Sepp traffic control method, system, apparatus, and storage medium

Abstract

The application discloses a SEPP flow control method, system and device and a storage medium. The application receives a consumer network element service configuration file at a visited place consumer network element, configures the consumer network element service configuration file to route an http message through a visited place SEPP, sets an application program interface root user of a home SEPP formal domain name in a universal resource identifier by the visited place SEPP, inserts the application program interface root user header into the application program interface root user of the home consumer network element, and sends a preset request to the home SEPP. The home SEPP sends the preset request to a home UDM, the home UDM queries subscription data of a target user, and then the home SEPP receives a custom message, sets user aggregation maximum bit rate and session aggregation maximum bit rate according to the subscription data to control the flow, so that the message flow between SEPPs is effectively controlled.

Description

Technical Field

[0001] The present invention relates to the field of 5G network technology, and in particular to a SEPP flow control method, system, device and storage medium. Background Art

[0002] In the related art, when a consumer of a consumer network element (NF) sends a large number of messages to a secure edge proxy (SEPP) consumer, the processing between the SEPP consumer and the SEPP producer mostly adopts an overall limit or user-specific processing, that is, it mainly prevents non-authenticated / secure messages from directly attacking the link between the SEPP producers, and thus cannot effectively control the size of the message traffic. Summary of the Invention

[0003] The present invention aims to solve at least one of the technical problems existing in the prior art. To this end, the present invention provides a SEPP flow control method, system, device and storage medium, which can effectively control the message flow between SEPPs.

[0004] In one aspect, an embodiment of the present invention provides a SEPP flow control method, comprising the following steps:

[0005] When the visited customer network element receives the customer network element service profile, the visited customer network element is configured to route http messages through the visited SEPP according to the customer network element service profile, wherein the customer network element service profile includes a universal resource identifier of the http scheme, and the visited SEPP is an http proxy;

[0006] The visited SEPP sets the API root user of the home SEPP's official domain name in the universal resource identifier, inserts the API root user header into the API root user of the home consumer network element, and sends a preset request to the home SEPP;

[0007] The home SEPP sends the preset request to the home consumer network element and the home UDM;

[0008] The home UDM replies to the two http messages sent by the home SEPP, queries the subscription data of the target user, and returns the subscription data to the home SEPP;

[0009] After receiving the two http messages, the home SEPP retains the subscription data, sets the user aggregation maximum bit rate and the session aggregation maximum bit rate according to the subscription data, and performs flow control according to the user aggregation maximum bit rate or the session aggregation maximum bit rate.

[0010] In some embodiments, the visited customer network element is configured to route HTTP messages through the visited SEPP according to the customer network element service profile, including:

[0011] The visited customer network element is configured to route an http message through the visited SEPP according to the customer network element service profile, wherein the http message includes a message having a public land mobile network inter-domain fully qualified domain name as a universal resource identifier.

[0012] In some embodiments, the home SEPP sends the provisioning request to the home consumer network element and the home UDM, including:

[0013] The home SEPP sends the preset request to the home consumer network element;

[0014] At the same time, the home SEPP sends the preset request to the home UDM, where the preset request is used to obtain the QoS subscription data of the target user. The preset request carries the ID of the home SEPP, the ID of the visited SEPP, the target user ID, and the service type of the preset request.

[0015] In some embodiments, performing flow control according to the user aggregate maximum bit rate or the session aggregate maximum bit rate includes:

[0016] Get the number of online users per second passing through the SEPP of the visited location;

[0017] Determining that the number of users online per second is greater than the maximum user aggregation bit rate, and determining the relationship between the current user and the user database;

[0018] Determining that the current user does not belong to the user database, and prohibiting the current user from going online;

[0019] Determining that the current user belongs to the user database, and allowing the current user to go online normally;

[0020] Determine that the number of users going online per second is less than or equal to the maximum user aggregation bit rate, and allow the current user to go online normally.

[0021] In some embodiments, the method further comprises the following steps:

[0022] Confirm that the current user is online normally and add one to the user statistics;

[0023] Determine that the current user has logged off normally and decrement the user statistics by one.

[0024] In some embodiments, performing flow control according to the user aggregate maximum bit rate or the session aggregate maximum bit rate includes:

[0025] Get the number of messages forwarded per second through the visited SEPP;

[0026] Determining that the number of forwarded messages per second is greater than the maximum bit rate of session aggregation, and determining the type of the current service message;

[0027] Determining that the current service message is a request message, and not allowing the current service message to pass through the interaction process between the visited SEPP and the home SEPP;

[0028] Determining that the current service message is a reply message, and executing an interaction process of the current service message through the visited SEPP and the home SEPP;

[0029] It is determined that the number of forwarded messages per second is less than or equal to the maximum bit rate of session aggregation, and the interaction process of the current service message through the visited SEPP and the home SEPP is executed.

[0030] In some embodiments, the method further comprises the following steps:

[0031] The home SEPP sends the reply messages of the two http messages to the visited SEPP;

[0032] The visited SEPP sends the reply message to the visited consumer network element.

[0033] In another aspect, an embodiment of the present invention provides a SEPP flow control system, comprising:

[0034] The first module is configured to, when a visited customer network element receives a customer network element service profile, configure the visited customer network element to route HTTP messages through a visited SEPP according to the customer network element service profile, wherein the customer network element service profile includes a universal resource identifier of the HTTP scheme, and the visited SEPP is an HTTP proxy;

[0035] The second module is configured for the visited SEPP to set the API root user of the home SEPP's official domain name in the universal resource identifier, insert the API root user header into the API root user of the home consumer network element, and send a preset request to the home SEPP;

[0036] The third module is used for the home SEPP to send the preset request to the home consumer network element and the home UDM;

[0037] The fourth module is used for the home UDM to reply to the two http messages sent by the home SEPP, query the subscription data of the target user, and return the subscription data to the home SEPP;

[0038] The fifth module is used for the home SEPP to retain the contract data after receiving the two http messages, set the user aggregation maximum bit rate and the session aggregation maximum bit rate according to the contract data, and perform flow control according to the user aggregation maximum bit rate or the session aggregation maximum bit rate.

[0039] In another aspect, an embodiment of the present invention provides a SEPP flow control device, comprising:

[0040] at least one memory for storing a program;

[0041] At least one processor is configured to load the program to execute the SEPP flow control method.

[0042] On the other hand, an embodiment of the present invention provides a storage medium storing a computer-executable program. When the computer-executable program is executed by a processor, it is used to implement the SEPP flow control method.

[0043] The embodiments of the present invention have the following beneficial effects:

[0044] In this embodiment, when a visited consumer network element receives a consumer network element service profile, the visited consumer network element is configured to route HTTP messages through a visited SEPP based on the consumer network element service profile. The visited SEPP sets the API root user of the home SEPP's official domain name in the universal resource identifier (URI), inserts the API root user header into the API root user of the home consumer network element, and sends a preset request to the home SEPP. The home SEPP then sends the preset request to the home consumer network element and the home UDM. The home UDM responds to the two HTTP messages sent by the home SEPP, queries the subscription data of the target user, and returns the subscription data to the home SEPP. After receiving the custom message from the home UDM in the two HTTP messages, the home SEPP retains the subscription data, sets the user aggregate maximum bit rate and the session aggregate maximum bit rate based on the subscription data, and performs traffic control based on the user aggregate maximum bit rate or the session aggregate maximum bit rate, thereby effectively controlling the message traffic between SEPPs.

[0045] Additional aspects and advantages of the present invention will be set forth in part in the description which follows and, in part, will be obvious from the description which follows, or may be learned by practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] The present invention will be further described below with reference to the accompanying drawings and embodiments, in which:

[0047] Figure 1 This is a flow chart of a SEPP flow control method according to an embodiment of the present invention;

[0048] Figure 2 This is an interactive schematic diagram of an application of a SEPP flow control method according to an embodiment of the present invention;

[0049] Figure 3 This is a data processing flow chart for users going online according to an embodiment of the present invention;

[0050] Figure 4 This is a data processing flow chart of user services according to an embodiment of the present invention. DETAILED DESCRIPTION

[0051] The following describes embodiments of the present invention in detail. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended only to explain the present invention and are not to be construed as limiting the present invention.

[0052] In the description of the present invention, it should be understood that descriptions involving orientations, such as up, down, front, back, left, right, etc., indicating orientations or positional relationships, are based on the orientations or positional relationships shown in the accompanying drawings. They are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation. Therefore, they cannot be understood as limitations on the present invention.

[0053] In the description of the present invention, "several" means more than one, "plurality" means more than two, "greater than," "less than," and "exceed" are understood to exclude the number itself, while "above," "below," and "within" are understood to include the number itself. The use of "first" and "second" in the description is solely for the purpose of distinguishing technical features and should not be construed as indicating or implying relative importance, implicitly specifying the number of the indicated technical features, or implicitly specifying the order of the indicated technical features.

[0054] In the description of the present invention, unless otherwise clearly defined, terms such as setting, installing, and connecting should be understood in a broad sense, and technicians in the relevant technical field can reasonably determine the specific meanings of the above terms in the present invention based on the specific content of the technical solution.

[0055] In the description of the present invention, reference to terms such as "one embodiment," "some embodiments," "illustrative embodiments," "examples," "specific examples," or "some examples" means that the specific features, structures, materials, or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the exemplary expressions of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

[0056] Before describing the embodiments of the present application in detail, the terms involved are explained as follows:

[0057] SEPP: Security Edge Protection Proxies (SEPP) is an important component of the 5G roaming security architecture. It is used for user roaming and communication with other operators. It is responsible for message filtering and policy management on the control plane interface between operators, and mainly serves as a border gateway between the control planes of the operator core networks.

[0058] V-SEPP: A security edge protection proxy for visited locations in roaming scenarios.

[0059] H-SEPP: Home Security Edge Protection Proxy in Roaming Scenario.

[0060] V-NF: Consumer network element at the visited location in roaming scenarios.

[0061] H-NF: Producer network element at the home location in roaming scenarios.

[0062] H-UDM: Home in roaming scene.

[0063] UDM: Unified Data Management (UDM) provides operators with integrated data management in various networking scenarios, including 2G, 3G, 4G, and 5G. It features efficient user data processing and simplified networking, making it compatible with existing services while expanding 5G services. This protects operators' investments and allows users to seamlessly switch networks.

[0064] QOS stands for Quality of Service in English and Quality of Service in Chinese. Traditionally, it simply refers to transmission bandwidth, transmission latency, and packet loss rate. Improving QoS simply means ensuring transmission bandwidth, reducing transmission latency, packet loss rate, and jitter. Broadly speaking, QoS encompasses all aspects of network applications, and any measures that benefit network applications are, in fact, improving QoS.

[0065] PLMN: English explanation is Public Land Mobile Network, Chinese explanation is Public Land Mobile Network.

[0066] FQDN: Fully Qualified Domain Name in English and formal domain name in Chinese.

[0067] SMF: The English explanation is Session Management function, and the Chinese explanation is session management function.

[0068] PCF: Policy Control Function in English and Policy Control Function in Chinese.

[0069] UE-AMBR: English explanation is UE Aggregate Maximum Bit Rate, Chinese explanation is UE aggregate maximum bit rate.

[0070] SESSION-AMBR: It is interpreted as Session Aggregate Maximum Bit Rate in English and Session Aggregate Maximum Bit Rate in Chinese.

[0071] HTTP (Hypertext Transfer Protocol) is a simple request-response protocol that typically runs over TCP. It specifies what messages a client may send to a server and what responses it may receive. Request and response message headers are in ASCII format, while message content follows a MIME-like format.

[0072] URL: Uniform Resource Locator in English and Uniform Resource Locator in Chinese. It is a concise representation of the location and access method of resources available on the Internet. It is the address of standard resources on the Internet.

[0073] In combination with the above terminology explanations, the contents of the embodiments of this application are explained as follows:

[0074] Reference Figure 1 , an embodiment of the present invention provides a SEPP flow control method, including but not limited to the following steps:

[0075] Step S110: When the visited consumer network element receives the consumer network element service profile, the visited consumer network element is configured to route http messages through the visited SEPP according to the consumer network element service profile, wherein the consumer network element service profile includes a universal resource identifier of the http scheme, the visited SEPP is an http proxy, and the http message includes a message having a public land mobile network inter-official domain name as a universal resource identifier.

[0076] Step S120: The visited SEPP sets the API root user of the home SEPP's official domain name in the universal resource identifier, inserts the API root user header into the API root user of the home customer network element, and sends a preset request to the home SEPP.

[0077] Step S130: The home SEPP sends a preset request to the home consumer network element and the home UDM. The preset request is used to obtain the QoS subscription data of the target user. Specifically, the preset request carries the ID of the home SEPP, the ID of the visited SEPP, the target user ID, and the service type of the preset request.

[0078] Step S140: The home UDM replies to the two http messages sent by the home SEPP, queries the subscription data of the target user, and returns the subscription data to the home SEPP;

[0079] In step S150, after receiving the two HTTP messages, the home SEPP retains the contract data and sets the maximum user aggregate bit rate and session aggregate bit rate based on the contract data. Traffic control is then performed based on the maximum user aggregate bit rate and session aggregate bit rate. In this step, one of the two HTTP messages is a reply to the consumer network element, and the other is a custom message sent by the home UDM to the home SEPP. Specifically, once the home SEPP receives the reply to the custom message, it can set the maximum user aggregate bit rate and session aggregate bit rate.

[0080] In the embodiment of the present application, when Figure 1 The method shown is applied to Figure 2 The interactive process shown includes but is not limited to the following steps:

[0081] Step 1: The VNF service profile (NF service profile) received at the visited VNF contains a service URI with the "http" scheme. The VNF initiates two HTTP messages (supported by the NF Service Producer API) using the URI in the "http" scheme and sends the two HTTP messages to the V-SEPP (HTTP / 2 Service Request). The VNF is configured to route all HTTP messages with the inter-public land mobile network (PLMN) fully qualified domain name (FQDN) as the "authority" portion of the URI through the visited SEPP (V-SEPP). The V-SEPP acts as an HTTP proxy.

[0082] Step 2: V-SEPP sets the application interface root user (apiRoot) of H-SEPP FQDN in the request URI, inserts the 3gpp-Sbi-Target-apiRoot header setting into the apiRoot of the home customer network element (H-NF), and sends the request (HTTP / 2 Service Request) to H-SEPP.

[0083] Step 3: After receiving the request (HTTP / 2 Service Request) from V-SEPP, the home SEPP (H-SEPP) sends it to the corresponding NF according to the content carried in the request, which includes V-NF or H-NF.

[0084] Step 4: H-SEPP sends a custom message to the home UDM (H-UDM) to obtain the target user's subscription data. The message carries the SEPP ID (SEPP ID), user ID (UE ID) and request type (Request Type) of QOS, as shown in Table 1:

[0085] Table 1

[0086] IE Presence Type Request Type M string UE ID M string SEPP ID M string

[0087] Step 5: H-UDM replies to the HTTP / 2 message forwarded by H-SEPP. In this step, when H-UDM replies to H-SEPP with the QoS subscription data of a user, it needs to carry the UE aggregate maximum bit rate (UE-AMBR) and session aggregate maximum bit rate (SESSION-AMBR) subscribed by the user, as shown in Table 2:

[0088] Table 2

[0089] IE Presence Type UE-AMBR M string SESSION-AMBR M string

[0090] Step 6: H-UDM queries the subscription data of the user and sends the information to H-SEPP in an SDM_Get Response message.

[0091] Step 7: H-SEPP receives two HTTP / 2 messages from H-UDM, retains the subscription data from step 6, uses it to set the local UE-AMBR and SESSION-AMBR, and replies to step 5 to V-SEPP.

[0092] Step 8. V-SEPP forwards the received response to V-NF.

[0093] In this embodiment, the implementation process is that there is no TLS protection between the NF and the SEPP, and the 3gpp-Sbi-Target-apiRoot header used on the N32f has TLS security. The V-NF has obtained the address of the V-SEPP and sends a registration request to the V-SEPP.

[0094] It is understandable that the rules for setting the maximum concurrency parameters for flow control between SEPPs are as follows:

[0095] First, the user online threshold between SEPPs is measured in users / second, and the message count threshold is measured in messages / second.

[0096] Second, the SEPP user online and message traffic thresholds are the maximum of the UE-AMBR and SESSION-AMBR uplink data UL value and downlink data DL value in bps.

[0097] Third, when the user does not have a SESSION-AMBR, the threshold for the number of messages between SEPPs is set as an integer multiple of the UE-AMBR until the next user comes online and obtains the SESSION-AMBR signed in the UDM again.

[0098] Specifically, the maximum number of concurrent connections set in SEPP is divided into two types:

[0099] One is the maximum number of concurrent users online, and the other is the maximum number of concurrent user sessions. The maximum concurrent number is expressed in messages per second. The maximum concurrent number of users online is set using UE-AMBR and refers to the number of users allowed to log in or register per second by the SEPP. The maximum concurrent user session is the maximum number of messages allowed to be routed through the SEPP per second when a user wants to access the Internet, as limited by SESSION-AMBR.

[0100] The user status database stores the online user's identity (IMSI), user status (activate or deactivate), and deactivation start time. The user identity is data that SEPP can obtain when a user comes online through SEPP. When a user successfully initiates a registration request, the user status is activated. When a user successfully initiates a deregistration request, the user status is deactivated, and the deactivation start time is set at this time. After a user has been deactivated for a certain period of time (this time period varies depending on the situation), the user is deleted from the user status database.

[0101] In an embodiment of the present application, when a user goes online, the process of performing flow control based on the user aggregate maximum bit rate or the session aggregate maximum bit rate is as follows:

[0102] Get the number of online users per second passing through the SEPP of the visited location;

[0103] Determine whether the number of users online per second is greater than the User Aggregate Maximum Bit Rate (UE-AMBR) and determine the relationship between the current user and the user database;

[0104] Determine that the current user does not belong to the user database and prohibit the current user from going online;

[0105] Determine that the current user belongs to the user database and allow the current user to go online normally;

[0106] Ensure that the number of users going online per second is less than or equal to the maximum aggregate bit rate of users, and allow the current user to go online normally.

[0107] Specifically, the process of user online can refer to Figure 3 As shown. Figure 3As can be seen, data statistics are collected within the SEPP. Each time a user comes online, that is, when a registration request is initiated through V-SEPP, the SEPP's internal user online statistics are incremented by one. This user online statistics is used to calculate the number of users coming online per second through V-SEPP. The calculated result is compared with the UE-AMBR obtained from the UDM. If the number of users coming online per second through V-SEPP exceeds the UE-AMBR, and the user is new (i.e., the user does not exist in the SEPP's user status database), the user is not allowed to come online. A message containing "SEPP IS BUSY" is sent to the user, informing them that the SEPP is currently busy and they need to wait for a while before coming online again. If the user is an existing user (i.e., the user exists in the SEPP's user status database and is in the deactivated state), the user is allowed to come online normally. If the number of messages passing through V-SEPP per second is less than the UE-AMBR, the user is allowed to come online normally. When a user goes offline through SEPP, the number of online users in SEPP is reduced by one, that is, the number of online users in SEPP is updated in real time.

[0108] In an embodiment of the present application, when executing a user service, the process of performing flow control according to the user aggregate maximum bit rate or the session aggregate maximum bit rate is as follows:

[0109] Get the number of messages forwarded per second through the visited SEPP;

[0110] Ensure that the number of forwarded messages per second is greater than the maximum session aggregation bit rate and determine the type of the current service message.

[0111] Determine that the current service message is a request message and do not allow the current service message to pass through the interaction process between the visited SEPP and the home SEPP;

[0112] Determine that the current service message is a reply message, and run the interaction process of the current service message through the visited SEPP and the home SEPP;

[0113] Ensure that the number of forwarded messages per second is less than or equal to the maximum bit rate of the session aggregation, and run the interaction process of the current service message through the visited SEPP and the home SEPP.

[0114] Specifically, the process of executing user services can refer to Figure 4 As shown. Figure 4As can be seen, message data is counted within the SEPP. Each time a user service (i.e., a message originating from the SEPP) is initiated, the message count within the SEPP is incremented. This count is then used to calculate the number of messages passing through the SEPP per second. This result is then compared with the Session-AMBR obtained from the UDM. If the number of messages passing through the SEPP per second is greater than the Session-AMBR, the system determines whether the message is a request or a reply. If it is a request, the request message is not allowed to pass, and a reply message carrying the message "SEPP ISBUSY" is sent to the network element that initiated the request message. If it is a reply, the message is allowed to pass through the SEPP. If the number of reply messages passing through the SEPP per second is less than the Session-AMBR, the message is allowed to pass through the SEPP.

[0115] As can be seen from the above, this embodiment obtains QoS via custom messages between H-SEPP and H-UDM when a user goes online. When a typical 5G user goes online, H-SEPP will request the user's subscription data from H-UDM for user authentication, such as whether the user has subscribed to 5G services. At this time, the message flow involves network elements such as SEPP AMF and UDM. This process cannot obtain QoS. The user must wait until the SMF is involved in order to access the Internet, and the SMF can then obtain the QoS issued by the UDM. However, this embodiment adds a custom message. Upon receiving a message indicating that a user has gone online, a QoS request is directly sent to the UDM using the custom message. The UDM then returns the QoS to H-SEPP.

[0116] Furthermore, this embodiment implements user-specific and service-specific restrictions through maximum user and message limits. In this process, the general restrictions are global, meaning a single threshold applies to the overall restriction. The maximum user limit specifies how many users are allowed online per second, reflecting the user-specific restrictions. The message limit specifies how many messages are allowed through the SEPP per second. Each message represents a service, reflecting the service-specific restrictions. If some users are very active online and continuously initiate various service requests, message overload may occur, requiring message limit. These two thresholds are used in conjunction with the SEPP; if either threshold is reached, a limit is applied.

[0117] In addition, as can be seen from Table 1, the custom message sent by H-SEPP to H-UDM carries the user identifier UE ID. Therefore, SEPP can obtain the QOS of a user and use the user's QOS to set two thresholds for SEPP to control the flow of this user and subsequent users. It can also use the obtained QOS for flow control only for this user. When the next user comes online, the QOS policy of the next user is obtained to set the threshold to implement flow control for the next user.

[0118] An embodiment of the present invention provides a SEPP flow control system, comprising:

[0119] The first module is configured to, when a visited customer network element receives a customer network element service profile, configure the visited customer network element to route HTTP messages through a visited SEPP according to the customer network element service profile, wherein the customer network element service profile includes a universal resource identifier of the HTTP scheme and the visited SEPP is an HTTP proxy;

[0120] The second module is used for the visiting SEPP to set the API root user of the home SEPP's official domain name in the universal resource identifier, insert the API root user header into the API root user of the home customer network element, and send a preset request to the home SEPP;

[0121] The third module is used for the home SEPP to send the preset request to the home consumer network element and the home UDM;

[0122] The fourth module is used for the home UDM to reply to the two http messages sent by the home SEPP, query the subscription data of the target user, and return the subscription data to the home SEPP;

[0123] The fifth module is used for the home SEPP to retain the contract data after receiving the two http messages, set the user aggregation maximum bit rate and the session aggregation maximum bit rate according to the contract data, and perform flow control according to the user aggregation maximum bit rate or the session aggregation maximum bit rate.

[0124] The contents of the method embodiments of the present invention are all applicable to the system embodiments. The functions specifically implemented by the system embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above methods.

[0125] An embodiment of the present invention provides a SEPP flow control device, comprising:

[0126] at least one memory for storing a program;

[0127] At least one processor for loading programs to execute Figure 1 SEPP flow control method shown.

[0128] The contents of the method embodiments of the present invention are all applicable to the device embodiments. The functions specifically implemented by the device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0129] An embodiment of the present invention provides a storage medium in which a computer-executable program is stored. When the computer-executable program is executed by a processor, it is used to implement Figure 1 SEPP flow control method shown.

[0130] The contents of the method embodiments of the present invention are all applicable to the storage medium embodiments. The functions specifically implemented by the storage medium embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0131] The embodiment of the present invention further provides a computer program product or computer program, the computer program product or computer program including computer instructions, the computer instructions stored in a computer readable storage medium. The processor of the computer device can read the computer instructions from the computer readable storage medium, and the processor executes the computer instructions so that the computer device performs Figure 1 SEPP flow control method shown.

[0132] While the embodiments of the present invention have been described in detail above with reference to the accompanying drawings, the present invention is not limited to the embodiments described above. Various modifications may be made within the scope of knowledge possessed by a person skilled in the art without departing from the spirit of the present invention. Furthermore, the embodiments of the present invention and the features thereof may be combined with one another unless there is a conflict.

Claims

1. A SEPP flow control method, characterized in that: The following steps are involved: When the visited customer network element receives the customer network element service profile, the visited customer network element is configured to route http messages through the visited SEPP according to the customer network element service profile, wherein the customer network element service profile includes a universal resource identifier of the http scheme, and the visited SEPP is an http proxy; The visited SEPP sets the API root user of the home SEPP's official domain name in the universal resource identifier, inserts the API root user header into the API root user of the home consumer network element, and sends a preset request to the home SEPP; The home SEPP sends the preset request to the home consumer network element and the home UDM; The home UDM replies to the two http messages sent by the home SEPP, queries the subscription data of the target user, and returns the subscription data to the home SEPP; After receiving the two http messages, the home SEPP retains the subscription data, sets the user aggregation maximum bit rate and the session aggregation maximum bit rate according to the subscription data, and performs flow control according to the user aggregation maximum bit rate or the session aggregation maximum bit rate.

2. A SEPP flow control method according to claim 1, characterized in that: The visited customer network element is configured to route HTTP messages through the visited SEPP according to the customer network element service profile, including: The visited customer network element is configured to route an http message through the visited SEPP according to the customer network element service profile, wherein the http message includes a message having a public land mobile network inter-domain fully qualified domain name as a universal resource identifier.

3. A SEPP flow control method according to claim 1, characterized in that: The home SEPP sends the preset request to the home consumer network element and the home UDM, including: The home SEPP sends the preset request to the home consumer network element; At the same time, the home SEPP sends the preset request to the home UDM, where the preset request is used to obtain the QoS subscription data of the target user. The preset request carries the ID of the home SEPP, the ID of the visited SEPP, the target user ID, and the service type of the preset request.

4. A SEPP flow control method according to claim 1, characterized in that: The performing flow control according to the user aggregate maximum bit rate or the session aggregate maximum bit rate includes: Get the number of online users per second passing through the SEPP of the visited location; Determining that the number of users online per second is greater than the maximum user aggregation bit rate, and determining the relationship between the current user and the user database; Determining that the current user does not belong to the user database, and prohibiting the current user from going online; Determining that the current user belongs to the user database, and allowing the current user to go online normally; Determine that the number of users going online per second is less than or equal to the maximum user aggregation bit rate, and allow the current user to go online normally.

5. A SEPP flow control method according to claim 4, characterized in that: The method further comprises the following steps: Confirm that the current user is online normally and add one to the user statistics; Determine that the current user has logged off normally and decrement the user statistics by one.

6. A SEPP flow control method according to claim 1, characterized in that: The performing flow control according to the user aggregate maximum bit rate or the session aggregate maximum bit rate includes: Get the number of messages forwarded per second through the visited SEPP; Determining that the number of forwarded messages per second is greater than the maximum bit rate of session aggregation, and determining the type of the current service message; Determining that the current service message is a request message, and not allowing the current service message to pass through the interaction process between the visited SEPP and the home SEPP; Determining that the current service message is a reply message, and executing an interaction process of the current service message through the visited SEPP and the home SEPP; It is determined that the number of forwarded messages per second is less than or equal to the maximum bit rate of session aggregation, and the interaction process of the current service message through the visited SEPP and the home SEPP is executed.

7. A SEPP flow control method according to claim 1, characterized in that: The method further comprises the following steps: The home SEPP sends the reply messages of the two http messages to the visited SEPP; The visited SEPP sends the reply message to the visited consumer network element.

8. A SEPP flow control system, characterized in that: include: The first module is configured to, when a visited customer network element receives a customer network element service profile, configure the visited customer network element to route HTTP messages through a visited SEPP according to the customer network element service profile, wherein the customer network element service profile includes a universal resource identifier of the HTTP scheme, and the visited SEPP is an HTTP proxy; The second module is configured for the visited SEPP to set the API root user of the home SEPP's official domain name in the universal resource identifier, insert the API root user header into the API root user of the home consumer network element, and send a preset request to the home SEPP; The third module is used for the home SEPP to send the preset request to the home consumer network element and the home UDM; The fourth module is used for the home UDM to reply to the two http messages sent by the home SEPP, query the subscription data of the target user, and return the subscription data to the home SEPP; The fifth module is used for the home SEPP to retain the contract data after receiving the two http messages, set the user aggregation maximum bit rate and the session aggregation maximum bit rate according to the contract data, and perform flow control according to the user aggregation maximum bit rate or the session aggregation maximum bit rate.

9. A SEPP flow control device, characterized in that: include: at least one memory for storing a program; At least one processor is configured to load the program to execute the SEPP flow control method according to any one of claims 1 to 7.

10. A storage medium, characterized in that: A computer-executable program is stored therein, and when the computer-executable program is executed by a processor, it is used to implement the SEPP flow control method according to any one of claims 1 to 7.

Images