持异步消息交换。CIE 考试强调三个关键协议的作用：用于发送邮件的简单邮件传输协议（SMTP），以及用于从邮箱取回邮件的 POP3 或 IMAP。SMTP 使用 TCP 端口 25 或 587，POP3 使用端口 110，IMAP 使用端口 143。
When a user sends an email, the client transmits it to the sender’s mail server via SMTP. The server then queues and forwards it to the recipient’s mail server using DNS to locate the destination mail exchange (MX) record. Once delivered, the recipient’s client uses POP3 or IMAP to download or synchronise messages. This entire process is asynchronous, meaning both parties need not be online simultaneously.
当用户发送电子邮件时，客户端通过 SMTP 将邮件传输到发件人的邮件服务器。服务器随后将邮件排队，并利用 DNS 查询目标服务器的邮件交换（MX）记录，将邮件转发至收件人的邮件服务器。邮件到达后，收件人的客户端使用 POP3 或 IMAP 下载或同步邮件。整个过程是异步的，即双方无需同时在线。
4. File Transfer and Data Exchange | 文件传输与数据交换
File Transfer Protocol (FTP) is a standard protocol for transferring files between a client and a server over TCP/IP. FTP typically uses two channels: a control channel on port 21 and a data channel on port 20 (active mode). However, standard FTP transmits data in plaintext, making it vulnerable to interception.
文件传输协议（FTP）是 TCP/IP 网络中客户端与服务器之间传输文件的标准协议。FTP 通常使用两个通道：端口 21 的控制通道和端口 20 的数据通道（主动模式）。然而，标准 FTP 以明文传输数据，容易遭到窃听。
To address security concerns, secure variants such as FTPS (FTP over TLS) and SFTP (SSH File Transfer Protocol) encrypt both commands and data. Cloud storage services such as Google Drive and Dropbox rely on HTTPS-based upload/download methods, often using RESTful APIs. File integrity is commonly verified using checksums such as MD5 or SHA-256.
为解决安全问题，出现了 FTPS（基于 TLS 的 FTP）和 SFTP（SSH 文件传输协议）等安全传输变体，它们对命令和数据都进行加密。Google Drive 和 Dropbox 等云存储服务依赖基于 HTTPS 的上传/下载方式，常通过 RESTful API 实现。文件完整性通常使用 MD5 或 SHA-256 等校验和来验证。
5. Remote Access and Terminal Emulation | 远程访问与终端仿真
Telnet and SSH are protocols that allow users to remotely log into another computer and execute commands as if physically present. Telnet was widely used in early networks but transmits all data, including passwords, in plaintext. SSH (Secure Shell) encrypts all traffic and has largely replaced Telnet in modern administration.
Telnet 和 SSH 等协议允许用户远程登录另一台计算机，并像本地操作一样执行命令。Telnet 在早期网络中广泛使用，但包括密码在内的所有数据都以明文传输。SSH（安全外壳协议）对所有通信进行加密，在现代系统管理中已基本取代 Telnet。
Remote access technology is vital for system administration, online technical support and the growing trend of remote working. It enables IT staff to configure servers in another country, diagnose faults and deploy updates without physical presence. This capability reduces operational cost and improves response time.
远程访问技术对系统管理、在线技术支持和日益增长的远程办公趋势至关重要。它使 IT 人员无需到场即可配置异国服务器、诊断故障和部署更新。这项能力降低了运营成本并缩短了响应时间。
6. VoIP and Real-Time Communication | 网络电话与实时通信
Voice over Internet Protocol (VoIP) converts analogue voice signals into digital packets and transmits them over the Internet. Popular applications include Skype, Zoom and WhatsApp voice calls. VoIP offers significant cost savings compared to traditional telephony, especially for international calls, because voice data shares the same packet-switched network as other traffic.
网络电话（VoIP）将模拟语音信号转换为数字分组，并通过互联网传输。常见的应用包括 Skype、Zoom 和 WhatsApp 语音通话。与传统电话相比，VoIP 大幅降低了成本，尤其是国际电话，因为语音数据与其他流量共享同一分组交换网络。
Real-time communication services such as video conferencing rely heavily on protocols like WebRTC (Web Real-Time Communication) and SRTP (Secure Real-time Transport Protocol). These systems manage packet loss, jitter and latency through buffering and adaptive bitrate streaming. However, VoIP requires an internet connection and may suffer from lower fidelity than a dedicated circuit-switched line.
视频会议等实时通信服务高度依赖 WebRTC（网页实时通信）和 SRTP（安全实时传输协议）等协议。这些系统通过缓冲和自适应比特率流媒体来控制丢包、抖动和时延。但 VoIP 依赖互联网连接，其音质可能不如专用的电路交换线路稳定。
7. Search Engines and Web Crawlers | 搜索引擎与网络爬虫
Search engines are indispensable tools for locating information on the Web. They operate using three main components: a web crawler, an indexer and a query processor. The web crawler, also called a spider, systematically browses the Internet by following hyperlinks and collecting page data. The indexer then processes this collected data to build a structured index, such as an inverted index mapping keywords to the URLs and positions where they occur.
搜索引擎是互联网上查找信息不可或缺的工具。其运行依赖三大核心组件：网络爬虫、索引器和查询处理器。网络爬虫又称蜘蛛程序，通过跟随超链接系统地浏览互联网并收集网页数据。索引器随后处理这些收集到的数据，构建结构化索引，如将关键词映射到其出现的 URL 及位置信息的倒排索引。
When a user enters a query, the search engine ranks matching pages using algorithms that consider relevance, page authority and freshness. Understanding how indexing works helps students appreciate the difference between the surface Web and the deep Web, where content is hidden behind login forms or dynamically generated pages. This knowledge also clarifies why search engine optimisation (SEO) is a crucial skill for web developers.
当用户输入查询时，搜索引擎通过综合考虑相关性、页面权威性和更新时效的算法对匹配页面进行排名。理解索引机制有助于学生认识表层网络与深层网络之间的差别——后者内容隐藏在登录表单之后或由动态脚本生成。这项知识也解释了为什么搜索引擎优化（SEO）是网页开发者的重要技能。
8. Cloud Computing and Online Storage | 云计算与在线存储
Cloud computing delivers computing resources—servers, storage, databases, networking and software—over the Internet on a pay-as-you-go basis. CIE Computer Science distinguishes between three main service models: IaaS (Infrastructure as a Service), PaaS (Platform as a Service) and SaaS (Software as a Service). These models shift the burden of hardware maintenance from the customer to the cloud provider.
云计算按需通过互联网交付计算资源——服务器、存储、数据库、网络和软件。CIE 计算机科学区分三种主要服务模型：IaaS（基础设施即服务）、PaaS（平台即服务）和 SaaS（软件即服务）。这些模型将硬件维护负担从客户转移到云服务提供商。
Online storage services such as OneDrive and iCloud use distributed file systems that replicate data across multiple data centres for redundancy. When a user uploads a file, an application programming interface (API) call is made to the cloud backend, and the file is split into chunks, encrypted and stored. In examinations, students should be able to discuss the advantages (scalability, accessibility, disaster recovery) and disadvantages (internet dependency, vendor lock-in, privacy concerns) of cloud-based storage.
OneDrive 和 iCloud 等在线存储服务使用分布式文件系统，将数据在多个数据中心之间进行复制以实现冗余。用户上传文件时，会向云后端发出应用程序编程接口（API）调用，文件被分块、加密并存储。在考试中，学生应能讨论云存储的优点（可扩展性、可访问性、灾难恢复）和缺点（依赖网络、供应商锁定、隐私问题）。
9. E-Commerce and Secure Transactions | 电子商务与安全交易
E-commerce encompasses online retail (B2C), business-to-business transactions (B2B), and consumer-to-consumer trading (C2C). Core functions include product catalogues, online ordering, electronic payment processing and order tracking. Payment gateways integrate with banking systems to authorise transactions using protocols like 3-D Secure and TLS encryption.
电子商务涵盖在线零售（B2C）、企业对企业交易（B2B）和消费者对消费者交易（C2C）。其核心功能包括商品目录、在线下单、电子支付处理和订单跟踪。支付网关通过 3-D Secure 和 TLS 加密等协议与银行系统集成，对交易进行授权。
Secure e-commerce relies on digital certificates and digital signatures. A digital certificate binds a public key to an entity’s identity, issued by a Certificate Authority (CA). For example, an online bookstore uses SSL/TLS to encrypt the customer’s credit card details and a digital signature to ensure the integrity of the order confirmation. Students should understand the difference between confidentiality, integrity and authentication in this context.
安全电子商务依赖于数字证书和数字签名。数字证书由证书颁发机构（CA）签发，将公钥绑定到实体身份。例如，网上书店使用 SSL/TLS 加密客户的信用卡信息，并使用数字签名确保订单确认的完整性。学生应理解这里机密性、完整性和身份认证之间的区别。
10. Internet of Things and Smart Environments | 物联网与智能环境
The Internet of Things (IoT) refers to physical devices—sensors, actuators, cameras and wearables—embedded with software and connectivity to collect and exchange data. Application scenarios include smart homes (remote lighting and temperature control), smart agriculture (soil moisture monitoring) and smart factories (predictive maintenance). IoT devices typically send small, frequent messages to a central gateway or cloud platform.
物联网（IoT）指的是嵌入软件和连接能力的物理设备——传感器、执行器、摄像头和可穿戴设备——用于收集和交换数据。应用场景包括智能家居（远程控制照明和温度）、智慧农业（土壤湿度监测）和智能工厂（预测性维护）。物联网设备通常向中央网关或云平台发送小容量、高频率的消息。
IoT services place new demands on the Internet architecture: massive device addressing, low latency, energy efficiency and strong security. Protocols such as MQTT (Message Queuing Telemetry Transport) and CoAP (Constrained Application Protocol) are designed for constrained devices. However, poorly secured IoT devices can be compromised to launch distributed denial-of-service (DDoS) attacks, a significant concern in cybersecurity.
物联网服务对互联网架构提出了新要求：海量设备寻址、低时延、低功耗和强安全性。MQTT（消息队列遥测传输）和 CoAP（受限应用协议）等协议专为资源受限设备设计。然而，安全性较弱的物联网设备可能被劫持，用来发起分布式拒绝服务（DDoS）攻击，这是网络安全领域的重大隐患。
11. Internet Security and Ethical Considerations | 互联网安全与伦理考量
While the Internet enables powerful applications, it also introduces threats such as malware, phishing, identity theft and data breaches. Firewalls are used to filter traffic between trusted and untrusted networks, while proxy servers can provide anonymous browsing by masking the user’s IP address. CIE Computer Science expects learners to evaluate these measures and understand their limitations.
互联网带来强大功能的同时，也引入了恶意软件、网络钓鱼、身份盗用和数据泄露等威胁。防火墙用于过滤可信网络与不可信网络之间的流量，而代理服务器可通过隐藏用户 IP 地址提供匿名浏览。CIE 计算机科学要求学习者能够评估这些措施并理解其局限性。
Ethical considerations include digital divide, freedom of speech versus content moderation, and personal data privacy. In the context of data protection, principles such as data minimisation—collecting only the data necessary for a stated purpose—and the right to be forgotten are recognised in legislation such as GDPR. A well-rounded answer will contrast the benefits of open information access with the social and legal responsibilities of system designers.
伦理考量包括数字鸿沟、言论自由与内容审核之间的权衡，以及个人数据隐私。在数据保护方面，数据最小化——即仅为声明的目的收集必要的数据——和被遗忘权等原则已被 GDPR 等法律确认。一份全面的回答应对比开放信息访问的益处与系统设计者所承担的社会和法律责任。
12. Future Trends and Summary | 未来趋势与总结
As the Internet evolves, emerging technologies such as IPv6, Web 3.0 semantic web, quantum-resistant cryptography and edge computing will reshape its core functions. For example, IPv6 expands the address space from 2³² to 2¹²⁸ addresses, which is critical for IoT scalability. Edge computing brings computation closer to end users, reducing latency for real-time applications.
随着互联网的发展，IPv6、Web 3.0 语义网、抗量子密码学和边缘计算等新兴技术将重塑其核心功能。例如，IPv6 将地址空间从 2³² 扩展到 2¹²⁸ 个地址，这对物联网的可扩展性至关重要。边缘计算将计算推向更接近终端用户的位置，从而降低实时应用的时延。
In summary, the core functions of the Internet—communication, resource sharing, remote access, data exchange and service provision—are reflected in diverse application scenarios. Understanding the underlying protocols (DNS, HTTP/HTTPS, SMTP, FTP, SSH, etc.) and the security implications enables students to design, describe and evaluate systems with confidence. The Internet is much more than a technology; it is an infrastructure that continues to reshape society.
总之，互联网的核心功能——通信、资源共享、远程访问、数据交换和服务提供——体现在多样化的应用场景中。理解底层协议（DNS、HTTP/HTTPS、SMTP、FTP、SSH 等）及其安全影响，能使学生自信地设计、描述和评估相关系统。互联网不仅是技术，更是一种持续重塑社会的基础设施。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导Cancel reply