Cross-network exchange service flow strategy control method

Abstract

The invention relates to a cross-network exchange service flow strategy control method, which comprises the following steps of: S1, constructing a strategy controller and limiting identities of two communication parties; s2, the strategy controller maintains a resource pool based on analysis and prediction; s3, after the transmitting end initiates the transmission service actively, the strategy controller dynamically adjusts the flow control strategy; s4, the cross-network switching processing system processes the transmission service according to a strategy; wherein the strategy controller comprises a strategy management module, a name address directory module, a behavior analysis module and a resource management module. According to the invention, through design oriented to future IPv6, transmission services of corresponding levels are provided for users, services and applications, and the problem of flow control strategies in cross-network transmission is solved.

Description

Technical Field

[0001] The present invention relates to the field of digital communication technology, and in particular to a cross-network switching service flow strategy control method. Background Art

[0002] With the development of communication technology, various users have established private, dedicated, and confidential internal networks. In order to protect the data security in the network, the internal network is isolated from other networks. At the same time, in order to give full play to the connectivity of the communication network and improve the efficiency of information flow, network isolation technology is used to solve the problem of data exchange between different networks. Currently, the widely used network security isolation technology can be divided into three types: real-time switch, one-way connection, and network switch. At present, there are means of using network forwarding for cross-network exchange, which can realize the data in a controllable state and be transmitted between users in different networks.

[0003] The mainstream network is still the IPv4 network, and the deployment of IPv6 is being rapidly promoted, but it is not possible to achieve a leapfrog upgrade for the time being. In order to take into account the existing network facilities, the coexistence of IPv4 and IPv6 will be the status quo for some time.

[0004] In order to achieve controllable transmission, current network security isolation technology uses technical means to isolate two-way, interactive transmission into one-way transmission in two directions. In this process, cross-network transmission is based on the statistical multiplexing characteristics of the IP network, follows a first-in-first-out queue and adopts a best-effort strategy. Faced with scenarios with a large number of cross-network transmission needs, the cross-network switching processing system using network forwarding technology solutions has limited performance and cannot provide differentiated transmission services for users, services, and applications. High-value services cannot obtain high-reliability and high-priority guarantees. Summary of the invention

[0005] In order to solve the technical problems existing in the above-mentioned prior art, the purpose of the present invention is to provide a cross-network exchange service traffic policy control method, which is designed for the future IPv6 and provides corresponding levels of transmission services to users, services, and applications, thereby solving the traffic control strategy problems in cross-network transmission.

[0006] To achieve the above-mentioned object of the invention, the present invention provides a method for controlling traffic strategy of an inter-network switching service, comprising the following steps:

[0007] Step S1, construct a policy controller and limit the identities of both communicating parties;

[0008] Step S2: The policy controller maintains the resource pool based on analysis and prediction;

[0009] Step S3: After the sending end actively initiates the transmission service, the policy controller dynamically adjusts the flow control policy;

[0010] Step S4: the inter-network exchange processing system processes the transmission service according to the strategy;

[0011] Wherein, the policy controller includes a policy management module, a name and address directory module, a behavior analysis module, and a resource management module.

[0012] According to a technical solution of the present invention, in the step S1, relevant information of the forwarding service is collected by manual preset method, and the relevant information at least includes user identity information of both parties of the transmission service, transmission service type, transmission service demand and priority. A ledger is established through the name and address directory module, an authority model is established based on the identities of the sender and the receiver, and a generalized priority model is established based on the service type as the initial basic restriction of the subsequent control strategy.

[0013] According to a technical solution of the present invention, in step S2, the behavior analysis module models the cross-network forwarding traffic behavior, collects the transmission protocol type, data level, data frequency, link delay, and interactive behavior characteristics of the service traffic, establishes a transmission behavior model of the service, and regularly compares and updates the difference analysis of the service reported requirements and the traffic control strategy through various classification aggregation algorithms in machine learning;

[0014] Based on the incremental data generated by the operation of the cross-network exchange processing system, incremental training is performed based on the behavior model to achieve iterative updates and predict transmission behavior along the timeline.

[0015] According to a technical solution of the present invention, in step S2, the resource management module periodically queries the resource usage of the cross-network exchange processing system, introduces environmental variables including task scenarios combined with the transmission behavior prediction of the business, predicts the resource usage within a preset period of time based on a long series time model of machine learning, and maintains a dynamically changing available resource pool.

[0016] According to a technical solution of the present invention, in step S3, the scenario types in which the transmitting end actively initiates the transmission service include:

[0017] Type 1: The sender has not been upgraded and only supports the IPv4 protocol stack. After the sender establishes a connection with the cross-network switching processing system, it first actively initiates identity authentication. After the identity authentication is passed, service transmission begins at a random time.

[0018] Type 2: After the sender is upgraded to IPv6, the IPv6 message header is not fully utilized. Only the address part of the message is upgraded to IPv6. The behavior of the sender after establishing a connection with the inter-network exchange processing system is consistent with the above IPv4 stage.

[0019] Type 3: The sending end is upgraded to IPv6, and the application system is programmed for the IPv6 message header, which carries identity authentication information and transmission requirement information. The sending end randomly establishes a connection with the cross-network switching processing system to initiate business transmission.

[0020] According to a technical solution of the present invention, step S3 specifically includes:

[0021] According to the different scenario types in which the sender actively initiates the transmission service, after the service demand of the sender reaches the sender agent, the service demand is submitted to the policy controller according to the different demand receiving types. The policy controller adjusts the service transmission policy based on the available resource pool and transmission service authority, and the policy adjustment results are sent to the sender agent and the receiver agent.

[0022] According to a technical solution of the present invention, in step S4, after the sending agent receives the service transmission policy issued by the policy controller, it adjusts the logical channel of the service transmission based on the IPv6+ network slicing technology and processes the scenario type of the transmission service.

[0023] According to a technical solution of the present invention, in step S4, for type one, IPv4 formatted messages, the sending end agent performs IPv6 encapsulation for the received messages, and performs operations such as dyeing to introduce the messages into corresponding slices;

[0024] For type 2 and type 3, IPv6 formatted packets, the sending agent directs traffic to the corresponding slices through coloring.

[0025] According to a technical solution of the present invention, after receiving the message, the receiving-end agent performs the inverse operation of the sending-end agent to decode the message and forward it to the receiving end.

[0026] Compared with the prior art, the present invention has the following beneficial effects:

[0027] The present invention proposes a cross-network exchange service traffic policy control method, which can dynamically generate traffic control policies based on user identity, service type, application requirements, etc., provide high-value services with high-reliability and high-priority transmission services, and efficiently utilize cross-network exchange processing system resources to avoid resource idleness caused by resource reservation.

[0028] The present invention is oriented to the scenario of IPv4 / IPv6 dual stack. Under the premise that the service equipment and applications at both ends of the sending end and the receiving end do not need to be changed, the efficiency and reliability of service flow control are improved by using IPv6 technology; service transmission behavior is predicted by machine learning, a dynamically changing resource pool is maintained, and the reliability and quality of high-priority service transmission are improved; resource usage is predicted by machine learning, and the resource utilization rate of the cross-network switching system is improved; control strategies are dynamically generated through behavior analysis, which is not limited to the preset priorities declared by the service system, and the performance of the cross-network switching system is fully utilized to meet the transmission requirements of various services. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0030] Figure 1 A diagram schematically showing a system composition of an inter-network exchange service according to an embodiment of the present invention;

[0031] Figure 2 The flowchart schematically shows a method for controlling traffic policy of an inter-network exchange service according to an embodiment of the present invention. DETAILED DESCRIPTION

[0032] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0033] like Figure 1 and Figure 2 As shown, a cross-network exchange service traffic strategy control method of the present invention includes the following steps:

[0034] (a) The behavior analysis module of the policy controller routinely collects and analyzes the behavior of cross-network transmission services. It establishes a behavior model based on the data type, data level, data frequency and other information of the cross-network transmission services. It analyzes the interaction and correlation of the overall business behavior. Based on the current task scenario and the currently running transmission services, it predicts the business traffic in the next period of time, focusing on the high-priority services that may occur.

[0035] (b) The resource management module of the policy controller routinely collects the resource status of the cross-network switching processing system. Based on the current resource status and the prediction results generated by the behavior analysis, it predicts the resource usage in the next period of time with the timeline as a reference. Combined with the high-priority business traffic prediction of the behavior analysis, it reserves the minimum available resources for high-priority businesses and makes dynamic adjustments quickly when burst business traffic begins to be transmitted.

[0036] (c) The sender activates the cross-network transmission function for the service application, includes identity information in the filled-in application, involves identity authentication and identity authorization related content, clarifies the identities and permissions of both parties in the cross-network transmission service, and establishes an identity permission model based on the identity information and the transmission service type, and adds a preset traffic control policy for the transmission service in the policy management.

[0037] (d) After the sender establishes a physical connection with the sender agent, it prepares to start cross-network transmission at a random time and interacts with the cross-network exchange processing system through the sender agent.

[0038] (e) The sending agent has the ability to be compatible with the IPv4 / IPv6 dual protocol stack. It checks to determine whether the sending end has been transformed to IPv6 and whether its identity authentication information, transmission requirement information, etc. are included in the IPv6 format message header. If the information is included in the message header, it will go to (f); if the sending end has not been transformed to support only IPv4, or has been transformed but the message header has not been edited, it will go to (g).

[0039] (f) The sending agent receives the edited IPv6 message header, extracts the identity authentication information, transmission requirement information, etc., and sends it to the policy controller.

[0040] (g) The sending agent receives an IPv4 format message or an IPv6 message header that does not carry any information, distinguishes the message including identity authentication information and transmission requirement information by the message type, and forwards it to the policy controller.

[0041] (h) After receiving the identity authentication information, the name and address directory module of the policy controller starts identity authentication for the sender. After the authentication is passed, it enters (i). If the authentication fails, the cross-network exchange processing system will refuse to provide transmission services.

[0042] (i) The name and address directory module matches the service transmission requirements with the identity authority model, and checks and determines whether the bandwidth requirements, link delay, transmission reliability and other requirements provided by the service are in line with the identity authority. If the requirements submitted by the service exceed the scope of authority, it enters (j); if the requirements submitted by the service are within the scope of authority, it enters (k).

[0043] (j) The transmission requirements submitted by the business include the bandwidth required for transmission, the required link delay and the reliability of transmission. Based on the business type submitted when applying for the business, the identity authority of the communicating parties, the historical business behavior analysis, and the external environment information such as the current task scenario, a new round of empowerment is carried out on the identity authority model and the current business transmission requirements.

[0044] (k) Submit the transmission requirements submitted by the service to the policy management module. Based on the current task scenario and the subsequent available resources, the task transmission requirement queue is generated based on the identity authority model of the task, and the service flow control policy of the cross-network switching processing system is regenerated. Through the IPv6+ network slice, a dynamic and highly reliable transmission channel is provided for service transmission. The policy controller sends the generated flow control policy to the sending agent and receiving agent of the cross-network switching processing system.

[0045] (l) The actions of the policy controller in the above steps occur without the sender's awareness. After the sender establishes a connection and passes the identity authentication, it can start service transmission, or it can start service transmission at a random time after the connection is established.

[0046] (m) The sending agent checks the message type based on the message type. After receiving the service transmission message, it checks whether the service transmission message is an IPv6 formatted message. If the message is an IPv6 formatted message, it proceeds to (n); otherwise, it proceeds to (o).

[0047] (n) The sending proxy receives the IPv6 formatted message, removes the information about the transmission requirements in the original message header, edits and supplements the new message header to add the coloring information of the relevant flow control policy, and directs the message into the business slice based on the coloring and other related information in the message header, and hands it over to the cross-network switching processing node for controlled transmission.

[0048] (o) The sending agent receives the IPv4 formatted message, constructs an IPv6 message header with relevant information according to the flow control policy issued by the policy controller, directs the encapsulated message into the service slice, and hands it over to the cross-network switching processing node for controlled transmission.

[0049] (p) The cross-network exchange processing node builds a cross-network transmission channel, transmits the service data from the sending agent to the receiving agent through controllable exchange, and hands it over to the receiving agent for delivery and processing. It makes a judgment based on the protocol type filled in when the service is activated. If the receiving end supports the IPv6 protocol, it enters (q); if the receiving end only supports IPv4, it goes to (r).

[0050] (q) The receiving agent receives the IPv6 formatted message in the service slice, strips the message header from the message, restores it to a net data message and sends it to the receiving end.

[0051] (r) The receiving agent receives the IPv6 formatted message in the service slice, decapsulates the IPv6 message and restores it to an IPv4 message, and sends it to the receiving end.

[0052] Parts of the present invention that are not described in detail belong to the well-known technology in the art.

[0053] It should be noted that although the embodiments of the present invention described above are illustrative, they are not intended to limit the present invention, and therefore the present invention is not limited to the above specific embodiments. Without departing from the principles of the present invention, any other embodiments obtained by those skilled in the art under the guidance of the present invention are deemed to be within the protection of the present invention.

Claims

1. A method for controlling traffic strategy of cross-network exchange services, characterized in that: The following steps are involved: Step S1, construct a policy controller and limit the identities of both communicating parties; Step S2: The policy controller maintains the resource pool based on analysis and prediction; Step S3: After the sending end actively initiates the transmission service, the policy controller dynamically adjusts the flow control policy; Step S4: the inter-network exchange processing system processes the transmission service according to the strategy; Wherein, the policy controller includes a policy management module, a name and address directory module, a behavior analysis module, and a resource management module.

2. The cross-network exchange service traffic strategy control method according to claim 1, characterized in that: In the step S1, relevant information of the forwarding service is collected through manual preset means, and the relevant information includes at least the user identity information of both parties of the transmission service, the transmission service type, the transmission service demand and priority. A ledger is established through the name and address directory module, an authority model is established based on the identities of the sender and the receiver, and a generalized priority model is established based on the service type as the initial basic restriction for the subsequent control strategy.

3. The cross-network exchange service traffic strategy control method according to claim 2, characterized in that: In step S2, the behavior analysis module models the cross-network forwarding traffic behavior, collects the transmission protocol type, data level, data frequency, link delay, and interactive behavior characteristics of the service traffic, establishes a transmission behavior model for the service, and regularly compares and updates the difference analysis between the service reported requirements and the traffic control strategy through various classification aggregation algorithms in machine learning; Based on the incremental data generated by the operation of the cross-network exchange processing system, incremental training is performed based on the behavior model to achieve iterative updates and predict transmission behavior along the timeline.

4. The cross-network exchange service traffic strategy control method according to claim 3 is characterized in that: In step S2, the resource management module periodically queries the resource usage of the cross-network exchange processing system, introduces environmental variables including task scenarios combined with transmission behavior prediction of the business, predicts resource usage within a preset period of time based on a long sequence time model of machine learning, and maintains a dynamically changing available resource pool.

5. The cross-network exchange service traffic strategy control method according to claim 4, characterized in that: In step S3, the scenario types in which the transmitting end actively initiates the transmission service include: Type 1: The sender has not been upgraded and only supports the IPv4 protocol stack. After the sender establishes a connection with the cross-network switching processing system, it first actively initiates identity authentication. After the identity authentication is passed, service transmission begins at a random time. Type 2: After the sender is upgraded to IPv6, the IPv6 message header is not fully utilized. Only the address part of the message is upgraded to IPv6. The behavior of the sender after establishing a connection with the inter-network exchange processing system is consistent with the above IPv4 stage. Type 3: The sending end is upgraded to IPv6, and the application system is programmed for the IPv6 message header, which carries identity authentication information and transmission requirement information. The sending end randomly establishes a connection with the cross-network switching processing system to initiate business transmission.

6. The cross-network exchange service traffic strategy control method according to claim 5, characterized in that: The step S3 specifically includes: According to the different scenario types in which the sender actively initiates the transmission service, after the service demand of the sender reaches the sender agent, the service demand is submitted to the policy controller according to the different demand receiving types. The policy controller adjusts the service transmission policy based on the available resource pool and transmission service authority, and the policy adjustment results are sent to the sender agent and the receiver agent.

7. The method for controlling traffic strategy of cross-network exchange service according to claim 5, characterized in that: In step S4, after the sending agent receives the service transmission policy issued by the policy controller, it adjusts the logical channel of service transmission based on the IPv6+ network slicing technology and processes the scenario type of the transmission service.

8. The cross-network exchange service traffic strategy control method according to claim 7, characterized in that: In step S4, for type 1, IPv4 formatted messages, the sending end agent performs IPv6 encapsulation for the received messages, and performs operations such as dyeing to introduce the messages into the corresponding slices; For type 2 and type 3, IPv6 formatted packets, the sending agent directs traffic to the corresponding slices through coloring.

9. The cross-network exchange service traffic strategy control method according to claim 8, characterized in that: After receiving the message, the receiving agent performs the reverse operation of the sending agent to decode the message and forward it to the receiving end.

Images