Information processing method, device, control plane network element and proxy network element
By deploying proxy network elements between the control surface network elements and edge user surface network elements of core network devices, signaling forwarding, monitoring and isolation is realized, and network security and maintenance difficulties caused by open SMF and UPF interfaces are solved. Reduced the impact and maintenance workload of cyberattacks.
Patent Information
- Application Number
- CN202010960426.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2020-09-14
- Publication Date
- 2025-02-07
- Estimated Expiration
- 2040-09-14
AI Technical Summary
Opening the N4 interface between SMF and UPF or the Sx interface between SAE GW-C and SAE GW-U can lead to increased network security and maintenance difficulties, especially with flexible deployment of edge SAE GW-U or UPF.
By deploying proxy network elements between the control surface network elements of core network devices and edge user surface network elements, signaling forwarding, monitoring and isolation can be achieved, the possibility of network attacks is reduced, and the need for frequent adjustments to the existing network structure is reduced. .
It effectively reduces the impact range of edge user network elements on network attacks, reduces the workload of maintenance personnel, and avoids the problem of affecting the online use of services due to untimely deployment.
Smart Images

Figure CN114189843B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of communication technology, and in particular to an information processing method, device, control plane network element and proxy network element. Background Art
[0002] The 5G packet network architecture mainly includes: Radio Access Network (RAN), Application Function (AF);
[0003] Session Management Function (SMF): session management, IP address allocation, UPF selection and control, and delivery of flow policies and routing to UPF;
[0004] User Plane Function (UPF): packet routing and forwarding, user plane policy enforcement, lawful interception, traffic reporting, flow marking, and flow caching;
[0005] Access and Mobility Management Function (AMF): registration management, connection management, mobility management, and reachability management;
[0006] Policy Control Function (PCF): overall network policy management and access policy management;
[0007] Unified Data Management (UDM): Generates authentication vectors, processes user subscription permanent identifiers (SUPI), manages network function entities (NF) serving users, and manages contracts.
[0008] With the promotion of the centralized unit (CU) separation architecture, regardless of whether the user uses 4G access or 5G access, the user's data packet forwarding function is undertaken by the user plane (user plane packet data gateway PGW-U or UPF).
[0009] In recent years, with the continuous rise and development of vertical industries, many vertical industry users have different requirements for local traffic processing, low latency, data isolation, etc. However, the gateways (SAE GW-U) or UPF currently deployed by operators have many problems such as the deployment position is too high, resulting in detours in routing, and the performance of a single device is too high, resulting in high costs. Therefore, in the future, we will consider using SAE GW-U or UPF, which is more cost-effective, close to the edge, and can be flexibly deployed.
[0010] However, if the N4 interface between SMF and UPF (or the Sx interface between SAE GW-C and SAE GW-U) is opened in the future, the following issues still need to be considered:
[0011] (1) When edge SAE GW-U or UPF is deployed in the future, the N4 / Sx interfaces of all SMF / SAE GW-C network elements (centrally deployed by operators) in the pool need to be opened. Once attacked, it may affect the services of one or even several provinces, which will undoubtedly pose a huge threat to the security of the existing network operation.
[0012] (2) The SAE GW-U or UPF that can be deployed by vertical industries in the future is flexible and changeable. If the existing network structure needs to be adjusted every time a SAE GW-U or UPF is added or removed, on the one hand, it will greatly increase the workload of maintenance personnel, and on the other hand, it may affect the online use of services due to untimely deployment. Summary of the invention
[0013] The purpose of the embodiments of the present invention is to provide an information processing method, device, control plane network element and proxy network element to solve the problems of security, maintenance, etc. caused by opening the N4 interface between SMF and UPF or the Sx interface between SAE GW-C and SAE GW-U in the prior art.
[0014] In order to solve the above problem, an embodiment of the present invention provides an information processing method, which is applied to a control plane network element of a core network device, wherein the control plane network element is connected to at least one edge user plane network element through a proxy network element, and the method includes:
[0015] According to the first port number allocated by the proxy network element to the first edge user plane network element, a mapping relationship between the first edge user plane network element and the first port number is established; or,
[0016] According to the node ID of the first edge user plane network element, a mapping relationship between the first edge user plane network element and the node ID is established.
[0017] Wherein, establishing a mapping relationship between the first edge user plane network element and the first port number according to the first port number allocated by the proxy network element to the first edge user plane network element includes:
[0018] receiving a first coupling establishment request message sent by a proxy network element, where the first coupling establishment request message is determined by the proxy network element according to a second coupling establishment request message sent by a first edge user plane network element, and a source port of the first coupling establishment request message is the first port number;
[0019] According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is established.
[0020] Wherein, establishing a mapping relationship between the first edge user plane network element and the node ID according to the node ID of the first edge user plane network element includes:
[0021] receiving a third coupling establishment request message sent by the proxy network element, where the third coupling establishment request message is determined by the proxy network element according to a fourth coupling establishment request message sent by the first edge user plane network element, and the third coupling establishment request message carries a node ID of the first edge user plane network element;
[0022] According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is established.
[0023] The proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface;
[0024] The first port number is a port identifier of the first edge user plane network element on the second interface; or the node ID is an identifier of the first edge user plane network element on the second interface.
[0025] Wherein, the method further comprises:
[0026] receiving a second coupling release request message sent by a first edge user plane network element and forwarded by a proxy network element, wherein a source port of the second coupling release request message is the first port number;
[0027] According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is deleted.
[0028] Wherein, the method further comprises:
[0029] receiving a fourth coupling release request message sent by the first edge user plane network element and forwarded by the proxy network element, wherein the fourth coupling release request message carries the node ID of the first edge user plane network element;
[0030] According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is deleted.
[0031] The second coupling release request message and / or the fourth coupling release request message further carries:
[0032] Identification information of the proxy network element;
[0033] A message type, where the message type indicates that the message is used to request the first edge user plane network element to access the network or to request to delete the first edge user plane network element.
[0034] Wherein, the method further comprises:
[0035] Send a target request message to the proxy network element, where the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0036] A response message to the target request message sent by the proxy network element after the interaction with the first edge user plane network element is completed is received.
[0037] An embodiment of the present invention further provides an information processing method, which is applied to a proxy network element, wherein the proxy network element is arranged between a control plane network element of a core network and at least one edge user plane network element, and the method includes:
[0038] Sending a first coupling establishment request message to the control plane network element, where the source port of the first coupling establishment request message is the first port number;
[0039] or,
[0040] A third coupling establishment request message is sent to the control plane network element, where the third coupling establishment request message carries the node ID of the first edge user plane network element.
[0041] The proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface.
[0042] Wherein, the method further comprises:
[0043] Receiving a second coupling establishment request message sent by the first edge user plane network element;
[0044] Determine, according to the second coupling establishment request message, a first interface address of a first edge user plane network element, and allocate a first port number on a second interface to the first edge user plane network element;
[0045] A mapping relationship between the first interface address and the first port number is established, and a first coupling establishment request message is generated according to the second coupling establishment request message.
[0046] Wherein, the method further comprises:
[0047] receiving a fourth coupling establishment request message sent by the first edge user plane network element, wherein the fourth coupling establishment request message carries a node ID of the first edge user plane network element;
[0048] Determine, according to the fourth coupling establishment request message, a first interface address of a first edge user plane network element;
[0049] A mapping relationship between the first interface address and the node ID is established, and a third coupling establishment request message is generated according to the fourth coupling establishment request message.
[0050] Wherein, the method further comprises:
[0051] Receiving a first coupling release request message sent by a first edge user network element through a first interface;
[0052] Deleting the mapping relationship between the first interface address and the first port number according to the first coupling release request message;
[0053] A second coupling release request message is sent to the control plane network element through the second interface, where the source port of the second coupling release request message is the first port number.
[0054] Wherein, the method further comprises:
[0055] Receiving a third coupling release request message sent by the first edge user network element through the first interface;
[0056] Deleting the mapping relationship between the first interface address and the node ID according to the third coupling release request message;
[0057] A fourth coupling release request message is sent to the control plane network element through the second interface, where the fourth coupling release request message carries the node ID of the first edge user plane network element.
[0058] Wherein, the method further comprises:
[0059] Receive a target request message sent by a control plane network element; the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0060] Sending, according to the first port number or node ID, a session establishment request message, a session update request message, or a session deletion request message to a first edge user plane network element having a mapping relationship with the first port number or node ID;
[0061] receiving a session establishment response message, a session update response message, or a session deletion response message fed back by the first edge user plane network element;
[0062] Send a response message to the target request message to the control plane network element.
[0063] Wherein, the method further comprises:
[0064] Receive signaling sent by edge user plane network elements;
[0065] According to the interception rule of the control plane network element, all or part of the signaling sent by the edge user plane network element is intercepted.
[0066] Wherein, the method comprises:
[0067] Receive access or deletion requests sent by edge user network elements;
[0068] According to the access or deletion request, a connection with the edge user network element is established or a connection with the edge user network element is deleted.
[0069] An embodiment of the present invention further provides a control plane network element of a core network device, wherein the control plane network element is connected to at least one edge user plane network element through a proxy network element, wherein the control plane network element includes a processor and a transceiver, wherein the transceiver receives and sends data under the control of the processor, and wherein the processor is configured to perform the following operations:
[0070] According to the first port number allocated by the proxy network element to the first edge user plane network element, a mapping relationship between the first edge user plane network element and the first port number is established; or,
[0071] According to the node ID of the first edge user plane network element, a mapping relationship between the first edge user plane network element and the node ID is established.
[0072] The processor is further configured to perform the following operations:
[0073] receiving a first coupling establishment request message sent by a proxy network element, where the first coupling establishment request message is determined by the proxy network element according to a second coupling establishment request message sent by a first edge user plane network element, and a source port of the first coupling establishment request message is the first port number;
[0074] According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is established.
[0075] The processor is further configured to perform the following operations:
[0076] receiving a third coupling establishment request message sent by the proxy network element, where the third coupling establishment request message is determined by the proxy network element according to a fourth coupling establishment request message sent by the first edge user plane network element, and the third coupling establishment request message carries a node ID of the first edge user plane network element;
[0077] According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is established.
[0078] The proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface;
[0079] The first port number is a port identifier of the first edge user plane network element on the second interface; or the node ID is an identifier of the first edge user plane network element on the second interface.
[0080] The processor is further configured to perform the following operations:
[0081] receiving a second coupling release request message sent by a first edge user plane network element and forwarded by a proxy network element, wherein a source port of the second coupling release request message is the first port number;
[0082] According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is deleted.
[0083] The processor is further configured to perform the following operations:
[0084] receiving a fourth coupling release request message sent by the first edge user plane network element and forwarded by the proxy network element, wherein the fourth coupling release request message carries the node ID of the first edge user plane network element;
[0085] According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is deleted.
[0086] The second coupling release request message and / or the fourth coupling release request message further carries:
[0087] Identification information of the proxy network element;
[0088] A message type, where the message type indicates that the message is used to request the first edge user plane network element to access the network or to request to delete the first edge user plane network element.
[0089] The processor is further configured to perform the following operations:
[0090] Send a target request message to the proxy network element, where the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0091] A response message to the target request message sent by the proxy network element after the interaction with the first edge user plane network element is completed is received.
[0092] An embodiment of the present invention further provides an information processing device, which is applied to a control plane network element of a core network device, wherein the control plane network element is connected to at least one edge user plane network element through a proxy network element, and the device includes:
[0093] An establishing module, configured to establish a mapping relationship between the first edge user plane network element and the first port number assigned by the proxy network element to the first edge user plane network element; or,
[0094] Used to establish a mapping relationship between the first edge user plane network element and the node ID according to the node ID of the first edge user plane network element.
[0095] An embodiment of the present invention further provides a proxy network element, wherein the proxy network element is arranged between a control plane network element of a core network and at least one edge user plane network element, wherein the proxy network element includes a processor and a transceiver, wherein the transceiver receives and sends data under the control of the processor, and wherein the processor is configured to perform the following operations:
[0096] Sending a first coupling establishment request message to the control plane network element, where the source port of the first coupling establishment request message is the first port number;
[0097] or,
[0098] A third coupling establishment request message is sent to the control plane network element, where the third coupling establishment request message carries the node ID of the first edge user plane network element.
[0099] The proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface.
[0100] The processor is further configured to perform the following operations:
[0101] Receiving a second coupling establishment request message sent by the first edge user plane network element;
[0102] Determine, according to the second coupling establishment request message, a first interface address of a first edge user plane network element, and allocate a first port number on a second interface to the first edge user plane network element;
[0103] A mapping relationship between the first interface address and the first port number is established, and a first coupling establishment request message is generated according to the second coupling establishment request message.
[0104] The processor is further configured to perform the following operations:
[0105] receiving a fourth coupling establishment request message sent by the first edge user plane network element, wherein the fourth coupling establishment request message carries a node ID of the first edge user plane network element;
[0106] Determine, according to the fourth coupling establishment request message, a first interface address of a first edge user plane network element;
[0107] A mapping relationship between the first interface address and the node ID is established, and a third coupling establishment request message is generated according to the fourth coupling establishment request message.
[0108] The processor is further configured to perform the following operations:
[0109] Receiving a first coupling release request message sent by a first edge user network element through a first interface;
[0110] Deleting the mapping relationship between the first interface address and the first port number according to the first coupling release request message;
[0111] A second coupling release request message is sent to the control plane network element through the second interface, where the source port of the second coupling release request message is the first port number.
[0112] The processor is further configured to perform the following operations:
[0113] Receiving a third coupling release request message sent by the first edge user network element through the first interface;
[0114] Deleting the mapping relationship between the first interface address and the node ID according to the third coupling release request message;
[0115] A fourth coupling release request message is sent to the control plane network element through the second interface, where the fourth coupling release request message carries the node ID of the first edge user plane network element.
[0116] The processor is further configured to perform the following operations:
[0117] Receive a target request message sent by a control plane network element; the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0118] Sending, according to the first port number or node ID, a session establishment request message, a session update request message, or a session deletion request message to a first edge user plane network element having a mapping relationship with the first port number or node ID;
[0119] receiving a session establishment response message, a session update response message, or a session deletion response message fed back by the first edge user plane network element;
[0120] Send a response message to the target request message to the control plane network element.
[0121] The processor is further configured to perform the following operations:
[0122] Receive signaling sent by edge user plane network elements;
[0123] According to the interception rule of the control plane network element, all or part of the signaling sent by the edge user plane network element is intercepted.
[0124] The processor is further configured to perform the following operations:
[0125] Receive access or deletion requests sent by edge user network elements;
[0126] According to the access or deletion request, a connection with the edge user network element is established or a connection with the edge user network element is deleted.
[0127] An embodiment of the present invention further provides an information processing device, which is applied to a proxy network element, wherein the proxy network element is arranged between a control plane network element and at least one edge user plane network element of a core network, and the device includes:
[0128] A first sending module, configured to send a first coupling establishment request message to a control plane network element, wherein a source port of the first coupling establishment request message is a first port number;
[0129] Or, it is used to send a third coupling establishment request message to the control plane network element, where the third coupling establishment request message carries the node ID of the first edge user plane network element.
[0130] An embodiment of the present invention further provides a communication device, comprising a memory, a processor, and a program stored in the memory and executable on the processor; when the processor executes the program, the information processing method as described above is implemented.
[0131] An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the steps in the information processing method described above are implemented.
[0132] The above technical solution of the present invention has at least the following beneficial effects:
[0133] In the information processing method, device, control plane network element and proxy network element of the embodiments of the present invention, the proxy network element can realize signaling transfer, monitoring and isolation between the control plane network element and the edge user plane network element, reduce the possibility of network attack by the edge user plane network element, and greatly reduce the scope of impact; it can also avoid frequent additions and subtractions of edge user plane network elements that require adjustments to the existing network structure, reduce the workload of maintenance personnel, and avoid affecting the online use of services due to untimely deployment. BRIEF DESCRIPTION OF THE DRAWINGS
[0134] Figure 1A schematic diagram showing the structure of a communication system to which an embodiment of the present invention is applied;
[0135] Figure 2 One of the schematic diagrams showing the steps of the information processing method provided by an embodiment of the present invention;
[0136] Figure 3 A second schematic diagram showing the steps of the information processing method provided by an embodiment of the present invention;
[0137] Figure 4 A schematic diagram showing an interaction of Example 1 provided in an embodiment of the present invention;
[0138] Figure 5 A schematic diagram showing an interaction of Example 2 provided in an embodiment of the present invention;
[0139] Figure 6 A schematic diagram showing an interaction of Example 3 provided in an embodiment of the present invention;
[0140] Figure 7 A schematic diagram showing an interaction of Example 4 provided in an embodiment of the present invention;
[0141] Figure 8 A schematic diagram showing the structure of a control plane network element provided by an embodiment of the present invention;
[0142] Fig. 9 One of the structural schematic diagrams of the information processing device provided by the embodiment of the present invention is shown;
[0143] Fig.10 A schematic diagram showing the structure of a proxy network element provided by an embodiment of the present invention;
[0144] Fig.11 The second structural diagram of the information processing device provided by the embodiment of the present invention. DETAILED DESCRIPTION
[0145] In order to make the technical problems, technical solutions and advantages to be solved by the present invention more clear, a detailed description will be given below with reference to the accompanying drawings and specific embodiments.
[0146] like Figure 1 As shown, the embodiment of the present invention defines a proxy-based user plane network element, called a proxy network element. It should be noted that the control plane network element mentioned in the embodiment of the present invention is a session management function SMF or a control plane gateway GW-C; the edge user plane network element is a user plane function UPF or a user plane gateway GW-U; the proxy network element can be a proxy UPF or a proxy GW-U. Figure 1 As shown, the same IP address cannot be repeated in one or a group of edge user plane network elements, but the allocation of IP addresses is performed by the control plane network element.
[0147] In order to ensure that user plane network elements deployed in vertical industries can flexibly access the core network, the embodiment of the present invention implements the following functions by deploying proxy network elements:
[0148] 1) Signaling transfer and proxy: The proxy network element is connected to the edge user plane network element through the N4' interface, and is considered a control plane network element by the edge user plane network element; the proxy network element is connected to the control plane network element centrally deployed by the operator through the N4 interface, and is considered a user plane network element by the control plane network element;
[0149] 2) Illegal signaling monitoring and interception: The proxy network element can intercept and monitor dangerous signaling sent by the edge user plane network element to the operator's control plane network element, reducing the possibility of network attacks;
[0150] 3) Reduce the scope of threat: After the proxy network element is deployed, there is no need to expose the interfaces of all network elements in the control network element pool, which prevents hackers from attacking the network elements in the control network element pool and causing business paralysis in several provinces; even if hackers attack the proxy network element, the scope of impact can be greatly reduced;
[0151] 4) Flexible network adjustment: Since the edge user-plane network elements deployed in vertical industries are flexible and changeable, adding proxy network elements can avoid frequent additions and subtractions of edge user-plane network elements, which requires adjustments to the operator's existing network structure, reduce the workload of maintenance personnel, and avoid affecting the online use of services due to untimely deployment.
[0152] like Figure 2 As shown, an embodiment of the present invention provides an information processing method, which is applied to a control plane network element of a core network device, wherein the control plane network element is connected to at least one edge user plane network element through a proxy network element, and the method includes:
[0153] Step 21, according to the first port number assigned by the proxy network element to the first edge user plane network element, establish a mapping relationship between the first edge user plane network element and the first port number; that is, different edge user plane network elements use different port numbers, and different port numbers are used to distinguish edge user plane network elements;
[0154] Alternatively, a mapping relationship between the first edge user plane network element and the node ID is established according to the node ID of the first edge user plane network element; that is, multiple edge user plane network elements can use the same port number, and the node ID is used to distinguish the multiple edge user plane network elements.
[0155] In the embodiments of the present invention, in scenarios such as association establishment, association deletion, session message establishment, session message update, and session message deletion, the control plane network element can be distinguished based on the node ID of the first edge user plane network element or the first port number of the first edge user plane network element.
[0156] As an optional embodiment, the step 21 of establishing a mapping relationship between the first edge user plane network element and the first port number according to the first port number allocated by the proxy network element to the first edge user plane network element includes:
[0157] receiving a first coupling establishment request message sent by a proxy network element, where the first coupling establishment request message is determined by the proxy network element according to a second coupling establishment request message sent by a first edge user plane network element, and a source port of the first coupling establishment request message is the first port number;
[0158] According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is established.
[0159] As another optional embodiment, the step 21 of establishing a mapping relationship between the first edge user plane network element and the node ID according to the node ID of the first edge user plane network element includes:
[0160] receiving a third coupling establishment request message sent by the proxy network element, where the third coupling establishment request message is determined by the proxy network element according to a fourth coupling establishment request message sent by the first edge user plane network element, and the third coupling establishment request message carries a node ID of the first edge user plane network element;
[0161] According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is established.
[0162] The proxy network element is connected to the first edge user plane network element through a first interface (for example, N4' interface), and the proxy network element is connected to the control plane network element (for example, N4 interface) through a second interface;
[0163] The first port number is a port identifier of the first edge user plane network element on the second interface; or the node ID is an identifier of the first edge user plane network element on the second interface.
[0164] As an optional embodiment, the method further includes:
[0165] receiving a second coupling release request message sent by a first edge user plane network element and forwarded by a proxy network element, wherein a source port of the second coupling release request message is the first port number;
[0166] According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is deleted.
[0167] As another optional embodiment, the method further includes:
[0168] receiving a fourth coupling release request message sent by the first edge user plane network element and forwarded by the proxy network element, wherein the fourth coupling release request message carries the node ID of the first edge user plane network element;
[0169] According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is deleted.
[0170] The second coupling release request message and / or the fourth coupling release request message further carries:
[0171] Identification information of the proxy network element;
[0172] A message type, where the message type indicates that the message is used to request the first edge user plane network element to access the network or to request to delete the first edge user plane network element.
[0173] As another optional embodiment, the method further includes:
[0174] Send a target request message to the proxy network element, where the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0175] A response message to the target request message sent by the proxy network element after the interaction with the first edge user plane network element is completed is received.
[0176] The target request message may be a trigger message for triggering any one of a session message establishment message, a session message update message, and a session message deletion message.
[0177] In summary, in the embodiments of the present invention, the proxy network element can realize signaling transfer, monitoring and isolation between the control plane network elements and the edge user plane network elements, reduce the possibility of network attacks by the edge user plane network elements, and greatly reduce the scope of impact; it can also avoid frequent additions and reductions of edge user plane network elements that require adjustments to the existing network structure, reduce the workload of maintenance personnel, and avoid affecting the online use of services due to untimely deployment.
[0178] like Figure 3 As shown, an embodiment of the present invention further provides an information processing method, which is applied to a proxy network element, wherein the proxy network element is arranged between a control plane network element of a core network and at least one edge user plane network element, and the method includes:
[0179] Step 31, sending a first coupling establishment request message to the control plane network element, where the source port of the first coupling establishment request message is the first port number; that is, different edge user plane network elements use different port numbers, and different port numbers are used to distinguish edge user plane network elements;
[0180] Alternatively, a third coupling establishment request message is sent to the control plane network element, and the third coupling establishment request message carries the node ID of the first edge user plane network element; that is, multiple edge user plane network elements can use the same port number, and the node ID is used to distinguish the multiple edge user plane network elements.
[0181] In the embodiments of the present invention, in scenarios such as association establishment, association deletion, session message establishment, session message update, and session message deletion, the control plane network element can be distinguished based on the node ID of the first edge user plane network element or the first port number of the first edge user plane network element.
[0182] The proxy network element is connected to the first edge user plane network element via a first interface (eg, N4' interface), and the proxy network element is connected to the control plane network element via a second interface (eg, N4 interface).
[0183] As an optional embodiment, the method further includes:
[0184] Receiving a second coupling establishment request message sent by the first edge user plane network element;
[0185] Determine, according to the second coupling establishment request message, a first interface address of a first edge user plane network element, and allocate a first port number on a second interface to the first edge user plane network element;
[0186] A mapping relationship between the first interface address and the first port number is established, and a first coupling establishment request message is generated according to the second coupling establishment request message.
[0187] Accordingly, the method further includes:
[0188] Receiving a first coupling release request message sent by a first edge user network element through a first interface;
[0189] Deleting the mapping relationship between the first interface address and the first port number according to the first coupling release request message;
[0190] A second coupling release request message is sent to the control plane network element through the second interface, where the source port of the second coupling release request message is the first port number.
[0191] As another optional embodiment, the method further includes:
[0192] receiving a fourth coupling establishment request message sent by the first edge user plane network element, wherein the fourth coupling establishment request message carries a node ID of the first edge user plane network element;
[0193] Determine, according to the fourth coupling establishment request message, a first interface address of a first edge user plane network element;
[0194] A mapping relationship between the first interface address and the node ID is established, and a third coupling establishment request message is generated according to the fourth coupling establishment request message.
[0195] Accordingly, the method further includes:
[0196] Receiving a third coupling release request message sent by the first edge user network element through the first interface;
[0197] Deleting the mapping relationship between the first interface address and the node ID according to the third coupling release request message;
[0198] A fourth coupling release request message is sent to the control plane network element through the second interface, where the fourth coupling release request message carries the node ID of the first edge user plane network element.
[0199] As an optional embodiment, the method further includes:
[0200] Receive a target request message sent by a control plane network element; the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0201] Sending, according to the first port number or node ID, a session establishment request message, a session update request message, or a session deletion request message to a first edge user plane network element having a mapping relationship with the first port number or node ID;
[0202] receiving a session establishment response message, a session update response message, or a session deletion response message fed back by the first edge user plane network element;
[0203] Send a response message to the target request message to the control plane network element.
[0204] As another optional embodiment, the method further includes:
[0205] Receive signaling sent by edge user plane network elements;
[0206] According to the interception rule of the control plane network element, all or part of the signaling sent by the edge user plane network element is intercepted.
[0207] That is, the proxy network element can intercept and monitor dangerous signaling sent by the edge user plane network element to the operator's control plane network element, reducing the possibility of network attacks. After the proxy network element is deployed, it is not necessary to expose the interfaces of all network elements in the control network element pool, avoiding hackers from attacking the network elements in the control network element pool and causing business paralysis in several provinces; even if hackers attack the proxy network element, the scope of impact can be greatly reduced.
[0208] As yet another optional embodiment, the method includes:
[0209] Receive access or deletion requests sent by edge user network elements;
[0210] According to the access or deletion request, a connection with the edge user network element is established or a connection with the edge user network element is deleted.
[0211] Since the edge user plane network elements deployed in vertical industries are flexible and changeable, adding proxy network elements can avoid the frequent increase or decrease of edge user plane network elements, which requires adjustments to the operator's existing network structure, reduce the workload of maintenance personnel, and avoid affecting the online use of services due to untimely deployment.
[0212] In summary, the proxy network element in the embodiment of the present invention can realize signaling transfer, monitoring and isolation between the control plane network elements and the edge user plane network elements, reduce the possibility of network attacks by the edge user plane network elements, and greatly reduce the scope of impact; it can also avoid frequent additions and reductions of edge user plane network elements that require adjustments to the existing network structure, reduce the workload of maintenance personnel, and avoid affecting the online use of services due to untimely deployment.
[0213] In order to more clearly describe the information processing method provided by the embodiment of the present invention, several examples are provided below for illustration.
[0214] Example 1: Figure 4 As shown, different edge user plane network elements are established using couplings of different port numbers.
[0215] 1. When a new access edge user plane network element (ie, a first edge user plane network element) is added, the first edge user plane network element sends a second coupling establishment request message to the proxy network element through the N4' interface;
[0216] 2. The proxy network element receives the second coupling establishment request message sent by the N4' interface, records the N4' interface address (i.e., the first interface address) of the first edge user plane network element, determines the first port number of the first edge user plane network element (i.e., the port number on the N4 interface between the proxy network element and the control plane network element), and records the mapping relationship between the N4' interface address of the first edge user plane network element and the first port number;
[0217] 3. The proxy network element sends a first coupling establishment request message to the control plane network element through the N4 interface, wherein the destination port of the first coupling establishment request message is 8805 (the default port of PFCP, as specified in the protocol), and the source port is the above-mentioned first port number (allocated by the proxy network element to the first edge user plane network element);
[0218] 4. The control plane network element records the mapping relationship between the first edge user plane network element and the first port number, and updates the configuration to the NRF so that the corresponding control plane network element pool can be selected when the network element is selected later;
[0219] 5. The control plane network element returns a coupling establishment response message to the proxy network element through the N4 interface, the destination port address is the first port number, and the source port address is 8805 (the default port of PFCP, as specified in the protocol);
[0220] 6. The proxy network element sends the coupling establishment response message to the first edge user plane network element through the N4' interface, and the coupling is successfully established.
[0221] Example 1: Figure 5 As shown, different edge user plane network elements use different port numbers for coupling release.
[0222] 1. When the first edge user plane network element needs to exit the network, the first edge user plane network element sends a first coupling release request message to the proxy network element through the N4' interface;
[0223] 2. The proxy network element receives the first coupling release request message sent by the N4' interface, and deletes the mapping relationship between the N4' interface address (ie, the first interface address) of the first edge user plane network element and the first port number;
[0224] 3. The proxy network element sends a second coupling release request message to the control plane network element through the N4 interface;
[0225] 4. The control plane network element deletes the mapping relationship between the first port number and the first edge user plane network element on the N4 interface; and updates the configuration to the NRF so that the corresponding control plane network element pool can be selected when the network element is selected later;
[0226] 5. The control plane network element returns a coupling release response message to the proxy network element through the N4 interface, the destination port address is the first port number, and the source port address is 8805 (the default port of PFCP, as specified in the protocol);
[0227] 6. The proxy network element sends the coupling release response message to the first edge user plane network element through the N4' interface, and the coupling is released successfully.
[0228] Example 3: Figure 6 As shown, different edge user plane network elements use different node IDs to distinguish the connection establishment.
[0229] 1. When a new access edge user plane network element (ie, a first edge user plane network element) is added, the first edge user plane network element sends a fourth coupling establishment request message to the proxy network element through the N4' interface;
[0230] 2. The proxy network element receives the second coupling establishment request message sent by the N4' interface, records the N4' interface address (i.e., the first interface address) of the first edge user plane network element, determines the node ID of the first edge user plane network element on the N4 interface, and records the mapping relationship between the N4' interface address of the first edge user plane network element and the node ID;
[0231] 3. The proxy node sends a third coupling establishment request message to the control plane network element through the N4 interface. The format of the third coupling establishment request message is shown in Table 1.
[0232]
[0233] Table 1
[0234] For example, setting the edge node access field corresponding to the "message type" to "1" indicates that a new edge user plane network element has accessed the network.
[0235] 4. The control plane network element records the mapping relationship between the first edge user plane network element and the node ID, and updates the configuration to the NRF so that the corresponding control plane network element pool can be selected when the network element is selected later;
[0236] 5. The control plane network element returns a coupling establishment response message to the proxy network element through the N4 interface;
[0237] 6. The proxy network element sends the coupling establishment response message to the first edge user plane network element through the N4' interface, and the coupling is successfully established.
[0238] Example 4: Figure 7 As shown, different edge user plane network elements use different node IDs to distinguish the coupling release.
[0239] 1. When the first edge user plane network element needs to exit the network, the first edge user plane network element sends a third coupling release request message to the proxy network element through the N4' interface;
[0240] 2. The proxy network element receives the third coupling release request message sent by the N4' interface, and deletes the mapping relationship between the N4' interface address (ie, the first interface address) of the first edge user plane network element and the node ID;
[0241] 3. The proxy network element sends a fourth coupling release request message to the control plane network element through the N4 interface; the format of the fourth coupling release request message is shown in Table 2.
[0242]
[0243] Table 2
[0244] For example, setting the edge node deletion field corresponding to the "message type" to "1" indicates that a new edge user plane network element is connected to the network.
[0245] 4. The control plane network element deletes the mapping relationship between the node ID and the first edge user plane network element on the N4 interface; and updates the configuration to the NRF so that the corresponding control plane network element pool can be selected when the network element is selected later;
[0246] 5. The control plane network element returns a coupling release response message to the proxy network element through the N4 interface;
[0247] 6. The proxy network element sends the coupling release response message to the first edge user plane network element through the N4' interface, and the coupling is released successfully.
[0248] Example 5
[0249] During the user online process, the control plane network element selects the corresponding proxy network element based on the relevant information provided by the edge user plane network element when the coupling is established;
[0250] The control plane network element sends a session establishment request message to the proxy network element, and can distinguish which edge user plane network element it is by port number or node ID;
[0251] After receiving the address, the proxy network element completes the mapping of the port number or node ID to the edge user plane network element address on the N4' interface, and completes the interaction with the edge user plane network element;
[0252] The proxy network element sends a session establishment response message to the control plane network element.
[0253] like Figure 8 As shown, an embodiment of the present invention further provides a control plane network element of a core network device, wherein the control plane network element is connected to at least one edge user plane network element through a proxy network element, and the control plane network element includes a processor 800 and a transceiver 810, wherein the transceiver 810 receives and sends data under the control of the processor 800, and the processor 800 is used to perform the following operations:
[0254] According to the first port number allocated by the proxy network element to the first edge user plane network element, a mapping relationship between the first edge user plane network element and the first port number is established; or,
[0255] According to the node ID of the first edge user plane network element, a mapping relationship between the first edge user plane network element and the node ID is established.
[0256] As an optional embodiment, the processor 800 is further configured to perform the following operations:
[0257] receiving a first coupling establishment request message sent by a proxy network element, where the first coupling establishment request message is determined by the proxy network element according to a second coupling establishment request message sent by a first edge user plane network element, and a source port of the first coupling establishment request message is the first port number;
[0258] According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is established.
[0259] As an optional embodiment, the processor 800 is further configured to perform the following operations:
[0260] receiving a third coupling establishment request message sent by the proxy network element, where the third coupling establishment request message is determined by the proxy network element according to a fourth coupling establishment request message sent by the first edge user plane network element, and the third coupling establishment request message carries a node ID of the first edge user plane network element;
[0261] According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is established.
[0262] As an optional embodiment, the proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface;
[0263] The first port number is a port identifier of the first edge user plane network element on the second interface; or the node ID is an identifier of the first edge user plane network element on the second interface.
[0264] As an optional embodiment, the processor 800 is further configured to perform the following operations:
[0265] receiving a second coupling release request message sent by a first edge user plane network element and forwarded by a proxy network element, wherein a source port of the second coupling release request message is the first port number;
[0266] According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is deleted.
[0267] As an optional embodiment, the processor 800 is further configured to perform the following operations:
[0268] receiving a fourth coupling release request message sent by the first edge user plane network element and forwarded by the proxy network element, wherein the fourth coupling release request message carries the node ID of the first edge user plane network element;
[0269] According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is deleted.
[0270] As an optional embodiment, the second coupling release request message and / or the fourth coupling release request message further carries:
[0271] Identification information of the proxy network element;
[0272] A message type, where the message type indicates that the message is used to request the first edge user plane network element to access the network or to request to delete the first edge user plane network element.
[0273] As an optional embodiment, the processor 800 is further configured to perform the following operations:
[0274] Send a target request message to the proxy network element, where the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0275] A response message to the target request message sent by the proxy network element after the interaction with the first edge user plane network element is completed is received.
[0276] In the embodiment of the present invention, the proxy network element can realize signaling transfer, monitoring and isolation between the control plane network element and the edge user plane network element, reduce the possibility of network attack by the edge user plane network element, and greatly reduce the scope of impact; it can also avoid frequent additions and subtractions of edge user plane network elements that require adjustments to the existing network structure, reduce the workload of maintenance personnel, and avoid affecting the online use of services due to untimely deployment.
[0277] It should be noted that the control plane network element provided in the embodiment of the present invention is a control plane network element capable of executing the above-mentioned information processing method. Therefore, all embodiments of the above-mentioned information processing method are applicable to the control plane network element and can achieve the same or similar beneficial effects.
[0278] like Fig. 9 As shown, an embodiment of the present invention further provides an information processing device, which is applied to a control plane network element of a core network device, wherein the control plane network element is connected to at least one edge user plane network element through a proxy network element, and the device includes:
[0279] An establishing module 91 is used to establish a mapping relationship between the first edge user plane network element and the first port number allocated by the proxy network element to the first edge user plane network element; or,
[0280] Used to establish a mapping relationship between the first edge user plane network element and the node ID according to the node ID of the first edge user plane network element.
[0281] As an optional embodiment, the establishment module includes:
[0282] A first submodule is configured to receive a first coupling establishment request message sent by a proxy network element, where the first coupling establishment request message is determined by the proxy network element according to a second coupling establishment request message sent by a first edge user plane network element, and a source port of the first coupling establishment request message is the first port number;
[0283] The second submodule is used to establish a mapping relationship between a first edge user plane network element and the first port number according to the first port number.
[0284] As an optional embodiment, the establishment module includes:
[0285] A third submodule is configured to receive a third coupling establishment request message sent by the proxy network element, wherein the third coupling establishment request message is determined by the proxy network element according to a fourth coupling establishment request message sent by the first edge user plane network element, and the third coupling establishment request message carries a node ID of the first edge user plane network element;
[0286] The fourth submodule is used to establish a mapping relationship between the first edge user plane network element and the node ID according to the node ID.
[0287] As an optional embodiment, the proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface;
[0288] The first port number is a port identifier of the first edge user plane network element on the second interface; or the node ID is an identifier of the first edge user plane network element on the second interface.
[0289] As an optional embodiment, the device further includes:
[0290] A first receiving module is used to receive a second coupling release request message sent by a first edge user plane network element and forwarded by a proxy network element, wherein a source port of the second coupling release request message is the first port number;
[0291] The first deleting module is used to delete the mapping relationship between the first edge user plane network element and the first port number according to the first port number.
[0292] As an optional embodiment, the device further includes:
[0293] A second receiving module is used to receive a fourth coupling release request message sent by the first edge user plane network element and forwarded by the proxy network element, wherein the fourth coupling release request message carries the node ID of the first edge user plane network element;
[0294] The second deleting module is used to delete the mapping relationship between the first edge user plane network element and the node ID according to the node ID.
[0295] As an optional embodiment, the second coupling release request message and / or the fourth coupling release request message further carries:
[0296] Identification information of the proxy network element;
[0297] A message type, where the message type indicates that the message is used to request the first edge user plane network element to access the network or to request to delete the first edge user plane network element.
[0298] As an optional embodiment, the device further includes:
[0299] A second sending module is used to send a target request message to the proxy network element, where the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0300] The third receiving module is used to receive a response message to the target request message sent by the proxy network element after the interaction with the first edge user plane network element is completed.
[0301] In the embodiment of the present invention, the proxy network element can realize signaling transfer, monitoring and isolation between the control plane network element and the edge user plane network element, reduce the possibility of network attack by the edge user plane network element, and greatly reduce the scope of impact; it can also avoid frequent additions and subtractions of edge user plane network elements that require adjustments to the existing network structure, reduce the workload of maintenance personnel, and avoid affecting the online use of services due to untimely deployment.
[0302] It should be noted that the information processing device provided in the embodiment of the present invention is a device capable of executing the above-mentioned information processing method, and all embodiments of the above-mentioned information processing method are applicable to the device and can achieve the same or similar beneficial effects.
[0303] like Fig.10 As shown, an embodiment of the present invention further provides a proxy network element, which is arranged between a control plane network element of a core network and at least one edge user plane network element, and the proxy network element includes a processor 100 and a transceiver 110, and the transceiver 110 receives and sends data under the control of the processor 100, and the processor 100 is used to perform the following operations:
[0304] Sending a first coupling establishment request message to a control plane network element, where a source port of the first coupling establishment request message is the first port number;
[0305] or,
[0306] A third coupling establishment request message is sent to the control plane network element, where the third coupling establishment request message carries the node ID of the first edge user plane network element.
[0307] As an optional embodiment, the proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface.
[0308] As an optional embodiment, the processor 100 is further configured to perform the following operations:
[0309] Receiving a second coupling establishment request message sent by the first edge user plane network element;
[0310] Determine, according to the second coupling establishment request message, a first interface address of a first edge user plane network element, and allocate a first port number on a second interface to the first edge user plane network element;
[0311] A mapping relationship between the first interface address and the first port number is established, and a first coupling establishment request message is generated according to the second coupling establishment request message.
[0312] As an optional embodiment, the processor 100 is further configured to perform the following operations:
[0313] receiving a fourth coupling establishment request message sent by the first edge user plane network element, wherein the fourth coupling establishment request message carries a node ID of the first edge user plane network element;
[0314] Determine, according to the fourth coupling establishment request message, a first interface address of a first edge user plane network element;
[0315] A mapping relationship between the first interface address and the node ID is established, and a third coupling establishment request message is generated according to the fourth coupling establishment request message.
[0316] As an optional embodiment, the processor 100 is further configured to perform the following operations:
[0317] Receiving a first coupling release request message sent by a first edge user network element through a first interface;
[0318] Deleting the mapping relationship between the first interface address and the first port number according to the first coupling release request message;
[0319] A second coupling release request message is sent to the control plane network element through the second interface, where the source port of the second coupling release request message is the first port number.
[0320] As an optional embodiment, the processor 100 is further configured to perform the following operations:
[0321] Receiving a third coupling release request message sent by the first edge user network element through the first interface;
[0322] Deleting the mapping relationship between the first interface address and the node ID according to the third coupling release request message;
[0323] A fourth coupling release request message is sent to the control plane network element through the second interface, where the fourth coupling release request message carries the node ID of the first edge user plane network element.
[0324] As an optional embodiment, the processor 100 is further configured to perform the following operations:
[0325] Receive a target request message sent by a control plane network element; the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0326] Sending, according to the first port number or node ID, a session establishment request message, a session update request message, or a session deletion request message to a first edge user plane network element having a mapping relationship with the first port number or node ID;
[0327] receiving a session establishment response message, a session update response message, or a session deletion response message fed back by the first edge user plane network element;
[0328] Send a response message to the target request message to the control plane network element.
[0329] As an optional embodiment, the processor 100 is further configured to perform the following operations:
[0330] Receive signaling sent by edge user plane network elements;
[0331] According to the interception rule of the control plane network element, all or part of the signaling sent by the edge user plane network element is intercepted.
[0332] As an optional embodiment, the processor 100 is further configured to perform the following operations:
[0333] Receive access or deletion requests sent by edge user network elements;
[0334] According to the access or deletion request, a connection with the edge user network element is established or a connection with the edge user network element is deleted.
[0335] In the embodiment of the present invention, the proxy network element can realize signaling transfer, monitoring and isolation between the control plane network element and the edge user plane network element, reduce the possibility of network attack by the edge user plane network element, and greatly reduce the scope of impact; it can also avoid frequent additions and subtractions of edge user plane network elements that require adjustments to the existing network structure, reduce the workload of maintenance personnel, and avoid affecting the online use of services due to untimely deployment.
[0336] It should be noted that the proxy network element provided in the embodiment of the present invention is a proxy network element capable of executing the above information processing method, so all embodiments of the above information processing method are applicable to the proxy network element and can achieve the same or similar beneficial effects.
[0337] like Fig.11 As shown, an embodiment of the present invention further provides an information processing device, which is applied to a proxy network element, wherein the proxy network element is arranged between a control plane network element of a core network and at least one edge user plane network element, and the device includes:
[0338] A first sending module 111 is used to send a first coupling establishment request message to a control plane network element, where the source port of the first coupling establishment request message is the first port number;
[0339] Or, it is used to send a third coupling establishment request message to the control plane network element, where the third coupling establishment request message carries the node ID of the first edge user plane network element.
[0340] As an optional embodiment, the proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface.
[0341] As an optional embodiment, the device further includes:
[0342] A fourth receiving module, configured to receive a second coupling establishment request message sent by the first edge user plane network element;
[0343] A first determination module, configured to determine a first interface address of a first edge user plane network element according to the second coupling establishment request message, and allocate a first port number on a second interface to the first edge user plane network element;
[0344] The second establishing module is used to establish a mapping relationship between the first interface address and the first port number, and generate a first coupling establishment request message according to the second coupling establishment request message.
[0345] As an optional embodiment, the device further includes:
[0346] A fifth receiving module, configured to receive a fourth coupling establishment request message sent by the first edge user plane network element, wherein the fourth coupling establishment request message carries a node ID of the first edge user plane network element;
[0347] A second determination module, configured to determine a first interface address of a first edge user plane network element according to the fourth coupling establishment request message;
[0348] The third establishing module is used to establish a mapping relationship between the first interface address and the node ID, and generate a third coupling establishment request message according to the fourth coupling establishment request message.
[0349] As an optional embodiment, the device further includes:
[0350] A sixth receiving module, configured to receive a first coupling release request message sent by the first edge user network element through the first interface;
[0351] A third deleting module, configured to delete a mapping relationship between the first interface address and the first port number according to the first coupling release request message;
[0352] A sixth sending module is used to send a second coupling release request message to the control plane network element through the second interface, and the source port of the second coupling release request message is the first port number.
[0353] As an optional embodiment, the device further includes:
[0354] A seventh receiving module, configured to receive a third coupling release request message sent by the first edge user network element through the first interface;
[0355] a fourth deleting module, configured to delete the mapping relationship between the first interface address and the node ID according to the third coupling release request message;
[0356] The seventh sending module is configured to send a fourth coupling release request message to the control plane network element through the second interface, where the fourth coupling release request message carries the node ID of the first edge user plane network element.
[0357] As an optional embodiment, the device further includes:
[0358] An eighth receiving module, configured to receive a target request message sent by a control plane network element; the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element;
[0359] an eighth sending module, configured to send, according to the first port number or the node ID, a session establishment request message or a session update request message or a session deletion request message to a first edge user plane network element having a mapping relationship with the first port number or the node ID;
[0360] A ninth receiving module, configured to receive a session establishment response message, a session update response message, or a session deletion response message fed back by the first edge user plane network element;
[0361] A ninth sending module is used to send a response message of the target request message to the control plane network element.
[0362] As an optional embodiment, the device further includes:
[0363] A tenth receiving module, used to receive signaling sent by an edge user plane network element;
[0364] The interception module is used to intercept all or part of the signaling sent by the edge user plane network element according to the interception rule of the control plane network element.
[0365] As an optional embodiment, the device includes:
[0366] An eleventh receiving module, used to receive an access or deletion request sent by an edge user network element;
[0367] A processing module is used to establish a connection with the edge user network element or delete a connection with the edge user network element according to the access or deletion request.
[0368] In the embodiment of the present invention, the proxy network element can realize signaling transfer, monitoring and isolation between the control plane network element and the edge user plane network element, reduce the possibility of network attack by the edge user plane network element, and greatly reduce the scope of impact; it can also avoid frequent additions and subtractions of edge user plane network elements that require adjustments to the existing network structure, reduce the workload of maintenance personnel, and avoid affecting the online use of services due to untimely deployment.
[0369] It should be noted that the information processing device provided in the embodiment of the present invention is a device capable of executing the above-mentioned information processing method, and all embodiments of the above-mentioned information processing method are applicable to the device and can achieve the same or similar beneficial effects.
[0370] An embodiment of the present invention also provides a communication device, which is a control plane network element or a proxy network element, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, the various processes in the information processing method embodiment described above are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.
[0371] The embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, each process in the above-mentioned information processing method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it is not repeated here. The computer-readable storage medium is, for example, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.
[0372] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-readable storage media (including but not limited to disk storage and optical storage, etc.) containing computer-usable program code.
[0373] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems) and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A device that specifies functions in one or more processes and / or one or more blocks.
[0374] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable storage medium produce a paper product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0375] These computer program instructions may also be loaded onto a computer or other programmable data processing device so that the computer or other programmable device executes a series of operating steps to produce a computer-implemented process, thereby providing instructions executed on the computer or other programmable device for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0376] The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.
Claims
1. An information processing method, applied to a control plane network element of a core network device, characterized in that: The control plane network element is connected to at least one edge user plane network element through a proxy network element, and the method includes: According to the first port number allocated by the proxy network element to the first edge user plane network element, a mapping relationship between the first edge user plane network element and the first port number is established; or, According to the node ID of the first edge user plane network element, establish a mapping relationship between the first edge user plane network element and the node ID; Wherein, establishing a mapping relationship between the first edge user plane network element and the first port number according to the first port number allocated by the proxy network element to the first edge user plane network element includes: receiving a first coupling establishment request message sent by a proxy network element, where the first coupling establishment request message is determined by the proxy network element according to a second coupling establishment request message sent by a first edge user plane network element, and a source port of the first coupling establishment request message is the first port number; According to the first port number, establish a mapping relationship between the first edge user plane network element and the first port number; Wherein, establishing a mapping relationship between the first edge user plane network element and the node ID according to the node ID of the first edge user plane network element includes: receiving a third coupling establishment request message sent by the proxy network element, where the third coupling establishment request message is determined by the proxy network element according to a fourth coupling establishment request message sent by the first edge user plane network element, and the third coupling establishment request message carries a node ID of the first edge user plane network element; According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is established.
2. The method according to claim 1, characterized in that The proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface; The first port number is a port identifier of the first edge user plane network element on the second interface; or the node ID is an identifier of the first edge user plane network element on the second interface.
3. The method according to claim 1, characterized in that The method further comprises: receiving a second coupling release request message sent by a first edge user plane network element and forwarded by a proxy network element, wherein a source port of the second coupling release request message is the first port number; According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is deleted.
4. The method according to claim 1, characterized in that: The method further comprises: receiving a fourth coupling release request message sent by the first edge user plane network element and forwarded by the proxy network element, wherein the fourth coupling release request message carries the node ID of the first edge user plane network element; According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is deleted.
5. The method according to claim 3 or 4, characterized in that: The second coupling release request message and / or the fourth coupling release request message further carries: Identification information of the proxy network element; A message type, where the message type indicates that the message is used to request the first edge user plane network element to access the network or to request to delete the first edge user plane network element.
6. The method according to claim 1, characterized in that The method further comprises: Send a target request message to the proxy network element, where the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element; A response message to the target request message sent by the proxy network element after the interaction with the first edge user plane network element is completed is received.
7. An information processing method, applied to a proxy network element, characterized in that: The proxy network element is arranged between a control plane network element of a core network and at least one edge user plane network element, and the method comprises: Sending a first coupling establishment request message to the control plane network element, where the source port of the first coupling establishment request message is the first port number; or, Sending a third coupling establishment request message to the control plane network element, where the third coupling establishment request message carries the node ID of the first edge user plane network element; The proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface; Wherein, the method further comprises: Receiving a second coupling establishment request message sent by the first edge user plane network element; Determine, according to the second coupling establishment request message, a first interface address of a first edge user plane network element, and allocate a first port number on a second interface to the first edge user plane network element; Establishing a mapping relationship between a first interface address and a first port number, and generating a first coupling establishment request message according to the second coupling establishment request message; Wherein, the method further comprises: receiving a fourth coupling establishment request message sent by the first edge user plane network element, wherein the fourth coupling establishment request message carries a node ID of the first edge user plane network element; Determine, according to the fourth coupling establishment request message, a first interface address of a first edge user plane network element; A mapping relationship between the first interface address and the node ID is established, and a third coupling establishment request message is generated according to the fourth coupling establishment request message.
8. The method according to claim 7, characterized in that The method further comprises: Receiving a first coupling release request message sent by a first edge user network element through a first interface; Deleting the mapping relationship between the first interface address and the first port number according to the first coupling release request message; A second coupling release request message is sent to the control plane network element through the second interface, where the source port of the second coupling release request message is the first port number.
9. The method according to claim 7, characterized in that: The method further comprises: Receiving a third coupling release request message sent by the first edge user network element through the first interface; Deleting the mapping relationship between the first interface address and the node ID according to the third coupling release request message; A fourth coupling release request message is sent to the control plane network element through the second interface, where the fourth coupling release request message carries the node ID of the first edge user plane network element.
10. The method according to claim 7, characterized in that The method further comprises: Receive a target request message sent by a control plane network element; the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element; Sending, according to the first port number or node ID, a session establishment request message, a session update request message, or a session deletion request message to a first edge user plane network element having a mapping relationship with the first port number or node ID; receiving a session establishment response message, a session update response message, or a session deletion response message fed back by the first edge user plane network element; Send a response message to the target request message to the control plane network element.
11. The method according to claim 7, characterized in that The method further comprises: Receive signaling sent by edge user plane network elements; According to the interception rule of the control plane network element, all or part of the signaling sent by the edge user plane network element is intercepted.
12. The method according to claim 7, characterized in that The method comprises: Receive access or deletion requests sent by edge user network elements; According to the access or deletion request, a connection with the edge user network element is established or a connection with the edge user network element is deleted.
13. A control plane network element of a core network device, the control plane network element being connected to at least one edge user plane network element through a proxy network element, the control plane network element comprising a processor and a transceiver, the transceiver receiving and sending data under the control of the processor, characterized in that: The processor is configured to perform the following operations: According to the first port number allocated by the proxy network element to the first edge user plane network element, a mapping relationship between the first edge user plane network element and the first port number is established; or, According to the node ID of the first edge user plane network element, establish a mapping relationship between the first edge user plane network element and the node ID; The processor is further configured to perform the following operations: receiving a first coupling establishment request message sent by a proxy network element, where the first coupling establishment request message is determined by the proxy network element according to a second coupling establishment request message sent by a first edge user plane network element, and a source port of the first coupling establishment request message is the first port number; According to the first port number, establish a mapping relationship between the first edge user plane network element and the first port number; The processor is further configured to perform the following operations: receiving a third coupling establishment request message sent by the proxy network element, where the third coupling establishment request message is determined by the proxy network element according to a fourth coupling establishment request message sent by the first edge user plane network element, and the third coupling establishment request message carries a node ID of the first edge user plane network element; According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is established.
14. The control plane network element according to claim 13, characterized in that: The proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface; The first port number is a port identifier of the first edge user plane network element on the second interface; or the node ID is an identifier of the first edge user plane network element on the second interface.
15. The control plane network element according to claim 13, characterized in that: The processor is further configured to perform the following operations: receiving a second coupling release request message sent by a first edge user plane network element and forwarded by a proxy network element, wherein a source port of the second coupling release request message is the first port number; According to the first port number, a mapping relationship between the first edge user plane network element and the first port number is deleted.
16. The control plane network element according to claim 13, characterized in that: The processor is further configured to perform the following operations: receiving a fourth coupling release request message sent by the first edge user plane network element and forwarded by the proxy network element, wherein the fourth coupling release request message carries the node ID of the first edge user plane network element; According to the node ID, a mapping relationship between the first edge user plane network element and the node ID is deleted.
17. The control plane network element according to claim 15 or 16, characterized in that: The second coupling release request message and / or the fourth coupling release request message further carries: Identification information of the proxy network element; A message type, where the message type indicates that the message is used to request the first edge user plane network element to access the network or to request to delete the first edge user plane network element.
18. The control plane network element according to claim 13, characterized in that: The processor is further configured to perform the following operations: Send a target request message to the proxy network element, where the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element; A response message to the target request message sent by the proxy network element after the interaction with the first edge user plane network element is completed is received.
19. An information processing device, applied to a control plane network element of a core network device, characterized in that: The control plane network element is connected to at least one edge user plane network element through a proxy network element, and the device includes: An establishing module, configured to establish a mapping relationship between the first edge user plane network element and the first port number assigned by the proxy network element to the first edge user plane network element; or, Used to establish a mapping relationship between the first edge user plane network element and the node ID according to the node ID of the first edge user plane network element; Wherein, the establishment module includes: A first submodule is configured to receive a first coupling establishment request message sent by a proxy network element, where the first coupling establishment request message is determined by the proxy network element according to a second coupling establishment request message sent by a first edge user plane network element, and a source port of the first coupling establishment request message is the first port number; A second submodule, configured to establish a mapping relationship between a first edge user plane network element and the first port number according to the first port number; Wherein, the establishment module includes: A third submodule is configured to receive a third coupling establishment request message sent by the proxy network element, wherein the third coupling establishment request message is determined by the proxy network element according to a fourth coupling establishment request message sent by the first edge user plane network element, and the third coupling establishment request message carries a node ID of the first edge user plane network element; The fourth submodule is used to establish a mapping relationship between the first edge user plane network element and the node ID according to the node ID.
20. A proxy network element, the proxy network element being arranged between a control plane network element of a core network and at least one edge user plane network element, the proxy network element comprising a processor and a transceiver, the transceiver receiving and sending data under the control of the processor, characterized in that: The processor is configured to perform the following operations: Sending a first coupling establishment request message to the control plane network element, where the source port of the first coupling establishment request message is the first port number; or, Sending a third coupling establishment request message to the control plane network element, where the third coupling establishment request message carries the node ID of the first edge user plane network element; The proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface; The processor is further configured to perform the following operations: Receiving a second coupling establishment request message sent by the first edge user plane network element; Determine, according to the second coupling establishment request message, a first interface address of a first edge user plane network element, and allocate a first port number on a second interface to the first edge user plane network element; Establishing a mapping relationship between a first interface address and a first port number, and generating a first coupling establishment request message according to the second coupling establishment request message; The processor is further configured to perform the following operations: receiving a fourth coupling establishment request message sent by the first edge user plane network element, wherein the fourth coupling establishment request message carries a node ID of the first edge user plane network element; Determine, according to the fourth coupling establishment request message, a first interface address of a first edge user plane network element; A mapping relationship between the first interface address and the node ID is established, and a third coupling establishment request message is generated according to the fourth coupling establishment request message.
21. The proxy network element according to claim 20, characterized in that: The processor is further configured to perform the following operations: Receiving a first coupling release request message sent by a first edge user network element through a first interface; Deleting the mapping relationship between the first interface address and the first port number according to the first coupling release request message; A second coupling release request message is sent to the control plane network element through the second interface, where the source port of the second coupling release request message is the first port number.
22. The proxy network element according to claim 20, characterized in that: The processor is further configured to perform the following operations: Receiving a third coupling release request message sent by the first edge user network element through the first interface; Deleting the mapping relationship between the first interface address and the node ID according to the third coupling release request message; A fourth coupling release request message is sent to the control plane network element through the second interface, where the fourth coupling release request message carries the node ID of the first edge user plane network element.
23. The proxy network element according to claim 20, characterized in that: The processor is further configured to perform the following operations: Receive a target request message sent by a control plane network element; the destination port of the target request message is the first port number of the first edge user plane network element, or the target request message carries the node ID of the first edge user plane network element; Sending, according to the first port number or node ID, a session establishment request message, a session update request message, or a session deletion request message to a first edge user plane network element having a mapping relationship with the first port number or node ID; receiving a session establishment response message, a session update response message, or a session deletion response message fed back by the first edge user plane network element; Send a response message to the target request message to the control plane network element.
24. The proxy network element according to claim 20, characterized in that: The processor is further configured to perform the following operations: Receive signaling sent by edge user plane network elements; According to the interception rule of the control plane network element, all or part of the signaling sent by the edge user plane network element is intercepted.
25. The proxy network element according to claim 20, characterized in that: The processor is further configured to perform the following operations: Receive access or deletion requests sent by edge user network elements; According to the access or deletion request, a connection with the edge user network element is established or a connection with the edge user network element is deleted.
26. An information processing device, applied to a proxy network element, characterized in that: The proxy network element is arranged between a control plane network element of a core network and at least one edge user plane network element, and the device comprises: A first sending module, configured to send a first coupling establishment request message to a control plane network element, wherein a source port of the first coupling establishment request message is a first port number; Alternatively, it is used to send a third coupling establishment request message to the control plane network element, where the third coupling establishment request message carries the node ID of the first edge user plane network element; The proxy network element is connected to the first edge user plane network element through a first interface, and the proxy network element is connected to the control plane network element through a second interface; Wherein, the device further comprises: A fourth receiving module, configured to receive a second coupling establishment request message sent by the first edge user plane network element; A first determination module, configured to determine a first interface address of a first edge user plane network element according to the second coupling establishment request message, and allocate a first port number on a second interface to the first edge user plane network element; A second establishing module, used to establish a mapping relationship between the first interface address and the first port number, and generate a first coupling establishment request message according to the second coupling establishment request message; Wherein, the device further comprises: A fifth receiving module, configured to receive a fourth coupling establishment request message sent by the first edge user plane network element, wherein the fourth coupling establishment request message carries a node ID of the first edge user plane network element; A second determination module, configured to determine a first interface address of a first edge user plane network element according to the fourth coupling establishment request message; The third establishing module is used to establish a mapping relationship between the first interface address and the node ID, and generate a third coupling establishment request message according to the fourth coupling establishment request message.
27. A communication device comprising a memory, a processor, and a program stored in the memory and executable on the processor; characterized in that: When the processor executes the program, the information processing method according to any one of claims 1 to 6 is implemented; or, when the processor executes the program, the information processing method according to any one of claims 7 to 12 is implemented.
28. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the information processing method as described in any one of claims 1 to 6 are implemented; or, when the program is executed by a processor, the steps of the information processing method as described in any one of claims 7 to 12 are implemented.
Citation Information
Patent Citations
Method, apparatus and system for dynamically establishing local packet data network
CN109661853A
Data transmission method, user plane network element and control plane network element
CN111246453A