Data shunting method, device, storage medium and electronic equipment

Abstract

The present disclosure provides a data shunting method and device, a storage medium and an electronic device, and relates to the technical field of communication. The method receives a mapping table from a signaling gateway through a data gateway. The mapping table is established by the signaling gateway in a PDU session establishment process and includes a mapping table of a slice identifier and a tunnel endpoint identifier. The slice identifier represents slice information to which an intranet user subscribes. The data gateway receives to-be-forwarded uplink data, judges whether the tunnel endpoint identifier of the to-be-forwarded uplink data is in the mapping table. If yes, the data is forwarded to the intranet. Otherwise, the data is forwarded to the public network. The embodiment of the present disclosure can improve the security of data access.

Description

Technical Field

[0001] This disclosure relates to the field of communication technology, and in particular to a data splitting method, apparatus, storage medium and electronic device. Background Technology

[0002] 5G networks have three main characteristics: high bandwidth, low latency, and multiple access points. However, businesses often don't need all of these features simultaneously. Furthermore, some enterprises desire complete control over the 5G network, high reliability, security, and privacy—specific needs that public networks cannot fully meet. Enterprise 5G private networks offer the freedom to customize networks, providing different configurations based on usage locations and work types, and offering significant advantages in privacy and security.

[0003] Currently, in the construction of enterprise 5G private networks, the access of 5G base station gateways can achieve secure isolation between the enterprise network and the operator's 5G core network, realize local data loopback, and ensure that internal enterprise data does not leave the campus, meeting the enterprise's requirements for high stability and high privacy of business data. However, there is a problem that it is impossible to distinguish which traffic enters the internal network and which traffic goes directly through the 5G public network.

[0004] It should be noted that the information disclosed in the background section above is only used to enhance the understanding of the background of this disclosure, and therefore may include information that does not constitute prior art known to those skilled in the art. Summary of the Invention

[0005] This disclosure provides a data splitting method, apparatus, storage medium, and electronic device, which at least to some extent overcomes the problem in related technologies that cannot distinguish between user business traffic inside and outside an enterprise campus.

[0006] Other features and advantages of this disclosure will become apparent from the following detailed description, or may be learned in part from practice of this disclosure.

[0007] According to one aspect of this disclosure, a data offloading method is provided, comprising:

[0008] The data gateway receives a mapping table from the signaling gateway, which is established by the signaling gateway during the PDU session establishment process. The mapping table includes a mapping table of slice identifiers and tunnel endpoint identifiers, wherein the slice identifier represents the slice information subscribed by the intranet user.

[0009] When the data gateway receives the uplink data to be forwarded, it determines whether the tunnel endpoint identifier of the uplink data to be forwarded is in the mapping table; if so, it forwards the data to the intranet; otherwise, it forwards the data to the public network.

[0010] In one embodiment of this disclosure, the mapping table is dynamically updated when an intranet user establishes or releases a PDU session.

[0011] In one embodiment of this disclosure, the signaling gateway and the data gateway communicate via a message queue using a custom message template.

[0012] In one embodiment of this disclosure, the signaling gateway establishes a connection between the small cell and the Access and Mobility Management Function (AMF) of the public network through the N2 interface; the data gateway establishes a connection between the small cell and the User Plane Function (UPF) of the public network through the N3 interface.

[0013] In one embodiment of this disclosure, the data gateway receiving a mapping table from a signaling gateway includes:

[0014] The user terminal initiates a PDU session establishment request to the AMF;

[0015] AMF returns a PDU session resource establishment request to the signaling gateway;

[0016] The signaling gateway determines whether a user is an internal network user based on the slice identifier in the PDU session resource establishment request;

[0017] If so, the signaling gateway stores the slice identifier and establishes a mapping table between the slice identifier and the tunnel endpoint identifier.

[0018] In one embodiment of this disclosure, the small base station sends a PDU session establishment accept message to the user terminal to create a radio bearer.

[0019] In one embodiment of this disclosure, the small base station sends a PDU session resource request response to the AMF through a signaling gateway to establish a data channel.

[0020] In one embodiment of this disclosure, the data gateway transmits the downlink data to be forwarded downlink according to the tunnel endpoint identifier.

[0021] In one embodiment of this disclosure, the slice identifier includes a slice distinguishing identifier SD and a slice service type SST.

[0022] In one embodiment of this disclosure, the public network is a 5G network.

[0023] According to another aspect of this disclosure, a data splitting device is also provided, comprising:

[0024] The mapping table receiving module receives a mapping table from the signaling gateway. The mapping table is established by the signaling gateway during the PDU session establishment process and includes a mapping table of slice identifiers and tunnel endpoint identifiers. The slice identifier represents the slice information subscribed by the intranet user.

[0025] The data forwarding module receives the uplink data to be forwarded from the data gateway and determines whether the tunnel endpoint identifier of the uplink data to be forwarded is in the mapping table; if so, the data is forwarded to the intranet; otherwise, the data is forwarded to the public network.

[0026] According to another aspect of this disclosure, an electronic device is also provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform any of the above-described data offloading methods by executing the executable instructions.

[0027] According to another aspect of this disclosure, a computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements the data splitting method described in any of the preceding claims.

[0028] The data offloading method, apparatus, storage medium, and electronic device provided in the embodiments of this disclosure receive a mapping table from a signaling gateway through a data gateway. This mapping table, established by the signaling gateway during PDU session establishment, includes a mapping table of slice identifiers and tunnel endpoint identifiers. The slice identifier represents the slice information subscribed to by the intranet user. The data gateway receives uplink data to be forwarded and determines whether the tunnel endpoint identifier of the uplink data to be forwarded is in the mapping table. If so, the data is forwarded to the intranet; otherwise, the data is forwarded to the public network. The embodiments of this disclosure can improve the security of data access.

[0029] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0030] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this disclosure and, together with the description, serve to explain the principles of this disclosure. It is obvious that the drawings described below are merely some embodiments of this disclosure, and those skilled in the art can obtain other drawings based on these drawings without any inventive effort.

[0031] Figure 1 This diagram illustrates a data splitting method according to an embodiment of the present disclosure.

[0032] Figure 2 This illustration shows a flowchart of a method for a data gateway to receive a mapping table from a signaling gateway, according to an embodiment of this disclosure.

[0033] Figure 3 This diagram illustrates a data splitting device according to an embodiment of the present disclosure;

[0034] Figure 4This diagram illustrates a flowchart of an optional data splitting PDU session establishment method according to an embodiment of the present disclosure;

[0035] Figure 5 This diagram illustrates a data splitting system according to an embodiment of the present disclosure.

[0036] Figure 6 This diagram illustrates a data offloading application scenario according to an embodiment of the present disclosure; and

[0037] Figure 7 A structural block diagram of an electronic device according to an embodiment of the present disclosure is shown. Detailed Implementation

[0038] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, these exemplary embodiments can be implemented in many forms and should not be construed as limited to the examples set forth herein; rather, they are provided so that this disclosure will be more comprehensive and complete, and will fully convey the concept of the exemplary embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0039] Furthermore, the accompanying drawings are merely illustrative of this disclosure and are not necessarily drawn to scale. The same reference numerals in the drawings denote the same or similar parts, and therefore repeated descriptions of them will be omitted. Some block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities may be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0040] To facilitate understanding, the following is an explanation of several terms used in this disclosure:

[0041] PDU (Protocol Data Unit) is a data unit transmitted between peer layers in a layered network structure. In 5G networks, PDU connection service is the service of exchanging PDU data packets between user equipment and data network. A PDU session refers to the communication process between a user terminal and data network. After a PDU session is established, a data transmission channel between the user terminal and data network is established.

[0042] The AMF (Access and Mobility Management Function) performs registration, connection, reachability, and mobility management; provides a session management message transmission channel; provides authentication and authorization functions for users when accessing the network; and serves as the core network control plane access point for terminals and wireless systems.

[0043] UPF (The User Plane Function) handles packet routing and forwarding, policy enforcement, traffic reporting, and QoS processing; it is the anchor point of a session and records the amount of traffic forwarded.

[0044] S-NSSAI (Single Network Slice Selection Assistance Information) is a unique identifier for a network slice, and an S-NSSAI consists of SST and SD.

[0045] SST (Slice / Service Type) is used to identify the slice type. It is a required piece of information in S-NSSAI, with a length of 8 bits and a value range of 0 to 255. The SST field has normalized and non-normalized values. Values ​​from 0 to 127 belong to the normalized SST range, while values ​​from 128 to 255 belong to the operator-specific range and are determined by the operator.

[0046] SD (Slice Differentiator) can be used as a supplement to SST to distinguish multiple network slices under the same SST. It is optional information in S-NSSAI and has a length of 24 bits. Since SD is optional information, its value is 0xFFFFFF when it is not associated with SST.

[0047] TEID (Tunnel Endpoint Identifier) ​​includes, but is not limited to, TEID based on GTP-U (GPRS Tunneling Protocol for the user plane), which is used to determine whether data packets from different users are transmitted through a specified GTP tunneling protocol.

[0048] GTP (GPRS Tunnel Protocol) is a set of high-level IP-based protocols that sit above TCP / IP and UDP / IP protocols. GTP-U is one type of GTP.

[0049] The following detailed description of this exemplary implementation method is provided in conjunction with the accompanying drawings and embodiments.

[0050] This disclosure provides a data offloading method that can be executed by any electronic device with computing capabilities.

[0051] Figure 1 This diagram illustrates a data splitting method according to an embodiment of the present disclosure, such as... Figure 1 As shown, this data offloading method includes the following steps:

[0052] S102, the data gateway receives a mapping table from the signaling gateway. The mapping table is established by the signaling gateway during the PDU session establishment process. It includes a mapping table of slice identifiers and tunnel endpoint identifiers. The slice identifier represents the slice information subscribed by the intranet user.

[0053] In one embodiment, the signaling gateway establishes a connection between the small base station and the core network through the N2 interface; the data gateway establishes a connection between the small base station and the core network through the N3 interface.

[0054] It should be noted that the signaling gateway provides signaling transmission capabilities between the signaling network and the packet network, enabling signaling interoperability between the circuit-switched network and the IP network, and providing a bidirectional signaling interface between the signaling point and the softswitch. In this embodiment, the signaling gateway enables signaling interoperability between the small base station and the core network through the N2 interface, and the signaling gateway provides the signaling interface.

[0055] It should be noted that the data gateway connects different communication systems to achieve data interoperability. First, it establishes a physical connection between the different systems. Based on this physical connection, it then establishes a software connection using the interfaces permitted by the different systems' communication protocols. Through the processes of data reception, extraction, and transmission, it enables data communication between different application systems, establishing data pathways between different communication protocols and performing functions such as data analysis, storage, and forwarding. In this embodiment, the data gateway enables data communication between the small base station and the core network.

[0056] It should be noted that slice identifiers include, but are not limited to, slice differentiation identifier SD and slice service type SST.

[0057] It should be noted that each network slice is uniquely identified by S-NSSAI (Single Network Slice Selection Assistance Information), and an S-NSSAI consists of SST and SD.

[0058] SST is used to identify the slice type and is a mandatory information in S-NSSAI. It is 8 bits long and has a value range of 0 to 255. The SST field has normalized and non-normalized values. Values ​​from 0 to 127 belong to the normalized SST range, while values ​​from 128 to 255 belong to the operator-specific range and are determined by the operator. The normalized SST value provides a way to establish global interoperability of slices so that the PLMN (Public Land Mobile Network) can more effectively support roaming for the most commonly used slice / service types.

[0059] SD can be used as a supplement to SST to distinguish multiple network slices under the same SST. It is optional information in S-NSSAI and has a length of 24 bits. Since SD is optional information, its value is 0xFFFFFF when it is not associated with SST.

[0060] It should be noted that the Tunnel Endpoint Identifier (TEID) includes, but is not limited to, TEID based on GTP-U (GPRS Tunneling Protocol for the user plane), which is used to determine that data packets from different users are transmitted through the specified GTP tunneling protocol.

[0061] It should be noted that PDU (Protocol Data Unit) is a data unit transmitted between peer layers in a layered network structure. In 5G networks, PDU connection service is the service of exchanging PDU data packets between user equipment and data network. A PDU session refers to the communication process between a user terminal and data network. Once a PDU session is established, a data transmission channel between the user terminal and data network is established.

[0062] In one embodiment, the mapping table is dynamically updated when an intranet user establishes or releases a PDU session.

[0063] In one embodiment, the signaling gateway and the data gateway can communicate directly or indirectly. The communication method between the signaling gateway and the data gateway can be, but is not limited to, using a custom message template via a message queue.

[0064] It should be noted that when the signaling gateway obtains information about the establishment or release of PDU sessions by internal network users, it dynamically updates the mapping table and sends the updated mapping table to the data gateway through the "Data2SigMessageTransfer" message so that the data gateway can obtain the latest traffic distribution information.

[0065] S104, the data gateway receives the uplink data to be forwarded and determines whether the tunnel endpoint identifier of the uplink data to be forwarded is in the mapping table; if so, the data is forwarded to the internal network; otherwise, the data is forwarded to the public network.

[0066] In one embodiment, the public network includes, but is not limited to, a 5G network. This disclosure uses a 5G network as an example for description. For uplink data, if the value of the tunnel endpoint identifier carried in the PDU session exists in the mapping table, it can be determined that the user is an intranet user, and then the message is forwarded to the intranet application server; otherwise, it is forwarded to the 5G network UPF. For downlink data, downlink transmission is carried out along this channel according to the tunnel endpoint identifier.

[0067] In the above embodiments, by subscribing to slice information for intranet users and combining data gateways and signaling gateways, data is distributed and the business traffic of intranet and external networks is distinguished. This ensures that intranet users access intranet servers and external users access the Internet, so that sensitive data does not leave the intranet and protects users' requirements for high data privacy.

[0068] Figure 2 This illustration shows a flowchart of a method for a data gateway to receive a mapping table from a signaling gateway, as shown in an embodiment of this disclosure. Figure 2 As shown, the method by which the data gateway receives the mapping table from the signaling gateway includes the following steps:

[0069] S202, the signaling gateway establishes a connection between the small base station and the access and mobility management function (AMF) of the public network through the N2 interface; the data gateway establishes a connection between the small base station and the user plane function (UPF) of the public network through the N3 interface.

[0070] It should be noted that the AMF (Access and Mobility Management Function) performs registration, connection, reachability, and mobility management; provides a session management message transmission channel; provides authentication and authorization functions for users when accessing the network; and is the core network control plane access point for terminals and wireless networks.

[0071] It should be noted that UPF (The User plane function) is responsible for packet routing and forwarding, policy enforcement, traffic reporting, and QoS processing; it is the anchor point of the session and records the amount of traffic forwarded.

[0072] S204, The user terminal initiates a PDU session establishment request to the AMF;

[0073] S206, AMF returns a PDU session resource establishment request to the signaling gateway;

[0074] S208, the signaling gateway determines whether the user is an internal network user based on the slice identifier in the PDU session resource establishment request;

[0075] S210, if so, the signaling gateway stores the slice identifier and establishes a mapping table between the slice identifier and the tunnel endpoint identifier;

[0076] S212, the small base station sends a PDU session establishment and acceptance message to the user terminal to create a radio bearer;

[0077] S214, the small base station sends a PDU session resource request response to the AMF through the signaling gateway to establish a data channel.

[0078] In the above embodiments, the signaling gateway, as the aggregation device of the control plane, is responsible for managing the process of PDU sessions. During the establishment of a PDU session, the signaling gateway captures and maintains a mapping table between the slice information subscribed by the intranet user and the tunnel endpoint identifier; the small base station creates radio bearers and establishes data channels through the PDU session.

[0079] Based on the same inventive concept, this disclosure also provides a data splitting device, as shown in the following embodiments. Since the principle by which this device solves the problem is similar to that of the method embodiments described above, the implementation of this device embodiment can refer to the implementation of the method embodiments described above, and repeated details will not be elaborated further.

[0080] Figure 3 This diagram illustrates a data splitting device according to an embodiment of the present disclosure, such as... Figure 3 As shown, the data splitting device 3 includes: a mapping table receiving module 301 and a data forwarding module 302;

[0081] The mapping table receiving module 301 receives the mapping table from the signaling gateway. The mapping table is established by the signaling gateway during the PDU session establishment process and includes a mapping table of slice identifiers and tunnel endpoint identifiers. The slice identifier represents the slice information subscribed by the intranet user.

[0082] The data forwarding module 302 receives the uplink data to be forwarded from the data gateway and determines whether the tunnel endpoint identifier of the uplink data to be forwarded is in the mapping table; if so, the data is forwarded to the intranet; otherwise, the data is forwarded to the public network.

[0083] In the above embodiments, by subscribing to slice information for intranet users and combining data gateways and signaling gateways, data is distributed and the business traffic of intranet and external networks is distinguished. This ensures that intranet users access intranet servers and external users access the Internet, so that sensitive data does not leave the intranet and protects users' requirements for high data privacy.

[0084] Figure 4 This illustration shows a flowchart of an optional data splitting PDU session establishment method according to an embodiment of the present disclosure, such as... Figure 4 As shown, the optional data offloading PDU session establishment method includes the following steps:

[0085] S402, after the user terminal registration process is completed, the user terminal initiates a PDU session establishment request to the AMF.

[0086] It should be noted that the 5G base station gateway includes a signaling gateway and a data gateway; the signaling gateway establishes the connection between the small base station and the 5G core network AMF through the N2 interface; the data gateway establishes the connection between the small base station and the 5G core network UPF through the N3 interface.

[0087] S404, AMF returns a PDU session resource establishment request to the signaling gateway, which then forwards it to the 5G small base station. The signaling gateway determines whether the user is a user within the enterprise park based on the slice identifier carried in the signaling. The slice identifier indicates that the user within the enterprise park has subscribed to a specific slice. If the user is a specific user within the enterprise park, the signaling gateway stores the correspondence between the slice identifier and the tunnel endpoint identifier to establish a mapping table.

[0088] S406, the 5G small base station sends a PDU session establishment and acceptance message to the user terminal to create a radio bearer;

[0089] S408, the 5G small base station sends a PDU session resource request response to the signaling gateway, which then transmits it to the AMF, and the uplink and downlink user plane data channels are established.

[0090] S410: If a new user accesses the enterprise campus or a PDU session is released, the mapping table needs to be dynamically updated in real time and sent to the data gateway.

[0091] It should be noted that the signaling gateway and the data gateway communicate via a message queue using a custom message template. If the mapping table storing slice identifiers and tunnel endpoint identifiers in the signaling gateway is updated, the signaling gateway will send the updated mapping table to the data gateway through the "Data2SigMessageTransfer" message so that the data gateway can obtain the latest traffic distribution information.

[0092] S412, in uplink and downlink data transmission, the data gateway will split the incoming and outgoing data according to the value of the tunnel endpoint identifier in the mapping table; for uplink data, if the value of the tunnel endpoint identifier carried in the PDU session exists in the mapping table, it can be determined that the user is a user in the enterprise campus, and then the message is forwarded to the enterprise application server; otherwise, it is forwarded to the UPF; for downlink data, it is transmitted downlink along this channel.

[0093] It should be noted that, Figure 4 7a and 7b are the uplink and downlink user plane data channels for external users and internal users of the enterprise park, respectively.

[0094] It should be noted that the above embodiments can be applied to various public networks. This embodiment uses 5G public network as an example for introduction.

[0095] In the above embodiments, by signing up slice information for users within the enterprise park and combining it with data gateways and signaling gateways, the separation of user data inside and outside the enterprise park is achieved. This ensures that users within the enterprise park access the enterprise application server, while users outside the enterprise park access the Internet, preventing sensitive data from leaving the enterprise park and guaranteeing the high privacy requirements of users within the enterprise park.

[0096] Based on the same inventive concept, this disclosure also provides a data diversion system, as shown in the following embodiments. Since the principle by which this system embodiment solves the problem is similar to that of the above method embodiments, the implementation of this system embodiment can refer to the implementation of the above method embodiments, and repeated details will not be described again.

[0097] Figure 5 This diagram illustrates a data offloading system according to an embodiment of the present disclosure, such as... Figure 5 As shown, the system includes: user terminal 501, AMF 502, signaling gateway 503, 5G small base station 504, and data gateway 505;

[0098] User terminal 501 initiates a PDU session establishment request to AMF502 and receives the PDU session establishment reception returned by 5G small base station 504.

[0099] AMF502 receives a PDU session establishment request initiated by user terminal 501 and returns a PDU session resource establishment request to signaling gateway 503.

[0100] Signaling gateway 503 receives the PDU session resource establishment request returned by AMF502 and transmits it to 5G small base station 504. Based on the slice identifier carried in the signaling, it determines whether the user is a user within the enterprise campus. The slice identifier indicates that the user within the enterprise campus has subscribed to a specific slice. If the user is a specific user within the enterprise campus, a mapping table is established in signaling gateway 503 to establish the correspondence between slice identifier and tunnel endpoint identifier. If a new user within the enterprise campus accesses or a PDU session is released, the mapping table needs to be dynamically updated in real time and sent to data gateway 505. The 5G small base station 504 sends the PDU session resource request response to AMF502.

[0101] The 5G small base station 504 receives the PDU session resource establishment request transmitted by the signaling gateway 503, and sends a PDU session resource request response to the signaling gateway 503; it sends a PDU session establishment acceptance message to the user terminal 501 to create a radio bearer; and sends a PDU session resource request response to the signaling gateway 503.

[0102] Data gateway 505 receives the mapping table and performs data diversion on incoming and outgoing data based on the value of the tunnel endpoint identifier in the mapping table. For uplink data, if the value of the tunnel endpoint identifier carried in the PDU session exists in the mapping table, it can be determined that the user is a user within the enterprise campus, and the message is forwarded to the enterprise application server; otherwise, it is forwarded to the UPF. For downlink data, it is transmitted downlink along this channel.

[0103] In the above embodiments, by signing up slice information for users within the enterprise park and combining data gateways and signaling gateways, the separation of user data inside and outside the enterprise park is achieved, ensuring the high privacy requirements of users within the enterprise park.

[0104] In one embodiment, the network used as a medium to provide a communication link between the user terminal 501 and the server can be a wired network or a wireless network.

[0105] Optionally, the aforementioned wireless or wired networks use standard communication technologies and / or protocols. The network is typically the Internet, but can also be any network, including but not limited to Local Area Networks (LANs), Metropolitan Area Networks (MANs), Wide Area Networks (WANs), mobile, wired or wireless networks, private networks, or any combination of virtual private networks. In some embodiments, technologies and / or formats including Hyper Text Markup Language (HTML), Extensible Markup Language (XML), etc., are used to represent data exchanged over the network. Furthermore, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Networks (VPNs), and Internet Protocol Security (IPsec) can be used to encrypt all or some links. In other embodiments, custom and / or dedicated data communication technologies can be used to replace or supplement the aforementioned data communication technologies.

[0106] User terminal 501 can be various electronic devices, including but not limited to smartphones, tablets, laptops, desktop computers, wearable devices, augmented reality devices, virtual reality devices, etc.

[0107] Optionally, the application clients installed on different user terminals 501 may be the same, or clients of the same type of application based on different operating systems. Depending on the terminal platform, the specific form of the application client may also differ; for example, the application client may be a mobile client, a PC client, etc.

[0108] A server can be a server that provides various services, such as a backend management server that supports the devices operated by users using user terminal 501. The backend management server can analyze and process received requests and other data, and then feed the processing results back to the terminal device.

[0109] Optionally, the server can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. The user terminal 501 can be a smartphone, tablet, laptop, desktop computer, smart speaker, smartwatch, etc., but is not limited to these. The user terminal 501 and the server can be directly or indirectly connected via wired or wireless communication, and this application does not impose any restrictions.

[0110] Those skilled in the art will understand that the number of user terminals 501, networks, and servers is merely illustrative, and any number of user terminals 501, networks, and servers can be used according to actual needs. This disclosure does not limit this.

[0111] Figure 6 This diagram illustrates a data splitting application scenario according to an embodiment of the present disclosure, such as... Figure 6 As shown, data offloading can be applied to 5G networks, but is not limited to 5G networks. This embodiment uses 5G networks as an example for introduction.

[0112] Data offloading application scenarios include: 5G base station gateway 601, 5G small base station 602, 5G core network 603 and enterprise application server 604;

[0113] The 5G base station gateway 601 includes: a signaling gateway 6011 and a data gateway 6012;

[0114] The signaling gateway 6011 establishes a connection between the 5G small base station 602 and the 5G core network 603AMF through the N2 interface; the data gateway 6012 establishes a connection between the 5G small base station 602 and the 5G core network 603UPF through the N3 interface.

[0115] The signaling gateway 6011, as the aggregation device of the control plane, is responsible for managing the process of PDU sessions. During the establishment of a PDU session, the signaling gateway captures and maintains a mapping table between the specific subscription slices of the intranet user and the tunnel endpoint identifier. The data gateway 6012 is responsible for data routing and forwarding functions and can determine whether traffic enters the enterprise application server 604 or the 5G core network 603 based on the value of the tunnel endpoint identifier.

[0116] In the above embodiments, the signaling gateway 6011 and the data gateway 6012 work together to separate internal and external user data, thereby protecting the data privacy of internal network users.

[0117] Those skilled in the art will understand that various aspects of this disclosure can be implemented as a system, method, or program product. Therefore, various aspects of this disclosure can be specifically implemented in the following forms: a completely hardware implementation, a completely software implementation (including firmware, microcode, etc.), or a combination of hardware and software aspects, collectively referred to herein as a "circuit," "module," or "system."

[0118] The following reference Figure 7 To describe an electronic device 700 according to such an embodiment of the present disclosure. Figure 7 The electronic device 700 shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments disclosed herein.

[0119] like Figure 7 As shown, the electronic device 700 is manifested in the form of a general-purpose computing device. The components of the electronic device 700 may include, but are not limited to: at least one processing unit 710, at least one storage unit 720, and a bus 730 connecting different system components (including storage unit 720 and processing unit 710).

[0120] The storage unit stores program code, which can be executed by the processing unit 710, causing the processing unit 710 to perform the steps described in the "Exemplary Methods" section of this specification according to various exemplary embodiments of this disclosure. For example, the processing unit 710 can perform the following steps of the above method embodiment: the data gateway receives a mapping table from the signaling gateway, the mapping table being established by the signaling gateway during the PDU session establishment process, including a mapping table of slice identifiers and tunnel endpoint identifiers, wherein the slice identifier represents the slice information subscribed by the intranet user; the data gateway receives uplink data to be forwarded, and determines whether the tunnel endpoint identifier of the uplink data to be forwarded is in the mapping table; if so, the data is forwarded to the intranet; otherwise, the data is forwarded to the public network.

[0121] The processing unit 710 can execute the following steps in the above method embodiment: the user terminal initiates a PDU session establishment request to the AMF; the AMF returns a PDU session resource establishment request to the signaling gateway; the signaling gateway determines whether the user is an intranet user based on the slice identifier in the PDU session resource establishment request; if so, the signaling gateway stores the slice identifier and establishes a mapping table between the slice identifier and the tunnel endpoint identifier; the small base station sends a PDU session establishment acceptance message to the user terminal to create a radio bearer; the small base station sends a PDU session resource request response to the AMF through the signaling gateway to establish a data channel.

[0122] The processing unit 710 can execute the following steps in the above method embodiment: After the user terminal registration process is completed, the user terminal initiates a PDU session establishment request to the AMF; the AMF returns a PDU session resource establishment request to the signaling gateway, which then transmits it to the 5G small base station. The signaling gateway determines whether the user is a user within the enterprise park based on the slice identifier carried in the signaling. The slice identifier indicates that the user within the enterprise park has subscribed to a specific slice. If the user is a specific user within the enterprise park, a mapping table is established in the signaling gateway to store the correspondence between the slice identifier and the tunnel endpoint identifier. If a new user within the enterprise park accesses the network or a PDU session is released, the mapping table needs to be dynamically updated in real time and sent to the data gateway; the 5G small base station sends a PDU session establishment acceptance message to the user terminal to create a radio bearer; the 5G small base station sends a PDU session resource request response to the signaling gateway, which then transmits it to the AMF, and the uplink and downlink user plane data channels are established.

[0123] The processing unit 710 can execute the following steps in the above method embodiment: In uplink and downlink data transmission, the data gateway will split the incoming and outgoing data according to the value of the tunnel endpoint identifier in the mapping table; for uplink data, if the value of the tunnel endpoint identifier carried in the PDU session exists in the mapping table, it can be determined that the user is a user in the enterprise park, and then the message is forwarded to the enterprise application server; otherwise, it is forwarded to the UPF; for downlink data, downlink transmission is carried out along this channel.

[0124] Storage unit 720 may include a readable medium in the form of a volatile storage unit, such as random access memory (RAM) 7201 and / or cache memory 7202, and may further include a read-only memory (ROM) 7203.

[0125] The storage unit 720 may also include a program / utility 7204 having a set (at least one) program module 7205, such program module 7205 including but not limited to: an operating system, one or more application programs, other program modules and program data, each or some combination of these examples may include an implementation of a network environment.

[0126] Bus 730 can represent one or more of several types of bus structures, including a memory cell bus or memory cell controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local bus using any of the various bus structures.

[0127] Electronic device 700 can also communicate with one or more external devices 740 (e.g., keyboard, pointing device, Bluetooth device, etc.), and with one or more devices that enable a user to interact with electronic device 700, and / or with any device that enables electronic device 700 to communicate with one or more other computing devices (e.g., router, modem, etc.). This communication can be performed via input / output (I / O) interface 750. Furthermore, electronic device 700 can also communicate with one or more networks (e.g., local area network (LAN), wide area network (WAN), and / or public networks, such as the Internet) via network adapter 760. As shown, network adapter 760 communicates with other modules of electronic device 700 via bus 730. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with electronic device 700, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0128] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, terminal device, or network device, etc.) to execute the methods according to the embodiments of this disclosure.

[0129] In exemplary embodiments of this disclosure, a computer-readable storage medium is also provided, which may be a readable signal medium or a readable storage medium. A program product capable of implementing the methods described above is stored thereon. In some possible implementations, various aspects of this disclosure may also be implemented as a program product including program code, which, when run on a terminal device, causes the terminal device to perform the steps described in the "Exemplary Methods" section of this specification according to various exemplary embodiments of this disclosure.

[0130] More specific examples of computer-readable storage media in this disclosure may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0131] In this disclosure, a computer-readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, carrying readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium, capable of transmitting, propagating, or transmitting a program for use by or in connection with an instruction execution system, apparatus, or device.

[0132] Optionally, the program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical fiber, RF, etc., or any suitable combination thereof.

[0133] In practical implementation, program code for performing the operations of this disclosure can be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java and C++, and conventional procedural programming languages ​​such as C or similar languages. The program code can execute entirely on the user's computing device, partially on the user's computing device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0134] It should be noted that although several modules or units for the device used to perform actions have been mentioned in the detailed description above, this division is not mandatory. In fact, according to embodiments of this disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0135] Furthermore, although the steps of the method in this disclosure are described in a specific order in the accompanying drawings, this does not require or imply that the steps must be performed in that specific order, or that all the steps shown must be performed to achieve the desired result. Additional or alternative steps may be omitted, multiple steps may be combined into one step, and / or a step may be broken down into multiple steps.

[0136] From the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of this disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, external hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, mobile terminal, or network device, etc.) to execute the methods according to the embodiments of this disclosure.

[0137] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This disclosure is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the appended claims.

Claims

1. A data splitting method, characterized in that, include: The data gateway receives a mapping table from the signaling gateway, which is established by the signaling gateway during the PDU session establishment process. The mapping table includes a mapping table of slice identifiers and tunnel endpoint identifiers, wherein the slice identifier represents the slice information subscribed by the intranet user. When the data gateway receives the uplink data to be forwarded, it determines whether the tunnel endpoint identifier of the uplink data to be forwarded is in the mapping table; if so, it forwards the data to the intranet; otherwise, it forwards the data to the public network.

2. The data splitting method according to claim 1, characterized in that, When an intranet user establishes or releases a PDU session, the mapping table is dynamically updated.

3. The data splitting method according to claim 1, characterized in that, Also includes: The signaling gateway and the data gateway communicate via message queues using custom message templates.

4. The data splitting method according to claim 1, characterized in that, Also includes: The signaling gateway establishes a connection between the small cell base station and the public network's access and mobility management function (AMF) via the N2 interface. The data gateway establishes a connection between the small base station and the public network's User Plane Function (UPF) via the N3 interface.

5. The data splitting method according to claim 4, characterized in that, The data gateway receives a mapping table from the signaling gateway, including: The user terminal initiates a PDU session establishment request to the AMF; AMF returns a PDU session resource establishment request to the signaling gateway; The signaling gateway determines whether a user is an internal network user based on the slice identifier in the PDU session resource establishment request; If so, the signaling gateway stores the slice identifier and establishes a mapping table between the slice identifier and the tunnel endpoint identifier.

6. The data splitting method according to claim 5, characterized in that, Also includes: The small base station sends a PDU session establishment accept message to the user terminal to create a radio bearer.

7. The data splitting method according to claim 6, characterized in that, Also includes: Small base stations establish data channels by sending a PDU session resource request response to the AMF through the signaling gateway.

8. The data splitting method according to claim 1, characterized in that, The data gateway will transmit the downlink data to be forwarded based on the tunnel endpoint identifier.

9. The data splitting method according to any one of claims 1 to 8, characterized in that, The slice identifier includes the slice differentiation identifier SD and the slice service type SST.

10. The data splitting method according to any one of claims 1 to 4, characterized in that, The public network mentioned is a 5G network.

11. A data splitting device, characterized in that, include: The mapping table receiving module receives a mapping table from the signaling gateway. The mapping table is established by the signaling gateway during the PDU session establishment process and includes a mapping table of slice identifiers and tunnel endpoint identifiers. The slice identifier represents the slice information subscribed by the intranet user. The data forwarding module receives the uplink data to be forwarded from the data gateway and determines whether the tunnel endpoint identifier of the uplink data to be forwarded is in the mapping table; if so, the data is forwarded to the intranet; otherwise, the data is forwarded to the public network.

12. An electronic device, characterized in that, include: processor; as well as Memory for storing the executable instructions of the processor; The processor is configured to execute the data splitting method of any one of claims 1 to 10 by executing the executable instructions.

13. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the data splitting method according to any one of claims 1 to 10.

Images