Rule issuance methods, message detection methods, devices, network elements and storage media

Abstract

This application provides a rule issuance method, a packet detection method, an apparatus, a network element, and a storage medium. The rule issuance method includes receiving an Application Authorization Request Initial Message; issuing Policy Control and Charging (PCC) rules based on the Application Authorization Request Initial Message, wherein the PCC rules carry the service media type; and replying to the Network Protocol Multimedia Subsystem (IMS) with an Application Authorization Response Initial Message. The above technical solution reduces the complexity of packet detection and improves packet forwarding performance.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of wireless communication, for example, to a rule issuing method, a message detection method, a device, a network element and a storage medium. BACKGROUND

[0002] In a 5G core network (5G Core Network, 5GC), a user plane function (User Plane Function, UPF) mainly adopts a deep packet inspection (Deep Packet Inspection, DPI) method, and performs deep detection on messages according to different network application layer loads to determine the legitimacy and forwarding strategy. The DPI function is complete and can accurately detect messages, but the complexity of implementing DPI is high. For example, to implement the DPI function, the UPF needs to parse as many seven-layer application protocols as possible; using the parsing result requires designing a high-performance algorithm to search for the most accurate rules; and applying the rules to the filtering and detection matching of data messages. In the case of opening the DPI function, the UPF message forwarding performance is obviously reduced. SUMMARY

[0003] The present application provides a rule issuing method, a message detection method, a device, a network element and a storage medium to reduce the complexity of message detection and improve the performance of network element message forwarding.

[0004] The present application provides a rule issuing method applied to a first network element, comprising:

[0005] receiving an application authorization request initial message;

[0006] issuing a policy control and charging (Policy Control and Charging, PCC) rule according to the application authorization request initial message, wherein the PCC rule carries a service media type;

[0007] replying to an application authorization response initial message to an IP multimedia subsystem (IP Multimedia Subsystem, IMS).

[0008] The present application also provides a message detection method applied to a second network element, comprising:

[0009] obtaining a PCC rule, wherein the PCC rule carries a service media type;

[0010] detecting a service message according to the service media type.

[0011] The present application also provides a rule issuing device, comprising:

[0012] The receiving module is configured to receive an application authorization request initial message;

[0013] The issuing module is configured to issue a PCC rule according to the application authorization request initial message, and the PCC rule carries a service media type;

[0014] The reply module is configured to reply to an IMS with an application authorization response initial message.

[0015] The application embodiment further provides a packet detection device, which comprises:

[0016] The obtaining module is configured to obtain a PCC rule, and the PCC rule carries a service media type;

[0017] The detection module is configured to detect a service packet according to the service media type.

[0018] The application embodiment further provides a network element, which comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the rule issuing method or the packet detection method when executing the program.

[0019] The application embodiment further provides a computer readable storage medium, and the computer readable storage medium stores a computer program, and the program is executable on the processor to implement the rule issuing method or the packet detection method.

[0020] The application embodiment provides a rule issuing method, a packet detection method, a device, a network element, and a storage medium. The rule issuing method comprises the following steps: receiving an application authorization request initial message; and issuing a PCC rule according to the application authorization request initial message, and the PCC rule carries a service media type. The above technical solution reduces the complexity of packet detection and improves the performance of network element packet forwarding. BRIEF DESCRIPTION OF DRAWINGS

[0021] Figure 1 A flowchart of a rule issuing method provided by an embodiment;

[0022] Figure 2 A schematic diagram of issuing a PCC rule provided by an embodiment;

[0023] Figure 3 Another schematic diagram of issuing a PCC rule provided by an embodiment;

[0024] Figure 4 A flowchart of a packet detection method provided by an embodiment;

[0025] Figure 5 A structural schematic diagram of a rule issuing device provided by an embodiment;

[0026] Figure 6 A structural schematic diagram of a packet detection device provided for an embodiment is shown in the figure.

[0027] Figure 7 A hardware structural schematic diagram of a network element provided for an embodiment is shown in the figure. DETAILED DESCRIPTION

[0028] The present application will be described below in conjunction with the accompanying drawings and embodiments. It can be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application. It should be noted that the embodiments in the present application and the features in the embodiments can be combined with each other arbitrarily without conflict. In addition, it should be noted that only parts related to the present application are shown in the drawings for convenience of description, rather than all structures.

[0029] The UPF of the 5GC mainly adopts the DPI method to determine the legality of the packet by detecting the payload of the packet. The DPI needs to have a protocol parser, a search engine and a detection result processing module. The UPF needs to parse as many seven-layer application protocols as possible to implement the DPI function; then a high-performance algorithm is designed using the parsing result to search for the most accurate rules; and the rules are applied to the filtering and detection matching of the data packet. It can be seen that the DPI algorithm has high complexity and high difficulty in function implementation, and opening the DPI will significantly reduce the performance of data packet processing, and the performance will decrease by about 20%. For example, in the private network scenario, the core network originally has a throughput of 10G, but because the DPI function is opened, the throughput decreases to about 8G. In the private network scenario, only the illegal packets other than voice and video need to be identified, and therefore a simple packet detection mechanism is needed to reduce the complexity of packet detection and improve the performance of packet forwarding.

[0030] In the embodiments of the present application, a rule issuing method is provided. When a first network element requests to create a private Quality of Service (QoS) Flow required for service packet forwarding on the service side, the PCC rule issued carries the service media type on the service side as the basis for detecting the service packet, so that too many application protocols do not need to be parsed, and a high-performance search algorithm is also not needed, the packet detection process is simplified, the UPF network element without DPI still has the ability to check the service packet, can quickly identify the type of the service packet, discard the illegal packet, and improve the effective utilization rate of bandwidth and the performance of packet forwarding.

[0031] Figure 1 A flowchart of a rule issuing method provided for an embodiment is shown in the figure. The rule issuing method can be applied to a first network element, and the first network element mainly refers to a Policy Control Function (PCF). For example, Figure 1As shown, the method provided in this embodiment includes step 110 and step 120.

[0032] In step 110, an application authorization request initial message is received.

[0033] In step 120, a PCC rule is issued according to the application authorization request initial message, and the PCC rule carries a service media type.

[0034] In step 130, an application authorization response initial message is replied to the IMS.

[0035] In this embodiment, an application authorization request (AAR) initial message (AAR-Intial) can be sent by an IMS of an application layer function (AF) to a first network element according to a voice or video service request of a UE. The first network element can match an appropriate PCC rule according to parameters carried in the AAR-Initial message and issue the PCC rule to a session management function (SMF), wherein a service media type such as voice or video is carried, and the service media type can be set according to actual scenes and requirements. A service packet conforming to the service media type is a legal packet, and a service packet not conforming to the service media type will be identified as an illegal packet. Then the first network element can reply an application authorization response (AAA) initial message (AAR-Intial) to the IMS, and complete the issuance of the PCC rule.

[0036] Specifically, the AAR and the AAA are used between the AF and the PCF, the PCF determines the PCC rule and issues the PCC rule to the SMF, the SMF can pass the service media type in the PCC rule to a second network element as a basis for packet detection of the second network element, and then the establishment process and the update process of the PDU flow are completed.

[0037] In an embodiment, the PCC rule is issued according to the application authorization request initial message, including:

[0038] The PCC rule with the maximum weight value is matched according to parameters carried in the application authorization request initial message, and is issued to the SMF.

[0039] In an embodiment, the method further includes:

[0040] Step 140: An application authorization request update (AAR-Update) message is received.

[0041] Step 150: issuing PCC rules according to the application authorization request update message, the PCC rules carrying a service media type.

[0042] In this embodiment, the application authorization request update (AAR-Update) message can be sent by the IMS to the first network element according to a voice or video service switching request of a user terminal (User Equipment, UE). The PCF can issue a suitable PCC rule to the SMF according to the parameters carried in the AAR-Update message, wherein the service media type such as voice or video is carried, which can be set according to actual scenes and requirements. The service packet conforming to the service media type is a legal packet, and the service packet not conforming to the service media type will be identified as an illegal packet.

[0043] In an embodiment, the method further comprises:

[0044] Step 160: replying to the IMS with an application authorization answer update (AAA-Update) message.

[0045] In an embodiment, issuing the PCC rules according to the application authorization request update message comprises:

[0046] issuing the PCC rules with the maximum weight value to the SMF according to the parameters carried in the application authorization request update message.

[0047] In an embodiment, the first network element (PCF) matches the PCC rules with the maximum weight value, comprising: the IMS of the AF network element sends an application authorization request message (such as an AAR-Intial message or an AAR-Update) to the PCF, and the message carries some PCC rule derivation configuration parameters such as an IP address of the UE, a media type, a Flow state, a service information state, a requested maximum guaranteed uplink bandwidth, a requested maximum guaranteed downlink bandwidth, a requested minimum guaranteed uplink bandwidth, and / or a requested minimum guaranteed downlink bandwidth. If the network management has all the above field information configured, the PCF can match the media type, the Flow state, the service information state, the requested maximum guaranteed uplink bandwidth, the requested maximum guaranteed downlink bandwidth, and the requested minimum guaranteed uplink bandwidth in turn; the matching result weight value is added by 1 for each kind of parameter matching success, and the weight value reaches the maximum in the case of all hits; if one of the matching items fails to match, the weight value is reset to 0, and then the next PCC rule derivation configuration is matched; after all the configurations are matched once, the only entry of the PCC policy derivation configuration with the maximum matching weight value is taken, and the PCC rule associated with the entry configuration is authorized and issued.

[0048] In an embodiment, the method further comprises:

[0049] Step 100: detecting the DPI function state, if the DPI function is closed, the PCC rule carried by the service media type is issued. On this basis, efficient packet detection can be realized without using DPI.

[0050] Figure 2 A schematic diagram of issuing PCC rules is provided for an embodiment. As shown in Figure 2 The case of PCF creating service-specific PDU flow to issue PCC rules includes:

[0051] 1. UE registers successfully, initiates PDU session establishment request (Session Establishment Request) to the access and mobility management function (AMF).

[0052] 2. The AMF selects the SMF network element matched with the UE according to the network element parameter configuration.

[0053] 3. The AMF initiates the PDU session management context creation request (Create Session Manage Context Request) to the SMF.

[0054] 4. The SMF requests the subscription data from the UDM, and the subscription data request (Subscription Data Request) message carries the user identifier (Subscription Permanent Identifier, SUPI).

[0055] 5. The UDM finds the user subscription data corresponding to the SUPI, and replies the subscription data response message carrying the subscription data to the SMF.

[0056] 6. The SMF analyzes that the response replied by the UDM is successful, and replies the successful PDU session management context creation response (Create Session Manage Context Response) to the AMF.

[0057] 7. The SMF initiates the session creation request policy authorization process (PDU-CAN Session Establishment) to the PCF, and carries the SUPI in the request message. The PCF derives the session rules authorized to the user according to the SUPI, decides the policy authorized to the SMF according to the maximum weight value matched by the derivation, and replies the policy request message in the session creation process to the SMF. The response message carried in the reply carries the session rules required in the session creation process.

[0058] 8. SMF receives the policy authorization message replied by PCF, saves the session rule, and selects UPF according to the Type Approval Code (TAC) parameter.

[0059] 9. SMF can obtain the IP address allocated to the UE from the UPF according to the configuration, SMF sends a session modification update message to PCF carrying the IP address of the user, PCF saves the IP address of the user, and replies an acknowledgement message to SMF. The PDU session modification process (PDU-CAN Session Modification) is completed.

[0060] 10. IMS sends an AAR-Initial message to PCF according to the voice or video service request of the UE, PCF issues the PCC rule with the maximum weight value to SMF according to the parameters carried in the AAR-Initial message, and the PCC rule carries the service media type. SMF receives the service request to create a dedicated PDU message, and parses the authorized PCC rule containing the service media type to pass to UPF. In the scenario of forwarding data messages, the PCC rule corresponding to the application service is bound, and it is checked whether it conforms to the service media type required in the PCC rule. If it conforms, it is a legal message and can be forwarded; if it does not conform, it is an illegal message and the illegal message is directly discarded.

[0061] 11. PCF successfully matches the PCC rule with the maximum weight value according to the parameters carried in the AAR-Initial message, and replies an AAA-Initial response message to IMS.

[0062] Figure 3 Another schematic diagram for issuing PCC rules is provided for an embodiment. As shown in Figure 3 , one case of PCF issuing PCC rules in a service-specific PDU process includes:

[0063] 1. UE registers successfully and initiates a PDU session establishment request to AMF.

[0064] 2. AMF selects the SMF network element matching the UE according to the network element parameter configuration.

[0065] 3. AMF initiates a PDU session management context creation request to SMF.

[0066] 4. SMF requests subscription data from UDM, and the subscription data request message carries SUPI.

[0067] 5. UDM finds the subscription data of the user corresponding to SUPI, and replies a response message carrying the subscription data to SMF.

[0068] 6. The SMF analyzes the response of the UDM reply, and replies to the AMF with a successful PDU session management context creation response.

[0069] 7. The SMF initiates a session creation request policy authorization process to the PCF, and carries the SUPI in the request message. The PCF derives the session rules that can be authorized to the user according to the SUPI, and decides the policy that can be authorized to the SMF according to the maximum weight value of the matched derivation. The PCF replies to the SMF in the policy request message in the session creation process, and carries the session rules required in the session creation process in the reply response message.

[0070] 8. The SMF receives the policy authorization message replied by the PCF, saves the session rules, and selects the UPF according to the device model approval number TAC parameter.

[0071] 9. The SMF can obtain the IP address allocated to the UE from the UPF according to the configuration, the SMF sends a session modification update message to the PCF carrying the IP address of the user, the PCF saves the IP address of the user, and replies to the SMF with an answer message. The modification process of the PDU session is completed.

[0072] 10. The IMS sends an AAR-Initial message to the PCF according to the voice or video service request of the UE, the PCF matches the PCC rule with the maximum weight value according to the parameter carried in the AAR-Initial message and issues it to the SMF, and the PCC rule carries the service media type. The SMF receives the service request creation private PDU message, and parses the authorized PCC rule containing the service media type and transmits it to the UPF. In the scenario of forwarding data packets, the UPF applies the PCC rule bound to the service to check whether it meets the service media type required in the PCC rule. If it meets, it is a legal packet and can be forwarded; if it does not meet, it is an illegal packet and is directly discarded.

[0073] 11. The PCF matches the PCC rule with the maximum weight value according to the parameter carried in the AAR-Initial message, and replies to the IMS with an AAA-Initial response message.

[0074] 12. The above process completes the establishment process of the PDU flow.

[0075] 13. IMS sends an AAR-Update message to the PCF according to the voice or video service switching request of the UE (for example: voice switching to video, or video switching to voice), the PCF issues a PCC rule with the maximum weight value to the SMF according to the parameters carried in the AAR-Update message, and the PCC rule carries the service media type. The SMF receives the service request to create a special PDU message, parses the authorized PCC rule containing the media type, and delivers it to the UPF. In the scenario of forwarding data packets, the UPF applies the PCC rule corresponding to the bound service to check whether it meets the media type required in the PCC rule. If it meets, it is a legal packet and can be forwarded; if it does not meet, it is an illegal packet and is directly discarded.

[0076] 14. The PCF returns an AAA-Update response message to the IMS as soon as it successfully matches the PCC rule with the maximum weight value according to the parameters carried in the AAR-Update message.

[0077] 15. The above flow completes the PDU flow update process.

[0078] Through the above method of issuing the PCC rule, the complexity and performance consumption of the UPF user plane for detecting illegal packets are obviously reduced, and the forwarding rate of the UPF user plane for legal packets is improved.

[0079] The embodiment of the application also provides a packet detection method, the PCC rule issued by the first network element carries a service media type, and the second network element takes the service media type as a basis for detecting service packets, so that it is not necessary to parse too many application protocols or use a high-performance search algorithm, the packet detection process is simplified, even if there is no DPI UPF network element, the UPF network element still has the ability to check service packets, can quickly identify the type of service packets, discard illegal packets, and improve the effective utilization rate of bandwidth and the packet forwarding performance.

[0080] Figure 4 A flowchart of a packet detection method provided by an embodiment. The packet detection method can be applied to a second network element, and the second network element mainly refers to a UPF. As shown in Figure 4 The method provided by the embodiment includes steps 210 and 220.

[0081] In step 210, a PCC rule is obtained, and the PCC rule carries a service media type.

[0082] In step 220, a service packet is detected according to the service media type.

[0083] In this embodiment, the PCF determines the PPC rule and delivers the PPC rule to the SMF, the PPC rule carries the service media type, the SMF can deliver the service media type in the PCC rule to the second network element as the basis for packet detection by the second network element, and the establishment process and the update process of the PDU flow are completed.

[0084] In an embodiment, the service packet is detected according to the service media type, including:

[0085] checking whether the media type corresponding to the service packet conforms to the service media type;

[0086] If yes, the service packet is a legal packet; otherwise, the service packet is an illegal packet.

[0087] In an embodiment, the method further includes forwarding the legal packet or discarding the illegal packet.

[0088] In an embodiment, the service packet is detected according to the service media type, including:

[0089] detecting the DPI function state, and if the DPI function is closed, detecting the service packet according to the service media type. On this basis, it can be ensured that packet detection can be realized without using DPI.

[0090] In this embodiment, the second network element detects the service packet by using the service media type, and the service media type is, for example, voice or video, which can be set according to actual scenes and requirements. Specifically, the service packet conforming to the service media type is a legal packet and can be forwarded, and the service packet not conforming to the service media type is identified as an illegal packet and is directly discarded.

[0091] The embodiments of the present application also provide a rule delivery device. Figure 5 A structural diagram of a rule delivery device provided by an embodiment is shown in FIG. 3. Figure 5 As shown in FIG. 3, the rule delivery device includes:

[0092] The receiving module 310 is configured to receive an application authorization request initial message;

[0093] The delivery module 320 is configured to deliver a PCC rule according to the application authorization request initial message, and the PCC rule carries a service media type;

[0094] The reply module 330 is configured to reply to an IMS with an application authorization response initial message.

[0095] The rule issuing device of the embodiment carries the service media type of the service side in the issued PCC rule as the basis for detecting the service packet, so that it does not need to parse too many application protocols, does not need a high-performance search algorithm, simplifies the packet detection process, enables the UPF network element without DPI to still have the ability to check the service packet, can quickly identify the service packet type, discard illegal packets, and improve the effective bandwidth utilization and packet forwarding performance.

[0096] In an embodiment, the issuing module 320 is configured to:

[0097] The PCC rule matching the maximum weight value according to the parameter carried in the application authorization request initial message is issued to the SMF.

[0098] In an embodiment, the device further comprises:

[0099] The updating receiving module is configured to receive an application authorization request update message.

[0100] The updating issuing module is configured to issue a PCC rule according to the application authorization request update message, and the PCC rule carries a service media type.

[0101] In an embodiment, the device further comprises:

[0102] The updating reply module is configured to reply to the IMS with an application authorization response update message.

[0103] In an embodiment, the updating issuing module is configured to:

[0104] The PCC rule matching the maximum weight value according to the parameter carried in the application authorization request update message is issued to the SMF.

[0105] The rule issuing device of the embodiment belongs to the same inventive concept as the rule issuing method of the above-described embodiments, and the technical details not described in detail in the embodiment can be referred to the above-described any embodiment, and the embodiment has the same beneficial effects as the rule issuing method.

[0106] The embodiment of the application further provides a packet detection device. Figure 6 For an embodiment, a structural schematic diagram of a packet detection device is provided. As shown in Figure 6 The rule issuing device comprises:

[0107] The obtaining module 410 is configured to obtain a PCC rule, and the PCC rule carries a service media type;

[0108] The detection module 420 is configured to detect a service packet according to the service media type.

[0109] The rule issuing device of the embodiment obtains the service media type carried in the PCC rule as the basis for detecting the service packet, so that the application protocol does not need to be parsed, a high-performance search algorithm is not needed, the packet detection process is simplified, the UPF network element without DPI still has the ability to check the service packet, the service packet type can be quickly identified, the illegal packet can be discarded, and the bandwidth effective utilization rate and the packet forwarding performance are improved.

[0110] In an embodiment, the detection module 420 is configured to:

[0111] check whether the media type corresponding to the service packet matches the service media type;

[0112] if yes, the service packet is a legal packet;

[0113] otherwise, the service packet is an illegal packet.

[0114] In an embodiment, the device further comprises:

[0115] a forwarding module configured to forward the legal packet;

[0116] a discarding module configured to discard the illegal packet.

[0117] The packet detection device of the embodiment belongs to the same inventive concept as the packet detection method of the above-described embodiments, and the technical details not described in detail in the embodiment can be referred to the above-described embodiments, and the embodiment has the same beneficial effects as the packet detection method.

[0118] The embodiment of the application further provides a network element, Figure 7 A hardware structure schematic diagram of a network element provided by an embodiment is shown in Figure 7 The network element provided by the application can refer to a first network element or a second network element, and includes a memory 520, a processor 510, and a computer program stored in the memory and executable on the processor. The processor 510 executes the program to implement the above-mentioned rule issuing method or packet detection method.

[0119] The network element can further include a memory 520; the processor 510 in the network element can be one or more, Figure 7 For example, the processor 510 is taken as an example; the memory 520 is used to store one or more programs; the one or more programs are executed by the one or more processors 510, so that the one or more processors 510 implement the rule issuing method or the packet detection method as described in the embodiments of the application.

[0120] The network element further includes a communication device 530, an input device 540, and an output device 550.

[0121] The processor 510, the memory 520, the communication device 530, the input device 540 and the output device 550 in the network element can be connected through a bus or other means, Figure 7 For example, the network element is connected through a bus.

[0122] The input device 540 can be used to receive input digital or character information, and generate key signal input related to user settings and function control of the network element. The output device 550 can include a display device such as a display screen.

[0123] The communication device 530 can include a receiver and a transmitter. The communication device 530 is configured to perform information receiving and transmitting communication according to the control of the processor 510.

[0124] The memory 520, as a computer readable storage medium, can be configured to store software programs, computer executable programs and modules, such as program instructions / modules (for example, the receiving module 310, the issuing module 320 and the reply module 330 in the rule issuing device) corresponding to the rule issuing method described in the embodiments of the present application. The memory 520 can include a program storage area and a data storage area, wherein the program storage area can store an operating system and at least one application required by a function; the data storage area can store data created according to the use of the network element, etc. In addition, the memory 520 can include a high-speed random access memory, and can also include a non-volatile memory, such as at least one magnetic disk storage device, a flash memory device, or other non-volatile solid-state memory device. In some examples, the memory 520 can further include a memory remotely arranged with respect to the processor 510, which can be connected to the network element through a network. Examples of the above network include but are not limited to the Internet, an intranet, a local area network, a mobile communication network and a combination thereof.

[0125] The embodiments of the present application also provide a storage medium, which stores a computer program, and the computer program is executed by a processor to implement the rule issuing method or the packet detection method described in any of the embodiments of the present application.

[0126] The rule issuing method includes: receiving an application authorization request initial message; issuing a PCC rule according to the application authorization request initial message, the PCC rule carrying a service media type; and replying to an application authorization response initial message to an Internet Protocol Multimedia Subsystem (IMS).

[0127] The packet detection method includes: obtaining a PCC rule, the PCC rule carrying a service media type; and detecting a service packet according to the service media type.

[0128] The computer storage medium of the embodiments of the present application can adopt any combination of one or more computer readable media. The computer readable medium can be a computer readable signal medium or a computer readable storage medium. The computer readable storage medium may, for example, but is not limited to, be: an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or apparatus, or any combination thereof. More specific examples (non-exhaustive list) of the computer readable storage medium include: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read only memory (ROM), an erasable programmable read only memory (EPROM), a flash memory, an optical fiber, a portable CD-ROM, an optical storage device, a magnetic storage device, or any suitable combination of the above. The computer readable storage medium can be any tangible medium containing or storing a program that can be used by or in connection with an instruction execution system, device or apparatus.

[0129] The computer readable signal medium can include a data signal propagating in baseband or propagated as a carrier wave in a propagated data signal, in which computer readable program code is embodied. Such propagated data signal can take a variety of forms, including but not limited to electro-magnetic, optical, or any suitable combination thereof. The computer readable signal medium can also be any computer readable medium that is not a storage medium and that can communicate, propagate or transport program for use by or in connection with an instruction execution system, apparatus, or device.

[0130] The program code embodied on the computer readable medium can be transmitted using any suitable medium, including but not limited to wireless, wire line, optical fiber cable, radio frequency (RF), etc., or any suitable combination thereof.

[0131] Computer program code for carrying out operations of the present application can be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like, and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code can execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computer (for example, through the Internet using an Internet Service Provider).

[0132] The specific embodiments described hereinabove are illustrative of specific embodiments of the present application and are not meant to be limiting of the scope of the application.

[0133] Those skilled in the art will appreciate that the term user terminal encompasses any suitable type of wireless user device, such as a mobile phone, a portable data processing apparatus, a portable web browser, or a vehicle mounted mobile station.

[0134] In general, the various embodiments of the application can be implemented in hardware or special purpose circuits, software, logic or any combination thereof. For example, some aspects can be implemented in hardware, while other aspects can be implemented in

[0135] Embodiments of the application can be implemented by computer program instructions executed by a data processing apparatus of a mobile device, for example in a processor entity, or by hardware, or by a combination of software and hardware. The computer program instructions can be in the form of assembly instructions, instruction-set-architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, state-setting data, or in any combination of one or more programming languages, written in any combination of one or more of a plurality of programming languages.

[0136] The block diagrams of any logical flow of the present application in the accompanying drawings can represent program steps or can represent interconnected logic circuits, modules, and functions, or can represent a combination of program steps and logic circuits, modules, and functions. The computer program can be stored on a memory. The memory can have any type suitable for the local technical environment and can be implemented using any suitable data storage technology, such as, but not limited to, a Read-Only Memory (ROM), a Random Access Memory (RAM), an optical storage device, and a system (a Digital Video Disc (DVD) or a Compact Disk (CD), etc.). The computer readable medium can include a non-transitory storage medium. The data processor can be of any type suitable for the local technical environment, and can include, but is not limited to, a general purpose computer, a special purpose computer, a microprocessor, a Digital Signal Processing (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FGPA), and a processor based on multi-core processor architecture.

[0137] A detailed description of exemplary embodiments of the present application has been provided above with reference to the accompanying drawings. However, various modifications and changes can be made to the above embodiments by those skilled in the art without departing from the scope of the present application, which is defined by the appended claims. Accordingly, the proper scope of the present application is determined by the claims.

Claims

1. A rule issuing method applied to a first network element, characterized in that, The method comprises: receiving an application authorization request initial message; issuing a policy control and charging (PCC) rule to a second network element through a session management function (SMF) according to the application authorization request initial message, wherein the PCC rule carries a service media type, and the service media type is used to distinguish between legal and illegal messages; replying to an application authorization response initial message to an Internet Protocol Multimedia Subsystem (IMS); wherein the first network element is a policy control function (PCF), and the second network element is a user plane function (UPF).

2. The method of claim 1, wherein, The PCC rule is issued according to the application authorization request initial message, which comprises: issuing a PCC rule with a maximum weight value matched according to a parameter carried in the application authorization request initial message to the SMF.

3. The method of claim 1, wherein, The method further comprises: receiving an application authorization request update message; issuing a PCC rule according to the application authorization request update message, wherein the PCC rule carries a service media type; replying to an authorization response update message to the IMS.

4. The method of claim 3, wherein, The PCC rule is issued according to the application authorization request update message, which comprises: issuing a PCC rule with a maximum weight value matched according to a parameter carried in the application authorization request update message to the SMF.

5. A packet detection method, applied to a second network element, the method comprising: The method comprises: obtaining a policy control and charging (PCC) rule issued by a first network element through a session management function (SMF), wherein the PCC rule carries a service media type; detecting a service message according to the service media type; The service message is detected according to the service media type, which comprises: checking whether a media type corresponding to the service message conforms to the service media type; if yes, the service message is a legal message; otherwise, the service message is an illegal message. wherein the first network element is a policy control function (PCF), and the second network element is a user plane function (UPF).

6. A rule issuing apparatus characterized by comprising: The method comprises: a receiving module configured to receive an application authorization request initial message; an issuing module configured to issue a policy control and charging (PCC) rule to a second network element through a session management function (SMF) according to the application authorization request initial message, wherein the PCC rule carries a service media type, and the service media type is used to distinguish between legal and illegal messages; a replying module configured to reply to an application authorization response initial message to an Internet Protocol Multimedia Subsystem (IMS); wherein the first network element is a policy control function (PCF), and the second network element is a user plane function (UPF).

7. A packet inspection apparatus, characterized by comprising: The method comprises: an obtaining module configured to obtain a policy control and charging (PCC) rule issued by a first network element through a session management function (SMF), wherein the PCC rule carries a service media type; a detecting module configured to detect a service message according to the service media type; The detecting module is specifically configured to: check whether a media type corresponding to the service message conforms to the service media type; if yes, the service message is a legal message; otherwise, the service message is an illegal message. wherein the first network element is a policy control function (PCF), and the second network element is a user plane function (UPF).

8. A network element comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that, The processor implements the rule issuing method according to any one of claims 1-4 or the message detecting method according to claim 5 when executing the program.

9. A computer-readable storage medium having stored thereon a computer program, characterized in that, The program is executed by the processor to implement the rule issuing method of any one of claims 1-4 or the packet detection method of claim 5.

Images