Communication method, communication device, electronic device, and readable storage medium

Abstract

Embodiments of the present application provide a communication method, a communication device, an electronic device and a readable storage medium, and relate to the technical field of communication. The communication method can comprise: in the case that a target terminal initiates a PDU session establishment request, determining whether the target terminal is a registered user of a target private network according to the subscription information of the target terminal at a communication operator; wherein the subscription information comprises a subscription DNN of the target terminal; in the case that the subscription DNN is a private DNN, determining that the target terminal is a registered user of the target private network; in the case that the target terminal is a registered user of the target private network, determining a traffic splitting direction according to a destination IP address of the PDU session establishment request; in the case that the destination IP address belongs to the target private network, splitting the traffic to the target private network; and in the case that the destination IP address belongs to a public network, splitting the traffic to the public network. The technical scheme provided by the embodiments of the present application can solve the problem that the prior art cannot access the internal network and the external network simultaneously.

Description

Technical Field

[0001] This application belongs to the field of communication technology, specifically relating to a communication method, communication device, electronic device, and readable storage medium. Background Technology

[0002] Due to the specific needs of some organizations, such as schools and enterprises, there may be a need to access both the external network and the internal network. However, traditional Virtual Private Network (VPN) or Virtual Private Dial Network (VPDN) services require separate access to the internal and external networks. For example, when accessing the internal network, an identity authentication interface is required to enter an account and password for authentication. Only after successful authentication can access be made to the internal network. However, accessing the internal network does not allow access to the external network, and vice versa, making it impossible to access both the internal and external networks simultaneously. Summary of the Invention

[0003] The purpose of this application is to provide a communication method, communication device, electronic device, and readable storage medium to solve the problem in the prior art that it is impossible to access both the intranet and the extranet simultaneously.

[0004] In a first aspect, embodiments of this application provide a communication method, including:

[0005] When the target terminal initiates a PDU session establishment request, it is determined whether the target terminal is a registered user of the target private network based on the target terminal's subscription information with the telecommunications operator; wherein, the subscription information includes the target terminal's subscription DNN;

[0006] If the contracted DNN is a dedicated DNN, the target terminal is determined to be a registered user of the target private network;

[0007] If the target terminal is a registered user of the target private network, the traffic diversion direction is determined based on the destination IP address of the PDU session establishment request;

[0008] If the destination IP address belongs to the target private network, the traffic will be diverted to the target private network.

[0009] If the destination IP address is on the public network, the traffic will be diverted to the public network.

[0010] Secondly, embodiments of this application provide a communication device, including:

[0011] The first determining module is used to determine whether the target terminal is a registered user of the target private network based on the target terminal's subscription information with the telecommunications operator when the target terminal initiates a PDU session establishment request; wherein the subscription information includes the target terminal's subscription DNN;

[0012] The second determining module is used to determine that the target terminal is a registered user of the target private network when the contracted DNN is a dedicated DNN;

[0013] The third determining module is used to determine the traffic diversion direction based on the destination IP address of the PDU session establishment request when the target terminal is a registered user of the target private network.

[0014] The first traffic routing module is used to route traffic to the target private network when the destination IP address belongs to the target private network.

[0015] The second traffic splitting module is used to split traffic to the public network when the destination IP address belongs to the public network.

[0016] Thirdly, embodiments of this application provide an electronic device including a processor and a memory, wherein the memory stores a program or instructions executable on the processor, and the program or instructions, when executed by the processor, implement the steps in the communication method as described in the first aspect.

[0017] Fourthly, embodiments of this application provide a readable storage medium on which a program or instructions are stored, which, when executed by a processor, implement the steps in the communication method described in the first aspect.

[0018] In this embodiment, when a terminal device (such as a mobile phone) registers as a private network user, the telecommunications operator can subscribe to a dedicated DNS (Dedicated Network Name) for the terminal device. When the terminal device initiates a PDU session establishment request, the operator can determine whether the terminal device is a registered user of the private network based on the DNN it has subscribed to. If the terminal device has subscribed to a dedicated DNN, it is a registered user of the private network. When the terminal device is a registered user of the private network, the traffic routing direction can be determined based on the destination IP address of the PDU session establishment request. That is, if the destination IP address is a private network address, the traffic is routed to the private network; if the destination IP address is a public network address, the traffic is routed to the public network. In this embodiment, access to internal and external networks is no longer independent and separate, thus enabling simultaneous access to both networks. Attached Figure Description

[0019] Figure 1 A flowchart illustrating the communication method provided in an embodiment of this application;

[0020] Figure 2A schematic diagram of the private network topology provided in the embodiments of this application;

[0021] Figure 3 A schematic diagram of the campus intranet topology provided in this application embodiment;

[0022] Figure 4 A schematic block diagram of a communication device provided in an embodiment of this application. Detailed Implementation

[0023] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the embodiments described below are only some, not all, of the embodiments of this application. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application.

[0024] It should be understood that the phrase "one embodiment" or "an embodiment" in the specification means that a specific feature, structure, or characteristic related to the embodiment is included in at least one embodiment of this application. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0025] In the various embodiments of this application, it should be understood that the sequence number of the steps does not imply an absolute order of execution. The execution order of each step should be determined by its function and internal logic. Therefore, the sequence number of each step should not constitute an absolute limitation on the implementation process of the embodiments of this application.

[0026] The communication method provided in this application will be described in detail below with reference to the accompanying drawings, through specific embodiments and application scenarios.

[0027] This application provides a communication method applied to electronic devices.

[0028] like Figure 1 As shown, the communication method may include:

[0029] Step 101: If the target terminal initiates a PDU session establishment request, determine whether the target terminal is a registered user of the target private network based on the target terminal's subscription information with the telecommunications operator.

[0030] The contract information includes the target terminal's contracted DNN (Data Network Name).

[0031] The PDU mentioned here is an abbreviation for Packet Data Unit. This PDU session establishment request is used to request access to public or private network resources.

[0032] In this embodiment, the telecommunications operator can subscribe to a dedicated DNN for private network users. When a terminal device registers with a private network user, it can subscribe to a dedicated DNN. For terminal devices that have not registered with a private network user, it can subscribe to a public network DNN. Therefore, it is possible to determine whether a target terminal is a private network registered user based on its subscribed DNN.

[0033] Specifically, it is possible to Figure 2 The 5G core network 5GC's UDM (Unified Data Management) or the 4G core network EPC's HSS (Home Subscriber Server) provides a dedicated DNN for private network users. When a user registers for a private network account, if the user is a 5G user, then... Figure 2 The AMF (Access and Mobility Management Function) in the 5GC shown can obtain subscription data such as the subscription-specific DNN from the UDM to complete the registration process; if the user is a 4G user, Figure 2 The MME (Mobility Management Entity) in the EPC shown can obtain contract data such as the contract-specific DNN from the HSS to complete the registration process.

[0034] Step 102: If the target terminal's contracted DNN is a dedicated DNN, determine that the target terminal is a registered user of the target private network.

[0035] In this embodiment of the application, if the target terminal's contracted DNN is a dedicated DNN, it means that the target terminal is a registered user of the target private network; conversely, if the target terminal's contracted DNN is a private public network DNN, it means that the target terminal is not a registered user of the target private network.

[0036] The target private network mentioned here is the internal network relative to the public network, and the public network is the external network relative to the target private network.

[0037] Step 103: If the target terminal is a registered user of the target private network, determine the traffic diversion direction based on the destination IP address of the PDU session establishment request.

[0038] In this embodiment, a dedicated DNN can access both the public and private networks, while a public network DNN can only access the public network and not the private network. Therefore, when the target terminal is a registered user of the target private network, the destination IP address of the request can be established based on the PDU session to determine the traffic routing direction. The traffic routing direction can include the target private network and the public network.

[0039] Step 104: If the destination IP address belongs to the target private network, divert the traffic to the target private network.

[0040] In other words, if the destination IP address belongs to the target private network, the traffic routing direction is determined to be the target private network, and the traffic is routed to the target private network.

[0041] Step 105: If the destination IP address is on the public network, divert the traffic to the public network.

[0042] In other words, if the destination IP address is on the public network, the traffic routing direction is determined to be the public network, and the traffic is routed to the public network.

[0043] In this embodiment, when a terminal device (such as a mobile phone) registers as a private network user, the telecommunications operator can subscribe to a dedicated DNN for the terminal device. When the terminal device initiates a PDU session establishment request, it can determine whether the terminal device is a registered user of the private network based on the DNN subscribed to by the terminal device. If the DNN subscribed to by the terminal device is a dedicated DNN, then it is a registered user of the private network. If the terminal device is determined to be a registered user of the private network, the traffic routing direction can be determined based on the destination IP address of the PDU session establishment request, and the traffic can be routed to the private network or the public network. In this embodiment, access to internal and external networks is no longer independent and separate, thus enabling simultaneous access to both networks. Furthermore, in this embodiment, for internal network access, users no longer need to enter usernames and passwords at the authentication interface for authentication. User authentication can be performed by the network element device based on the terminal device's subscribed DNN. This authentication process is imperceptible to the user, facilitating network access operations.

[0044] As an optional embodiment, step 103: when the target terminal is a registered user of the target private network, determining the traffic routing direction based on the destination IP address of the PDU session establishment request may include:

[0045] Step A1: If the target terminal is determined to be a registered user of the target private network, the PDU session establishment request is sent to the policy UPF group associated with the private DNN through the dedicated DNN subscribed by the target terminal.

[0046] The strategy UPF group includes at least one pair of core offloading node UPFs.

[0047] In this embodiment of the application, one or more pairs of core node UPFs can be designated as dedicated policy UPF groups for private network services, such as... Figure 2 As shown, the two policy UPFs in the user plane form a dedicated policy UPF group. The number of core traffic distribution node UPFs in the policy UPF group can be determined based on the traffic volume; the greater the traffic volume, the more core traffic distribution node UPFs can be.

[0048] Step A2: Using the policy UPF group, determine the destination IP address of the request established by the PDU session to determine the direction of traffic routing.

[0049] In this embodiment, the dedicated DNN is only associated with a dedicated policy UPF group. The dedicated policy UPF group can perform policy-based routing and traffic distribution based on services. For example... Figure 2 As shown, when a user needs to access a private network, i.e., the destination IP address of the PDU session establishment request belongs to the private network, a dedicated DNN to the internal network can be configured based on ① policy routing; when a user needs to access the public network, i.e., the destination IP address of the PDU session establishment request belongs to the public network, a dedicated DNN to the public network can be configured based on ② default routing, such as a channel pointing to the Internet.

[0050] Specifically, in the embodiments of this application, Figure 2 The MME and AMF in the system can use a dedicated DNN or a dedicated APN (Access Point Name) to select the SMF (Session Management Function). The SMF selects the dedicated policy UPF group for the private network service based on the dedicated DNN or dedicated APN. The dedicated APN is obtained based on the dedicated DNN subscribed by the 4G terminal equipment.

[0051] As an optional embodiment, when the traffic splitting direction is the target private network, the communication method may further include:

[0052] Step B1: Through the converged gateway, determine whether the target terminal has access rights to the destination IP address based on the fixed IP address carried by the target terminal.

[0053] The converged gateway is deployed on the target private network side, such as... Figure 2 As shown.

[0054] When the target terminal registers as a user of the target private network, a fixed IP address can be assigned to the target terminal and saved as contract information. In other words, the contract information can also include the fixed IP address assigned to the target terminal.

[0055] In this embodiment, address pool resources can be allocated to private network users, and these address pool resources include multiple fixed IP addresses. Based on the address pool resources, a fixed IP address can be allocated to a terminal device registered as a private network user.

[0056] Step B2: If the target terminal has access to the destination IP address, redirect the traffic to the destination IP address.

[0057] Step B3: If the target terminal does not have access to the destination IP address, send an access denied page to the target terminal.

[0058] In this embodiment, the converged gateway has access control functionality, which can control access traffic based on the fixed IP address of the target terminal. When access is restricted, an access denied page can be returned; when access is granted, the fixed IP address can be converted to a private network IP address according to Network Address Translation (NAT) rules, and traffic forwarding can proceed normally.

[0059] Suppose that the converged network determines the destination IP address that terminal A wants to access. Figure 2 In the context of Application 1, if the converged gateway determines that terminal A has access to Application 1 based on its fixed IP address, then traffic will be diverted to Application 1. If the converged gateway determines that terminal A has access to Application 2 but not to Application 1 based on its fixed IP address, then an access denied page will be pushed to terminal A.

[0060] Let's take a dedicated campus intranet as an example. Assume the campus intranet includes an office LAN, a library LAN, and a teaching LAN. Students are granted access to the library and teaching LANs, but not to the office LAN. If a student tries to access the office LAN, they will receive an access denied page indicating that they do not have permission. However, they can access the library or teaching LANs normally.

[0061] It's understandable that users accessing a private network can also access some internet resources through the egress router. For example, on a campus intranet, students can access academic platforms, etc.

[0062] Optionally, the N6 port of the policy UPF group can be connected to the converged gateway, which in turn connects to the private network and is configured with NAT mapping, access policies, and access permissions. When it is determined that a user is accessing private network resources, the policy UPF group can first divert traffic to the converged gateway; that is, the policy UPF group sends the PDU session establishment request to the converged gateway. Based on the access policies and access permissions, the converged network determines whether the terminal has the necessary permissions based on the terminal device's fixed IP address. If so, mapping is performed based on the NAT table, and traffic is diverted to the private network according to the routing policy. For messages returned from the internal network, such as IP Router Advertisement messages, they can be sent to the policy UPF group through the N4 interface, and then the policy UPF group forwards them to the terminal device.

[0063] In this embodiment, a "Policy UPF Group + Converged Gateway" architecture is introduced, making networking more flexible and management methods richer. Furthermore, to address the management needs of private network customers, a fixed IP address approach is adopted. Data synchronization with the private network system (1 certificate, 1 number, 1 IP) can be performed when the user signs up. This allows the converged gateway to identify which specific user (based on fixed IP address awareness) is logging into the private network, and further interface with the private network management system and authentication system to achieve practical user management and traffic control.

[0064] As an optional embodiment, the target private network described in this application embodiment can be a local area network formed based on a 4G network or a 5G network.

[0065] This application embodiment can be directed towards mobile terminal 2C (to consumer) users, through ubiquitous 4G and 5G networks, based on the "policy UPF scheme + policy boundary gateway (i.e. converged gateway) scheme", to achieve simultaneous access to the public network and local area network, meet the requirements for simultaneous access to the public network and the internal network, meet the customer's access control requirements, and also enable access to 4G and 5G dual-domain private networks.

[0066] As an optional embodiment, when the target terminal is a registered user of the target private network, the communication method may further include:

[0067] Step C1: Obtain the DNN carried in the PDU session establishment request.

[0068] Step C2: If the DNN is a public network DNN, correct it to a dedicated DNN.

[0069] Since some terminal devices may not support DNN settings and can only use the default DNN, i.e., the public network DNN, configuration errors may occur for terminal devices that have registered as private network users. To overcome this problem, in this embodiment of the application, when it is determined that the target terminal is a registered user of the target private network, the public network DNN carried in the PDU session establishment request can be corrected to a private network DNN.

[0070] Specifically, Figure 2 The AMF and MME in the system can enable DNN / APN error correction. When the terminal device is a private network user but uses a public network DNN (i.e., the terminal's default DNN / APN) to access the network, the AMF / MME will correct the error to a dedicated DNN based on the subscription data in the UDM / HSS.

[0071] As an optional embodiment, the communication method may further include:

[0072] Receive the registration request sent by the target terminal; if the target terminal meets the registration conditions, sign up for the dedicated DNN corresponding to the target private network for the target terminal and assign a fixed IP address to the target terminal.

[0073] The registration request is used to request registration as a user of the target private network.

[0074] As an optional embodiment, in this application embodiment, it can be achieved through... Figure 2 The configuration device obtains the relevant information of the network elements and equipment required for the private network. Then, the data management device customizes the relevant configuration of the activation policy UPF group, and the user management device customizes the relevant configuration of the activation converged gateway.

[0075] Specifically, by using a data configuration device to configure the required network elements and scripting the configuration, the private network can be quickly activated. Furthermore, after being integrated with the customer's management system, it can provide customers with the ability to independently configure policy routing and traffic access permissions.

[0076] Specifically, by using a user configuration device and a fixed IP address, the collaboration between operator-side user data and customer-side authentication platform management can be achieved, providing customers with user management capabilities and building a private network user identity system.

[0077] The following uses the campus network as an example, combined with... Figure 2 , Figure 3 Table 1 provides examples to illustrate the aforementioned content. Figure 3 This is a schematic diagram of the network topology of a 5G campus intranet. Therefore, 4G mobile phones or mobile phones from other networks need to access the campus network via the Internet.

[0078]

[0079]

[0080]

[0081] In Table 1, PCF stands for Policy Control function, PCRF stands for Policy and Charging Rules Function, CE stands for Customer Edge, and ASBR stands for Autonomous System Boundary Router.

[0082] In real-world projects, campus users' management needs outweigh their network needs, leading to strong demands for network security, user management, and traffic control. However, traditional 5G campus private networks typically employ an "ULCL (Uplink Classifier) ​​traffic offloading scheme," where dedicated lines directly connect to the campus intranet, and operator-side data cannot be synchronized with the campus management platform, making management difficult. Therefore, based on the multi-route control scheme provided in this application's embodiments, and through data management and user management devices, this approach not only enables rapid deployment of private networks (such as 4G / 5G dual-domain private networks) but also better provides customers with private network management and user management capabilities tailored to their needs, offering the possibility of self-service and self-operation. Furthermore, the network scope can be further expanded, allowing users to access the private network beyond a specific area, such as only being able to access the campus network within the campus.

[0083] Furthermore, unlike traditional ULCL solutions, this application's embodiments do not require edge off-line nodes but instead employ core off-line nodes. Core off-line nodes are more powerful, more stable, and more reliable, and can better support 4G / 5G collaboration and cross-provincial roaming scenarios.

[0084] Finally, by employing a data configuration device and a user configuration device, and based on the collaboration between the policy UPF group and the converged gateway, a "private network self-service management platform" model is encapsulated to provide self-service optional network activation services (data configuration device) and user management services (user configuration device) to B-end customers (i.e., enterprise customers), and self-service package subscription services (user configuration device) to C-end users (i.e., ordinary users).

[0085] The above is a description of the communication method provided in the embodiments of this application.

[0086] In summary, the embodiments of this application enable simultaneous access to both internal and external networks, improving the user's access experience across both networks. Furthermore, they allow for better access control and traffic management, providing users with enhanced management capabilities.

[0087] The communication method provided by the embodiments of this application has been described above. The communication device provided by the embodiments of this application will be described below with reference to the accompanying drawings.

[0088] like Figure 4 As shown in the embodiments of this application, a communication device is also provided, which is applied to an electronic device.

[0089] The communication device may include:

[0090] The first determining module 401 is used to determine whether the target terminal is a registered user of the target private network based on the target terminal's subscription information with the communication operator when the target terminal initiates a PDU session establishment request.

[0091] The contract information includes the contracted DNN of the target terminal.

[0092] The second determining module 402 is used to determine that the target terminal is a registered user of the target private network when the signed DNN is a dedicated DNN.

[0093] The third determining module 403 is used to determine the traffic diversion direction based on the destination IP address of the PDU session establishment request when the target terminal is a registered user of the target private network.

[0094] The first traffic splitting module 404 is used to split traffic to the target private network when the destination IP address belongs to the target private network.

[0095] The second traffic splitting module 405 is used to split traffic to the public network when the destination IP address belongs to the public network.

[0096] Optionally, the third determining module 403 may include:

[0097] The sending unit is configured to, when determining that the target terminal is a registered user of the target private network, send the PDU session establishment request to the policy UPF group associated with the dedicated DNN through the dedicated DNN.

[0098] The strategy UPF group includes at least one pair of core distribution nodes UPF.

[0099] The determining unit is used to determine the traffic diversion direction based on the destination IP address of the PDU session establishment request through the policy UPF group.

[0100] Optionally, the device may further include:

[0101] The fourth determining module is used to determine, through a converged gateway, whether the target terminal has access to the destination IP address based on the fixed IP address carried by the target terminal when the traffic diversion direction is the target private network.

[0102] The converged gateway is deployed on the target private network side. When a target terminal registers as a user of the target private network, a fixed IP address is assigned to the target terminal and stored as subscription information.

[0103] The third traffic splitting module is used to split traffic to the destination IP address when the target terminal has access rights to the destination IP address;

[0104] The fourth traffic splitting module is used to send an access denied page to the target terminal if the target terminal does not have access to the destination IP address.

[0105] Optionally, the device may further include:

[0106] The acquisition module is used to acquire the DNN carried in the PDU session establishment request when the target terminal is a registered user of the target private network.

[0107] The error correction module is used to correct the DNN to the dedicated DNN if the DNN is a public network DNN.

[0108] Optionally, the device may further include:

[0109] The receiving module is used to receive the registration request sent by the target terminal.

[0110] The registration request is used to request registration as a user of the target private network.

[0111] The signing module is used to sign up the target terminal with the dedicated DNN corresponding to the target private network and to assign a fixed IP address to the target terminal when it is determined that the target terminal meets the registration conditions.

[0112] The communication device provided in this application embodiment can achieve... Figure 1 The various processes implemented by the communication device in the method embodiment shown will not be described again here to avoid repetition.

[0113] In this embodiment, when a terminal device (such as a mobile phone) registers as a private network user, the telecommunications operator can subscribe to a dedicated DNS (Dedicated Network Name) for the terminal device. When the terminal device initiates a PDU session establishment request, the operator can determine whether the terminal device is a registered user of the private network based on the DNN it has subscribed to. If the terminal device has subscribed to a dedicated DNN, it is a registered user of the private network. When the terminal device is a registered user of the private network, the traffic routing direction can be determined based on the destination IP address of the PDU session establishment request. That is, if the destination IP address is a private network address, the traffic is routed to the private network; if the destination IP address is a public network address, the traffic is routed to the public network. In this embodiment, access to internal and external networks is no longer independent, thus enabling simultaneous access to both networks.

[0114] This application also provides an electronic device, including a processor and a memory. The memory stores a program or instructions that can run on the processor. When the program or instructions are executed by the processor, they implement the various steps of the above-described communication method embodiments and achieve the same technical effect. To avoid repetition, they will not be described again here.

[0115] This application also provides a readable storage medium storing a program or instructions. When the program or instructions are executed by a processor, they implement the various processes of the above-described communication method embodiments and achieve the same technical effects. To avoid repetition, they will not be described again here.

[0116] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0117] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM, RAM, magnetic disk, optical disk, etc., including several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0118] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.

Claims

1. A communication method, characterized in that, include: When the target terminal initiates a PDU session establishment request, it is determined whether the target terminal is a registered user of the target private network based on the target terminal's subscription information with the telecommunications operator; wherein, the subscription information includes the target terminal's subscription DNN; If the contracted DNN is a dedicated DNN, the target terminal is determined to be a registered user of the target private network; If the target terminal is a registered user of the target private network, the traffic diversion direction is determined based on the destination IP address of the PDU session establishment request; If the destination IP address belongs to the target private network, the traffic will be diverted to the target private network. If the destination IP address is on the public network, the traffic will be diverted to the public network. When the target terminal is a registered user of the target private network, determining the traffic routing direction based on the destination IP address of the PDU session establishment request includes: If the target terminal is determined to be a registered user of the target private network, the PDU session establishment request is sent to the policy UPF group associated with the dedicated DNN through the dedicated DNN; wherein, the policy UPF group includes at least one pair of core traffic distribution node UPFs; the dedicated DNN is only associated with the policy UPF group; the number of core traffic distribution node UPFs in the policy UPF group is determined according to the traffic volume; The UPF strategy group determines the traffic routing direction based on the destination IP address of the PDU session establishment request. When the traffic diversion direction is the target private network, the method further includes: The converged gateway determines whether the target terminal has access to the destination IP address based on the fixed IP address carried by the target terminal. The converged gateway is deployed on the target private network side. When the target terminal registers as a user of the target private network, a fixed IP address is assigned to the target terminal and saved as subscription information. The N6 port of the policy UPF group is connected to the converged gateway, which in turn interfaces with the management system and authentication platform of the target private network. If the target terminal has access to the destination IP address, the traffic will be diverted to the destination IP address. If the target terminal does not have access to the destination IP address, an access denied page is sent to the target terminal.

2. The communication method according to claim 1, characterized in that, When the target terminal is a registered user of the target private network, the method further includes: Obtain the DNN carried in the PDU session establishment request; If the DNN is a public network DNN, it is corrected to be a dedicated DNN.

3. The communication method according to claim 1, characterized in that, The method further includes: Receive a registration request sent by the target terminal; wherein the registration request is used to request registration as a user of the target private network; If the target terminal meets the registration requirements, the system will subscribe the target terminal to the dedicated DNN corresponding to the target private network and assign a fixed IP address to the target terminal.

4. A communication device, characterized in that, include: The first determining module is used to determine whether the target terminal is a registered user of the target private network based on the target terminal's subscription information with the telecommunications operator when the target terminal initiates a PDU session establishment request; wherein the subscription information includes the target terminal's subscription DNN; The second determining module is used to determine that the target terminal is a registered user of the target private network when the contracted DNN is a dedicated DNN; The third determining module is used to determine the traffic diversion direction based on the destination IP address of the PDU session establishment request when the target terminal is a registered user of the target private network. The first traffic routing module is used to route traffic to the target private network when the destination IP address belongs to the target private network. The second traffic routing module is used to route traffic to the public network when the destination IP address belongs to the public network. The third determining module includes: The sending unit is configured to, upon determining that the target terminal is a registered user of the target private network, send the PDU session establishment request to the policy UPF group associated with the dedicated DNN through the dedicated DNN; wherein, the policy UPF group includes at least one pair of core traffic offloading node UPFs; the dedicated DNN is only associated with the policy UPF group; the number of core traffic offloading node UPFs in the policy UPF group is determined according to the traffic volume; The determining unit is used to determine the traffic diversion direction based on the destination IP address of the PDU session establishment request through the policy UPF group; When the traffic diversion direction is the target private network, the device further includes: The fourth determining module is used to determine, through a converged gateway, whether the target terminal has access to the destination IP address based on the fixed IP address carried by the target terminal; wherein, the converged gateway is deployed on the target private network side; when the target terminal registers as a user of the target private network, a fixed IP address is assigned to the target terminal and saved as subscription information; the N6 port of the policy UPF group is connected to the converged gateway, and the converged gateway is connected to the management system and authentication platform of the target private network; The third traffic splitting module is used to split traffic to the destination IP address when the target terminal has access rights to the destination IP address; The fourth traffic splitting module is used to send an access denied page to the target terminal if the target terminal does not have access to the destination IP address.

5. The communication device according to claim 4, characterized in that, If the target terminal is a registered user of the target private network, the device further includes: The acquisition module is used to acquire the DNN carried in the PDU session establishment request; The error correction module is used to correct the DNN to the dedicated DNN if the DNN is a public network DNN.

6. The communication device according to claim 4, characterized in that, The device further includes: A receiving module is used to receive a registration request sent by the target terminal; wherein the registration request is used to request registration as a user of the target private network; The signing module is used to sign up the target terminal with the dedicated DNN corresponding to the target private network and to assign a fixed IP address to the target terminal when it is determined that the target terminal meets the registration conditions.

7. An electronic device, characterized in that, It includes a processor and a memory, the memory storing a program or instructions that can run on the processor, the program or instructions being executed by the processor to implement the steps of the communication method as described in any one of claims 1 to 3.

8. A readable storage medium, characterized in that, The readable storage medium stores a program or instructions that, when executed by a processor, implement the steps of the communication method as described in any one of claims 1 to 3.

Images