VoLTE data traffic filtering method and device, gateway, equipment and medium
A technology of data flow and filtering method, applied in the field of communication security, can solve the problems of breaking commercial password management regulations, VoLTE data packet filtering, etc.
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0048] figure 2 It is a schematic diagram of a VoLTE data flow filtering process provided by an embodiment of the present invention, and the process includes:
[0049] S201: Identify whether the VoLTE data packet to be forwarded contains an Encapsulating Security Payload (ESP) encapsulated packet, if yes, proceed to S202, if not, proceed to S204.
[0050] The VoLTE data flow filtering method provided by the embodiment of the present invention is applied to a first gateway. The first gateway may be a modified SGW or a detection gateway (GW) added in the bypass of the SGW. The detection gateway and the SGW After connection, the VoLTE data packet to be forwarded received by the SGW can be obtained.
[0051] Internet Protocol Security (IPSec) is not a separate protocol. It provides a complete set of architectures applied to network data security at the IP layer, including the authentication header (Authentication Header, AH), ESP, and Internet. Key exchange (Internet Key Exchange, IKE)...
Embodiment 2
[0063] Since the data packets forwarded by the SGW include not only the VoLTE data packets of the audio and video call services, but also the 4G Internet data packets of the data Internet services, on the basis of the above embodiments, in order to improve the filtering efficiency of VoLTE data packets, the implementation of the present invention In an example, before the identifying whether the VoLTE data packet to be forwarded contains an ESP encapsulated packet, the method further includes:
[0064] Receiving a data packet to be forwarded, and identifying an access point (Access Point Name, APN) in the data packet;
[0065] Determining whether the APN is an IP Multimedia Subsystem (IMS) APN;
[0066] If it is, it is determined that the data packet is a VoLTE data packet, and the subsequent steps are performed.
[0067] Specifically, if the first gateway is the SGW, the SGW receives the data packet to be forwarded, identifies whether the APN in the data packet is an IMS APN, and if ...
Embodiment 3
[0078] In order to ensure the accuracy of VoLTE data traffic filtering, if the first gateway is an SGW, blocking the forwarding of the VoLTE data packet includes:
[0079] Discard the VoLTE data packet or delete the bearer channel corresponding to the VoLTE data packet.
[0080] Specifically, if the SGW determines that the ESP encapsulated message contained in the VoLTE data packet cannot be parsed as RTP, or RTCP, or SIP, discard the VoLTE data packet or delete the bearer channel corresponding to the VoLTE data packet.
[0081] Figure 4 with Figure 5 This is a schematic diagram of VoLTE data traffic blocking provided by an embodiment of the present invention, such as Figure 4 with Figure 5 As shown, the VoLTE data packets sent between the UE and the IMS need to be transmitted through the MME, SGW, and P-GW. Therefore, the SGW can block the encrypted VoLTE data packets sent between the UE and the IMS. Specifically, Such as Figure 4 As shown, in the UE registration process, after...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More