Integrated communication system and method based on new generation communication private network

Abstract

This invention discloses an integrated communication system and method based on a next-generation private communication network. The system includes an access network unit, an internal core network unit, and a virtual switch, all deployed on the same hardware processing board and sharing the same operating system kernel. The access network unit establishes a connection with the external core network unit through a first communication interface to form an external communication link. The access network unit connects to the virtual switch through a pre-configured second communication interface, and the internal core network unit connects to the virtual switch through a pre-configured third communication interface. Data forwarding via the virtual switch forms an internal communication link between the access network unit and the internal core network unit. This communication system, firstly, reduces assembly costs and overall hardware costs by using a shared single board and kernel, improving the resource utilization of a single board and making network construction simpler and more efficient; secondly, the two links do not interfere with each other, ensuring the security of internal and external data transmission.

Description

Technical Field

[0001] This invention relates to the field of private network communication technology, and in particular to an integrated communication system and method based on a new generation of private communication networks. Background Technology

[0002] 5G private networks (5G private networks) are a type of local area network (LAN) technology that leverages 5G technology to create dedicated networks with unified connectivity, optimized services, and secure communication within specific areas. 5G private networks can simultaneously support internal and external core network transmissions, which is crucial for ensuring network flexibility, security, and business continuity. This dual-network support capability allows enterprises (such as financial, healthcare, and government agencies) to maintain connectivity with external networks while preserving a highly secure and isolated internal network environment. When the external network fails or is attacked, the internal core network can serve as a backup, ensuring the continuity and stability of critical services. Furthermore, in scenarios requiring rapid response, such as disaster recovery and telemedicine, critical communications can be ensured even if the external network is unstable.

[0003] Currently, the main technical solutions for achieving dual-network communication in 5G private networks include: An integrated platform solution based on 5G edge computing services: Localizes communication capabilities through built-in communication enhancement network element technology and enhances network reliability through heterogeneous link aggregation technology.

[0004] 5G base station solution based on satellite backhaul technology: Utilizes satellite receiving terminals to provide backhaul for 5G base stations and connects to an external core network.

[0005] Public and private network communication solutions based on microwave backhaul technology: Dedicated broadband links are constructed using microwave directional transmission technology, supporting connections to built-in and external core networks.

[0006] Among them, the integrated platform based on 5G private network services stands out in reducing the threshold for users to use computing network services due to its advantages such as portable and flexible equipment, high integration, quick installation and high performance (high transmission efficiency, large user capacity, low service latency).

[0007] However, existing integrated 5G private network service platforms typically employ a multi-board design, where the integrated microcell and 5G core network (5GC) communicate with internal and external core networks through multiple board kernels. This existing approach has the following significant drawbacks: Complex network configuration and impact on electromagnetic compatibility: In the context of internal and external core network communication, multi-board designs require handling more interfaces and protocol conversions, relying on various hardware and software collaborations, thus increasing the complexity of network configuration. Simultaneously, multi-board designs increase signal transmission paths and the number of connectors, leading to an increased likelihood of electromagnetic interference and radiation, thereby affecting the electromagnetic compatibility (EMC) performance of the equipment.

[0008] Higher hardware costs: Multi-board designs involve more hardware components, increasing connector and assembly costs, especially during mass production, where hardware costs become more pronounced.

[0009] Therefore, improvements are needed to the current integrated platforms used for private network communication. Summary of the Invention

[0010] The purpose of this invention is to provide an integrated communication system and method based on a next-generation private communication network, which can reduce costs and complexity while efficiently supporting simultaneous communication between the access network and internal and external core networks under a simplified hardware architecture.

[0011] To achieve the above objectives, the present invention discloses an integrated communication system based on a new generation of private communication networks, including an access network unit, an internal core network unit, and a virtual switch, which are deployed on the same hardware processing board and share the operating system kernel of the hardware processing board. The access network unit establishes a connection with the external core network unit through a pre-configured first communication interface to form an external communication link between the access network unit and the external core network unit; The access network unit is connected to the virtual switch through a pre-configured second communication interface, and the internal core network unit is connected to the virtual switch through a pre-configured third communication interface. Through data forwarding by the virtual switch, an internal communication link is formed between the access network unit and the internal core network unit.

[0012] Preferably, it also includes a packet processing module, which is used to drive the physical network interface; the first communication interface is a kernel-user space interaction interface; the access network unit interacts with the packet processing module through the first communication interface, and communicates with the external core network unit by driving the physical network interface through the packet processing module.

[0013] Preferably, the third communication interface of the internal core network unit is connected to the virtual switch via a virtual Ethernet pair.

[0014] Preferably, the second communication interface of the access network unit includes an SCTP socket interface based on the Flow Control Transmission Protocol SCTP and a UDP socket interface based on the User Datagram Protocol UDP; the access network unit communicates with the virtual switch through the SCTP socket interface and the UDP socket interface.

[0015] Preferably, the access network unit is further configured to parse the access request message from the user terminal and obtain the Public Land Mobile Network Identifier (PLMN ID) from the access request message; If the PLMN ID matches a preset internal network identifier, the data is forwarded to the internal core network unit through the second communication interface; If the PLMN ID matches a preset external network identifier, the data is forwarded to the external core network unit through the first communication interface.

[0016] This invention also provides an integrated communication method based on a next-generation private communication network, applied to an integrated communication system. The system includes an access network unit, an internal core network unit, and a virtual switch, all deployed on the same hardware processing board and sharing the operating system kernel of the hardware processing board. The method includes: The access network unit identifies the communication service object; When the communication service object is an external core network unit, the access network unit encapsulates the service data and routes it directly to the external core network unit through a pre-configured first communication interface to maintain data transmission of the external communication link; When the communication service object is the internal core network unit, the access network unit sends the service data to the virtual switch through the pre-configured second communication interface. The virtual switch forwards the service data to the internal core network unit through the pre-configured third communication interface based on the kernel forwarding rules, so as to maintain the data transmission of the internal communication link.

[0017] Preferably, the communication system further includes a data packet processing module, which is used to drive the physical network interface; the first communication interface is a kernel-user space interaction interface. The access network unit interacts with the data packet processing module through the first communication interface to transmit the service data to the data packet processing module; The packet processing module drives the physical network interface to send the service data to the external core network unit.

[0018] Preferably, the third communication interface of the internal core network unit is connected to the virtual switch via a virtual Ethernet pair.

[0019] Preferably, the second communication interface of the access network unit includes an SCTP socket interface based on the Flow Control Transmission Protocol SCTP and a UDP socket interface based on the User Datagram Protocol UDP; the access network unit communicates with the virtual switch through the SCTP socket interface and the UDP socket interface; in the uplink service process, the access network unit sends service data to the virtual switch through the UDP socket interface, and the virtual switch forwards the service data to the virtual Ethernet interface of the internal core network unit, where it is received by the internal core network unit; In the downlink service process, the internal core network unit sends service data to the virtual Ethernet interface, which is then forwarded by the virtual switch to the UDP socket interface, where it is received and processed by the access network unit.

[0020] Preferably, the access network unit further parses the access request message from the user terminal to obtain the Public Land Mobile Network Identifier (PLMN ID) from the access request message; If the PLMN ID matches a preset internal network identifier, the data is forwarded to the internal core network unit through the second communication interface; If the PLMN ID matches a preset external network identifier, the data is forwarded to the external core network unit through the first communication interface.

[0021] Compared with existing technologies, the communication system provided by the above technical solution has several advantages. First, the access network unit, internal core network unit, and virtual switch are deployed on the same hardware processing board, effectively reducing the number of boards and thus significantly reducing the use of connectors, cables, and other auxiliary materials, lowering assembly costs and overall hardware costs, and achieving a high degree of equipment integration. Second, since each functional unit shares the operating system kernel and establishes an internal communication link through the virtual switch, the base station side and the core network side can communicate directly through a software-defined virtual network without complex physical interface connections or cross-board protocol conversions, even with a shared kernel. This not only improves the resource utilization of a single board but also avoids the complex interface configuration and hardware / software coordination issues found in multi-board solutions, making networking simpler and more efficient. Third, the external communication link and the internal communication link are independent of each other, allowing the system to maintain a connection with the external core network while maintaining an isolated internal network environment. When the external network fails, the internal link remains unaffected and can serve as a backup to ensure the continuity of critical services. Furthermore, the independence of the two links ensures the security of internal and external data transmission, meeting the dual requirements of flexibility and security for private networks. Attached Figure Description

[0022] Figure 1This is a diagram of the communication system architecture in an embodiment of the present invention.

[0023] Figure 2 This is a flowchart of the data service process between the base station and the internal 5GC in an embodiment of the present invention.

[0024] Figure 3 This is a flowchart illustrating the data service process between the base station and the external 5GC in an embodiment of the present invention. Detailed Implementation

[0025] To illustrate the technical content, structural features, objectives, and effects of the present invention in detail, the following description is provided in conjunction with the embodiments and accompanying drawings.

[0026] This embodiment provides an integrated communication system based on a new generation of private communication networks. It aims to solve the problems of complex networking, high hardware costs, and poor electromagnetic compatibility (EMC) performance caused by the multi-board design of existing integrated platforms for new generation private communication networks (including 5G private networks, 6G private networks, or other new generation 5G compatible communication networks). Through high integration and virtualization technology, it enables efficient and independent communication between the base station side and the core network side under a simplified hardware architecture.

[0027] As shown in the figure, the integrated communication system of this embodiment includes: Hardware processing boards: As the physical carrier of the system, they are the foundation for the deployment of all functional units.

[0028] Operating system kernel (such as Linux kernel): runs on the hardware processing board and provides a unified software runtime environment, resource management and scheduling services for all functional units running on it.

[0029] The hardware processing board is equipped with an access network unit, an internal core network unit, and a virtual switch, and the access network unit, the internal core network unit, and the virtual switch share the same operating system kernel.

[0030] The access network unit is responsible for handling functions on the radio access side, such as radio resource management and user equipment (UE) access control.

[0031] The internal core network unit provides localized core network functions, such as User Plane Functions (UPF) and Access and Mobility Management Functions (AMF), to support service processing within the private network.

[0032] The virtual switch, as the data forwarding hub within the system, is responsible for data exchange between access network units and internal core network units.

[0033] In this integrated communication system, two independent communication links are constructed to support communication with internal and external core networks: an external communication link and an internal communication link.

[0034] The access network unit establishes a connection with the external core network unit through a pre-configured first communication interface, thereby forming an external communication link between the access network unit and the external core network unit. This first communication interface is a logical or physical channel for data and signaling interaction between the access network unit and the external public network core network.

[0035] The access network unit connects to the virtual switch via a pre-configured second communication interface. Simultaneously, the internal core network unit connects to the virtual switch via a pre-configured third communication interface. Through the data forwarding function of the virtual switch, data exchange between the access network unit and the internal core network unit is achieved, thereby forming an internal communication link between them. The second and third communication interfaces are the logical interfaces for data interaction between the access network unit, the internal core network unit, and the virtual switch.

[0036] In this embodiment, the external communication link and the internal communication link are independent of each other. Therefore, the two links are logically and functionally isolated and do not interfere with each other. This independence ensures the system's flexibility, security, and business continuity when simultaneously supporting communication between internal and external core networks. For example, when the external network fails or is attacked, the internal communication link can still operate independently, ensuring the continuity of critical services.

[0037] The data transmission process of the aforementioned communication system includes: S1: The access network unit identifies the communication service object.

[0038] When an access network unit in a communication system needs to transmit data, it first identifies the target object of the current communication service. This target object can be an external core network unit or an internal core network unit.

[0039] S2: Data transmission is performed based on the communication service object.

[0040] When the communication service object is an external core network unit: The access network unit encapsulates the service data to be transmitted and routes it directly to the external core network unit through a pre-configured first communication interface. This process aims to maintain data transmission on the external communication link. In this case, the access network unit directly uses the connection established between itself and the external core network unit for data interaction, without needing to go through the system's internal virtual switch.

[0041] When the communication service object is the internal core network unit: The access network unit sends the service data to be transmitted to the virtual switch through a pre-configured second communication interface. Upon receiving the service data, the virtual switch forwards it to the internal core network unit through a pre-configured third communication interface based on preset kernel forwarding rules (e.g., according to the target address or port information). This process aims to maintain data transmission on the internal communication links. Forwarding via the virtual switch enables efficient and flexible data exchange between units within the system.

[0042] In this embodiment, the access network unit, the internal core network unit, and the virtual switch are deployed on the same hardware processing board. Compared with the multi-board design in the prior art, the number of boards is reduced, which in turn greatly reduces the use of connectors, cables and other auxiliary materials, reduces assembly costs and overall hardware costs, and achieves a high degree of equipment integration.

[0043] Secondly, each functional unit runs on top of the operating system kernel and establishes internal communication links through a virtual switch. This allows the base station side and the core network side to communicate directly through a software-defined virtual network without complex physical interface connections or cross-board protocol conversions, while sharing the kernel. This not only improves the resource utilization of a single board but also avoids the complex interface configuration and hardware / software coordination issues found in multi-board solutions, making networking simpler and more efficient.

[0044] Furthermore, internal data forwarding is achieved through virtual switches and pre-configured communication interfaces. This approach overcomes the limitations of the number and performance of physical network ports, enabling high-volume internal communication without occupying physical ports. Simultaneously, by reducing the physical signal transmission paths and connector count between boards, the possibility of electromagnetic interference and radiation is effectively reduced, thereby improving the system's electromagnetic compatibility (EMC) performance.

[0045] Furthermore, since the external communication links and the internal communication links are independent of each other, an isolated internal network environment can be maintained while keeping the connection with the external core network intact. When the external network fails, the internal links remain unaffected and can serve as a backup to ensure the continuity of critical services. At the same time, the independence of the two links ensures that the data transmission between the internal and external networks is secure, meeting the dual requirements of flexibility and security for private networks.

[0046] On the other hand, the access network unit is also configured to parse the access request message from the user terminal UE and obtain the Public Land Mobile Network Identifier (PLMN ID) in the access request message; If the PLMN ID matches the preset internal network identifier, it indicates that the UE wants to access the 5G core network deployed within the integrated platform, and then forwards the data to the internal core network unit through the second communication interface; If the PLMN ID matches a preset external network identifier, it indicates that the UE wishes to access the 5G core network connected through an external interface, and then forwards the data to the external core network unit through the first communication interface.

[0047] In another embodiment, the communication system further includes a packet processing module that runs in user space and is used to take over and drive the physical network interface on the hardware processing board. In this embodiment, the packet processing module specifically adopts the Data Plane Development Kit Polling Mode Driver (DPDK-PMD). DPDK-PMD can bypass the traditional operating system kernel network protocol stack and directly poll and process packets on the physical network interface in user space, thereby significantly reducing interrupt overhead and improving packet throughput.

[0048] The first communication interface is specifically the kernel-user space interaction interface, such as the KNI (Kernel NIC Interface). The KNI interface acts as a bridge between the access network unit running in kernel mode or based on the kernel protocol stack and the DPDK-PMD running in user mode.

[0049] Specifically, the access network unit (e.g., the control plane or data plane program on the base station side) does not directly operate the physical network card, but interacts with the DPDK-PMD through the first communication interface (KNI interface) to transmit the service data to the data packet processing module. The DPDK-PMD then directly drives the physical network interface to establish a physical connection with the external network and sends the service data to the external core network unit.

[0050] In response, on the one hand, the access network unit can use standard kernel network stack functions (such as routing, firewall, etc.) or send control plane commands through the KNI interface; on the other hand, by directly driving the physical interface through DPDK-PMD, high-speed forwarding of service data can be achieved, avoiding frequent data copying and context switching between kernel mode and user mode, thereby meeting the stringent requirements of 5G communication for high bandwidth and low latency.

[0051] In another embodiment, the third communication interface of the internal core network unit is connected to the virtual switch via a virtual Ethernet pair.

[0052] Specifically, the internal core network unit contains multiple functional network elements, mainly including Access and Mobility Management Functions (AMF) and User Plane Functions (UPF). These network elements run on top of the operating system kernel and are typically logically isolated through containerization or namespace technology.

[0053] The virtual Ethernet pair includes an ETH-AMF interface for AMF communication and an ETH-UPF interface for UPF communication.

[0054] In another embodiment, the second communication interface of the access network unit includes an SCTP socket interface based on the Flow Control Transmission Protocol (SCTP) and a UDP socket interface based on the User Datagram Protocol (UDP). The access network unit communicates with the virtual switch through the SCTP socket interface and the UDP socket interface.

[0055] The SCTP socket interface (SCTP_SOCKET) is primarily used to carry control plane signaling between the access network unit and the core network. In the 5G architecture, the N2 interface between the base station and the AMF is typically based on the SCTP protocol to ensure the reliability of signaling transmission. In this embodiment, the L3 (network layer) protocol stack of the access network unit is responsible for creating and maintaining this SCTP socket interface.

[0056] The UDP socket interface (UDP_SOCKET) is primarily used to carry user plane data between the access network unit and the core network. In the 5G architecture, the N3 interface between the base station and the UPF is typically based on the GTP-U protocol (running over UDP). In this embodiment, the access network unit calls a created UDP client program to send service data to the UDP socket interface, which is bound to the address of the virtual switch.

[0057] Therefore, the access network unit does not directly operate the physical hardware for internal communication, but connects to the virtual switch (also known as a virtual bridge) through the aforementioned SCTP socket interface and UDP socket interface. These socket interfaces are bound to the IP address of the virtual switch or located in the same virtual network segment during system initialization or service establishment, thereby establishing a logical connection link.

[0058] In the uplink service process, the access network unit sends service data to the virtual switch through the UDP socket interface, and the virtual switch forwards the service data to the virtual Ethernet interface of the internal core network unit, where it is received by the internal core network unit.

[0059] In the downlink service process, the internal core network unit sends service data to the virtual Ethernet interface, which is then forwarded by the virtual switch to the UDP socket interface, where it is received and processed by the access network unit.

[0060] In summary, this invention discloses an integrated communication system for a private communication network. The following section will take a 5G network as an example to provide a detailed explanation of the specific communication process of this system.

[0061] like Figure 1 and Figure 2 When the access network (base station) communicates with the internal core network (internal 5GC), the specific transmission process of control plane signaling and user plane data is as follows: Step 1: Control plane interface creation and binding.

[0062] The L3 layer (network layer, responsible for control plane signaling) on ​​the base station side first creates an SCTP interface (SCTP_SOCKET). Then, the base station binds this SCTP interface to the IP address of a pre-created virtual switch. This step establishes the entry point from the base station control plane to the virtual network.

[0063] Step 2: Initiate a cell access request (control plane interaction).

[0064] The base station initiates a cell access request message at L3 layer. This message is sent to the virtual switch via the bound SCTP interface. The virtual switch forwards the request message to the virtual control plane interface (ETH-AMF interface) of the internal 5GC according to the preset binding relationship.

[0065] Step 3: Establish NG interface and context (control plane interaction).

[0066] Upon receiving a request, the internal 5GC processes it and generates response messages (such as NG interface establishment response, UE access control information, security context establishment confirmation, etc.). These response messages are sent back to the virtual switch via the ETH-AMF interface. The virtual switch forwards them to the SCTP interface on the base station side, where they are finally received and processed by the L3 layer on the base station side, thus completing the establishment of the control plane link between the base station and the internal 5GC.

[0067] Step 4: Internal initialization of message passing.

[0068] After the control plane link is established, the L3 layer on the base station side sends an initialization message to the L2 layer (data link layer, responsible for user plane data) on the base station side. This initialization message contains the IP address information of the virtual switch, which is used to guide the L2 layer in establishing a data transmission channel.

[0069] Step 5: User plane interface creation and binding.

[0070] After receiving the initialization message, the base station's L2 layer creates a UDP interface (UDP_SOCKET) based on the bridge IP information and binds this UDP interface to the virtual switch's IP address. This step establishes the entry point from the base station's user plane to the virtual network.

[0071] Step 6: UE access.

[0072] When a UE accesses a base station, the base station creates a client program (udp_client) for sending and receiving user data. This program will utilize the UDP interface created above for subsequent data transmission.

[0073] Step 7: Uplink data transmission (UE -> internal 5GC).

[0074] When a UE initiates an uplink service, the base station receives the UE's data packet. The base station calls the data receive function to send the service packet to the virtual switch via the created UDP interface (UDP_SOCKET). After receiving the packet, the virtual switch forwards the data to the internal 5GC for processing via the user plane virtual interface (ETH-UPF interface) of the internal 5GC.

[0075] Step 8: Downlink data transmission (internal 5GC -> UE).

[0076] When the internal 5GC initiates a downlink service, it sends downlink data packets to the virtual switch via the ETH-UPF interface. The virtual switch, based on routing information, forwards the packets to the UDP interface (UDP_SOCKET) being listened to by the base station. After receiving the data through this interface, the base station sends it to the L2 layer protocol stack for processing (such as PDCP / RLC / MAC layer processing), and finally sends the packets to the UE via the radio interface.

[0077] Through the above process, the base station and the internal 5GC, under the single-board, shared-kernel architecture, utilize virtual switches, SCTP_SOCKET and UDP_SOCKET to achieve efficient communication between the control plane and the user plane, without needing to go through a physical network port, thus reducing hardware costs and improving transmission efficiency.

[0078] like Figure 1 and Figure 3 When the base station communicates with the external core network (External 5GC), the specific transmission process of control plane signaling and user plane data is as follows: Step 1: Control plane interface creation and binding.

[0079] The base station's L3 (network layer) first creates an SCTP interface (SCTP_SOCKET). Then, the base station binds this SCTP interface to the IP address of a pre-created virtual switch. This step establishes a communication endpoint for the base station within the virtual network.

[0080] Step 2: Initiate a cell access request.

[0081] The base station generates a cell access request message at Layer 3 and initiates the cell access procedure. This request message is first sent to the virtual switch.

[0082] Step 3: Data forwarding from kernel mode to user mode (KNI interface).

[0083] After receiving the cell access request message, the virtual switch forwards the message from the kernel space to the base station-side DPDK driver application running in user space through the pre-configured KNI interface.

[0084] Step 4: Send the message to the external core network.

[0085] After receiving the data, the DPDK driver application calls the DPDK-PMD (polling mode driver) driver. The DPDK-PMD driver operates the physical network card to directly send the cell access request packet to the external 5GC.

[0086] Step 5: Receive external core network response and establish link.

[0087] After receiving and processing the request, the external 5GC returns a response message (including NG interface establishment response, UE access control information, security context establishment confirmation, etc.). This response message reaches the base station side through the physical link, is received and processed by the DPDK-PMD driver, and finally completes the establishment of the control plane link between the base station and the external 5GC.

[0088] Step 6: Internally initialize message passing.

[0089] After the control plane link is established, the L3 layer on the base station side sends an initialization message to the L2 layer (data link layer) on the base station side. This initialization message contains the IP address information of the virtual switch, which is used to guide the L2 layer in establishing subsequent data transmission channels.

[0090] Step 7: User plane interface creation and binding.

[0091] After receiving the initialization message, the L2 layer on the base station side creates a UDP interface (UDP_SOCKET) based on the virtual switch IP information therein, and binds the UDP interface to the IP address of the virtual switch.

[0092] Step 8: UE access and client creation.

[0093] When a UE accesses a base station, the base station will create a client program (udp_client) for sending and receiving user data, in preparation for data transmission of services.

[0094] Step 9: Uplink data transmission (UE -> external 5GC).

[0095] When a UE initiates an uplink service, the base station receives the UE's data packet. The base station calls the data reception function to process the packet, and then directly sends the packet through the DPDK-PMD driver. During this process, the service data packet is sent to the external 5GC through the physical network interface.

[0096] Step 10: Downlink data transmission (external 5GC -> UE).

[0097] When an external 5GC initiates a downlink service, the downlink data packet arrives at the physical network interface of the base station. The base station directly receives the packet through the DPDK-PMD driver. The packet is then sent to the base station's protocol stack L2 layer for processing (such as decapsulation and RLC / MAC layer processing), and finally transmitted to the UE through the radio interface.

[0098] Through the above process, this embodiment achieves a system where the base station and the internal core network share a kernel. It utilizes the KNI interface to connect the kernel and user space, and combines this with the high-performance packet transmission and reception capabilities of DPDK, enabling the base station to flexibly establish independent communication links with the external core network. This solution achieves isolation and coexistence of internal and external network communication without adding extra physical boards, reducing hardware costs and improving the system's networking flexibility.

[0099] The above-disclosed embodiments are merely preferred embodiments of the present invention and should not be construed as limiting the scope of the present invention. Therefore, any equivalent variations made in accordance with the claims of the present invention are still within the scope of the present invention.

Claims

1. An integrated communication system based on a new generation of private communication networks, characterized in that, This includes access network units, internal core network units, and virtual switches that are deployed on the same hardware processing board and share the operating system kernel of the hardware processing board. The access network unit establishes a connection with the external core network unit through a pre-configured first communication interface to form an external communication link between the access network unit and the external core network unit; The access network unit is connected to the virtual switch through a pre-configured second communication interface, and the internal core network unit is connected to the virtual switch through a pre-configured third communication interface. Through data forwarding by the virtual switch, an internal communication link is formed between the access network unit and the internal core network unit.

2. The integrated communication system according to claim 1, characterized in that, It also includes a packet processing module, which drives the physical network interface; the first communication interface is a kernel-user space interaction interface; the access network unit interacts with the packet processing module through the first communication interface, and communicates with the external core network unit through the physical network interface driven by the packet processing module.

3. The integrated communication system according to claim 1, characterized in that, The third communication interface of the internal core network unit is connected to the virtual switch via a virtual Ethernet pair.

4. The integrated communication system according to claim 1, characterized in that, The second communication interface of the access network unit includes an SCTP socket interface based on the Flow Control Transmission Protocol SCTP and a UDP socket interface based on the User Datagram Protocol UDP; the access network unit communicates with the virtual switch through the SCTP socket interface and the UDP socket interface.

5. The integrated communication system according to claim 1, characterized in that, The access network unit is also configured to parse the access request message from the user terminal and obtain the Public Land Mobile Network Identifier (PLMNID) from the access request message. If the PLMN ID matches a preset internal network identifier, the data is forwarded to the internal core network unit through the second communication interface; If the PLMN ID matches a preset external network identifier, the data is forwarded to the external core network unit through the first communication interface.

6. An integrated communication method based on a new generation of private communication networks, applied to an integrated communication system, characterized in that: The system includes an access network unit, an internal core network unit, and a virtual switch, all deployed on the same hardware processing board and sharing the operating system kernel of the hardware processing board; the method includes: The access network unit identifies the communication service object; When the communication service object is an external core network unit, the access network unit encapsulates the service data and routes it directly to the external core network unit through a pre-configured first communication interface to maintain data transmission of the external communication link; When the communication service object is the internal core network unit, the access network unit sends the service data to the virtual switch through the pre-configured second communication interface. The virtual switch forwards the service data to the internal core network unit through the pre-configured third communication interface based on the kernel forwarding rules, so as to maintain the data transmission of the internal communication link.

7. The integrated communication method according to claim 6, characterized in that, The communication system further includes a data packet processing module, which is used to drive the physical network interface; the first communication interface is a kernel-user space interaction interface. The access network unit interacts with the data packet processing module through the first communication interface to transmit the service data to the data packet processing module; The packet processing module drives the physical network interface to send the service data to the external core network unit.

8. The integrated communication method according to claim 6, characterized in that, The third communication interface of the internal core network unit is connected to the virtual switch via a virtual Ethernet pair.

9. The integrated communication method according to claim 8, characterized in that, The second communication interface of the access network unit includes an SCTP socket interface based on the Flow Control Transmission Protocol SCTP and a UDP socket interface based on the User Datagram Protocol UDP. The access network unit communicates with the virtual switch through the SCTP socket interface and the UDP socket interface; in the uplink service process, the access network unit sends service data to the virtual switch through the UDP socket interface, and the virtual switch forwards the service data to the virtual Ethernet interface of the internal core network unit, where it is received by the internal core network unit. In the downlink service process, the internal core network unit sends service data to the virtual Ethernet interface, which is then forwarded by the virtual switch to the UDP socket interface, where it is received and processed by the access network unit.

10. The integrated communication method according to claim 6, characterized in that, The access network unit also parses the access request message from the user terminal and obtains the Public Land Mobile Network Identifier (PLMN ID) from the access request message. If the PLMN ID matches a preset internal network identifier, the data is forwarded to the internal core network unit through the second communication interface; If the PLMN ID matches a preset external network identifier, the data is forwarded to the external core network unit through the first communication interface.

Images