Communication tunnel endpoint address separation method, terminal, ePDG and storage medium

A technology of tunnel endpoint and separation method, which is applied in wireless communication, data exchange through path configuration, security device, etc., and can solve the problem that the functions that cannot be deployed in IPSecSA tunnels are deployed on different virtual machines

Pending Publication Date: 2019-03-05
ZTE CORP
View PDF10 Cites 3 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The main purpose of the present invention is to provide a communication tunnel endpoint address separation method, terminal, ePDG and storage medium, aiming to solve the existing problem that the functional body of the IKE SA tunnel and the functional body of the IPSec SA tunnel cannot be deployed on different virtual machines technical problem

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Communication tunnel endpoint address separation method, terminal, ePDG and storage medium
  • Communication tunnel endpoint address separation method, terminal, ePDG and storage medium
  • Communication tunnel endpoint address separation method, terminal, ePDG and storage medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0049] It should be understood that the specific embodiments described herein are only used to explain the present invention, but not to limit the present invention.

[0050] The solution of the embodiment of the present invention is mainly: when the evolved packet data gateway ePDG receives the first request message sent by the terminal, it establishes an Internet key exchange IKE security alliance SA tunnel according to the first request message, and generates a connection with all The first response message corresponding to the first request message is returned to the terminal; the ePDG receives the second request message sent by the terminal, establishes an Internet Protocol security IPSec SA tunnel according to the second request message, and generates and The second response message corresponding to the second request message returns the second response message to the terminal to complete the establishment of the IPSecSA tunnel; wherein the second request message carries a s...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a communication tunnel endpoint address separation method, a terminal, an ePDG and a storage medium. The method comprises the following steps: the ePDG establishes an IKE SA tunnel according to a first request message sent by the terminal, generates a corresponding first response message and returns the first response message to the terminal; and the ePDG establishes an IPSec SA tunnel according to a received second request message sent by the terminal, generates a corresponding second response message and returns the second response message to the terminal, so that establishment of the IPSec SA tunnel is completed, wherein the second request message carries a separation identification, and the separation identification shows that the terminal supports endpoint address separation of the IKE SA tunnel and the IPSec SA tunnel of the ePDG. The method disclosed by the invention realizes the endpoint address separation of the IKE SA tunnel and the IPSec SA tunnel ata terminal side and / or ePDG side.

Description

Technical field [0001] The present invention relates to the field of communication technology, and in particular to a method, terminal, ePDG and storage medium for separating the endpoint address of a communication tunnel. Background technique [0002] In the network architecture where the untrusted non-3GPP (3rd Generation Partnership Project) access network accesses the 3GPP evolved packet core network, the two ends of the IPSec (Internet Protocol Security, Internet Protocol Security) tunnel are respectively It is the terminal and ePDG (Evolved Packet DataGateway, evolved packet data gateway). On the terminal side, the endpoint addresses of the IKE (Internet Key Exchange, Internet Key Exchange Protocol) SA (Security Association) tunnel and the IPSec SA tunnel are the same; on the ePDG side, the endpoint addresses of the IKE SA tunnel and the IPSec SA tunnel are the same. It can be seen that under the existing architecture, the endpoint addresses of the IKE SA tunnel and the IP...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06H04L12/46H04W12/02H04W12/04H04W12/06H04W76/12H04W12/041
CPCH04L12/4633H04L63/0485H04L63/061H04L63/0892H04W12/02H04W12/04H04W12/06H04L63/0272H04L63/164H04W12/009H04W12/03H04W12/0471
Inventor 李道红
Owner ZTE CORP
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products