Communication control device, storage medium, communication control system, and communication control method

Abstract

A communication control device, a storage medium, a communication control system, and a communication control method. The communication control device includes a processor that performs the following processes: associating a local network slice with a wide area network segment, where the local network slice is a network slice provided on the network offered by a wireless communication device, and the wide area network segment is formed by grouping an external network used as a dedicated line that is different from the network offered by the wireless communication device; and setting a transmission path for data sent from a terminal using the local network slice between the local network slice and the wide area network segment.

Description

Technical Field

[0001] The present invention relates to a communication control device, a storage medium, a communication control system, and a communication control method. Background Art

[0002] Patent Document 1 discloses a network system having: a gateway device set on a network; a physical computer connected to the gateway device; a virtualization unit that allocates computer resources of the physical computer to a plurality of virtual machines; and a management computer that manages the physical computer, the virtualization unit, and the gateway device. The management computer has: a network mapping unit that sets a virtual network connected to the gateway device and other gateway devices via the network and a VLAN connected to the virtual network to control the gateway device; and a virtualization management unit that controls the virtualization unit according to the setting of the network mapping unit. The virtualization unit has: a virtual port connected to the virtual machine; and a virtual switch that sets a VLAN connecting the virtual port and the gateway device. The gateway device mutually converts communication between the VLAN and the virtual network according to an instruction from the network mapping unit and communicates with other gateway devices connected via the virtual network.

[0003] Patent Document 1: Japanese Patent Laid-Open No. 2016-100739

[0004] In order to construct an intranet that uses the 5th generation mobile communication system called "5G" to connect between sites, for example, a gateway device may be constructed on an external network such as a WAN to control data transmission.

[0005] However, in the case of transmission control by a gateway device, sometimes data that can be transmitted within the same 5G may be temporarily sent to the gateway device, and after the gateway device determines the transmission destination, the data is returned from the gateway device to the data source, that is, 5G.

[0006] Therefore, the communication volume of the WAN will increase due to data that can be transmitted within the 5G without passing through the WAN. Summary of the Invention

[0007] An object of the present invention is to provide a communication control device, a storage medium, a communication control system, and a communication control method that can reduce the communication volume of an external network more than the case of setting a gateway device on an external network connected to a wireless communication device and asking the gateway device for the communication destination every time communication is performed.

[0008] The communication control device according to the first aspect includes a processor that performs the following processes: associating a local network slice with a wide area network segment, where the local network slice is a network slice provided on the network provided by a wireless communication device, and the wide area network segment is formed by grouping an external network used as a dedicated line that is different from the network provided by the wireless communication device; and setting a transmission path for data sent from a terminal using the local network slice between the local network slice and the wide area network segment.

[0009] The communication control device according to the second aspect, in the communication control device according to the first aspect, the processor performs the following processes: further associating a local network segment formed by grouping the local network slice with the association between the local network slice and the wide area network segment; and setting a transmission path for data sent from a terminal using the local network slice among the local network slice, the local network segment, and the wide area network segment.

[0010] The communication control device according to the third aspect, in the communication control device according to the second aspect, the association is defined based on the association among a local network slice identifier for identifying the local network slice, a local network segment identifier for identifying the local network segment, and a wide area network segment identifier for identifying the wide area network segment.

[0011] The communication control device according to the fourth aspect, in the communication control device according to any one of the first to third aspects, the processor displays the transmission path of data sent from the terminal on a display device.

[0012] The communication control device according to the fifth aspect, in the communication control device according to any one of the first to fourth aspects, when transmitting data sent from the terminal to an external network different from the wide area network segment, the processor does not associate the local network slice used by the terminal with other network segments including the wide area network segment.

[0013] The storage medium according to the sixth aspect stores a communication control program for causing a computer to perform the following processes: associating a local network slice with a wide area network segment, where the local network slice is a network slice provided on the network provided by a wireless communication device, and the wide area network segment is formed by grouping an external network used as a virtual dedicated line that is different from the network provided by the wireless communication device; and setting a transmission path for data sent from a terminal using the local network slice between the local network slice and the wide area network segment.

[0014] The communication control system according to the seventh aspect includes: a wireless communication device that only allows pre-set terminals to connect; a wide-area communication device that is connected to the wireless communication device through a line and performs communication control through software; and a communication control device that sets the association between the local network slice and the wide-area network segment in the wireless communication device and the wide-area communication device, and controls the transmission path of data sent from a terminal using the local network slice. The local network slice is a network slice set on the network provided by the wireless communication device, and the wide-area network segment is formed by grouping an external network different from the network provided by the wireless communication device and used as a dedicated line.

[0015] The communication control method according to the eighth aspect includes the following steps: establishing an association between a local network slice and a wide-area network segment, where the local network slice is a network slice set on the network provided by a wireless communication device, and the wide-area network segment is formed by grouping an external network different from the network provided by the wireless communication device and used as a virtual dedicated line; and setting the transmission path of data sent from a terminal using the local network slice between the local network slice and the wide-area network segment.

[0016] Advantages of the Invention

[0017] According to the first, sixth, seventh, and eighth aspects, the following advantages are achieved: It can reduce the communication volume of the external network more than the case of setting a gateway device on the external network connected to the wireless communication device and querying the communication destination to the gateway device every time communication is performed.

[0018] According to the second aspect, the following advantage is achieved: It can realize data transmission within the local network segment.

[0019] According to the third aspect, the following advantage is achieved: It can represent the transmission path of data by associating each identifier.

[0020] According to the fourth aspect, the following advantage is achieved: It can confirm the set transmission path of data.

[0021] According to the fifth aspect, the following advantage is achieved: It can transmit the data of a terminal using the local network slice to the Internet. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] The embodiments of the present invention will be described in detail with reference to the following drawings.

[0023] Figure 1 It is a diagram showing an example of the system structure of a communication control system;

[0024] Figure 2 It is a diagram showing an example of a transmission policy table;

[0025] Figure 3 is a diagram showing an example of the structure of a local 5G network;

[0026] Figure 4 is a diagram showing an example of the structure of the main part of the electrical system in the orchestrator;

[0027] Figure 5 is a flowchart showing an example of the setting process of the data transmission path executed by the orchestrator.

[0028] Symbol Explanation

[0029] 1 - Communication control system, 2 - UE, 4 - DU, 6 - CU, 8 - RAN, 10 - CN, 11 - Local network management department, 12 - Authentication department, 13 - C - Plane, 14 - U - Plane, 15 - DN, 20 - Orchestrator, 21 - Input unit, 22 - System management department, 23 - Network indication department, 24 - Network management department, 25 - Display unit, 26 - Transmission policy table, 30 - SDWAN, 31 - Wide area network management department, 40 - Computer, 41 - CPU, 42 - ROM, 43 - RAM, 44 - Non - volatile memory, 45 - I / O, 46 - Bus, 47 - Communication unit, 48 - Input unit, 49 - Display unit. Detailed Embodiment

[0030] Hereinafter, this embodiment will be described with reference to the accompanying drawings. In addition, in all the drawings, the same reference numerals are assigned to the same components and the same processes, and repeated descriptions are omitted.

[0031] Figure 1 is a diagram showing an example of the system structure of the communication control system 1 according to this embodiment. The communication control system 1 includes: a CN (Core Network) 10 of a 5th - generation mobile communication system (hereinafter referred to as "5G system"); an orchestrator 20 connected to the CN 10 via an external network (for example, the Internet or a WAN (Wide Area Network)) different from the network provided by the 5G system (hereinafter referred to as "5G network"); and an SDWAN (Software Defined WAN) 30, which is an example of an external network connected to the orchestrator 20 and the CN 10.

[0032] The CN 10 is a wireless communication device including a control device responsible for communication control in the 5G system, and is composed of, for example, various switches or subscriber information management devices and other devices for providing 5G services. The terminal (hereinafter referred to as "UE2") used by the user is connected to the CN 10 through a wireless communication line provided by the 5G system, and the CN 10 provides 5G services to the UE2.

[0033] There are 5G networks: a public 5G network, which is constructed and operated by a communication carrier, and any user who has signed a contract with the communication carrier can use it; and a local 5G network, which is constructed and operated by an organization such as an enterprise other than the communication carrier or a local government, and is only available for users within the organization. The CN10 involved in this embodiment is classified as a local 5G network.

[0034] CN10 is, for example, constructed at each physically remote site, such as Tokyo and Osaka. In Figure 1 the case of the example of the communication control system 1 shown, two local 5G networks, CN10A constructed at site A and CN10B constructed at site B, are shown.

[0035] Each CN10 includes a local network management unit 11 and an authentication unit 12.

[0036] The authentication unit 12 performs an authentication process for each UE2 that requests to connect to the CN10. This authentication process determines whether the UE2 is a terminal permitted to connect to the CN10. In the case where the UE2 is a terminal permitted to connect to the CN10, the authentication unit 12 assigns an IP address and a network slice to the UE2.

[0037] A network slice is a technology as follows: virtuallly divide resources such as the processing capacity of devices for providing 5G services or the network bandwidth of a server or a router, etc., and combine the divided virtual resources to construct a virtual network (slice) on the local 5G network between the UE2 and the CN10. The network slice constructed on the local 5G network between the UE2 and the CN10 is an example of the local network slice involved in this embodiment. In addition, for each site, a slice ID for identifying the network slice is assigned to the network slice assigned to the UE2, and the identification and designation of the network slice are performed through the slice ID. The slice ID is an example of a local slice network identifier.

[0038] For example, the MSISDN (Mobile Station International Subscriber Directory Number) is used to identify the UE2 that requests to connect to the CN10. The MSISDN is a mobile phone number uniquely assigned to the UE2.

[0039] The authentication unit 12 associates the MSISDN of the UE2 that has successfully passed the authentication with the slice ID of the network slice assigned to the UE2, and sends it to the orchestrator 20 described later.

[0040] For connection to an external network, CN10 is equipped with a CN router, which has at least one or more wireless ports connected to a network slice in the local 5G network and at least one or more WAN ports connected to the external network.

[0041] The local network management unit 11 sets a VLAN (Virtual Local Area Network) for the CN router and sets a transmission policy (also called a "routing policy") that defines the data transmission path, thereby constructing a virtual network connecting UE2 and the external network. The data transmission policy is generated by the orchestrator 20, and the local network management unit 11 sets the data transmission path in the CN router according to the transmission policy received from the orchestrator 20. The CN router is a virtual router composed of software, but it can also be composed of hardware.

[0042] SDWAN30 is a wide-area communication device that can be uniformly managed by software and controls the data transmission between sites for each UE2 according to the transmission policy. In SDWAN30, a virtual network is constructed on the physical network by setting routers, etc. according to the transmission policy, realizing secure communication that connects sites as dedicated lines. Hereinafter, the virtual network provided by SDWAN30 is called a "Wide Area Network (WAN)".

[0043] Similar to CN30, SDWAN30 is also built at each site and is connected to the CN10 within the site through a LAN cable. In Figure 1 In the example of the communication control system 1 shown, there is SDWAN30A at site A and SDWAN30B at site B. Each SDWAN30 is also connected to the orchestrator 20.

[0044] The WAN control device that controls SDWAN30 includes a wide area network management unit 31.

[0045] For connection between sites, SDWAN30 is equipped with a WAN router, which has at least one or more LAN ports connected to the CN10 within the site and at least one or more WAN ports connected to the wide area network for connection between sites.

[0046] The wide area network management unit 31 sets a VLAN and VXLAN (Virtual eXtensible Local Area Network) for the WAN router and sets a transmission policy that defines the data transmission path, thereby constructing a virtual network connecting the CN10 within the site and the CN10 built at other sites.

[0047] The data transmission strategy is generated by the orchestrator 20, and the WAN management department 31 sets the data transmission path in the WAN router according to the transmission strategy received from the orchestrator 20. The WAN router is a virtual router composed of software, but it can also be composed of hardware.

[0048] The orchestrator 20 is a communication control device that controls the data transmission path sent from the UE2 assigned to the network slice in the CN10, and it includes an input unit 21, a system management unit 22, a network instruction unit 23, a network management unit 24, and a display unit 25.

[0049] The input unit 21 accepts the setting content input by the user using an input device such as a keyboard or a mouse, and notifies the accepted setting content to the system management unit 22 and the network management unit 24.

[0050] There are various types of information in the setting content. The input unit 21 accepts, for example, the system management information that defines the system structure of the communication control system 1 and the data transmission strategy of the communication control system 1 from the user.

[0051] The system management information includes, for example, the host names of the CN10 and the SDWAN30, the slice IDs of the network slices used in each CN10, the VLAN information set in the CN router and the WAN router, and the VXLAN information set in the WAN router.

[0052] The VLAN information is information for setting a virtual LAN segment independently of the physical connection method of the network. The virtual LAN segment is formed by grouping network slices. This virtual LAN segment is called a "local network segment". The VLAN information includes a VID (Virtual LAN IDentifier) that identifies the local network segment to which the network slice represented by the slice ID belongs. That is, the VID is an example of a local network segment identifier. The network slices assigned the same VID belong to the same local network segment.

[0053] The VXLAN information is information for setting a virtual WAN segment independently of the physical connection method of the network. The virtual WAN segment is formed by grouping the wide area network. This virtual WAN segment is called a "wide area network segment". The VXLAN information includes a VNI (VXLAN Network Identifier) that identifies the wide area network segment to which the wide area network belongs. That is, the VNI is an example of a wide area network segment identifier. The wide area networks assigned the same VNI belong to the same wide area network segment.

[0054] On the other hand, the transmission strategy includes the data transmission path information that associates the network slice, the local network segment, and the wide area network segment assigned to the UE2, and it is input for each site.

[0055] The input unit 21 notifies the system management unit 22 of the system management information and notifies the network management unit 24 of the transmission policy.

[0056] If the system management information is received from the input unit 21, the system management unit 22 stores the system management information and, upon the request of the network instruction unit 23, notifies the network instruction unit 23 of the system management information.

[0057] The network instruction unit 23 uses the system management information obtained from the system management unit 22 to instruct the CN routers of each CN10 represented by the host name to set VLAN information. Specifically, the network instruction unit 23 instructs the local network management unit 11 of CN10 to associate the network slice represented by the indicated slice ID with each wireless port of the CN router. Also, the network instruction unit 23 instructs the local network management unit 11 of CN10 to set the VID associated with each network slice for each WAN port of the CN router to construct a local network segment.

[0058] Moreover, the network instruction unit 23 uses the system management information obtained from the system management unit 22 to instruct the WAN routers of each SDWAN30 represented by the host name to set VLAN information and VXLAN information. Specifically, the network instruction unit 23 instructs the wide area network management unit 31 of SDWAN30 to set the VID for each LAN port of the WAN router to construct a local network segment, and to set the VNI associated with the wide area network connected to the WAN port for each WAN port of the WAN router to construct a wide area network segment.

[0059] Also, the network instruction unit 23 obtains the transmission policy of each site received by the input unit 21 from the network management unit 24 and instructs the CN10 and SDWAN30 of each site to set the transmission policy.

[0060] Figure 2 It is a diagram showing an example of the transmission policy table 26 that defines the transmission policy for a specific site. As Figure 2 shown, the transmission policy table 26 defines the transmission policy for specifying the transmission path of the specified data by associating the MSISDN, slice ID, VID, and VNI.

[0061] In Figure 2In the transmission policy table 26, setting the MSISDN to the transmission policy with number A means that the data sent to CN10 through the network slice represented by the slice ID = "1" is the data sent from the UE2 represented by number A. Since the VNI is set to "1", the data is transmitted from SDWAN30 to other sites using the wide area network represented by VNI = "1". And it means that to transmit data from CN10 to SDWAN30, it is only necessary to transmit the data of the network slice represented by the slice ID = "1" from the WAN port of the CN router with the VID set to "1".

[0062] In Figure 2 In the transmission policy table 26, in the transmission policy with the MSISDN set to number B, the VNI is not set, but the slice ID and VID are set respectively. Therefore, this transmission policy means that the data sent from the UE2 with number B to CN10 through the network slice represented by the slice ID = "2" only needs to be transmitted to the local network segment with the VID set to "1". That is, the data sent from the UE2 with number B will not be transmitted to SDWAN30 but will turn back within CN10 and be transmitted to the destination UE2 belonging to the same local network segment within the same site designated as the transmission destination.

[0063] In addition, in the transmission policy table 26, "-" means that the value of the corresponding column is not set.

[0064] In Figure 2 In the transmission policy table 26, in the transmission policy with the MSISDN set to number C, the VID and VNI are not set, but only the slice ID is set. At this time, it means that the data sent from the UE2 with number C to CN10 through the network slice represented by the slice ID = "3" does not know which local network segment it should be sent to, so the data is transmitted to SDWAN30, which is the upper-level network for CN10, and the transmission destination is entrusted to be resolved. And it means that in SDWAN30, the VNI is not associated with the transmitted data either, so it does not know which wide area network segment it should be transmitted to, so it is transmitted to the Internet instead of the wide area network for connecting between sites.

[0065] The transmission policy table 26 also defines the transmission policy of the site that receives the data transmitted from other sites.

[0066] For example, in the case of receiving data sent to the UE2 with the MSISDN set to number A from the wide area network segment with VNI = "1", by Figure 2In the transmission policy table 26, refer to the transmission policy with the MSISDN set as number A. SDWAN 30 transmits the received data from the WAN port of the WAN router with VNI = "1" to the LAN port with VID = "1". Moreover, as long as CN 10 transmits the received data from the WAN port of the CN router with VID = "1" to the network slice represented by the slice ID = "1", the data can be transmitted to the UE 2 assigned number A.

[0067] In addition, the association between the MSISDN and the slice ID in the transmission policy is set in the transmission policy by the network management unit 24 based on the association notified to the orchestrator 20 when UE 2 is successfully authenticated by the authentication unit of CN 10. Therefore, the user can also not associate the MSISDN with the slice ID.

[0068] The display unit 25 displays the transmission path of the data sent from UE 2 on the display unit 49 described later. The transmission path of the data can display the association between the MSISDN, the slice ID, the VID, and the VNI in the form of characters as in the transmission policy table 26, but can also be displayed in the form of a diagram like the lines connecting UE 2, CN 10, and SDWAN 30.

[0069] Next, the local 5G network including CN 10 will be described in detail.

[0070] Figure 3 It is a diagram showing a structural example of the local 5G network. The local 5G network is configured to include a RAN (Radio Access Network) 8 and a CN 10.

[0071] RAN 8 is a base station network connected to UE 2 wirelessly, and is divided into a DU (Distributed Unit) 4 that provides a wireless antenna function and a CU (Centralized Unit) 6 that provides a base station function. CU 6 is connected to at least one DU 4. Since the communication between it and UE 2 is carried out via DU 4, DU 4 is sometimes called a distributed node and CU 6 is called a centralized node. The local 5G network can include a plurality of RAN 8s.

[0072] On the other hand, CN 10 is configured to include a C-Plane 13 and a U-Plane 14, and the C-Plane 13 and the U-Plane 14 are connected to the CU 6 of each RAN 8.

[0073] C-Plane 13 is a functional unit responsible for the communication control of the local 5G network, establishing or severing the communication with UE 2. U-Plane 14 is a functional unit responsible for data transmission, performing data transmission under the control of C-Plane 13. Specifically, the SMF (Session Management Function) of C-Plane 13 selects and controls the UPF (User Plane Function) for data transmission in U-Plane 14. That is, C-Plane 13 controls U-Plane 14 according to the transmission policy, thereby realizing data transmission that follows the transmission policy. As a result of performing data transmission control, the data that has not been transmitted within CN 10 is sent to the external network DN 15. DN 15 includes, for example, the Internet and SDWAN 30.

[0074] Next, a structural example of the main part of the electrical system in the orchestrator 20 will be described.

[0075] Figure 4 It is a diagram showing a structural example of the main part of the electrical system in the orchestrator 20. The orchestrator 20 is constituted by using, for example, a computer 40.

[0076] The computer 40 has a CPU (Central Processing Unit) 41 responsible for Figure 1 processing of each functional unit of the orchestrator 20 shown, a ROM (Read Only Memory) 42 storing a communication control program that enables the computer 40 to function as the orchestrator 20, a RAM (Random Access Memory) 43 used as a temporary working area for the CPU 41, a non-volatile memory 44, and an input / output interface (I / O) 45. And the CPU 41, ROM 42, RAM 43, non-volatile memory 44, and I / O 45 are respectively connected to each other via a bus 46.

[0077] The non-volatile memory 44 is an example of a storage device that can maintain the stored information even when the power supplied to the non-volatile memory 44 is cut off. For example, it is used for a semiconductor memory, but can also be used for a hard disk. Information that needs to be stored all the time even when the power of the orchestrator 20 is cut off, such as system management information and the transmission policy table 26, is stored in the non-volatile memory 44.

[0078] The non-volatile memory 44 does not necessarily need to be built into the computer 40. For example, it can be a portable storage device that can be attached to and detached from the computer 40.

[0079] For example, a communication unit 47, an input unit 48, and a display unit 49 are connected to the I / O 45.

[0080] The communication unit 47 is connected to DN15 and has a communication protocol for data communication between it and CN10 and SDWAN30.

[0081] The input unit 48 is a device that accepts a user's instruction and notifies it to the CPU 41. For example, buttons, touch panels, keyboards, and mice can be used. When accepting an instruction by voice, a microphone is sometimes used as the input unit 48.

[0082] The display unit 49 is an example of a device that visually displays the information processed by the CPU 41. For example, a liquid crystal display or an organic EL (Electro Luminescence) display can be used. The display unit 25 of the scheduler 20 displays the data transfer path in the display unit 49.

[0083] The various units connected to the I / O 45 are only examples. For example, units different from those Figure 4 shown can also be connected to the I / O 45 as needed, such as an image forming unit that forms an image on a recording medium such as paper. Also, when the scheduler 20 is set up in an unmanned data center or the like, the input unit 48 and the display unit 49 are not necessarily required. At this time, the scheduler 20 can accept a user's instruction through the communication unit 47 and send the information that the scheduler 20 wants to display in the display unit 49 to another device through the communication unit 47 for display in the other device.

[0084] Next, the setting process of the data transfer path in the scheduler 20 will be described.

[0085] Figure 5 It is a flowchart showing an example of the data transfer path setting process executed by the CPU 41 of the scheduler 20 when a setting instruction for the data transfer path is accepted from the user.

[0086] The communication control program that defines the data transfer path setting process is stored in the ROM 42 of the scheduler 20 in advance. The CPU 41 of the scheduler 20 reads the communication control program stored in the ROM 42 to execute the data transfer path setting process.

[0087] In addition, system management information for each site and the transmission policy table 26 are stored in advance in the non-volatile memory 44 of the scheduler 20. The scheduler 20 sets VLAN information and VXLAN information for the CN10 and SDWAN30 of each site according to the system management information. Here, as an example, the setting process of the data transfer path for a specific site will be described.

[0088] In step S10, the CPU 41 reads out the transmission policy table 26 from the non-volatile memory 44, and sets, according to the transmission policy table 26, the transmission policy represented by the association between the slice ID and the VID for CN10. Thereby, the transmission path between the slice network and the local network segment is set.

[0089] In step S20, the CPU 41 determines whether the setting of the transmission policy for CN10 in step S10 is successful. CN10 notifies the orchestrator 20 of the setting status through the external network, and this setting status indicates whether the setting of the transmission policy is successful. Therefore, the CPU 41 determines whether the setting of the transmission policy for CN10 is successful by referring to the setting status.

[0090] In the case where the transmission policy for CN10 is successfully set, the process proceeds to step S30.

[0091] In step S30, the CPU 41 sets, according to the transmission policy table 26 read out from the non-volatile memory 44 in step S10, the transmission policy represented by the association between the VID and the VNI for SDWAN30. Thereby, the transmission path between the local network segment and the wide area network segment is set.

[0092] In step S40, the CPU 41 determines whether the setting of the transmission policy for SDWAN30 in step S30 is successful. SDWAN30 notifies the orchestrator 20 of the setting status through the external network, and this setting status indicates whether the setting of the transmission policy is successful. Therefore, the CPU 41 determines whether the setting of the transmission policy for SDWAN30 is successful by referring to the setting status.

[0093] In the case where the transmission policy for SDWAN30 is successfully set, the process proceeds to step S50.

[0094] At this time, since the transmission policies for CN10 and SDWAN30 are successfully set respectively, in step S50, the CPU 41 displays the setting result indicating the successful setting of the transmission policy on the display unit 49 and ends Figure 5 the setting process of the data transmission path shown.

[0095] On the other hand, in the determination process of step S20, in the case where it is determined that the setting of the transmission policy for CN10 fails, or, in the determination process of step S40, in the case where it is determined that the setting of the transmission policy for SDWAN30 fails, the process proceeds to step S60.

[0096] At this time, since the transmission policies for both CN10 and SDWAN30 cannot be set, in step S60, the CPU 41 displays the setting result indicating the failure of the transmission policy setting on the display unit 49 and endsFigure 5 Setting process of the data transmission path shown

[0097] In addition, the CPU 41 does not necessarily need to display the setting result on the display unit 49, and can also send the setting result to other devices through the communication unit 47 so that the setting result can be confirmed in other devices. Moreover, the CPU 41 can also print the setting result onto a recording medium through the image forming unit

[0098] In Figure 5 the setting process of the data transmission path for a specific site is described, but in the case where there are multiple sites, the CPU 41 performs the setting process of the data transmission path shown Figure 5 for each site to set the transmission path of the data in each site

[0099] In the CN 10 where the transmission policy is set by the orchestrator 20, it is possible to determine whether the data should be folded back within the CN 10 or the SDWAN 30 should be entrusted to transmit the data in order to transmit the data to the UE 2 as the transmission destination. Therefore, since the SDWAN 30 is entrusted to perform the transmission control in the CN 10, the process of temporarily transmitting the data that should be folded back within the CN 10 to the SDWAN 30 is not performed

[0100] Moreover, in the SDWAN 30, by using the orchestrator 20 to set the transmission policy, it is also possible to determine whether the data should be transmitted to the wide area network or the data should be transmitted to the Internet

[0101] Moreover, VLAN and VXLAN communicate between the second layer (data link layer) represented as "L2" in the OSI reference model, so the network between the network slices is implemented in the form of a virtual L2 network. Therefore, there is no need to set and configure an L3 switch for data transmission on the third layer (network layer) represented as "L3" in the OSI reference model. Moreover, compared with the case of data transmission through L3, when data is transmitted through the lower L2, the load of the transmission process can be reduced, and the time required for the transmission process can also be shortened

[0102] As above, taking the communication control system 1 that provides 5G services as an example, the setting process of the data transmission path is described, but the applicable scope of the setting process of the data transmission path involved in this embodiment is not limited to the 5G system. As long as it is a communication system that uses network slices, of course, the setting process of the data transmission path involved in this embodiment can also be applied to communication systems other than the 5G system, such as communication systems before the fourth-generation mobile communication system or communication systems after the sixth-generation mobile communication system that may be considered for introduction in the future

[0103] As described above, the present invention has been described using embodiments, but the present invention is not limited to the scope described in the embodiments. Within the scope not departing from the gist of the present invention, multiple types of changes or improvements can be made to the embodiments, and the manner in which such changes or improvements are made is also included in the technical scope of the present invention. For example, the order of processing can be changed within the scope not departing from the gist of the present invention.

[0104] Moreover, in the embodiment, as an example, a method of setting a data transmission path by software has been described. However, for example, it can also be implemented in an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array), or a PLD (Programmable Logic Device) to perform processing equivalent to Figure 5 the processing shown in the flowchart and perform the processing by hardware. At this time, compared with the case where the setting process of the data transmission path is implemented by software, high-speed processing can be achieved.

[0105] In this way, the CPU 41 of the orchestrator 20 can also be replaced, for example, with a dedicated processor provided specifically for a specific process, such as an ASIC, an FPGA, a PLD, a GPU (Graphics Processing Unit), or an FPU (Floating Point Unit).

[0106] In addition to the method implemented by a single CPU 41, the processing of the orchestrator 20 according to the embodiment can also be implemented by a plurality of CPUs 41. Moreover, the processing of the orchestrator 20 according to the embodiment can also be implemented through the cooperation of processors located physically far away.

[0107] Furthermore, in the above embodiment, a method in which the communication control program is installed in the ROM 42 has been described, but it is not limited thereto. The communication control program according to the embodiment can also be provided in a manner recorded in a storage medium readable by the computer 40. For example, it can also be provided in a manner of recording the communication control program in an optical disc such as a CD (Compact Disc)-ROM or a DVD (Digital Versatile Disc)-ROM. Also, it can be provided in a manner of recording the communication control program in a portable semiconductor memory such as a USB (Universal Serial Bus) memory or a memory card.

[0108] Moreover, the orchestrator 20 can also obtain a communication control program from other devices via the DN15.

[0109] The above-described embodiments of the present invention are provided for purposes of illustration and description. Additionally, the embodiments of the present invention do not comprehensively and exhaustively cover the present invention and do not limit the present invention to the disclosed manner. Obviously, various modifications and variations are apparent to those skilled in the art to which the present invention pertains. The present embodiment is selected and described in order to most readily illustrate the principles of the present invention and its applications. Thus, other technicians in the technical field can understand the present invention through various modified examples optimized for specific uses assumed to be various embodiments. The scope of the present invention is defined by the above claims and their equivalents.

Claims

1. A communication control device, comprising a processor, The processor performs the following processing: Associate a local network slice with a wide area network segment, where the local network slice is a network slice set up on the network provided by a wireless communication device, and the wide area network segment is formed by grouping an external network different from the network provided by the wireless communication device and used as a dedicated line; and Set the transmission path of data sent from a terminal using the local network slice between the local network slice and the wide area network segment, where The processor performs the following processing: Further establish an association between the local network segment formed by grouping the local network slice and the association between the local network slice and the wide area network segment; and Set the transmission path of data sent from a terminal using the local network slice between the local network slice, the local network segment, and the wide area network segment.

2. The communication control device according to claim 1, wherein The association is defined according to the association between the local network slice identifier for identifying the local network slice, the local network segment identifier for identifying the local network segment, and the wide area network segment identifier for identifying the wide area network segment.

3. The communication control device according to claim 1 or 2, wherein The processor displays the transmission path of data sent from the terminal on a display device.

4. The communication control device according to claim 1 or 2, wherein When transmitting data sent from the terminal to an external network different from the wide area network segment, the processor does not establish an association between the local network slice used by the terminal and other network segments including the wide area network segment.

5. A storage medium storing a communication control program that causes a computer to perform the following processing: Establish an association between a local network slice and a wide area network segment, where the local network slice is a network slice provided on a network provided by a wireless communication device, and the wide area network segment is formed by grouping an external network used as a virtual private line different from the network provided by the wireless communication device, including further establishing an association between the local network segment formed by grouping the local network slice and the association between the local network slice and the wide area network segment; and Set the transmission path of data sent from a terminal using the local network slice between the local network slice, the local network segment, and the wide area network segment.

6. A communication control system, comprising: A wireless communication device that only allows pre-set terminals to connect; A wide area communication device that is connected to the wireless communication device through a line and performs communication control through software; and A communication control device that sets the association between the local network slice and the wide area network segment in the wireless communication device and the wide area communication device, and controls the transmission path of data sent from a terminal using the local network slice, where the local network slice is a network slice provided on the network provided by the wireless communication device, and the wide area network segment is formed by grouping an external network used as a dedicated line different from the network provided by the wireless communication device, including: Further establish an association between the local network segment formed by grouping the local network slice and the association between the local network slice and the wide area network segment; and Set a transmission path for data sent from a terminal using the local network slice among the local network slice, the local network segment, and the wide area network segment.

7. A communication control method, comprising the following steps: Establish an association between a local network slice and a wide area network segment, where the local network slice is a network slice set on a network provided by a wireless communication device, and the wide area network segment is formed by grouping an external network different from the network provided by the wireless communication device and used as a virtual private line, including further establishing an association between a local network segment formed by grouping the local network slice and the association between the local network slice and the wide area network segment; and Set a transmission path for data sent from a terminal using the local network slice among the local network slice, the local network segment, and the wide area network segment.

Images