A session data processing method, device and related network equipment

Receive session establishment requests from user equipment through session management function, obtain session detection rules and send them to UPF, realize control of non-compliant terminal service flow, solve the problem that the existing technology cannot control non-compliant terminal service flow, and ensure the network security and resource management.

CN114080053BActive Publication Date: 2025-01-07CHINA MOBILE COMM LTD RES INST +1
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202010809407.4
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2020-08-12
Publication Date
2025-01-07
Estimated Expiration
2040-08-12

AI Technical Summary

Technical Problem

The prior art cannot effectively control the service flow of non-compliant terminals, resulting in the network side being unable to manage and control the service flow of non-compliant terminals.

Method used

Receive session establishment requests from user equipment through session management function (SMF), obtain session detection rules, determine detection information and send it to user plane function (UPF). After the session is successfully established, UPF detects and controls the service data based on the detection information. , ensure that only data that complies with the rules is allowed to pass.

Benefits of technology

The management and control of the service flow of non-compliant terminals is achieved, ensuring that the network side can effectively manage and control non-compliant service flows, and prevent illegal access and resource waste.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114080053B_ABST
    Figure CN114080053B_ABST
Patent Text Reader

Abstract

An embodiment of the present invention discloses a session data processing method, device and related network equipment, the method comprising: a session management function (SMF) receives a session establishment request initiated by a user equipment (UE); the SMF obtains a session detection rule; the SMF determines detection information based on the session detection rule, and sends the detection information to a user plane function (UPF); the detection information comprises: first information and a processing mechanism for the first information; the first information comprises feature information of data allowed to be released.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of mobile communication technology, and in particular to a session data processing method, device and related network equipment. Background Art

[0002] With the development of the fifth generation mobile communication technology (5G), network slicing technology has emerged. 5G network slicing is an end-to-end logical dedicated network that provides specific network capabilities. After vertical industry users subscribe to and activate network slicing, the network side will generate a user equipment routing selection policy (URSP, UE Route Selection Policy), which will be sent to the UE (UserEquipment) after the user equipment (UE) registers with the network; when using application services, the UE selects a network slice based on the URSP.

[0003] However, the network currently does not control the business flow of non-compliant terminals. Summary of the invention

[0004] In order to solve the existing technical problems, the embodiments of the present invention provide a session data processing method, apparatus and related network equipment.

[0005] To achieve the above object, the technical solution of the embodiment of the present invention is implemented as follows:

[0006] In a first aspect, an embodiment of the present invention provides a session data processing method, the method being applied to a session management function (SMF); the method comprising:

[0007] The SMF receives a session establishment request initiated by a user equipment UE;

[0008] The SMF obtains a session detection rule;

[0009] The SMF determines detection information based on the session detection rule, and sends the detection information to the user plane function UPF; the detection information includes: first information and a processing mechanism for the first information; the first information includes characteristic information of data allowed to be released.

[0010] In the above solution, the SMF obtains the session detection rule, including:

[0011] The SMF sends a first request message to the policy control function PCF, and obtains the session detection rule sent by the PCF based on the first request message; the session detection rule is generated by the PCF based on the routing selection policy related to the session information of the session establishment request obtained from the unified data repository UDR and the session information of the session establishment request obtained from the SMF.

[0012] In the above solution, the SMF obtains the session detection rule, including:

[0013] The SMF sends a second request message to the PCF, and obtains a routing selection policy related to the session information of the session establishment request sent by the PCF based on the second request message; the routing selection policy is obtained by the PCF from the UDR;

[0014] A session detection rule is generated based on the routing policy and the session information of the session establishment request.

[0015] In the above scheme, the method also includes: when the session information of the session establishment request does not comply with the session detection rule, the SMF sends a first response message to the UE representing the rejection of session establishment for the session establishment request.

[0016] In the above scheme, the method also includes: when the session information of the session establishment request meets the session detection rule, the SMF sends a second response message to the UE for the session establishment request, indicating that the session establishment is successful.

[0017] In the above solution, the first response message also includes a cause value for indicating a reason for rejecting the session establishment; the cause value is used to instruct the UE to re-match the URSP.

[0018] In the above solution, the first response message also includes new session information and a session reestablishment indication, and the session reestablishment indication is used by the UE to re-initiate a session establishment request according to the new session information.

[0019] In the above solution, the session information includes at least one of the following: a slice identifier, a data network name (DNN), a session identifier, a session type, a service and session continuity mode, and a session management capability;

[0020] The session information further includes at least one of the following: a service descriptor, an application descriptor, an application address, and an application identifier of a service flow carried by the session corresponding to the session request.

[0021] In the above solution, the processing mechanism for the first information includes: a processing mechanism when the first information cannot be detected.

[0022] In the above solution, the detection information also includes relevant information of the detection duration.

[0023] In a second aspect, an embodiment of the present invention further provides a session data processing method, which is applied to PCF; the method includes:

[0024] The PCF obtains a session detection rule; the session detection rule is obtained after the UE initiates a session establishment request; the session detection rule is generated based on a routing policy related to the session information of the session establishment request and the session information of the session establishment request;

[0025] The PCF sends the session detection rule to the SMF; the session detection rule is used by the SMF to verify and match the session information of the session establishment request.

[0026] In the above solution, the PCF obtains the session detection rule, including:

[0027] After receiving the session information of the session establishment request sent by the SMF, the PCF queries the routing selection policy related to the session information of the session establishment request.

[0028] In a third aspect, an embodiment of the present invention further provides a session data processing method, which is applied to UPF; the method includes:

[0029] The UPF obtains detection information sent by the SMF; the detection information includes: first information and a processing mechanism for the first information; the first information includes feature information of data allowed to be released; the detection information is determined based on a session detection rule;

[0030] After the UE session is successfully established, the UPF detects the service data of the UE based on the detection information.

[0031] In the above solution, the processing mechanism of the first information includes: a processing mechanism when the first information cannot be detected.

[0032] In the above scheme, the UPF detects the service data of the UE based on the detection information, including: the UPF detects the service data of the UE based on the detection information, and only allows media streams and data packets containing the first information to pass.

[0033] In the above solution, the detection information is determined based on session detection rules.

[0034] In the above scheme, the UPF detects the service data of the UE based on the detection information, including: when the first information cannot be detected, sending the detection result to the SMF; the detection result is used to enable the SMF to release the session with the UE.

[0035] In the above scheme, the UPF detects the service data of the UE based on the detection information, including: when the first information is detected, stopping the detection of the first information.

[0036] In the above solution, the detection information also includes relevant information of the detection duration.

[0037] In a fourth aspect, an embodiment of the present invention further provides a session data processing device, which is applied to SMF; the device comprises: a first receiving unit, a first acquiring unit, a first determining unit and a first sending unit; wherein,

[0038] The first receiving unit is configured to receive a session establishment request initiated by a user equipment UE;

[0039] The first acquisition unit is used to obtain a session detection rule;

[0040] The first determining unit is used to determine the detection information based on the session detection rule;

[0041] The first sending unit is used to send the detection information to the UPF; the detection information includes: first information and a processing mechanism for the first information; the first information includes feature information of data allowed to be released.

[0042] In the above scheme, the first acquisition unit is used to send a first request message to the PCF, and obtain the session detection rule sent by the PCF based on the first request message; the session detection rule is generated by the PCF based on the routing selection policy related to the session information of the session establishment request obtained from the UDR and the session information of the session establishment request obtained from the SMF.

[0043] In the above scheme, the first acquisition unit is used to send a second request message to the PCF, and obtain a routing selection policy related to the session information of the session establishment request sent by the PCF based on the second request message; the routing selection policy is obtained by the PCF from the UDR; and a session detection rule is generated based on the routing selection policy and the session information of the session establishment request.

[0044] In the above scheme, the first sending unit is also used for, when the session information of the session establishment request does not comply with the session detection rule, the SMF sending a first response message to the UE representing the rejection of session establishment for the session establishment request.

[0045] In the above scheme, the first sending unit is also used for, when the session information of the session establishment request meets the session detection rule, the SMF sends a second response message to the UE for the session establishment request, indicating that the session establishment is successful.

[0046] In the above solution, the first response message also includes a cause value for indicating a reason for rejecting the session establishment; the cause value is used to instruct the UE to re-match the URSP.

[0047] In the above solution, the first response message also includes new session information and a session reestablishment indication, and the session reestablishment indication is used by the UE to re-initiate a session establishment request according to the new session information.

[0048] In the above solution, the session information includes at least one of the following: a slice identifier, a DNN, a session identifier, a session type, a service and session continuity mode, and a session management capability;

[0049] The session information further includes at least one of the following: a service descriptor, an application descriptor, an application address, and an application identifier of a service flow carried by the session corresponding to the session request.

[0050] In the above solution, the processing mechanism for the first information includes: a processing mechanism when the first information cannot be detected.

[0051] In the above solution, the detection information also includes relevant information of the detection duration.

[0052] In a fifth aspect, an embodiment of the present invention further provides a session data processing device, which is applied to PCF; the device comprises: a second acquisition unit and a second sending unit; wherein,

[0053] The second acquisition unit is used to obtain a session detection rule; the session detection rule is obtained after the user equipment UE initiates a session establishment request; the session detection rule is generated based on a routing selection strategy related to the session information of the session establishment request and the session information of the session establishment request;

[0054] The second sending unit is used to send the session detection rule to the SMF; the session detection rule is used by the SMF to verify and match the session information of the session establishment request.

[0055] In the above solution, the second acquisition unit is used to query the routing selection policy related to the session information of the session establishment request after receiving the session information of the session establishment request sent by the SMF.

[0056] In a sixth aspect, an embodiment of the present invention further provides a session data processing device, which is applied to UPF; the device comprises: a second receiving unit and a detection unit; wherein,

[0057] The second receiving unit is used to obtain the detection information sent by the SMF; the detection information includes: first information and a processing mechanism for the first information; the first information includes feature information of data allowed to be released; the detection information is determined based on a session detection rule;

[0058] The detection unit is used to detect the service data of the UE based on the detection information after the session of the UE is successfully established.

[0059] In the above solution, the processing mechanism of the first information includes: a processing mechanism when the first information cannot be detected.

[0060] In the above solution, the detection unit is used to detect the service data of the UE based on the detection information, and only allow the media stream and data packet containing the first information to pass.

[0061] In the above solution, the detection information is determined based on session detection rules.

[0062] In the above scheme, the device also includes a third sending unit, which is used to send a detection result to the SMF when the detection unit cannot detect the first information; the detection result is used to enable the SMF to release the session with the UE.

[0063] In the above solution, the detection unit is used to stop detecting the first information when the first information is detected.

[0064] In the above solution, the detection information also includes relevant information of the detection duration.

[0065] In the seventh aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in the first aspect, the second aspect or the third aspect of the embodiment of the present invention.

[0066] In an eighth aspect, an embodiment of the present invention further provides a network device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the method described in the first aspect, the second aspect, or the third aspect of the embodiment of the present invention are implemented.

[0067] The session data processing method, device and related network equipment provided by the embodiment of the present invention, on the one hand, receives a session establishment request initiated by the UE through the session management function (SMF); the SMF obtains the session detection rule; determines the detection information based on the session detection rule, and sends the detection information to the user plane function (UPF); the detection information includes: first information and a processing mechanism for the first information; the first information includes characteristic information of the data allowed to be released; after the UE session is successfully established, the UPF detects the service data of the UE based on the detection information. In this way, this embodiment determines the detection information through the session parameter verification rule and sends it to the UPF, and the UPF controls the service data based on the detection information, thereby realizing the network side's control over the service flow of non-compliant terminals. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] Figure 1 The process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 1 ;

[0069] Figure 2 The process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 2 ;

[0070] Figure 3 The process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 3 ;

[0071] Figure 4 The interactive process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 1 ;

[0072] Figure 5 The interactive process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 2 ;

[0073] Figure 6 The interactive process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 3 ;

[0074] Figure 7 The structure diagram of the session data processing device according to the embodiment of the present invention is as follows: Figure 1 ;

[0075] Figure 8 The structure diagram of the session data processing device according to the embodiment of the present invention is as follows: Figure 2 ;

[0076] Fig. 9 The structure diagram of the session data processing device according to the embodiment of the present invention is as follows: Figure 3 ;

[0077] Fig.10 The structure diagram of the session data processing device according to the embodiment of the present invention is as follows: Figure 4 ;

[0078] Fig.11 The figure is a schematic diagram of the hardware structure of the network device according to the embodiment of the present invention. DETAILED DESCRIPTION

[0079] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0080] An embodiment of the present invention provides a session data processing method, which is applied to SMF. Figure 1 The process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 1 ;like Figure 1 As shown, the method includes:

[0081] Step 101: SMF receives a session establishment request initiated by a user equipment UE;

[0082] Step 102: The SMF obtains session detection rules;

[0083] Step 103: The SMF determines detection information based on the session detection rule and sends the detection information to the UPF; the detection information includes: first information and a processing mechanism for the first information; the first information includes characteristic information of data allowed to be released.

[0084] In this embodiment, after the UE initiates a session establishment request, the SMF obtains the session detection rules and can determine the detection information based on the session detection rules. When the UE's session is successfully established, that is, the UE can access the application platform or server, the UPF can detect the UE's data packets or media streams based on the detection information obtained from the SMF.

[0085] The detection information may also be referred to as a user plane first information list or a user plane first information list of a session. The detection information is used to indicate which information (i.e., first information) should be detected during the detection cycle when the UPF detects the media stream / data packet of the user plane channel of the session, as well as the processing mechanism for the first information. The first information includes characteristic information of the data allowed to be released; exemplarily, the first information may include information such as access operations and access addresses. The first information may also be referred to as necessary information, etc.

[0086] In some optional embodiments, the detection information also includes information related to the detection duration; wherein the information related to the detection duration may be time-related parameters such as the detection duration and the detection period. The processing mechanism of the first information includes: a processing mechanism when the first information cannot be detected. Exemplarily, the processing mechanism for the first information may include, for example, reporting to the SMF, releasing media plane resources, etc. when the first information cannot be detected within the detection period. In this way, it is used to detect whether the UE uses the user plane channel of the session to access the application allowed by the network. If the application allowed by the network is not accessed in this user plane channel, the user plane resources are released.

[0087] Among them, the first information may also be called a user-side whitelist, and the content recorded in the user-side whitelist indicates the characteristic information of the data packets or media streams that are allowed to be released. Exemplarily, the first information may include the address of a specified application server. After the UPF receives the detection information, based on the indication of the first information in the detection information, it only allows the UE to access the address of the specified application server, and other application server addresses are not allowed to pass. In this way, if an unsigned application impersonates the identifier of a legitimate application (such as APP ID) to use the network slicing service, the server of the unsigned application cannot be accessed.

[0088] In this embodiment, during the process of UE initiating session establishment, SMF obtains session detection rules and verifies session information matching the session establishment request based on the session detection rules.

[0089] Among them, the session detection rule is used to detect the attributes or characteristics of the session establishment request initiated by the UE. Exemplarily, the session detection rule includes at least: 1) session information corresponding to the session that the SMF allows the user (ie, UE) to establish; 2) which network slices and which data network name (DNN) services the SMF allows the user to establish a session to use; 3) the service characteristics corresponding to the session, that is, the session can be used by services with which service characteristics. Among them, in some examples, the service characteristics can be represented by information such as the access address and registration address of the service; in other examples, the service characteristics can also be represented by a service descriptor. Among them, the service descriptor may include, for example, an application identifier (ID) or a fully qualified domain name (FQDN, Fully Qualified Domain Name), etc.

[0090] It can be understood that the session information includes at least one of the following: slice identifier, data network name (DNN, Data Network Name), session identifier, session type, service and session continuity mode (SSC mode, Service and Session Continuity mode), session management capability; the session information also includes at least one of the following: the service descriptor of the service flow carried by the session corresponding to the session request, the application descriptor, the application address, and the application identifier.

[0091] Among them, the slice identifier can be represented by single-network slice selection assistance information (S-NSSAI, Single-NetworkSlice Selection Assistance Information); the session identifier is specifically a protocol data unit (PDU, Protocol Data Unit) session identifier (PDU session ID); the session type can specifically be a requested PDU session type (Requested PDU Session Type); the session management capability can specifically be a session management capability (SM Capability) under the 5G system.

[0092] In some embodiments, the session establishment request initiated by the UE is encapsulated in an information element of a NAS message, reaches the AMF through the access network device, and is sent by the AMF to the SMF. Among them, since the AMF needs to select an SMF for the UE, the slice identifier and DNN related to the session used to select the SMF are placed in the NAS message. The AMF will send the slice identifier and DNN together with the encapsulated session establishment request to the SMF. It can be understood that when the SMF receives the session establishment request initiated by the UE, it also obtains the slice identifier and DNN related to the session sent by the UE from the AMF, thereby obtaining complete session information.

[0093] In some optional embodiments of the present application, the SMF obtains a session detection rule, including: the SMF sends a first request message to a policy control function (PCF), and obtains the session detection rule sent by the PCF based on the first request message; the session detection rule is generated by the PCF based on a routing selection policy related to the session information of the session establishment request obtained from a unified data repository (UDR) and the session information of the session establishment request obtained from the SMF.

[0094] In various embodiments of the present application, the routing selection strategy may also be referred to as URSP.

[0095] In this embodiment, the SMF receives a session establishment request and sends a first request message to the PCF; the first request message is used to request a session detection rule. After receiving the first request message, the PCF obtains the session detection rule by querying the routing selection policy related to the session information of the session establishment request from the UDR, and then combining the session information of the session establishment request reported by the SMF. Optionally, the PCF can obtain the session detection rule by taking the intersection of the routing selection policy and the session information. Further, the PCF sends the generated session detection rule to the SMF.

[0096] In some other optional embodiments of the present application, the SMF obtains the session detection rules, including: the SMF sends a second request message to the PCF, and obtains a routing selection policy related to the session information of the session establishment request sent by the PCF based on the second request message; the routing selection policy is obtained by the PCF from the UDR; and the session detection rules are generated based on the routing selection policy and the session information of the session establishment request.

[0097] In this embodiment, SMF receives a session establishment request and sends a second request message to PCF; the second request message is used to request a routing policy related to the session information of the session establishment request. After receiving the second request message, PCF queries the routing policy related to the session information of the session establishment request from UDR, and sends the routing policy related to the session information of the session establishment request to SMF. Furthermore, SMF combines the routing policy related to the session information of the session establishment request and the session information of the session establishment request to obtain the session detection rule. Optionally, SMF can obtain the session detection rule by taking the intersection of the routing policy and the session information.

[0098] It should be noted that the difference between the session detection rule and the URSP in this embodiment is that: the URSP contains priority information, while the session detection rule does not contain priority information; the URSP includes a default slice and a default DNN; while the session detection rule does not include a default slice and a default DNN; the URSP is not related to the capabilities of the SMF, while the session detection rule is related to the capabilities of the SMF; the session detection rule must include application information (such as application identification, application address), while the URSP may not include application information; the URSP needs to consider the update process, while the session detection rule does not need to consider the update process, because the AMF may select different SMFs when the UE requests session establishment, and different SMFs have different capabilities, so the obtained session detection rules may also be different.

[0099] In this embodiment, the SMF detects or verifies whether the session information of the session establishment request complies with the session detection rule. Exemplarily, the SMF may match the session detection rule based on the access address and registration address in the session information, or may match the session detection rule based on the service descriptor in the session information, and respond to the session establishment request based on the matching result.

[0100] In some optional embodiments, when the session information of the session establishment request does not comply with the session detection rule, the SMF sends a first response message representing session establishment rejection to the UE for the session establishment request.

[0101] In some embodiments, the first response message further includes a reason value indicating the reason for rejecting the session establishment; the reason value is used to instruct the UE to rematch the URSP. Exemplarily, the reason value may indicate at least one of the reasons such as slice identifier not recognized, slice identifier not available, DNN not recognized, DNN not available, etc.

[0102] In some other embodiments, the first response message also includes new session information and a session reestablishment indication, and the session reestablishment indication is used by the UE to re-initiate a session establishment request according to the new session information.

[0103] In some other optional embodiments, the method further includes: when the session information of the session establishment request meets the session detection rule, the SMF sends a second response message to the UE for the session establishment request, indicating that the session establishment is successful.

[0104] In this embodiment, when the session information of the session establishment request of the UE meets the session detection rule, the SMF allows the session to be established, and returns a second response message indicating successful session establishment to the UE. When the session information of the session establishment request of the UE does not meet the session detection rule, the SMF rejects the session establishment, and sends a first response message indicating the rejection of session establishment to the UE.

[0105] Based on the above embodiments, the embodiments of the present invention further provide a session data processing method, which is applied to PCF. Figure 2 The process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 2 ;like Figure 2 As shown, the method includes:

[0106] Step 201: The PCF obtains a session detection rule; the session detection rule is obtained after the UE initiates a session establishment request; the session detection rule is generated based on a routing policy related to the session information of the session establishment request and the session information of the session establishment request;

[0107] Step 202: The PCF sends the session detection rule to the SMF; the session detection rule is used by the SMF to verify and match the session information of the session establishment request.

[0108] In some optional embodiments of the present invention, the PCF obtains the session detection rule, including: after the PCF receives the session information of the session establishment request sent by the SMF, it queries the routing selection policy related to the session information of the session establishment request.

[0109] In this embodiment, after the PCF receives the session information of the session establishment request sent by the SMF, it obtains the routing selection policy related to the session information of the session establishment request from the UDR query, and generates a session detection rule based on the routing selection policy and the session information of the session establishment request obtained from the SMF.

[0110] Optionally, after receiving the first request message sent by the SMF, the PCF may send the session detection rule to the SMF.

[0111] In another embodiment, after receiving the second request message sent by SMF, PCF may also send the routing selection policy related to the session information of the session establishment request obtained by query to SMF, and SMF generates session detection rules based on the session information of the session establishment request and the routing selection policy.

[0112] Based on the above embodiments, an embodiment of the present invention further provides a session data processing method, which is applied to UPF. Figure 3 The process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 3 ;like Figure 3 As shown, the method includes:

[0113] Step 301: UPF obtains detection information sent by SMF; the detection information includes: first information and a processing mechanism for the first information; the first information includes feature information of data allowed to be released; the detection information is determined based on a session detection rule;

[0114] Step 302: After the UE session is successfully established, the UPF detects the service data of the UE based on the detection information.

[0115] In this embodiment, after the UE initiates a session establishment request, the SMF can determine the detection information based on the obtained session detection rules and send the detection information to the UPF. The UPF can obtain the detection information sent by the SMF and after the UE's session is successfully established, detect the UE's service data based on the detection information.

[0116] The detection information may also be referred to as a user plane first information list or a user plane first information list of a session. The detection information is used to indicate which information (i.e., first information) should be detected during the detection cycle when the UPF detects the media stream / data packet of the user plane channel of the session, as well as the processing mechanism for the first information. The first information includes characteristic information of the data allowed to be released; exemplarily, the first information may include information such as access operations and access addresses.

[0117] In some optional embodiments, the detection information also includes information related to the detection duration; wherein the information related to the detection duration may be time-related parameters such as the detection duration and the detection period. The processing mechanism of the first information includes: a processing mechanism when the first information cannot be detected within the detection period. Exemplarily, the processing mechanism of the first information may include, for example, reporting to the SMF, releasing media plane resources, etc. when the first information cannot be detected within the detection period. In this way, it is used to detect whether the UE uses the user plane channel of the session to access the application allowed by the network. If the application allowed by the network is not accessed in this user plane channel, the user plane resources are released.

[0118] Among them, the first information may also be called a user-side whitelist, and the content recorded in the user-side whitelist indicates the characteristic information of the data packets or media streams that are allowed to be released. Exemplarily, the first information may include the address of a specified application server. After the UPF receives the detection information, based on the indication of the first information in the detection information, it only allows the UE to access the address of the specified application server, and other application server addresses are not allowed to pass. In this way, if an unsigned application impersonates the identifier of a legitimate application (such as APP ID) to use the network slicing service, the server of the unsigned application cannot be accessed.

[0119] In some optional embodiments of the present invention, the UPF detects the service data of the UE based on the detection information, including: the UPF detects the service data of the UE based on the detection information, and only allows media streams and data packets containing the first information to pass.

[0120] In some optional embodiments, the UPF detects the service data of the UE based on the detection information, including: when the first information cannot be detected, sending the detection result to the SMF; the detection result is used to enable the SMF to release the session with the UE. Optionally, in the case where the detection information includes relevant information about the detection duration, the UPF detects the service data of the UE based on the detection information, including: when the first information cannot be detected within the duration range corresponding to the relevant information about the detection duration, sending the detection result to the SMF; the detection result is used to enable the SMF to release the session with the UE.

[0121] In some optional embodiments, the UPF detects the service data of the UE based on the detection information, including: when the first information is detected, the detection of the first information is stopped. Optionally, in the case where the detection information includes relevant information about the detection duration, the UPF detects the service data of the UE based on the detection information, including: when the first information is detected within the duration range corresponding to the relevant information about the detection duration, the detection of the first information is stopped.

[0122] The session data processing method according to the embodiment of the present invention is described below with reference to specific examples.

[0123] Figure 4 The interactive process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 1 ;like Figure 4 As shown, the method includes:

[0124] Step 401: UE sends a session establishment request; wherein the session establishment request includes session information of the session requested to be established; optionally, the session information may include a service descriptor of a service flow carried by the session.

[0125] The session establishment request reaches the AMF via the wireless access network, and the AMF selects an SMF for the UE and sends the session establishment request to the selected SMF.

[0126] Step 402: The SMF receives the session establishment request and sends a session control policy request (ie, the first request message in the aforementioned embodiment) to the PCF.

[0127] Step 403: The PCF queries the URSP (ie, the routing selection policy in the above embodiment) from the UDR.

[0128] Here, the PCF receives the session control policy request (i.e., the first request message in the aforementioned embodiment) sent by the SMF, and the session information of the session establishment request sent by the SMF in advance, and queries the URSP related to the session information of the session establishment request from the UDR.

[0129] Step 404: PCF generates session detection rules.

[0130] Here, PCF takes the intersection of the user's URSP and session information to obtain the session detection rule.

[0131] Step 405: The PCF sends the session control policy and session detection rules to the SMF.

[0132] Step 406: Determine whether the session information of the UE's session establishment request complies with the session detection rules. If the session information of the UE's session establishment request complies with the session detection rules, execute steps 407 to 408; if the session information of the UE's session establishment request does not comply with the session detection rules, execute steps 409 to 410.

[0133] Step 407: SMF sends detection information to UPF.

[0134] The detection information is determined based on a session detection rule. The detection information includes: a detection period, first information, and a processing mechanism for the first information; the first information includes feature information of data that is allowed to be released. Exemplarily, the processing mechanism for the first information includes: a processing mechanism when the first information cannot be detected within the detection period.

[0135] Step 408: SMF sends a response message indicating that the session is successfully established (i.e., the second response message in the aforementioned embodiment) to the UE; the response message indicating that the session is successfully established is sent to the UE via the AMF.

[0136] Step 409: SMF sends a response message representing the rejection of session establishment to UE (i.e., the first response message in the above embodiment); the above response message representing the successful establishment of the session is sent to UE via AMF. Optionally, the response message also includes a rejection reason value.

[0137] Step 410: After receiving the first response message, the UE re-matches the URSP based on the cause value in the first response message, and re-initiates a session establishment request to the SMF; wherein the session establishment request includes relevant information of the default slice and the default DNN.

[0138] Figure 5 The interactive process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 2 ;like Figure 5 As shown, this example Figure 4 Based on the example shown, after step 408, the UE accesses the application platform or server from the user plane, which may further include:

[0139] Step 411: The UPF detects the media stream / data packet of the UE based on the first information in the detection information, and only allows the media stream / data packet that complies with the first information to pass.

[0140] Step 412: UPF detects the media stream / data packet of the UE based on the detection information, and determines whether the first user plane information of the session is detected within the specified period; if the first information is not detected within the specified period, execute step 413: report the detection result to the SMF, and the detection result includes relevant indication that the first information is not detected.

[0141] Step 414: SMF releases the session.

[0142] Figure 6 The interactive process diagram of the session data processing method according to the embodiment of the present invention is as follows Figure 3 ;like Figure 6 As shown, this example Figure 4 or Figure 5 Based on the example shown, after step 408, the UE accesses the application platform or server from the user plane, which may further include:

[0143] Step 411: The UPF detects the media stream / data packet of the UE based on the first information in the detection information, and only allows the media stream / data packet that complies with the first information to pass.

[0144] Step 415: UPF detects the media stream / data packet of the UE based on the detection information, and determines whether the first information of the session is detected within the specified period; if the first information of the session is detected within the specified period, the detection of the first information is stopped.

[0145] An embodiment of the present invention further provides a session data processing device. Exemplarily, the session data processing device is applied in SMF. Figure 7 The structure diagram of the session data processing device according to the embodiment of the present invention is as follows: Figure 1 ;like Figure 7 As shown, the device includes: a first receiving unit 51, a first acquiring unit 52, a first determining unit 54 and a first sending unit 53; wherein,

[0146] The first receiving unit 51 is configured to receive a session establishment request initiated by a user equipment UE;

[0147] The first acquisition unit 52 is used to obtain a session detection rule;

[0148] The first determining unit 54 is used to determine the detection information based on the session detection rule;

[0149] The first sending unit 53 is used to send the detection information to the UPF; the detection information includes: first information and a processing mechanism for the first information; the first information includes feature information of data allowed to be released.

[0150] In some optional embodiments of the present invention, the first acquisition unit 52 is used to send a first request message to the PCF, and obtain a session detection rule sent by the PCF based on the first request message; the session detection rule is generated by the PCF based on a routing selection policy related to the session information of the session establishment request obtained from the UDR and the session information of the session establishment request obtained from the SMF.

[0151] In some optional embodiments of the present invention, the first acquisition unit 52 is used to send a second request message to the PCF, and obtain a routing selection policy related to the session information of the session establishment request sent by the PCF based on the second request message; the routing selection policy is obtained by the PCF from the UDR; and a session detection rule is generated based on the routing selection policy and the session information of the session establishment request.

[0152] In some optional embodiments of the present invention, the first sending unit 53 is further configured to, when the session information of the session establishment request does not comply with the session detection rule, cause the SMF to send a first response message to the UE representing a rejection of session establishment for the session establishment request.

[0153] In some optional embodiments of the present invention, the first sending unit 53 is further used for, when the session information of the session establishment request meets the session detection rule, the SMF sends a second response message to the UE for the session establishment request indicating that the session establishment is successful.

[0154] In some optional embodiments of the present invention, the first response message further includes a cause value for indicating a reason for rejecting the session establishment; the cause value is used to instruct the UE to re-match the URSP.

[0155] In some optional embodiments of the present invention, the first response message also includes new session information and a session reestablishment indication, and the session reestablishment indication is used by the UE to re-initiate a session establishment request according to the new session information.

[0156] In some optional embodiments of the present invention, the session information includes at least one of the following: a slice identifier, a DNN, a session identifier, a session type, a service and session continuity mode, and a session management capability;

[0157] The session information further includes at least one of the following: a service descriptor, an application descriptor, an application address, and an application identifier of a service flow carried by the session corresponding to the session request.

[0158] In some optional embodiments of the present invention, the processing mechanism for the first information includes: a processing mechanism when the first information cannot be detected.

[0159] In some optional embodiments of the present invention, the detection information also includes relevant information of the detection duration.

[0160] In an embodiment of the present invention, the first determination unit 54 in the device can be implemented by a central processing unit (CPU), a digital signal processor (DSP), a microcontroller unit (MCU) or a programmable gate array (FPGA) in actual applications; the first receiving unit 51, the first acquisition unit 52 and the first sending unit 53 in the device can be implemented by a communication module (including: basic communication kit, operating system, communication module, standardized interface and protocol, etc.) and a transceiver antenna in actual applications.

[0161] An embodiment of the present invention further provides a session data processing device, which is applied to PCF. Figure 8 The structure diagram of the session data processing device according to the embodiment of the present invention is as follows: Figure 2 ;like Figure 8 As shown, the device includes: a second acquisition unit 61 and a second sending unit 62; wherein,

[0162] The second acquisition unit 61 is used to obtain a session detection rule; the session detection rule is obtained after the user equipment UE initiates a session establishment request; the session detection rule is generated based on a routing selection strategy related to the session information of the session establishment request and the session information of the session establishment request;

[0163] The second sending unit 62 is used to send the session detection rule to the SMF; the session detection rule is used by the SMF to verify and match the session information of the session establishment request.

[0164] In some optional embodiments of the present invention, the second acquiring unit 61 is configured to query a routing selection policy related to the session information of the session establishment request after receiving the session information of the session establishment request sent by the SMF.

[0165] In an embodiment of the present invention, the second acquisition unit 61 in the device can be implemented by a CPU, a DSP, an MCU or an FPGA in actual applications; the second sending unit 62 in the device can be implemented by a communication module (including: a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna in actual applications.

[0166] An embodiment of the present invention further provides a session data processing device, which is applied to UPF. Fig. 9 The structure diagram of the session data processing device according to the embodiment of the present invention is as follows: Figure 3 ;like Fig. 9 As shown, the device comprises: a second receiving unit 71 and a detection unit 72; wherein,

[0167] The second receiving unit 71 is used to obtain the detection information sent by the SMF; the detection information includes: first information and a processing mechanism for the first information; the first information includes feature information of data allowed to be released; the detection information is determined based on the session detection rule;

[0168] The detection unit 72 is used to detect the service data of the UE based on the detection information after the session of the UE is successfully established.

[0169] In some optional embodiments of the present invention, the processing mechanism of the first information includes: a processing mechanism when the first information cannot be detected.

[0170] In some optional embodiments of the present invention, the detection unit 72 is used to detect the service data of the UE based on the detection information, and only allow the media stream and data packet containing the first information to pass.

[0171] In some optional embodiments of the present invention, the detection information is determined based on a session detection rule.

[0172] In some optional embodiments of the present invention, Fig.10 As shown, the device also includes a third sending unit 73, which is used to send a detection result to the SMF when the detection unit 72 cannot detect the first information; the detection result is used to enable the SMF to release the session with the UE.

[0173] In some optional embodiments of the present invention, the detection unit 72 is configured to stop detecting the first information when the first information is detected.

[0174] In some optional embodiments of the present invention, the detection information also includes relevant information of the detection duration.

[0175] In an embodiment of the present invention, the detection unit 72 in the device can be implemented by a CPU, a DSP, an MCU or an FPGA in actual applications; the second receiving unit 71 and the third sending unit 73 in the device can be implemented by a communication module (including: a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna in actual applications.

[0176] It should be noted that: the session data processing device provided in the above embodiment only uses the division of the above program modules as an example to illustrate when performing session data processing. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the session data processing device provided in the above embodiment and the session data processing method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0177] An embodiment of the present invention further provides a network device, which may specifically be the SMF, PCF or UPF in the aforementioned embodiment. Fig.11 FIG. 1 is a schematic diagram of the hardware structure of the network device according to an embodiment of the present invention. Fig.11 As shown, the network device includes a memory 82, a processor 81, and a computer program stored in the memory 82 and executable on the processor 81. When the processor 81 executes the program, the steps of the session data processing method applied to SMF, PCF or UPF described in the embodiment of the present invention are implemented.

[0178] Optionally, the network device may further include one or more network interfaces 83. The various components in the network device may be coupled together via a bus system 84. It is understood that the bus system 84 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 84 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, the bus system 84 is not described in detail. Fig.11 Various buses are labeled as bus system 84 .

[0179] It can be understood that the memory 82 can be a volatile memory or a non-volatile memory, and can also include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory, a magnetic surface memory, an optical disk, or a compact disc read-only memory (CD-ROM); the magnetic surface memory can be a disk memory or a tape memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM, SyncLink Dynamic Random Access Memory), and direct RAM bus random access memory (DRRAM, Direct Rambus Random Access Memory).The memory 82 described in the embodiments of the present invention is intended to include, but is not limited to, these and any other suitable types of memory.

[0180] The method disclosed in the above embodiment of the present invention can be applied to the processor 81, or implemented by the processor 81. The processor 81 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit in the processor 81 or the instruction in the form of software. The above processor 81 can be a general-purpose processor, a DSP, or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The processor 81 can implement or execute the methods, steps and logic block diagrams disclosed in the embodiment of the present invention. The general-purpose processor can be a microprocessor or any conventional processor, etc. In combination with the steps of the method disclosed in the embodiment of the present invention, it can be directly embodied as a hardware decoding processor to execute, or it can be executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a storage medium, which is located in the memory 82. The processor 81 reads the information in the memory 82 and completes the steps of the above method in combination with its hardware.

[0181] In an exemplary embodiment, the network device may be implemented by one or more application specific integrated circuits (ASIC), DSP, programmable logic device (PLD), complex programmable logic device (CPLD), FPGA, general purpose processor, controller, MCU, microprocessor, or other electronic components to execute the aforementioned method.

[0182] In an exemplary embodiment, the present invention also provides a computer-readable storage medium, such as a memory 82 including a computer program, and the computer program can be executed by a processor 81 of a network device to complete the steps of the aforementioned method. The computer-readable storage medium can be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disk, or CD-ROM; or it can be various devices including one or any combination of the above memories.

[0183] The computer-readable storage medium provided by the embodiment of the present invention stores a computer program thereon, and when the program is executed by a processor, the steps of the session data processing method applied to SMF, PCF or UPF described in the embodiment of the present invention are implemented.

[0184] The methods disclosed in several method embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments.

[0185] The features disclosed in several product embodiments provided in this application can be arbitrarily combined without conflict to obtain new product embodiments.

[0186] The features disclosed in several method or device embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments or device embodiments.

[0187] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.

[0188] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0189] In addition, all functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0190] A person of ordinary skill in the art can understand that: all or part of the steps of implementing the above-mentioned method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium, which, when executed, executes the steps of the above-mentioned method embodiment; and the aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, disks or optical disks.

[0191] Alternatively, if the above-mentioned integrated unit of the present invention is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present invention can be essentially or partly reflected in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, magnetic disks or optical disks.

[0192] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A session data processing method, characterized in that: The method is applied to a session management function SMF; the method comprises: The SMF receives a session establishment request initiated by a user equipment UE; The SMF obtains a session detection rule; the session detection rule is generated based on a routing policy related to the session information of the session establishment request and the session information of the session establishment request; The SMF determines detection information based on the session detection rule, and sends the detection information to the user plane function UPF; the detection information includes: first information and a processing mechanism for the first information; the first information includes characteristic information of data allowed to be released.

2. The method according to claim 1, characterized in that The SMF obtains the session detection rule, including: The SMF sends a first request message to the policy control function PCF, and obtains the session detection rule sent by the PCF based on the first request message; the session detection rule is generated by the PCF based on the routing selection policy related to the session information of the session establishment request obtained from the unified data repository UDR and the session information of the session establishment request obtained from the SMF.

3. The method according to claim 1, characterized in that The SMF obtains the session detection rule, including: The SMF sends a second request message to the PCF, and obtains a routing selection policy related to the session information of the session establishment request sent by the PCF based on the second request message; the routing selection policy is obtained by the PCF from the UDR; A session detection rule is generated based on the routing policy and the session information of the session establishment request.

4. The method according to claim 1, characterized in that: The method further comprises: When the session information of the session establishment request does not comply with the session detection rule, the SMF sends a first response message representing session establishment rejection to the session establishment request to the UE.

5. The method according to claim 1, characterized in that: The method further comprises: When the session information of the session establishment request meets the session detection rule, the SMF sends a second response message to the UE for the session establishment request, indicating that the session establishment is successful.

6. The method according to claim 4, characterized in that The first response message also includes a cause value for indicating a reason for rejecting the session establishment; the cause value is used to instruct the UE to re-match the URSP.

7. The method according to claim 4, characterized in that The first response message also includes new session information and a session reestablishment indication, where the session reestablishment indication is used by the UE to re-initiate a session establishment request according to the new session information.

8. The method according to claim 4 or 5, characterized in that: The session information includes at least one of the following: a slice identifier, a data network name DNN, a session identifier, a session type, a service and session continuity mode, and a session management capability; The session information further includes at least one of the following: a service descriptor, an application descriptor, an application address, and an application identifier of a service flow carried by the session corresponding to the session establishment request.

9. The method according to claim 1, characterized in that: The processing mechanism for the first information includes: a processing mechanism when the first information cannot be detected.

10. The method according to claim 1, characterized in that The detection information also includes relevant information of the detection duration.

11. A method for processing session data, characterized in that: The method is applied to PCF; the method comprises: The PCF obtains a session detection rule; the session detection rule is obtained after the UE initiates a session establishment request; the session detection rule is generated based on a routing policy related to the session information of the session establishment request and the session information of the session establishment request; The PCF sends the session detection rule to the SMF; the session detection rule is used by the SMF to verify and match the session information of the session establishment request.

12. The method according to claim 11, characterized in that The PCF obtains a session detection rule, including: After receiving the session information of the session establishment request sent by the SMF, the PCF queries the routing selection policy related to the session information of the session establishment request.

13. A method for processing session data, characterized in that: The method is applied to UPF; the method comprises: The UPF obtains detection information sent by the SMF; the detection information includes: first information and a processing mechanism for the first information; the first information includes feature information of data allowed to be released; the detection information is determined based on a session detection rule; the session detection rule is generated based on a routing selection policy related to session information of a session establishment request initiated by the UE and the session information of the session establishment request; After the UE session is successfully established, the UPF detects the service data of the UE based on the detection information.

14. The method according to claim 13, characterized in that The processing mechanism of the first information includes: a processing mechanism when the first information cannot be detected.

15. The method according to claim 13, characterized in that The UPF detects the service data of the UE based on the detection information, including: The UPF detects the service data of the UE based on the detection information, and only allows the media stream and data packet containing the first information to pass.

16. The method according to claim 13, characterized in that The UPF detects the service data of the UE based on the detection information, including: When the first information cannot be detected, a detection result is sent to the SMF; the detection result is used to enable the SMF to release the session with the UE.

17. The method according to claim 13, characterized in that The UPF detects the service data of the UE based on the detection information, including: When the first information is detected, the detection of the first information is stopped.

18. The method according to claim 13, characterized in that The detection information also includes relevant information of the detection duration.

19. A session data processing device, characterized in that: The device is applied to SMF; the device comprises: a first receiving unit, a first acquiring unit, a first determining unit and a first sending unit; wherein, The first receiving unit is configured to receive a session establishment request initiated by a user equipment UE; The first acquisition unit is used to obtain a session detection rule; the session detection rule is generated based on a routing selection strategy related to the session information of the session establishment request and the session information of the session establishment request; The first determining unit is used to determine the detection information based on the session detection rule; The first sending unit is used to send the detection information to the UPF; the detection information includes: first information and a processing mechanism for the first information; the first information includes feature information of data allowed to be released.

20. The device according to claim 19, characterized in that The first acquisition unit is used to send a first request message to the PCF, and obtain the session detection rule sent by the PCF based on the first request message; the session detection rule is generated by the PCF based on the routing selection policy related to the session information of the session establishment request obtained from the UDR and the session information of the session establishment request obtained from the SMF.

21. The device according to claim 19, characterized in that The first acquisition unit is used to send a second request message to the PCF, and obtain, based on the second request message, a routing selection policy related to the session information of the session establishment request sent by the PCF; The routing selection policy is obtained by the PCF from the UDR; a session detection rule is generated based on the routing selection policy and the session information of the session establishment request.

22. The device according to claim 19, characterized in that The first sending unit is further configured to, when the session information of the session establishment request does not comply with the session detection rule, cause the SMF to send a first response message to the UE indicating a rejection of the session establishment request for the session establishment request.

23. The device according to claim 19, characterized in that The first sending unit is further configured to, when the session information of the session establishment request meets the session detection rule, cause the SMF to send a second response message to the UE for the session establishment request indicating that the session establishment is successful.

24. The device according to claim 22, characterized in that The first response message also includes a cause value for indicating a reason for rejecting the session establishment; the cause value is used to instruct the UE to re-match the URSP.

25. The device according to claim 22, characterized in that The first response message also includes new session information and a session reestablishment indication, where the session reestablishment indication is used by the UE to re-initiate a session establishment request according to the new session information.

26. The device according to claim 22 or 23, characterized in that The session information includes at least one of the following: a slice identifier, a data network name DNN, a session identifier, a session type, a service and session continuity mode, and a session management capability; The session information further includes at least one of the following: a service descriptor, an application descriptor, an application address, and an application identifier of a service flow carried by the session corresponding to the session establishment request.

27. The device according to claim 19, characterized in that The processing mechanism for the first information includes: a processing mechanism when the first information cannot be detected.

28. The device according to claim 19, characterized in that The detection information also includes relevant information of the detection duration.

29. A session data processing device, characterized in that: The device is applied to PCF; the device comprises: a second acquisition unit and a second sending unit; wherein, The second acquisition unit is used to obtain a session detection rule; the session detection rule is obtained after the user equipment UE initiates a session establishment request; the session detection rule is generated based on a routing selection strategy related to the session information of the session establishment request and the session information of the session establishment request; The second sending unit is used to send the session detection rule to the SMF; the session detection rule is used by the SMF to verify and match the session information of the session establishment request.

30. The device according to claim 29, characterized in that The second acquisition unit is used to query the routing selection policy related to the session information of the session establishment request after receiving the session information of the session establishment request sent by the SMF.

31. A session data processing device, characterized in that: The device is applied to UPF; the device comprises: a second receiving unit and a detection unit; wherein, The second receiving unit is used to obtain the detection information sent by the SMF; the detection information includes: a detection period, first information and a processing mechanism for the first information; the first information includes feature information of data allowed to be released; the detection information is determined based on a session detection rule; the session detection rule is generated based on a routing selection strategy related to session information of a session establishment request initiated by the UE and the session information of the session establishment request; The detection unit is used to detect the service data of the UE based on the detection information after the session of the UE is successfully established.

32. The device according to claim 31, characterized in that The processing mechanism of the first information includes: a processing mechanism when the first information cannot be detected.

33. The device according to claim 31, characterized in that The detection unit is used to detect the service data of the UE based on the detection information, and only allow the media stream and data packet containing the first information to pass.

34. The device according to claim 31, characterized in that The device also includes a third sending unit, which is used to send a detection result to the SMF when the detection unit cannot detect the first information; the detection result is used to enable the SMF to release the session with the UE.

35. The device according to claim 31, characterized in that The detection unit is used to stop detecting the first information when the first information is detected.

36. The device according to claim 31, characterized in that The detection information also includes relevant information of the detection duration.

37. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, it implements the steps of the method described in any one of claims 1 to 10; or, when the program is executed by a processor, it implements the steps of the method described in claim 11 or 12; or, when the program is executed by a processor, it implements the steps of the method described in any one of claims 13 to 18.

38. A network device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the method described in any one of claims 1 to 10 are implemented; or, when the processor executes the program, the steps of the method described in any one of claims 11 or 12 are implemented; or, when the processor executes the program, the steps of the method described in any one of claims 13 to 18 are implemented.

Citation Information

Patent Citations

  • Illegal traffic processing method, device and system and storage medium

    CN111314347A