Method and device for standby members and active members in cluster

Abstract

The embodiment of the invention provides a method and device for standby members and active members in a cluster. A method (200) performed by a first network node as a backup member comprises determining (S202) a failure of an active member based at least on receiving incoming traffic to a cluster; the pipe (S204) is used for introducing flow; and refresh (S206) a sequence number associated with the incoming traffic. The first network node is a backup member in a cluster. According to the embodiment of the invention, the fault of the active member in the cluster can be detected in time.

Description

Technical Field

[0001] The present disclosure generally relates to communication network technology, and more particularly to methods and apparatus for standby members, backup members, and active members in a cluster. Background Art

[0002] This section introduces various aspects that may help to better understand the present disclosure. Therefore, the contents stated in this section should be read in this way and should not be understood as an admission of what is or is not prior art.

[0003] In communication networks, many techniques are applied to improve performance.

[0004] For example, multiple network nodes can be clustered into a cluster to provide the same service. One network node may be configured as an active member, operating under normal circumstances. Other network nodes may be configured as standby members. When the active member fails, the standby member will be required to replace the failed active member. For other devices communicating with the cluster, even if such a failure occurs, it is hoped that the services provided by the cluster will not be interrupted. Summary of the invention

[0005] This summary is intended to introduce some concepts in a simplified form, which are further described in the detailed description below. This summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used to limit the scope of the claimed subject matter.

[0006] In order to continue the service quickly and stably, it is hoped that the standby member can detect the failure of the active member in time and take necessary actions quickly.

[0007] Certain aspects of the present disclosure and embodiments thereof may provide solutions to these or other challenges.Various embodiments are presented herein that address one or more of the problems disclosed herein.

[0008] A first aspect of the present disclosure provides a method performed by a first network node. The first network node is a standby member in a cluster, the cluster also including an active member. The method includes: determining an active member failure based at least on receiving incoming traffic from the cluster; taking over the incoming traffic; and refreshing a sequence number associated with the incoming traffic.

[0009] In an embodiment of the present disclosure, the method may further include: synchronizing with a second network node, the second network node being an active member in the cluster.

[0010] In an embodiment of the present disclosure, the method may further include: receiving a configuration for information synchronization from the second network node. Synchronizing with the second network node includes: receiving information according to the configuration from the second network. Transmission of the information is initiated by the second network node to synchronize the first network node.

[0011] In an embodiment of the present disclosure, the information may include at least one of: security association (SA) up / down (Up / Down) status; security parameter index (SPI); encryption / decryption key; and / or algorithm.

[0012] In an embodiment of the present disclosure, refreshing the sequence number associated with the incoming traffic may include triggering a process for SA rekeying.

[0013] In an embodiment of the present disclosure, the process for SA re-keying may be triggered for a sub-SA with traffic. Alternatively, the process for SA re-keying may be triggered for each sub-SA.

[0014] In an embodiment of the present disclosure, the cluster may be a hot standby cluster for Internet Key Exchange Protocol Version 2 / Internet Protocol Security IKEv2 / IPsec traffic. The traffic may be IPsec traffic. The method may further include: notifying the Internet Protocol Security IPsec stack to exchange IKEv2 / IPsec protocol messages to take over the control plane.

[0015] A second aspect of the present disclosure provides a method performed by a second network node. The second network node is an active member in a cluster, and the cluster also includes a standby member. The method includes: transmitting a configuration for information synchronization to a first network node; and transmitting information to the first network node according to the configuration. The first network node is a standby member in the cluster.

[0016] In an embodiment of the present disclosure, the information may include at least one of the following: an Up / Down status of a security association (SA); a security parameter index SPI; an encryption / decryption key; and / or an algorithm.

[0017] In an embodiment of the present disclosure, the cluster may be a hot standby cluster for Internet Key Exchange protocol version 2 / Internet Protocol security IKEv2 / IPsec traffic.

[0018] A third aspect of the present disclosure provides an apparatus for a first network node. The first network node is a standby member in a cluster, and the cluster also includes an active member. The apparatus of the first network node includes: a processor; and a memory. The memory contains instructions executable by the processor. The apparatus of the first network node is used to: determine a failure of the active member based on at least receiving incoming traffic from the cluster; take over the incoming traffic; and refresh a sequence number associated with the incoming traffic.

[0019] In an embodiment of the present disclosure, the apparatus may be further used to perform the method of any of the above embodiments.

[0020] A fourth aspect of the present disclosure provides an apparatus for a second network node. The second network node is an active member in a cluster, and the cluster also includes a standby member. The apparatus of the second network node includes: a processor; and a memory. The memory contains instructions executable by the processor. The apparatus of the second network node is used to: transmit a configuration for information synchronization to a first network node; and transmit information to the first network node according to the configuration. The first network node is a standby member in the cluster.

[0021] In an embodiment of the present disclosure, the apparatus may be further used to perform the method of any of the above embodiments.

[0022] A fifth aspect of the present disclosure provides a computer-readable storage medium storing instructions, which, when at least one processor executes these instructions, causes the at least one processor to execute the method of any of the above embodiments.

[0023] Another aspect of the present disclosure provides a host configured to provide an over-the-top (OTT) service in an operation in a communication system. The host includes: a processing circuit configured to provide user data; and a network interface configured to initiate transmission of the user data to a network node in a cellular network for transmission to a user equipment (UE). The network node has a communication interface and a processing circuit. The processing circuit of the network node is configured to perform any method performed by the first network node and / or the second network node to transmit the user data from the host to the UE.

[0024] In an embodiment of the present disclosure, a processing circuit of the host is configured to execute a host application providing user data; and the UE includes a processing circuit configured to execute a client application associated with the host application to receive a transmission of user data from the host.

[0025] Another aspect of the present disclosure provides a method implemented in a host configured to operate in a communication system, the system also including a network node and a user equipment (UE). The method includes: providing user data to the UE; and initiating a transmission carrying the user data through a cellular network including the network node. The network node performs any method performed by the first network node and / or the second network node to transmit the user data from the host to the UE.

[0026] In an embodiment of the present disclosure, the method further includes transmitting, at the network node, user data provided by the host for the UE.

[0027] In an embodiment of the present disclosure, user data is provided on a host by executing a host application that interacts with a client application executed on a UE, the client application being associated with the host application.

[0028] Another aspect of the present disclosure provides a communication system configured to provide an over-the-top (OTT) service. The communication system includes: a host including a processing circuit configured to provide user data to a user equipment (UE), the user data being related to the over-the-top service; and a network interface configured to initiate transmission of the user data to a cellular network node for transmission to the UE. The network node has a communication interface and a processing circuit. The processing circuit of the network node is configured to perform any method performed by the first network node and / or the second network node to transmit the user data from the host to the UE.

[0029] In an embodiment of the present disclosure, the aforementioned communication system further includes: a network node; and / or user equipment.

[0030] In an embodiment of the present disclosure, a processing circuit of a host is configured to execute a host application to provide user data; and the host application is configured to interact with a client application executed on a UE, the client application being associated with the host application.

[0031] Another aspect of the present disclosure provides a host configured to operate in a communication system to provide an over-the-top (OTT) service. The host includes: a processing circuit configured to start receiving user data; and a network interface configured to receive user data from a network node in a cellular network, the network node having a communication interface and a processing circuit. The processing circuit of the network node is configured to perform any method performed by the first network node and / or the second network node to receive user data from the UE for the host.

[0032] In an embodiment of the present disclosure, a processing circuit of a host is configured to execute a host application to provide user data; and the host application is configured to interact with a client application executed on a UE, the client application being associated with the host application.

[0033] In an embodiment of the present disclosure, initiating receiving user data includes requesting user data.

[0034] Another aspect of the present disclosure provides a method implemented by a host configured to operate in a communication system, the system also including a network node and a user equipment (UE). The method includes: at the host, initiating reception of user data from the UE, the user data originating from a transmission received by the network node from the UE. The network node performs any method performed by the first network node and / or the second network node to receive user data from the UE for the host.

[0035] In an embodiment of the present disclosure, the method in the aforementioned embodiment further includes, at the network node, transmitting the received user data to the host.

[0036] Another aspect of the present disclosure provides a host configured to operate in a communication system to provide an over-the-top (OTT) service. The host includes: a processing circuit configured to provide user data; and a network interface configured to initiate transmission of the user data to a cellular network for transmission to a user equipment (UE). The UE includes a communication interface and a processing circuit, and the communication interface and processing circuit of the UE are configured to perform any method performed by the first network node and / or the second network node to receive user data from the host.

[0037] In an embodiment of the present disclosure, the cellular network further includes a network node configured to communicate with the UE to transfer user data from the host to the UE.

[0038] In an embodiment of the present disclosure, a processing circuit of a host is configured to execute a host application to provide user data; and the host application is configured to interact with a client application executed on a UE, the client application being associated with the host application.

[0039] Another aspect of the present disclosure provides a method implemented by a host configured to operate in a communication system, the system also including a network node and a user equipment (UE). The method includes: providing user data to the UE; and initiating a transmission carrying the user data through a cellular network including the network node. The UE performs any method performed by the first network node and / or the second network node to receive the user data from the host.

[0040] In an embodiment of the present disclosure, the method in the aforementioned embodiment further includes, at the host, executing a host application associated with the client application executed on the UE to receive user data from the UE.

[0041] In an embodiment of the present disclosure, the method in the aforementioned embodiment further includes transmitting input data to the client application executed on the UE at the host, the input data being provided by the executing host application. The user data is provided by the client application in response to the input data from the host application.

[0042] Another aspect of the present disclosure provides a host configured to operate in a communication system to provide an over-the-top (OTT) service. The host includes: a processing circuit configured to utilize user data; and a network interface configured to receive a transmission of the user data to a cellular network for transmission to a user equipment (UE). The UE includes a communication interface and a processing circuit, and the communication interface and processing circuit of the UE are configured to perform any method performed by the first network node and / or the second network node to transmit the user data to the host.

[0043] In an embodiment of the present disclosure, the cellular network further includes a network node configured to communicate with the UE to transmit user data from the UE to the host.

[0044] In an embodiment of the present disclosure, a processing circuit of a host is configured to execute a host application to provide user data; and the host application is configured to interact with a client application executed on a UE, the client application being associated with the host application.

[0045] Another aspect of the present disclosure provides a method implemented by a host configured to operate in a communication system, the system also including a network node and a user equipment (UE). The method includes: receiving, at the host, user data transmitted to the host by the UE via the network node. The UE performs any method performed by the first network node and / or the second network node to transmit the user data to the host.

[0046] In an embodiment of the present disclosure, the method in the aforementioned embodiment further includes, at the host, executing a host application associated with the client application executed on the UE to receive user data from the UE.

[0047] In an embodiment of the present disclosure, the method in the aforementioned embodiment further comprises: transmitting input data on the host to the client application executed on the UE, the input data being provided by executing the host application. The user data is provided by the client application in response to the input data from the host application.

[0048] Embodiments herein bring many advantages. According to embodiments of the present disclosure, improved methods and improved apparatus may be provided for standby members and active members in a cluster.

[0049] In particular, by determining the active member failure, at least based on the receipt of incoming traffic to the cluster, the failure of an active member in the cluster can be detected in a timely manner. In addition, by taking over the incoming traffic and refreshing the sequence numbers associated with the incoming traffic, the communication with other nodes can be quickly and stably restored. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] The above and other aspects, features and advantages of various embodiments of the present disclosure will be more fully demonstrated by the following detailed description and the illustrations of the accompanying drawings, in which the same reference numbers or letters are used to refer to similar or equivalent elements. These illustrations are made for a better understanding of the embodiments of the present disclosure and are not necessarily drawn to scale. Please refer to the accompanying drawings for details:

[0051] Figure 1 The following figure shows an example of IPsec HA topology.

[0052] Figure 2A is an example flow chart of a method performed by a first network node according to an example embodiment of the present disclosure.

[0053] Figure 2B is an example embodiment according to the present disclosure, Figure 2A Flowchart of additional steps of the method.

[0054] Figure 2C is an example embodiment according to the present disclosure, Figure 2A Flowchart of the sub-steps of the method.

[0055] Figure 2D is an example embodiment according to the present disclosure, Figure 2A Flowchart of additional steps of the method.

[0056] Figure 3 is an example flow chart of a method performed by a second network node according to an example embodiment of the present disclosure.

[0057] Figure 4 is an example flow chart showing further detailed steps of synchronization.

[0058] Figure 5 is a diagram of alternate connections showing the clustering effect.

[0059] Figure 6 is an example flow chart showing further detailed steps of detecting failure and switching.

[0060] Fig. 7AThe invention is a block diagram showing an example device of a first network node suitable for executing the method according to an embodiment of the present disclosure.

[0061] Figure 7B The invention is a block diagram showing an example device of a second network node suitable for executing the method according to an embodiment of the present disclosure.

[0062] Figure 8 is a block diagram showing an apparatus / computer-readable storage medium according to an embodiment of the present disclosure.

[0063] Fig.9A It is a block diagram showing modules of a first network node suitable for executing the method of the embodiment of the present disclosure.

[0064] Fig. 9B It is a block diagram showing modules of a second network node suitable for executing the method of the embodiment of the present disclosure.

[0065] Fig.10 An example of a communication system 1000 in some embodiments is shown.

[0066] Fig.11 A UE 1100 in certain embodiments is shown.

[0067] Fig.12 A network node 1200 in certain embodiments is shown.

[0068] Fig.13 According to the various aspects described in this article, it may be Fig.10 1300 is a block diagram of one embodiment of a host 1016 in FIG.

[0069] Fig.14 is a block diagram illustrating a virtualized environment 1400 in which functionality may be virtualized in some embodiments.

[0070] Fig.15 A communication diagram is shown in accordance with certain embodiments, wherein a host 1502 communicates with a UE 1506 via a network node 1504 over a partially wireless connection. DETAILED DESCRIPTION

[0071] Embodiments of the present disclosure are described in detail with reference to the accompanying drawings. It should be understood that these embodiments are discussed only to enable those skilled in the art to better understand and thereby realize the present disclosure, rather than to imply any limitation in terms of the scope of the present disclosure. References to features, advantages or similar language throughout the specification do not mean that all features and advantages that can be implemented in accordance with the present disclosure should be in or in any single embodiment of the present disclosure. On the contrary, the language related to the features and advantages is understood to mean that the specific features, advantages or characteristics described in conjunction with the embodiments are included in at least one embodiment of the present disclosure. In addition, the features, advantages and characteristics of the present disclosure described can be combined in one or more embodiments in any suitable manner. Those skilled in the relevant art will recognize that the present disclosure can be practiced without one or more specific features or advantages of a specific embodiment. In other cases, additional features and advantages can be found in certain embodiments, which may not appear in all embodiments of the present disclosure.

[0072] In general, all terms used herein should be interpreted according to the common meaning of the relevant technical field, unless otherwise explicitly stated and / or different meanings implied from the context of their use. All references to elements, devices, components, means, steps, etc. should be open to interpretation as referring to at least one instance of the elements, devices, components, means, steps, etc., unless otherwise explicitly stated. The steps of any method disclosed herein do not have to be performed in the exact order disclosed, unless it is explicitly described that a step should follow or precede another step, or it is implied that a step must follow or precede another step. Any feature of any embodiment of the present disclosure may be applicable to any other embodiment, if appropriate. Similarly, any advantage of any embodiment may be applicable to any other embodiment, and vice versa. Other objectives, features and advantages of the embodiments therein will be apparent from the following description.

[0073] The terms "network" or "communication network" as used herein refer to a network (e.g., an Internet network or any wireless network) that complies with any appropriate communication standard. For example, wireless communication standards may include New Radio (NR), Long Term Evolution (LTE), LTE-Advanced, Wideband Code Division Multiple Access (WCDMA), High Speed ​​Packet Access (HSPA), Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), Frequency Division Multiple Access (FDMA), Orthogonal Frequency Division Multiple Access (OFDMA), Single Carrier Frequency Division Multiple Access (SC-FDMA), and other wireless networks. In the following description, "network" and "system" may be used interchangeably. In addition, communication between two devices in a network may be performed according to any appropriate communication protocol, including but not limited to wireless communication protocols or wired communication protocols defined by standard organizations such as the Third Generation Partnership Project (3GPP).

[0074] The term "network node" as used herein refers to a network device or network entity or network function or any other device (physical or virtual) in a communication network. For example, a network node in a network may include a base station (BS), an access point (AP), a multi-cell / multicast coordination entity (MCE), a server node / function (e.g., a service capability server / application server (SCS / AS), a group communication service application server (GCS AS), an application function (AF)), an open node / function (e.g., a service capability exposure function (SCEF), a network exposure function (NEF)), a unified data management (UDM), a home subscriber server (HSS), a session management function (SMF), an access and mobility management function (AMF), a mobile management entity (MME), a controller or any other suitable device in a wireless communication network. For example, a BS may be a node B (NodeB or NB), an evolved node B (eNodeB or eNB), a next generation node B (gNodeB or gNB), a remote radio unit (RRU), a radio head (RH), a remote radio head (RRH), a repeater, a low power node such as femto, pico, etc.

[0075] Further examples of network nodes may include multi-standard radio (MSR) wireless devices such as MSR base stations (BSs), network controllers such as radio network controllers (RNCs) or base station controllers (BSCs), base transceiver stations (BTSs), transmission points, transmission nodes, and positioning nodes, etc.

[0076] The terms "network node", "network function", "network entity" herein may also refer to any appropriate node, function, entity that can be implemented (physically or virtually) in a communication network. For example, a 5G system (5GS) may include multiple network functions (NFs), such as access and mobility function (AMF), session management function (SMF), authentication service function (AUSF), unified data management (UDM), policy control function (PCF), application function (AF), network exposure function (NEF), user plane function (UPF) and network resource repository function (NRF), radio access network (RAN), service communication proxy (SCP), etc. In other embodiments, the network function may include different types of NFs (such as policy and charging rules function (PCRF), etc.), depending on the specific network.

[0077] The term "terminal device" refers to any terminal device that can access a communication network and receive services therefrom. For example, but not limitation, a terminal device refers to a mobile terminal, a user equipment (UE), or other suitable device. For example, a UE may be a subscription station (SS), a portable subscription station, a mobile station (MS), or an access terminal (AT). Terminal devices may include, but are not limited to, portable computers, image capture terminal devices such as digital cameras, game terminal devices, music storage and playback devices, mobile phones, cellular phones, smart phones, voice transmission phones based on IP (VoIP phones), wireless local loop phones, tablet computers, wearable devices, personal digital assistants (PDAs), portable computers, desktop computers, wearable terminal devices, vehicle-mounted wireless terminal devices, wireless terminals, mobile stations, notebook embedded devices (LEEs), notebook mounted devices (LMEs), USB dongles, smart devices, wireless customer premises equipment (CPEs), etc. In the following description, the terms "terminal device", "terminal", "user equipment", and "UE" may be used interchangeably. For example, a terminal device may represent a UE configured according to one or more communication standards promulgated by the Third Generation Partnership Project (3GPP), such as the LTE standard or the NR standard of 3GPP. As used herein, "user equipment" and "UE" may not necessarily have a "user" in the sense of a person owning and / or operating the associated device. In certain embodiments, a terminal device may be configured to transmit and / or receive information without direct human interaction. For example, a terminal device may be designed to transmit information to a network according to a predetermined schedule, when triggered by an internal or external event, or upon request from a communication network. Conversely, UE may represent a device that is intended for sale or operation by a human user, but may not be initially associated with a specific human user.

[0078] As another example, in an Internet of Things (IoT) scenario, an end device may represent a machine or other device that performs monitoring and / or measurements and transmits the results of such monitoring and / or measurements to another end device and / or network device. In this case, the end device may be a machine-to-machine (M2M) device, which may be referred to as a machine type communication (MTC) device in the 3GPP context. As a specific example, the end device may be a UE that implements the 3GPP Narrowband Internet of Things (NB-IoT) standard. Specific examples of these machines or devices include sensors, metering devices such as electricity meters, industrial machinery, or household or personal appliances, such as refrigerators, televisions, personal wearable devices such as watches, etc. In other cases, the end device may represent a vehicle or other device that is capable of monitoring and / or reporting its operating status or functions related to its operation.

[0079] As used herein, "one embodiment", "an embodiment", "an example embodiment", etc., indicate that the described embodiment may include certain features, structures, or characteristics, but not every embodiment necessarily includes these certain features, structures, or characteristics. In addition, these phrases do not necessarily refer to the same embodiment. In addition, when a certain feature, structure, or characteristic is described in connection with an embodiment, the submitter assumes that a person with knowledge in the art can implement such feature, structure, or characteristic in connection with other embodiments, whether or not explicitly described.

[0080] It should be understood that although the terms "first", "second", etc. may be used herein to describe various elements, these elements should not be limited by these terms. These terms are only used to distinguish one element from another element. For example, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element without departing from the scope of the exemplary embodiments. In this article, the term "and / or" includes any combination of all relevant listed one or more items.

[0081] Herein, the phrase "at least one of A and / or B" should be understood as "only A, only B, or both A and B". The phrase "A and / or B" should be understood as "only A, only B, or both A and B".

[0082] The terms used herein are only used to describe specific embodiments and are not meant to be limiting of the example embodiments. In this document, the singular forms "a", "an", and "the" are intended to include the plural forms unless the context clearly indicates otherwise. It is further understood that when "comprises", "comprises", "comprising", "has", "having", "includes", and / or "including" are used herein, these terms specify the presence of the features, elements, and / or components, but do not exclude the presence or addition of one or more other features, elements, components, and / or combinations thereof.

[0083] Note that these terms are used in this article only to describe and distinguish between nodes, devices or networks, etc. As technology develops, other terms with similar / same meanings may also be used.

[0084] In the following description and claims, unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure belongs.

[0085] In the field of communications / computer networks, IP (Internet Protocol) security IPsec provides confidentiality, data integrity, access control, and data origin authentication for IP datagrams. These services are achieved by maintaining a shared state between the source and destination of the IP datagram. The state defines the specific services provided by the datagram, the encryption algorithms that will be used to provide these services, and the keys that will be used as input to the encryption algorithms.

[0086] The IPsec protocol suite is widely used for mission-critical network traffic. In order to make IPsec deployments highly available, more scalable, and more resistant to failures, they are often implemented as IPsec HA (High Availability) clusters.

[0087] Figure 1 The following figure shows an example of IPsec HA topology.

[0088] like Figure 1 As shown, a cluster may include an active member and a standby member. A synchronization channel may exist between the active member and the standby member. The cluster will communicate with the IPsec peer via Internet Key Exchange Protocol Version 2 (IKEv2) / IPsec traffic.

[0089] As suggested in RFC6311 Section 1, in case of hot standby cluster implementation of IKEv2 / IPsec based VPN (Virtual Private Network), an IKEv2 / IPsec session is first established between a peer and an active member of the cluster. Later, the active member will continuously synchronize / update the IKE / IPsec Security Association (SA) state to the standby members of the cluster. This primary SA state synchronization / update occurs during each SA startup or re-keying. Performing SA state synchronization / update for each IKE and IPsec message is very expensive and therefore is usually performed periodically.

[0090] However, this approach may not be the best choice, and the correct synchronization period is difficult to grasp. For example, if the re-key period is set to 24 hours, any synchronization less than 24 hours is a waste because the SA state will not change at all. However, if the synchronization period is too long, real-time performance may be lost. If the active device fails, the standby device may not have the latest SA information, resulting in traffic loss.

[0091] In RFC6311, it is defined that a standby member is responsible for detecting the failure event of an active member and may become the active member after a considerable time.

[0092] This standard definition takes into account protocol-level interactions to avoid session failures caused by alternate devices sending IKEv2 / IPsec messages.

[0093] This is a workable solution, but not the best one, because obviously it takes some time for the standby member to detect the failure of the active member (perhaps through keepalive messages or heartbeat messages), and it also takes some time to become the active member. Considering that IPsec traffic can be very large, the traffic loss is not negligible even if the switchover time is relatively short.

[0094] Embodiments of the present disclosure may provide further improved methods.

[0095] Figure 2A is an example flow chart of a method of a first network node executed according to an embodiment of the present disclosure.

[0096] The first network node may be a standby member in the cluster. Figure 2A As shown, the method 200 includes: step S202, determining an active member failure based at least on reception of incoming traffic of the cluster; step S204, taking over the incoming traffic; and step S206, refreshing the sequence number associated with the incoming traffic.

[0097] According to an embodiment of the present disclosure, by determining the active member failure based at least on the reception of the incoming traffic of the cluster, the active member failure in the cluster can be detected in time. In addition, by taking over the incoming traffic and refreshing the sequence number associated with the incoming traffic, the communication with other nodes can be quickly and stably restored.

[0098] Figure 2B According to the embodiment of the present disclosure Figure 2A A flow chart of additional steps of the method.

[0099] like Figure 2B As shown, the method 200 may further include: step S201, synchronizing with a second network node, where the second network node is an active member in the cluster.

[0100] In an embodiment of the present disclosure, the method 200 may further include: step S2011, receiving a configuration for information synchronization from the second network node. The synchronization with the second network node in step S201 includes: step S2012, receiving information according to the configuration from the second network. Information transmission is initiated by the second network node to synchronize the first network node.

[0101] According to an embodiment of the present disclosure, synchronization between an active member and a standby member may be initiated by the active member. Therefore, synchronization may be performed only when necessary and may be performed in a timely manner.

[0102] In an embodiment of the present disclosure, the information may be selected by a user and / or operator of the cluster. The information may include at least one of the following: security association (SA) up / down status; security parameter index (SPI); encryption / decryption key; and / or algorithm.

[0103] It should be understood that there is no limitation on the information. A user and / or operator of a cluster can set any status / parameter / condition of an active member, cluster or traffic as the information to be monitored.

[0104] Figure 2C is a flowchart exemplified according to an embodiment of the present disclosure, showing Figure 2A Sub-steps of the method.

[0105] like Figure 2C As shown, in an embodiment of the present disclosure, refreshing the sequence number associated with the incoming traffic in step S206 may include: step S2061, triggering the SA re-key process.

[0106] According to an embodiment of the present disclosure, the SA re-keying process can be used to refresh the sequence number. Such a process is widely supported by network nodes, so compatibility can be improved.

[0107] It should be understood that this is not limiting and other processes may be used to refresh / reset the serial number.

[0108] In the embodiment of the present disclosure, the SA re-keying process can be used to trigger the sub-SA with traffic. Alternatively, the SA re-keying process can be used to trigger each sub-SA.

[0109] According to the embodiments of the present disclosure, triggering only the sub-SA with traffic may save transmission resources and time for SA re-keying, while triggering each sub-SA may save some time for checking the traffic of the sub-SA.

[0110] Figure 2D is a flowchart exemplified according to an embodiment of the present disclosure, showing Figure 2A Additional steps to the method.

[0111] In an embodiment of the present disclosure, the cluster may be a hot standby cluster for Internet Key Exchange Protocol Version 2 / Internet Protocol Security (IKEv2 / IPsec) traffic. The traffic may be IPsec traffic. Figure 2D As shown, the method 200 may further include: step S205, notifying an Internet Protocol security (IPsec) stack to exchange IKEv2 / IPsec protocol messages to take over the control plane.

[0112] After the traffic is taken over, the former standby member notifies the stack to take over the control plane, including sending Dead Peer Detect (DPD) messages and triggering a rekey as described above. The stack will then actually trigger a rekey.

[0113] Figure 3 is a flowchart exemplified according to an embodiment of the present disclosure, showing a method performed by a second network node.

[0114] The second network node may be an active member in a cluster, and the cluster also includes a standby member. Figure 3 As shown, the method 300 includes: step S302, transmitting a configuration for information synchronization to a first network node; and step S304, transmitting information to the first network node according to the configuration. The first network node is a standby member in the cluster.

[0115] In an embodiment of the present disclosure, the information may be selected by a user and / or operator of the cluster. The information may include at least one of the following: security association (SA) up / down status; security parameter index (SPI); encryption / decryption key; and / or algorithm.

[0116] In an embodiment of the present disclosure, the cluster may be a hot standby cluster for Internet Key Exchange Protocol Version 2 / Internet Protocol Security (IKEv2 / IPsec) traffic.

[0117] According to an embodiment of the present disclosure, synchronization between an active member and a standby member may be initiated by the active member. Therefore, synchronization may be performed only when necessary and may be performed in a timely manner.

[0118] In particular, embodiments of the present disclosure may provide a real-time, customizable SA synchronization mechanism to synchronize in a timely and efficient manner. In addition, a flow-based detection method is provided for active member failure detection to avoid flow loss.

[0119] Improved SA synchronization mechanisms and active member failure detection mechanisms may improve efficiency and reduce system overhead in the network, such as in IPsec HA scenarios, and avoid traffic loss when switchover occurs.

[0120] Still for reference Figure 1 ,The basic reason for SA synchronization is that some “key information” (such as SA up / down status, security parameter index (SPI) and encryption / decryption keys) used for data packet encryption and decryption will change (such as ,changes caused by SA re-keying).

[0121] Therefore, according to the improved method of the embodiment of the present disclosure, only when these key information changes, the active member will actively synchronize the corresponding change information (for example, only the SA with changes needs to be synchronized, rather than all SAs) to the standby member. Different from synchronizing only when the SA up / down state changes or the key is rebuilt, because the protocol is complex and the network conditions vary, the change of SA information may not be limited to the SA up / down state or the key is rebuilt. The method according to the embodiment of the present disclosure can take into account the real-time performance and efficiency of synchronization at the same time.

[0122] ESP (Encapsulating Security Payload) sequence numbers need to be processed because if the receiving device supports anti-replay, the sequence numbers of ESP packets may cause packet loss. But ESP is a data plane, which means that a large amount of sequence number data needs to be synchronized between the active and standby devices, which poses a huge challenge to device resources and performance. It is almost impossible to synchronize the sequence number of each ESP packet between the active and standby devices. Therefore, the embodiments of the present disclosure do not synchronize the ESP sequence numbers, but make the ESP sequence numbers acceptable through some special operations when a failure occurs (active and standby device switching). The specific details will be described below.

[0123] At the same time, the "key information" here is flexible, in other words, it is configurable by users. Users can flexibly configure changes in SA information (unlimited, such as SA status, SPI, encryption / decryption keys, algorithms, etc.) to trigger synchronization to increase deployment flexibility and availability.

[0124] This way, the SA on the standby member is always up-to-date and ready to take over IPsec traffic at any time.

[0125] Figure 4 is a sample flow chart showing the synchronization steps in further detail.

[0126] like Figure 4 As shown, this synchronization mainly occurs on active members.

[0127] In step S402, the user may configure the SA information of interest.

[0128] In step S404, the IPsec stack state machine runs.

[0129] In step S406, it is checked whether the SA information has changed.

[0130] If it is affirmative in step S406, the process proceeds to step S408, and the active member is synchronized to the standby member. This synchronization can be achieved by transmitting messages / parameters / information through a socket or any other interface.

[0131] If negative in step S406, the process returns to step S404.

[0132] Figure 5 is a diagram of alternate connections demonstrating the clustering effect.

[0133] like Figure 5 As shown, in a typical clustering scenario, traffic is usually reserved for clustering effect.

[0134] When the active member fails, connection 1 connected to the active member also fails, and traffic is transferred to the standby member via connection 2. This is usually achieved through link aggregation (LAG) or routing convergence protocols. This provides us with the opportunity to use traffic to determine whether the active member has failed.

[0135] Figure 6 is an example flow chart showing further detailed steps of fault detection and switching.

[0136] Unlike the method of checking the status of active members through software (Keepalive or heartbeat messages), the method of monitoring the status of active members through traffic is as follows Figure 6 As shown, on the standby member:

[0137] In step S601, due to Figure 4 According to the mechanism described above, the SA state of the standby member should be exactly the same as that of the active member.

[0138] In step S602, the standby member should continuously monitor whether there is IPsec traffic matching the SA entering.

[0139] In step S603, if the standby member detects IPsec traffic, step S604 takes effect.

[0140] In step S604, since the SA on the standby member is always ready, the standby member can immediately take over the IPsec traffic (encryption or decryption). In this way, there should be no traffic loss.

[0141] In step S605, after taking over the IPsec traffic, the IPsec stack on the standby member needs to be notified (activated) to exchange all IKEv2 / IPsec protocol messages - like Dead Peer Detection (DPD) messages, the loss of which may affect the SA state.

[0142] In step S606, it can be checked whether each sub (SA) has traffic, and if so, step S607 is executed to trigger the re-keying to refresh the SA sequence number. If there is no traffic, it means that the SA sequence number now remains at 0, so there is no need to refresh the SA sequence number.

[0143] In step S607, when switching from standby to active, the IPsec stack needs to trigger SA re-keying. According to RFC7296, child SA re-keying (the message type in the standard is: CREATE_CHILD_SA) can not only update the key, but also clear the ESP sequence number (the bidirectional ESP data packet sequence number starts from 0), thus avoiding possible data packet loss caused by the ESP sequence number and anti-replay function.

[0144] It should be understood that the SA "key information" here should be configurable, and the SA "key information" represents the attributes of the SA that can trigger SA synchronization from the active member to the standby member.

[0145] Fig. 7A is a block diagram illustrating an example apparatus of a first network node suitable for performing embodiments of the present disclosure.

[0146] like Fig. 7A As shown, the apparatus 70 for the first network node includes: a processor 701; and a memory 702. The memory 702 contains instructions executable by the processor 701. The apparatus 70 for the first network node is used to: determine an active member failure based on at least receiving incoming traffic of the cluster; take over the incoming traffic; and refresh the sequence number related to the incoming traffic.

[0147] In an embodiment of the present disclosure, the apparatus 70 is further configured to execute a method according to any of the above embodiments, for example Figure 2A , 2B , the method shown in 2C, 2D, 4, and 6.

[0148] Figure 7B is a block diagram illustrating an example apparatus of a second network node suitable for performing embodiments of the present disclosure.

[0149] like Figure 7B As shown, the device 71 for the second network node includes: a processor 711; and a memory 712. The memory 712 contains instructions executable by the processor 711. The device 71 for the second network node is used to: transmit a configuration for information synchronization to the first network node; and transmit information according to the configuration. The first network node is a standby member in the cluster.

[0150] In an embodiment of the present disclosure, the device 71 is further configured to execute a method according to any of the above embodiments, for example Figure 3 , 4 , the method shown in 6.

[0151] The processors 701 and 711 may be any type of processing components, such as one or more microprocessors or microcontrollers, and other digital hardware, which may include a digital signal processor (DSP), dedicated digital logic, etc. The memories 702 and 712 may be any type of storage components, such as read-only memory (ROM), random access memory, cache memory, flash memory devices, optical storage devices, etc.

[0152] Figure 8 is a block diagram illustrating an apparatus / computer-readable storage medium according to an embodiment of the present disclosure.

[0153] like Figure 8 As shown, a computer-readable storage medium 80, or any other product, stores instructions 801 executable by at least one processor, which, when executed, causes at least one processor to perform a method according to any of the above embodiments, such as Figure 2A , 2B , the methods shown in 2C, 2D, 3, 4, and 6.

[0154] In addition, the present disclosure may also provide a carrier containing the above-mentioned computer program, wherein the carrier is one of an electric signal, an optical signal, a radio signal or a computer-readable storage medium. The computer-readable storage medium may be, for example, an optical disk or an electronic storage device such as a RAM (random access memory), a ROM (read-only memory), a flash memory, a magnetic tape, a CD-ROM, a DVD, a Blu-ray disc, etc.

[0155] Fig.9A is a block diagram illustrating modules of a first network node suitable for performing embodiments of the present disclosure.

[0156] like Fig.9A As shown, the device 90 for the first network node may include: a determination module 902, configured to determine an active member failure based at least on the reception of incoming traffic to the cluster; a takeover module 904, configured to take over the incoming traffic; and a refresh module 906, configured to refresh the sequence number associated with the incoming traffic.

[0157] In the embodiments of the present disclosure, the apparatus 90 may also be used to execute the method according to any of the above embodiments, for example Figure 2A , 2B , the method shown in 2C, 2D, 4, and 6.

[0158] Fig. 9B It is a block diagram showing modules of a second network node suitable for executing the method of an embodiment of the present disclosure.

[0159] like Fig. 9BAs shown, the device 91 of the second network node may include: a transmission module 912, configured to transmit a configuration for information synchronization to the first network node; and a transmission module 914, configured to transmit information to the first network node according to the configuration. The first network node is a standby member in the cluster.

[0160] In the embodiment of the present disclosure, the device 91 may also execute the method according to any of the above embodiments, for example: Figure 3 , 4 , the method shown in 6.

[0161] The term "module" may have a traditional meaning in the field of electronics, electrical devices and / or electronic equipment, such as those electrical and / or electronic circuits, devices, units, processors, memories, logical solid-state and / or discrete devices, computer programs or instructions for performing respective tasks, processes, calculations, output and / or display functions, etc. described herein.

[0162] Using these modules, the device may not need a fixed processor or memory, and any type of computing resources and storage resources can be configured from at least one network node / device / entity / device related to the communication system. Virtualization technology and network computing technology (e.g., cloud computing) can be further introduced to improve the efficiency of network resource utilization and network flexibility.

[0163] The techniques described herein may be implemented in various ways, such that a device that implements one or more functions of a corresponding device described in a certain embodiment includes not only the previous technical means, but also means for implementing one or more functions of the corresponding device described in the embodiment, which may include separate means for each independent function, or may be configured as a means for performing two or more functions. For example, these techniques may be implemented in hardware (one or more devices), firmware (one or more devices), software (one or more modules / units), or a combination thereof. For firmware or software, it can be implemented by modules (such as processes, functions, etc.) that perform the functions described herein.

[0164] In particular, these functional modules may be implemented as network elements on dedicated hardware, as software instances running on dedicated hardware, or as virtualized functions instantiated on an appropriate platform, such as on a cloud infrastructure.

[0165] The first network node and the second network node may be any communication device and / or computing device in the network, such as any server, personal computer, user equipment, router, gateway device, etc. Examples of the first network node and / or the second network node are as follows.

[0166] Fig.10An example of a communication system 1000 is shown in accordance with some embodiments.

[0167] In this example, the communication system 1000 includes a telecommunications network 1002 including an access network 1004 such as a radio access network (RAN) and a core network 1006 including one or more core network nodes 1008. The access network 1004 includes one or more access network nodes, such as network nodes 1010a and 1010b (one or more of which may be generally referred to as network nodes 1010), or any other similar third generation partnership project (3GPP) access node or non-3GPP access point. The network node 1010 facilitates direct or indirect connection of user equipment (UE), such as by connecting UE 1012a, 1012b, 1012c, and 1012d (one or more of which may be generally referred to as UE 1012) to the core network 1006 via one or more wireless connections.

[0168] Example wireless communications over wireless connections include sending and / or receiving wireless signals using electromagnetic waves, radio waves, infrared waves, and / or other types of signals suitable for conveying information without the use of wires, cables, or other material conductors. In addition, in various embodiments, the communication system 1000 may include any number of wired or wireless networks, network nodes, UEs, and / or any other components or systems that may facilitate or participate in the communication of data and / or signals, whether or not via a wired or wireless connection. The communication system 1000 may include and / or interface with any type of communication, telecommunication, data, cellular, radio network, and / or other similar types of systems.

[0169] UE 1012 may be any of a variety of communication devices, including wireless devices that are arranged, configured and / or operable to wirelessly communicate with network node 1010 and other communication devices. Similarly, network node 1010 is arranged, capable, configured and / or operable to communicate directly or indirectly with UE 1012 and / or with other network nodes or devices in telecommunication network 1002 to enable and / or provide network access, such as wireless network access, and / or perform other functions, such as management in telecommunication network 1002.

[0170] In the depicted example, the core network 1006 connects the network node 1010 to one or more hosts, such as the host 1016. These connections may be direct or indirect via one or more intermediate networks or devices. In other examples, the network node may be directly coupled to the host. The core network 1006 includes another core network node (e.g., core network node 1008) consisting of hardware and software components. The features of these components may be substantially similar to those described with respect to the UE, network node, and / or host, so that the description is generally applicable to the corresponding components of the core network node 1008. The example core network node includes a mobile switching center (MSC), a mobility management entity (MME), a home subscriber server (HSS), an access and mobility management function (AMF), a session management function (SMF), an authentication server function (AUSF), a subscription identifier de-hiding function (SIDF), a unified data management (UDM), a security edge protection agent (SEPP), a network open function (NEF), and / or a user plane function (UPF) One or more functions.

[0171] The host 1016 may be under the ownership or control of a service provider other than the operator or provider of the access network 1004 and / or the telecommunications network 1002, and may be operated by or on behalf of the service provider. The host 1016 may host various applications to provide one or more services. Examples of such applications include live and pre-recorded audio / video content, data collection services (e.g., retrieving and compiling data about various environmental conditions detected by multiple UEs), analytical functions, social media, functions for controlling or otherwise interacting with remote devices, functions of an alarm and monitoring center, or any other such functions performed by a server.

[0172] on the whole, Fig.10 The communication system 1000 enables connections between UEs, network nodes, and hosts. In this sense, the communication system can be configured to operate according to predefined rules or procedures, such as specific standards, including but not limited to: Global System for Mobile Communications (GSM); Universal Mobile Telecommunications System (UMTS); Long Term Evolution (LTE) and / or other suitable 2G, 3G, 4G, 5G standards or any applicable future generation standards (e.g., 6G); Wireless Local Area Network (WLAN) standards, such as the Institute of Electrical and Electronics Engineers (IEEE) 802.11 standard (WiFi); and / or any other appropriate wireless communication standards, such as Worldwide Interoperability for Microwave Access (WiMax), Bluetooth, Z-Wave, Near Field Communication (NFC) ZigBee, LiFi, and / or any Low Power Wide Area Network (LPWAN) standards, such as LoRa and Sigfox.

[0173] In some examples, the telecommunication network 1002 is a cellular network implementing 3GPP standardized features. Therefore, the telecommunication network 1002 can support network slicing to provide different logical networks to different devices connected to the telecommunication network 1002. For example, the telecommunication network 1002 can provide ultra-reliable low-latency communication (URLLC) services to some UEs, enhanced mobile broadband (eMBB) services to other UEs, and / or massive machine type communication (mMTC) / massive IoT services to more UEs.

[0174] In some examples, UE 1012 is configured to send and / or receive information without direct human interaction. For example, the UE may be designed to send information to access network 1004 on a predetermined schedule when triggered by an internal or external event or in response to a request from access network 1004. In addition, the UE may be configured to operate in a single RAT or multi-RAT or multi-standard mode. For example, the UE may operate with any one or a combination of Wi-Fi, NR (New Radio), and LTE, i.e., be configured for multi-radio dual connectivity (MR-DC), such as E-UTRAN (Evolved UMTS Terrestrial Radio Access Network) New Radio – Dual Connectivity (EN-DC).

[0175] In this example, the hub 1014 communicates with the access network 1004 to facilitate indirect communication between one or more UEs (e.g., UE 1012c and / or 1012d) and a network node (e.g., network node 1010b). In some examples, the hub 1014 may be a controller, a router, a content source, and an analyzer, or any other communication device described herein with respect to the UE. For example, the hub 1014 may be a broadband router that enables the UE to access the core network 1006. As another example, the hub 1014 may be a controller that sends commands or instructions to one or more actuators in the UE. The commands or instructions may be received from the UE, the network node 1010, or received by an executable code, a script, a process, or other instructions in the hub 1014. As another example, the hub 1014 may be a data collector that acts as a temporary storage device for UE data, and in some embodiments, analysis or other processing of the data may be performed. As another example, the hub 1014 may be a content source. For example, for a UE that is a VR headset, display, speaker, or other media delivery device, the hub 1014 can retrieve VR assets, video, audio, or other media or data related to sensory information via a network node, and the hub 1014 then provides it to the UE directly or after performing local processing and / or after adding additional local content. In another example, the hub 1014 acts as a proxy server or orchestrator for the UE, especially when one or more UEs are low-energy IoT devices.

[0176] Hub 1014 can have constant / persistent or intermittent connection to network node 1010b. Hub 1014 can also allow different communication schemes and / or scheduling between hub 1014 and UE (e.g., UE 1012c and / or 1012d) and hub 1014 and core network 1006. In other examples, hub 1014 is connected to core network 1006 and / or one or more UE via wired connection. In addition, hub 1014 can be configured to be connected to M2M service provider and / or connected to another UE via direct connection through access network 1004. In some scenarios, UE can establish wireless connection with network node 1010, while still connected via hub 1014 via wired or wireless connection. In some embodiments, hub 1014 can be a dedicated hub-that is, its main function is to route the communication from network node 1010b to UE / route the communication from UE to network node 1010b. In other embodiments, the hub 1014 may be a non-dedicated hub - ie, a device operable to route communications between UEs and network node 1010b, but which is also operable as a communications start and / or end point for certain data channels.

[0177] Fig.11 UE 1100 according to some embodiments is shown. As used herein, UE refers to a device capable of, configured to, arranged to, and / or operable to wirelessly communicate with a network node and / or other UEs. Examples of UEs include, but are not limited to, smart phones, mobile phones, cellular phones, voice over IP (VoIP) phones, wireless local loop phones, desktop computers, personal digital assistants (PDAs), wireless cameras, game consoles or devices, music storage devices, playback devices, wearable terminal devices, wireless endpoints, mobile stations, tablet computers, laptops, laptop embedded devices (LEEs), laptop mounted devices (LMEs), smart devices, wireless client equipment (CPEs), vehicle-mounted or vehicle embedded / integrated wireless devices, etc. Other examples include any UE identified by the Third Generation Partnership Project (3GPP), including narrowband Internet of Things (NB-IoT) UEs, machine type communications (MTC) UEs, and / or enhanced MTC (eMTC) UEs.

[0178] The UE may support device-to-device (D2D) communications, such as by implementing 3GPP standards for sidelink communications, dedicated short-range communications (DSRC), vehicle-to-vehicle (V2V), vehicle-to-infrastructure (V2I), or vehicle-to-everything (V2X). In other examples, a UE may not necessarily have a user in the sense of a human user owning and / or operating the associated device. Instead, a UE may represent a device that is intended to be sold to or operated by a human user but may not, or may not initially, be associated with a particular human user (e.g., a smart sprinkler controller). Alternatively, a UE may represent a device that is not intended to be sold to or operated by an end user, but may be associated with or operated for the benefit of a user (e.g., a smart power meter).

[0179] UE 1100 includes processing circuitry 1102, which is operatively coupled to input / output interface 1106, power supply 1108, memory 1110, communication interface 1112, and / or any other components or any combination thereof via bus 1104. Some UEs may utilize Fig.11 All or a subset of the components shown. The level of integration between components may vary from one UE to another. In addition, some UEs may contain multiple instances of a component, such as multiple processors, memories, transceivers, transmitters, receivers, etc.

[0180] The processing circuit 1102 is configured to process instructions and data and may be configured to implement any sequential state machine operable to execute instructions stored in the memory 1110 as a machine-readable computer program. The processing circuit 1102 may be implemented as one or more hardware-implemented state machines (e.g., in discrete logic, field programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), etc.); programmable logic and appropriate firmware; one or more stored computer programs, general-purpose processors, such as microprocessors or digital signal processors (DSPs), and appropriate software; or any combination of the above. For example, the processing circuit 1102 may include multiple central processing units (CPUs).

[0181] In this example, the input / output interface 1106 can be configured to provide one or more interfaces to an input device, an output device, or one or more input and / or output devices. Examples of output devices include speakers, sound cards, video cards, displays, monitors, printers, actuators, transmitters, smart cards, another output device, or any combination thereof. An input device can allow a user to capture information into the UE 1100. Examples of input devices include touch-sensitive or presence-sensitive displays, cameras (e.g., digital cameras, digital video cameras, web cameras, etc.), microphones, sensors, mice, trackballs, directional boards, trackpads, rollers, smart cards, etc. The presence-sensitive display can include a capacitive or resistive touch sensor to sense input from a user. The sensor can be, for example, an accelerometer, a gyroscope, a tilt sensor, a force sensor, a magnetometer, an optical sensor, a proximity sensor, a biometric sensor, etc., or any combination thereof. An output device can use an interface port of the same type as an input device. For example, a universal serial bus (USB) port can be used to provide input devices and output devices.

[0182] In some embodiments, the power supply 1108 is configured as a battery or a battery pack. Other types of power supplies may be used, such as an external power supply (e.g., a power outlet), a photovoltaic device, or a battery. The power supply 1108 may also include a power circuit for delivering power from the power supply 1108 itself and / or an external power supply to various parts of the UE 1100 via an input circuit or an interface such as a power cable. The delivered power may be used, for example, for charging the power supply 1108. The power circuit may perform any formatting, conversion, or other modification to the power from the power supply 1108 so that the power is suitable for the various components of the UE 1100 to which it is powered.

[0183] The memory 1110 may be or be configured to include a memory such as a random access memory (RAM), a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic disk, an optical disk, a hard disk, a removable cartridge, a flash drive, etc. In one example, the memory 1110 includes one or more application programs 1114, such as an operating system, a web browser application, a widget, a gadget engine, or other application, and corresponding data 1116. The memory 1110 may store any of a variety of operating systems or a combination of operating systems for use by the UE 1100.

[0184] The memory 1110 may be configured to include a plurality of physical drive units, such as a redundant array of independent disks (RAID), a flash memory, a USB flash drive, an external hard disk drive, a thumb drive, a pen drive, a key drive, a high-density digital versatile disk (HD-DVD) optical drive, a built-in hard disk drive, a Blu-ray optical drive, a holographic digital data storage (HDDS) optical drive, an external mini dual in-line memory module (DIMM), a synchronous dynamic random access memory (SDRAM), an external micro DIMM SDRAM, a smart card memory (e.g., a tamper-proof module in the form of a universal integrated circuit card (UICC), including one or more user identity modules (SIMs), such as USIM and / or ISIM), other memories, or any combination thereof. The UICC may be, for example, an embedded UICC (eUICC), an integrated UICC (iUICC), or a removable UICC commonly referred to as a “SIM card”. The memory 1110 may allow the UE 1100 to access instructions, applications, etc. stored on a temporary or non-temporary storage medium to offload data or upload data. An article of manufacture, such as an article of manufacture utilizing a communication system, may be tangibly embodied as or in memory 1110 , which may be or include a device-readable storage medium.

[0185] The processing circuit 1102 may be configured to communicate with an access network or other network using a communication interface 1112. The communication interface 1112 may include one or more communication subsystems and may include or be communicatively coupled to an antenna 1122. The communication interface 1112 may include one or more transceivers for communication, such as by communicating with one or more remote transceivers of another device capable of wireless communication (e.g., another UE or a network node in an access network). Each transceiver may include a transmitter 1118 and / or a receiver 1120 suitable for providing network communications (e.g., optical, electrical, frequency allocation, etc.). In addition, the transmitter 1118 and the receiver 1120 may be coupled to one or more antennas (e.g., antenna 1122) and may share circuit components, software, or firmware, or may be implemented separately alternatively.

[0186] In the illustrated embodiment, the communication functionality of the communication interface 1112 may include cellular communication, Wi-Fi communication, LPWAN communication, data communication, voice communication, multimedia communication, short-range communication such as Bluetooth, near field communication, location-based communication (e.g., using a global positioning system (GPS) to determine location), another similar communication functionality, or any combination thereof. Communication may be implemented according to one or more communication protocols and / or standards (e.g., IEEE 802.11, code division multiple access (CDMA), wideband code division multiple access (WCDMA), GSM, LTE, new radio (NR), UMTS, WiMax, Ethernet, transmission control protocol / Internet protocol (TCP / IP), synchronous optical network (SONET), asynchronous transfer mode (ATM), QUIC, hypertext transfer protocol (HTTP), etc.).

[0187] Regardless of the type of sensor, the UE may provide an output of the data captured by its sensor via a wireless connection to a network node through its communication interface 1112. The data captured by the UE's sensor may be transmitted to the network node via another UE via a wireless connection. The output may be periodic (e.g., every 15 minutes if it reports sensed temperature), random (e.g., to balance the load of reports from multiple sensors), in response to a trigger event (e.g., sending an alert when humidity is detected), in response to a request (e.g., a user-initiated request), or a continuous stream (e.g., a live video feed of a patient).

[0188] As another example, the UE includes an actuator, motor, or switch associated with a communication interface configured to receive wireless input from a network node via a wireless connection. In response to the received wireless input, the state of the actuator, motor, or switch can change. For example, the UE can include a motor that adjusts a control surface or rotor of a drone in flight based on the received input, or adjusts a robotic arm performing a medical procedure based on the received input.

[0189] When in the form of an Internet of Things (IoT) device, a UE may be a device used in one or more application areas including, but not limited to, urban wearable technology, extended industrial applications, and healthcare. Non-limiting examples of such IoT devices are or are embedded in: a connected refrigerator or freezer, a television, connected lighting, an electric meter, a robotic vacuum cleaner, a voice-controlled smart speaker, a home security camera, a motion detector, a thermostat, a smoke detector, a door / window sensor, a flood / humidity sensor, an electronic door lock, a connected doorbell, an air conditioning system such as a heat pump, an autonomous vehicle, a surveillance system, a weather monitoring device, a vehicle parking monitoring device, an electric vehicle charging station, a smart watch, a fitness tracker, an augmented reality (AR) or virtual reality (VR) head mounted display, a wearable device for tactile or sensory enhancement, a sprinkler, an animal or item tracking device, a sensor for monitoring plants or animals, an industrial robot, an unmanned aerial vehicle (UAV), and any type of medical device such as a heart rate monitor or a teleoperated surgical robot. In addition to the above, the UE may be used to identify the user and the device in question. Fig.11 In addition to the other components depicted in the illustrated UE 1100 , a UE in the form of an IoT device may include circuitry and / or software depending on the intended application of the IoT device.

[0190] As another specific example, in an IoT scenario, a UE may represent a machine or other device that performs monitoring and / or measurement and sends the results of such monitoring and / or measurement to another UE and / or a network node. In this case, the UE may be an M2M device, which may be referred to as an MTC device in the 3GPP context. As a specific example, a UE may implement the 3GPP NB-IoT standard. In other scenarios, a UE may represent a vehicle, such as a car, bus, truck, ship, and airplane, or other device capable of monitoring and / or reporting its operating status or other functions associated with its operation.

[0191] In fact, for a single use case, any number of UEs may be used together. For example, a first UE may be a drone or integrated in a drone and provide the drone's speed information (obtained via a speed sensor) to a second UE that is a remote controller for operating the drone. When the user makes changes from the remote controller, the first UE may adjust the throttle on the drone (e.g., by controlling an actuator) to increase or decrease the speed of the drone. The first and / or second UE may also include more than one of the above functions. For example, a UE may include a sensor and an actuator and handle data communications for both the speed sensor and the actuator.

[0192] Fig.12A network node 1200 according to some embodiments is shown. As used herein, a network node refers to a device capable of, configured, arranged and / or operable to communicate directly or indirectly with a UE and / or other network nodes or devices in a telecommunications network. Examples of network nodes include, but are not limited to, access points (APs) (e.g., radio access points), base stations (BSs) (e.g., radio base stations, Node Bs, evolved Node Bs (eNBs), and NR Node Bs (gNBs)).

[0193] Base stations may be classified based on the amount of coverage they provide (or in other words, their transmit power level), and therefore, based on the amount of coverage provided, may be referred to as femto base stations, pico base stations, micro base stations, or macro base stations. A base station may be a relay node or a relay donor node that controls a relay. A network node may also include one or more (or all) parts of a distributed radio base station, such as a centralized digital unit and / or a remote radio unit (RRU), sometimes referred to as a remote radio head (RRH). Such a remote radio unit may or may not be integrated with an antenna as an antenna-integrated radio. Portions of a distributed radio base station may also be referred to as nodes in a distributed antenna system (DAS).

[0194] Other examples of network nodes include a multi-transmission point (multi-TRP) 5G access node, a multi-standard radio (MSR) device (e.g., an MSR BS), a network controller (e.g., a radio network controller (RNC) or a base station controller (BSC)), a base transceiver station (BTS), a transmission point, a transmission node, a multi-cell / multicast coordination entity (MCE), an operation and maintenance (O&M) node, an operation support system (OSS) node, a self-organizing network (SON) node, a positioning node (e.g., an evolved serving mobile positioning center (E-SMLC)), and / or a minimization of drive tests (MDT).

[0195] The network node 1200 includes a processing circuit 1202, a memory 1204, a communication interface 1206, and a power supply 1208. The network node 1200 may include multiple physically separated components (e.g., a NodeB component and an RNC component, or a BTS component and a BSC component, etc.), each of which may have its own components. In certain scenarios where the network node 1200 includes multiple separate components (e.g., BTS and BSC components), one or more separate components may be shared between several network nodes. For example, a single RNC may control multiple NodeBs. In such a scenario, each unique NodeB and RNC pair may be considered to be a single separate network node in some cases. In some embodiments, the network node 1200 may be configured to support multiple radio access technologies (RATs). In such an embodiment, some components may be duplicated (e.g., separate memories 1204 for different RATs) and some components may be reused (e.g., the same antenna 1210 may be shared by different RATs). The network node 1200 may also include multiple sets of various components shown for different wireless technologies, such as GSM, WCDMA, LTE, NR, WiFi, Zigbee, Z-wave, LoRaWAN, radio frequency identification (RFID), or Bluetooth wireless technologies, integrated into the network node 1200. These wireless technologies may be integrated into the same or different chips or chipsets and other components within the network node 1200.

[0196] The processing circuit 1202 may include a combination of one or more of a microprocessor, a controller, a microcontroller, a central processing unit, a digital signal processor, an application specific integrated circuit, a field programmable gate array, or any other suitable computing device, resource, or combination of hardware, software, and / or encoded logic, operable alone or in combination with other network node 1200 components (e.g., memory 1204) to provide network node 1200 functionality.

[0197] In some embodiments, the processing circuit 1202 includes a system on a chip (SOC). In some embodiments, the processing circuit 1202 includes one or more radio frequency (RF) transceiver circuits 1212 and baseband processing circuits 1214. In some embodiments, the radio frequency (RF) transceiver circuits 1212 and baseband processing circuits 1214 may be located on separate chips (or chipsets), boards, or units (e.g., a radio unit and a digital unit). In alternative embodiments, part or all of the RF transceiver circuits 1212 and baseband processing circuits 1214 may be located on the same chip or chipset, board, or unit.

[0198] The memory 1204 may include any form of volatile or non-volatile computer-readable memory, including, but not limited to, a persistent storage device, a solid-state memory, a remotely mounted memory, a magnetic medium, an optical medium, a random access memory (RAM), a read-only memory (ROM), a mass storage medium (e.g., a hard disk), a removable storage medium (e.g., a flash drive, a compact disk (CD), or a digital video disk (DVD)), and / or any other volatile or non-volatile, non-transitory device-readable and / or computer-executable memory device that stores information, data, and / or instructions that can be used by the processing circuit 1202. The memory 1204 may store any suitable instructions, data, or information, including computer programs, software, applications including one or more of logic, rules, codes, tables, and / or other instructions that can be executed by the processing circuit 1202 and used by the network node 1200. The memory 1204 may be used to store any calculations performed by the processing circuit 1202 and / or any data received via the communication interface 1206. In some embodiments, the processing circuit 1202 and the memory 1204 are integrated.

[0199] The communication interface 1206 is used for wired or wireless communication of signaling and / or data between network nodes, access networks and / or UEs. As shown, the communication interface 1206 includes a port / terminal 1216 for sending data to the network and receiving data from the network, for example, via a wired connection. The communication interface 1206 also includes a radio front-end circuit 1218, which can be coupled to the antenna 1210, or can be a part of the antenna 1210 in some embodiments. The radio front-end circuit 1218 includes a filter 1220 and an amplifier 1222. The radio front-end circuit 1218 can be connected to the antenna 1210 and the processing circuit 1202. The radio front-end circuit can be configured to adjust the signal communicated between the antenna 1210 and the processing circuit 1202. The radio front-end circuit 1218 can receive digital data to be sent to other network nodes or UEs via a wireless connection. The radio front-end circuit 1218 can use a combination of a filter 1220 and / or an amplifier 1222 to convert the digital data into a radio signal with appropriate channel and bandwidth parameters. The radio signal may then be transmitted via antenna 1210. Similarly, when receiving data, antenna 1210 may collect the radio signal, which may then be converted into digital data by radio front end circuit 1218. The digital data may be passed to processing circuit 1202. In other embodiments, the communication interface may include different components and / or different combinations of components.

[0200] In some alternative embodiments, the network node 1200 does not include a separate radio front end circuit 1218, instead the processing circuit 1202 includes the radio front end circuit and is connected to the antenna 1210. Similarly, in some embodiments, all or some of the RF transceiver circuit 1212 is part of the communication interface 1206. In yet another embodiment, the communication interface 1206 includes one or more ports or terminals 1216, the radio front end circuit 1218, and the RF transceiver circuit 1212 as part of a radio unit (not shown), and the communication interface 1206 communicates with the baseband processing circuit 1214, which is part of a digital unit (not shown).

[0201] Antenna 1210 may include one or more antennas or antenna arrays configured to send and / or receive wireless signals. Antenna 1210 may be coupled to radio front end circuit 1218 and may be any type of antenna capable of wirelessly sending and receiving data and / or signals. In some embodiments, antenna 1210 is separate from network node 1200 and may be connected to network node 1200 via an interface or port.

[0202] Antenna 1210, communication interface 1206 and / or processing circuit 1202 may be configured to perform any receiving operation and / or certain acquisition operations described herein as being performed by a network node. Any information, data and / or signal may be received from a UE, another network node and / or any other network device. Similarly, antenna 1210, communication interface 1206 and / or processing circuit 1202 may be configured to perform any sending operation described herein as being performed by a network node. Any information, data and / or signal may be sent to a UE, another network node and / or any other network device.

[0203] The power supply 1208 provides power to the various components of the network node 1200 in a form suitable for the respective components (e.g., at the voltage and current levels required by each respective component). The power supply 1208 may also include or be coupled to a power management circuit to provide power to the components of the network node 1200 for performing the functions described herein. For example, the network node 1200 may be connected to an external power source (e.g., an electrical grid, a power outlet) via an input circuit or interface (e.g., a cable), whereby the external power source supplies power to the power circuit of the power supply 1208. As a further example, the power supply 1208 may include a power source in the form of a battery or battery pack connected to or integrated in the power circuit. If the external power source fails, the battery can provide backup power.

[0204] Embodiments of network node 1200 may include Fig.12Additional components beyond those shown are used to provide certain aspects of the functionality of the network node, including any functionality described herein and / or any functionality required to support the subject matter described herein. For example, the network node 1200 may include a user interface device to allow information to be input into the network node 1200 and to allow information to be output from the network node 1200. This may allow a user to perform diagnostic, maintenance, repair, and other management functions for the network node 1200.

[0205] Fig.13 is a block diagram of a host 1300 according to various aspects described herein, and the host 1300 may be Fig.10 1016 of the embodiment of the host. As used herein, the host 1300 can be or include a combination of various hardware and / or software, including a standalone server, a blade server, a cloud-implemented server, a distributed server, a virtual machine, a container, or a processing resource in a server farm. The host 1300 can provide one or more services to one or more UEs.

[0206] Host 1300 includes processing circuitry 1302, which is operably coupled to input / output interface 1306, network interface 1308, power supply 1310, and memory 1312 via bus 1304. Other components may be included in other embodiments. The features of these components may be substantially similar to those described with respect to previous figures (e.g., Fig.11 and Fig.12 ) so that its description is generally applicable to the corresponding components of the host 1300.

[0207] The memory 1312 may include one or more computer programs, including one or more host applications 1314 and data 1316, which may include user data, such as data generated by a UE for the host 1300 or data generated by the host 1300 for the UE. An embodiment of the host 1300 may utilize only a subset or all of the components shown. The host application 1314 may be implemented in a container-based architecture and may provide support for video codecs (e.g., Versatile Video Coding (VVC), High Efficiency Video Coding (HEVC), Advanced Video Coding (AVC), MPEG, VP9) and audio codecs (e.g., FLAC, Advanced Audio Coding (AAC), MPEG, G.711), including transcoding for a variety of different categories, types, or implementations of UEs (e.g., mobile phones, desktop computers, wearable display systems, heads-up display systems). The host application 1314 may also provide user authentication and permission checks, and may periodically report health, routing, and content availability to a central node (e.g., a device in a core network or on the edge). Thus, the host 1300 can select and / or instruct different hosts for over-the-top services for the UE. The host application 1314 can support various protocols, such as HTTP live streaming (HLS) protocol, real-time messaging protocol (RTMP), real-time streaming protocol (RTSP), dynamic adaptive streaming over HTTP (MPEG-DASH), etc.

[0208] Fig.14 1400 is a block diagram showing a virtualized environment 1400 in which the functions implemented by some embodiments can be virtualized. In this context, virtualization means creating a virtual version of a device or equipment, which may include a virtualized hardware platform, storage device, and networking resources. As used herein, virtualization can be applied to any device or component thereof described herein, and relates to an implementation in which at least a portion of a function is implemented as one or more virtual components. Some or all of the functions described herein may be implemented as virtual components performed by one or more virtual machines (VMs) implemented in one or more virtual environments 1400 hosted by one or more hardware nodes (e.g., hardware computing devices running as network nodes, UEs, core network nodes, or hosts). In addition, in an embodiment in which a virtual node does not require radio connectivity (e.g., a core network node or host), the node may be fully virtualized.

[0209] Application 1402 (which may alternatively be referred to as a software instance, a virtual appliance, a network function, a virtual node, a virtual network function, etc.) runs in a virtualized environment Q400 to implement some of the features, functions and / or advantages of some of the embodiments disclosed herein.

[0210] Hardware 1404 includes processing circuitry, memory storing software and / or instructions executable by the hardware processing circuitry, and / or other hardware devices described herein, such as network interfaces, input / output interfaces, and the like. The software may be executed by the processing circuitry to instantiate one or more virtualization layers 1406 (also referred to as hypervisors or virtual machine monitors (VMMs)), provide VMs 1408a and 1408b (one or more of which may be generally referred to as VMs 1408), and / or perform any of the functions, features, and / or benefits described in connection with some embodiments described herein. Virtualization layer 1406 may present a virtual operating platform that appears to be networked hardware to VMs 1408.

[0211] VM 1408 includes virtual processing, virtual memory, virtual networking or interfaces, and virtual storage devices, and can be run by a corresponding virtualization layer 1406. Different embodiments of instances of virtual devices 1402 can be implemented on one or more of VM 1408 and can be implemented in different ways. Hardware virtualization is referred to as network function virtualization (NFV) in some contexts. NFV can be used to consolidate many network device types onto industry-standard high-volume server hardware, physical switches, and physical storage devices, which can be located in data centers and client devices.

[0212] In the context of NFV, VMs 1408 can be software implementations of physical machines that run programs as if they were executed on physical, non-virtualized machines. Each VM 1408 and the portion of the hardware 1404 on which it executes (whether hardware dedicated to that VM and / or hardware shared by that VM with other VMs) form a separate virtual network element. Still in the context of NFV, a virtual network function is responsible for handling a specific network function running in one or more VMs 1408 on top of hardware 1404 and corresponds to an application 1402.

[0213] Hardware 1404 may be implemented in a standalone network node with general or specific components. Hardware 1404 may implement some functions via virtualization. Alternatively, hardware 1404 may be part of a larger hardware cluster (e.g., such as in a data center or CPE), where many hardware nodes work together and are managed through management and orchestration 1410, which in particular oversees the lifecycle management of application 1402. In some embodiments, hardware 1404 is coupled to one or more radio units, each of which includes one or more transmitters and one or more receivers that may be coupled to one or more antennas. The radio unit may communicate directly with other hardware nodes via one or more appropriate network interfaces, and may be used in conjunction with virtual components to provide radio capabilities (e.g., radio access nodes or base stations) to virtual nodes. In some embodiments, a control system 1412 may be utilized to provide some signaling, which may be used alternatively for communication between hardware nodes and radio units.

[0214] Fig.15 A communication diagram is shown in which a host 1502 communicates with a UE 1506 via a network node 1504 over a partially wireless connection according to some embodiments. Fig.15 Describe the UE discussed in the previous paragraph (such as Fig.10 UE 1012a and / or Fig.11 UE 1100), network nodes (such as Fig.10 The network node 1010a and / or Fig.12 ), and a host (e.g. Fig.10 Host 1016 and / or Fig.13 Host 1300) according to various embodiments of the example implementation.

[0215] Similar to the host 1300, an embodiment of the host 1502 includes hardware, such as a communication interface, a processing circuit, and a memory. The host 1502 also includes software, which is stored in the host 1502 or accessible by the host 1502 and can be executed by the processing circuit. The software includes a host application, which can be used to provide services to a remote user (e.g., a UE 1506 connected via an over-the-top (OTT) connection 1550 extending between the UE 1506 and the host 1502). When providing services to a remote user, the host application can provide user data sent using the OTT connection 1550.

[0216] The network node 1504 includes hardware that enables it to communicate with the host 1502 and the UE 1506. The connection 1560 can be direct or through a core network (such as Fig.10The core network 1006 of the present invention) and / or one or more other intermediate networks, such as one or more public, private or managed networks. For example, the intermediate network can be a backbone network or the Internet.

[0217] UE 1506 includes hardware and software stored in or accessible by UE 1506 and executable by the processing circuit of UE. The software includes a client application, such as a web browser or an operator-specific "app", which is operable to provide services to human or non-human users via UE 1506 with the support of host 1502. In host 1502, the executed host application can communicate with the executed client application via an OTT connection 1550 terminated at UE 1506 and host 1502. When providing services to the user, the client application of the UE can receive request data from the host application of the host and provide user data in response to the request data. The OTT connection 1550 can transmit both the request data and the user data. The client application of the UE can interact with the user to generate the user data provided to the host application via the OTT connection 1550.

[0218] The OTT connection 1550 may extend via a connection 1560 between the host 1502 and the network node 1504 and via a wireless connection 1570 between the network node 1504 and the UE 1506 to provide connectivity between the host 1502 and the UE 1506. The connection 1560 and the wireless connection 1570 over which the OTT connection 1550 may be provided have been drawn abstractly to illustrate communications between the host 1502 and the UE 1506 via the network node 1504 without explicit reference to any intermediate devices and the precise routing of messages through those devices.

[0219] As an example of sending data via OTT connection 1550, in step 1508, host 1502 provides user data, which can be performed by executing a host application. In some embodiments, the user data is associated with a specific human user interacting with UE 1506. In other embodiments, the user data is associated with UE 1506 that shares data with host 1502 without explicit human interaction. In step 1510, host 1502 initiates a transmission carrying user data to UE 1506. Host 1502 may initiate the transmission in response to a request sent by UE 1506. The request may be caused by human interaction with UE 1506 or by an operation performed by a client application executed on UE 1506. According to the teachings of the embodiments described throughout this disclosure, the transmission may be delivered via network node 1504. Therefore, in step 1512, according to the teachings of the embodiments described throughout this disclosure, network node 1504 sends the user data carried in the transmission initiated by host 1502 to UE 1506. In step 1514 , UE 1506 receives the user data carried in the transmission, which may be performed by a client application executing on UE 1506 associated with a host application executed by host 1502 .

[0220] In some examples, UE 1506 executes a client application that provides user data to host 1502. The user data may be provided as a reaction to or in response to data received from host 1502. Thus, in step 1516, UE 1506 may provide the user data, which may be performed by executing the client application. In providing the user data, the client application may also take into account user input received from a user via an input / output interface of UE 1506. Regardless of the specific manner in which the user data is provided, UE 1506 initiates transmission of the user data to host 1502 via network node 1504 in step 1518. In step 1520, network node 1504 receives user data from UE 1506 and initiates transmission of the received user data to host 1502 in accordance with the teachings of the embodiments described throughout this disclosure. In step 1522, host 1502 receives the user data carried in the transmission initiated by UE 1506.

[0221] One or more of the various embodiments improves the performance of an OTT service provided to a UE 1506 using an OTT connection 1550 in which a wireless connection 1570 forms the last segment. According to an embodiment of the present disclosure, an improved method and apparatus for standby members and active members in a cluster can be provided. In particular, by determining that an active member has failed based at least on incoming traffic received from the cluster, a failure of an active member in the cluster can be detected in a timely manner. In addition, by taking over incoming traffic and refreshing sequence numbers associated with the incoming traffic, communications with other nodes can be quickly and stably restored. More specifically, the teachings of these embodiments can improve the performance of a communication network, such as data transmission rate, latency, and power consumption, thereby providing benefits such as reduced user waiting time, relaxed file size restrictions, improved content resolution, better responsiveness, and extended battery life.

[0222] In an example scenario, plant status information may be collected and analyzed by host 1502. As another example, host 1502 may process audio and video data that may have been retrieved from a UE for use in creating a map. As another example, host 1502 may collect and analyze real-time data to help control vehicle congestion (e.g., control traffic lights). As another example, host 1502 may store surveillance videos uploaded by a UE. As another example, host 1502 may store media content such as video, audio, VR, or AR that it may broadcast, multicast, or unicast to a UE or control access to it. As other examples, host 1502 may be used for energy pricing, remote control of non-time-critical power loads to balance power generation demand, positioning services, presentation services (such as compiling charts based on data collected from remote devices, etc.), or any other function of collecting, retrieving, storing, analyzing, and / or sending data.

[0223] In some examples, a measurement process may be provided for the purpose of monitoring data rates, delays, and other factors on which one or more embodiments improve. There may also be an optional network function for reconfiguring the OTT connection 1550 between the host 1502 and the UE 1506 in response to changes in the measurement results. The measurement process and / or network function for reconfiguring the OTT connection 1550 may be implemented in software and hardware of the host 1502 and / or the UE 1506. In some embodiments, sensors (not shown) may be deployed in or associated with other communication devices through which the OTT connection 1550 passes; the sensors may participate in the measurement process by providing the values ​​of the monitored quantities exemplified above or providing the values ​​of other physical quantities from which the software can calculate or estimate the monitored quantities. The reconfiguration of the OTT connection 1550 may include message formats, retransmission settings, preferred routes, etc.; the reconfiguration does not require direct changes to the operation of the network node 1504. Such processes and functions are known in the art and can be practiced. In some embodiments, the measurement may involve proprietary UE signaling, which facilitates the host 1502 to measure throughput, propagation time, delay, etc. The measurement may be implemented as follows, where the software causes a message (particularly an empty or "dummy" message) to be sent using the OTT connection 1550 while monitoring propagation time, errors, etc.

[0224] Although the computing devices (e.g., UE, network node, host) described herein may include a combination of the hardware components shown, other embodiments may include computing devices with different combinations of components. It should be understood that these computing devices may include any suitable combination of hardware and / or software required to perform the tasks, features, functions, and methods disclosed herein. The determination, calculation, acquisition, or similar operations described herein may be performed by a processing circuit, which may process information by, for example, converting the obtained information into other information, comparing the obtained information or the converted information with the information stored in the network node, and / or performing one or more operations based on the obtained information or the converted information, and making a determination as a result of the processing. In addition, although the components are depicted as being located in a single box within a larger box or nested within multiple boxes, in fact, the computing device may include multiple different physical components constituting a single illustrated component, and the functions may be divided between separate components. For example, a communication interface may be configured to include any component described herein, and / or the functions of the components may be divided between a processing circuit and a communication interface. In another example, the non-computationally intensive functions of any such component may be implemented in software or firmware, and the computationally intensive functions may be implemented in hardware.

[0225] In some embodiments, some or all of the functionality described herein may be provided by a processing circuit that executes instructions stored in a memory, which in some embodiments may be a computer program product in the form of a non-transitory computer-readable storage medium. In alternative embodiments, some or all of the functionality may be provided by a processing circuit without executing instructions stored on a separate or discrete device-readable storage medium, such as in a hardwired manner. In any of those specific embodiments, the processing circuit may be configured to perform the described functionality, regardless of whether instructions stored on a non-transitory computer-readable storage medium are executed. The benefits provided by such functionality are not limited to separate processing circuits or other components of a computing device, but are enjoyed by the computing device as a whole and / or generally by end users and wireless networks.

[0226] Here are the references cited in full:

[0227] RFC7296 (Internet Engineering Task Force (IETF), Request for Comments: 7296, STD: 79, Obsoletes: 5996, Category: Standards Track, ISSN: 2070-1721): Internet Key Exchange Protocol Version 2 (IKEv2)

[0228] RFC6311 (Internet Engineering Task Force (IETF), Request for Comments: 6311, Category: Standards Track, ISSN: 2070-1721): Protocol Support for IKEv2 / IPsec High Availability

[0229] Abbreviation Explanation

[0230] IKE Internet Key Exchange

[0231] IPsec IP Security

[0232] HA High Availability

[0233] SA Security Association

[0234] LAG Link Aggregation (Security Parameters Index)

[0235] SPI Security Parameters Index

[0236] RFC Request For Comments

Claims

1. A method (200) performed by a first network node, wherein the first network node is a standby member in a cluster, the cluster also including an active member; the method comprising: determining ( S202 ) the active member failure based at least on incoming traffic received from the cluster; Taking over (S204) the incoming traffic; as well as The sequence number associated with the incoming traffic is refreshed (S206).

2. The method (200) according to claim 1, further comprising: Synchronizing with a second network node (S201), wherein the second network node is an active member in the cluster.

3. The method (200) of claim 2, further comprising: receiving (S2011) a configuration for information synchronization from the second network node; Wherein synchronizing with the second network node (S201) comprises: receiving (S2012) information according to the configuration from the second network node; The transmission of the information is initiated by the second network node to synchronize the first network node.

4. The method (200) according to claim 3, wherein the information includes at least one of the following: an Up / Down status of a security association (SA); a security parameter index (SPI); an encryption / decryption key; and / or an algorithm.

5. The method (200) according to any one of claims 1 to 4, wherein refreshing (S206) the sequence number associated with the incoming traffic comprises: The process for SA re-keying is triggered (S2061).

6. The method (200) according to claim 5, wherein the process for SA re-keying is triggered for a sub-SA having traffic; or the process for SA re-keying is triggered for each sub-SA.

7. The method (200) according to any one of claims 1 to 6, wherein the cluster is a hot standby cluster for Internet Key Exchange Protocol Version 2 / Internet Protocol Security (IKEv2 / IPsec) traffic; Wherein the traffic is IPsec traffic; And the method further comprises: notifying (S205) an Internet Protocol security (IPsec) stack to exchange IKEv2 / IPsec protocol messages to take over the control plane.

8. A method (300) performed by a second network node, wherein the second network node is an active member in a cluster, the cluster further comprising a standby member; the method comprising: Transmitting (S302) a configuration for information synchronization to a first network node; as well as Information is transmitted (S304) to a first network node according to the configuration, wherein the first network node is a standby member in the cluster.

9. The method (300) according to claim 8, wherein the information includes at least one of: an Up / Down status of a security association (SA); a security parameter index (SPI); an encryption / decryption key; and / or an algorithm.

10. The method according to any one of claims 8 to 9, wherein the cluster is a hot standby cluster for Internet Key Exchange Protocol Version 2 / Internet Protocol Security (IKEv2 / IPsec) traffic.

11. A device (70) for a first network node, wherein the first network node is a standby member in a cluster, the cluster further comprising an active member: wherein the device for the first network node comprises: Processor (701); as well as a memory (702) containing instructions executable by the processor (701) so that the apparatus (70) of the first network node is capable of: determining a failure of the active member based at least on incoming traffic received from the cluster; taking over the incoming traffic; and The sequence number associated with the incoming traffic is refreshed.

12. The apparatus (70) according to claim 11, wherein the apparatus (70) is further capable of performing the method of any one of claims 2 to 7.

13. A device (71) for a second network node, wherein the second network node is an active member in a cluster, and the cluster also includes a standby member: wherein the device of the second network node comprises: Processor (711); as well as a memory (712) containing instructions executable by the processor (711) so that the apparatus (71) of the second network node is capable of: transmitting a configuration for information synchronization to the first network node; and Information is transmitted to the first network node according to the configuration, wherein the first network node is a standby member in the cluster.

14. The device (71) according to claim 13, wherein the device (71) is further capable of performing the method of any one of claims 9 to 10.

15. A computer-readable storage medium (80) storing instructions (801), which, when at least one processor executes the instructions, enables the at least one processor to perform the method of any one of claims 1 to 10.

Images