Message transmission method and device
By separating information in the message, designing the first message to separate the information required by the intermediate node and the tail node, and performing security verification through security information, it solves the problem in the existing technology that the intermediate node cannot perceive the encrypted information and authentication object. The problem of failure to pass authentication is achieved while balancing security and function expansion.
Patent Information
- Application Number
- CN202310909238.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-07-21
- Publication Date
- 2025-01-21
AI Technical Summary
In the prior art, the information encrypted by the ESP header during the forwarding process causes the intermediate node to be unable to sense the encrypted information, and the authentication object cannot pass the authentication at the tail node.
By separating information in the message, the first message is designed to include first information, security information and second information. The first information is used for intermediate nodes, the second information is only used for tail nodes, and the security information is used for the second information. Perform security check.
Under the premise of ensuring security, the intermediate node can use the unencrypted first information to realize its extended function and ensure that the authenticated object can be authenticated at the tail node.
Smart Images

Figure CN119341760A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of communication technology, and in particular to a message transmission method and device. Background Art
[0002] In the field of communication technology, nodes can communicate with each other by transmitting messages. Currently, a node that needs to send a message can obtain the message according to the structure of the message and send the message to another node. The message usually includes: a message header and a payload including data. In order to encrypt the payload, the message header usually includes an encapsulating security payload (ESP) header for encrypting the payload. Currently, the ESP header encrypts the information used in the forwarding process, causing the node to be unable to perceive the encrypted information during the forwarding process. Summary of the invention
[0003] The present application provides a message transmission method and device, which can realize normal forwarding processing under the premise of ensuring security. The technical solution is as follows:
[0004] In a first aspect, the present application provides a message transmission method, the method comprising: after obtaining a first message, the head node sends the first message; wherein the first message comprises: first information, security information and second information, the first information is information for use by the intermediate node, the security information is used to perform security verification on the second information, and the second information is information only for use by the tail node.
[0005] The first information may include: at least one of app aware networking (APN) information and generalized IPv6 tunnel (GIP6) information. The first information may also not include APN information and GIP6 information, which is not limited in the present application. The security information may be an ESP header or other information used for security verification. The security verification may refer to encryption, or authentication, or encryption and authentication. The second information may include a payload, which is only used by the tail node, and the intermediate nodes do not need to pay attention to the payload. For another example, in addition to the payload, the second information also includes a parameter set, which is included in the message header of the first message. For another example, the second information may not include a payload, but include the parameter set.
[0006] The first message in the present application includes the first information, the second information and the security information. The second information for which the security information is to be security-verified is information that is only used by the tail node. In this way, the information that the intermediate node needs to use is the first information, and the information that the intermediate node does not need to use and the tail node needs to use is the second information. The security information does not need to perform security verification on the information that the intermediate node needs to use. If the security verification includes encryption, then on the premise of ensuring the security of the first message, the intermediate node can use the unencrypted first information to implement the extended function brought by the first information. Since the security information is not used to perform security verification on the first information, even if the first information changes during the transmission process, it does not conflict with the object (the second information) targeted by the security verification of the security information. When the security verification includes authentication, the authenticated object (the second information) can be authenticated at the tail node.
[0007] Furthermore, the present application does not limit the positions of the first information, security information and second information in the first message, and some examples are given below to illustrate these positions.
[0008] Optionally, the first information and the security information may both be included in a message header of the first message. For example, the message header of the message includes a first destination options header (DOH), a segment routing header (SRH), and a second DOH, wherein a next header field of the first DOH is used to indicate the SRH, and in this case, the second DOH includes the above-mentioned first information and security information.
[0009] In the case where the first information and the security information are included in the second DOH, the second DOH may include multiple type length value (TLV) fields, the multiple TLV fields include a first TLV field and a second TLV field, the first TLV field may include at least one TLV field, and the second TLV field may also include at least one TLV field. The first TLV field includes the first information, and the second TLV field includes the security information.
[0010] Further, for the second information, the second information may be a payload, or the second information may include a parameter set in a message header in addition to the payload. It can be seen that the message header of the first message includes: the first information and the security information, or the first information, the security information and the parameter set. The parameter set may be included in the same or different message header as the first information and the security information.
[0011] For example, the first information, security information and parameter set may be included in the second DOH. For example, the plurality of TLV fields in the second DOH include a first TLV field, a second TLV field and a third TLV field, the first TLV field includes the first information, the second TLV field includes the second information, and the third TLV field includes the parameter set.
[0012] For another example, the message header of the first message includes a first message header and a second message header, the first information is included in the first message header, the second information is included in the second message header, and the parameter set is included in the first message header or the second message header.
[0013] For another example, the message header of the first message includes a first message header, a second message header and a third message header, the first information is included in the first message header, the second information is included in the second message header, and the parameter set is included in the third message header.
[0014] Optionally, the first message includes a message header and a payload. When the head node obtains the first message, it may first obtain the payload (including the data to be transmitted), and then obtain the first message including the message header and the payload based on the payload. Optionally, the payload may also include another message. In this case, the head node does not obtain the payload based on the data to be transmitted, but after receiving the other message, the other message may be used as the payload of the first message, and then the first message is obtained based on the payload. In the case where the payload of the first message includes the received other message, if the second information of the first message includes the payload, then under the effect of the above-mentioned security information, it is possible to implement a security check on the other message, so that the security of the other message is higher. In the case where the payload of the first message does not include the received other message, but includes the data to be transmitted, the length of the payload is shorter. At this time, the transmission bandwidth required for the transmission of the first message is smaller, and the load of the network used to transmit the first message is smaller.
[0015] Further, based on the foregoing, any first message provided in the present application may also include an authentication header (AH), which may be included in the same message header as the first information and security information. For example, AH, the first information and security information may be included in the second DOH. For example, the multiple TLV fields of the second DOH include a TLV field corresponding to AH, and the TLV field includes AH. The second DOH may use different TLV fields to carry AH, the first information and security information, or the second DOH may use different TLV fields to carry AH, the first information, security information and a parameter set. Alternatively, the second DOH may include AH in the same TLV field with the first information, security information or parameter set.
[0016] Optionally, the first message is a segment routing (segment routing IPv6, SRv6) message or other message based on the IPv6 forwarding plane, which is not limited in the present application.
[0017] In a second aspect, the present application provides another message transmission method, the method comprising: after receiving a first message, the intermediate node uses the first information in the first message and forwards the first message. The first message comprises: first information, security information and second information, the first information is information used by the intermediate node, the security information is used to perform security verification on the second information, and the second information is information used only by the tail node.
[0018] In a third aspect, the present application provides another message transmission method, the method comprising: after receiving the first message, the tail node performs a security check on the second information based on the security information, and uses the second information after the security check. The first message includes: the first information, the security information, and the second information, the first information is information used by the intermediate node, the security information is used to perform a security check on the second information, and the second information is information used only by the tail node.
[0019] The first message in the second aspect and the third aspect may have the characteristics of the first message in the first aspect, and this application will not go into details here.
[0020] In a fourth aspect, a message transmission device is provided, the message transmission device is arranged at a head node, and the message transmission device comprises: an acquisition module and a sending module. The acquisition module is used to acquire a first message; the sending module is used to send the first message, the first message comprises: first information, security information and second information, the first information is information used for use by an intermediate node, the security information is used to perform security verification on the second information, and the second information is information used only for use by a tail node.
[0021] The first information may include: at least one of APN information and GIP6 information. The first information may not include APN information and GIP6 information, and this application does not limit this. The security information may be an ESP header or other information used for security verification. The second information may include a payload, which is only used by the tail node, and the intermediate node does not need to pay attention to the payload. For another example, in addition to the payload, the second information also includes a parameter set, which is included in the message header of the first message. For another example, the second information may not include a payload, but include the parameter set.
[0022] The first message in the present application includes the first information, the second information and the security information. The second information for which the security information is to be security-verified is information that is only used by the tail node. In this way, the information that the intermediate node needs to use is the first information, and the information that the intermediate node does not need to use and the tail node needs to use is the second information. The security information does not need to perform security verification on the information that the intermediate node needs to use. If the security verification includes encryption, then on the premise of ensuring the security of the first message, the intermediate node can use the unencrypted first information to implement the extended function brought by the first information. Since the security information is not used to perform security verification on the first information, even if the first information changes during the transmission process, it does not conflict with the object (the second information) targeted by the security verification of the security information. When the security verification includes authentication, the authenticated object (the second information) can be authenticated at the tail node.
[0023] Furthermore, the present application does not limit the positions of the first information, security information and second information in the first message, and some examples are given below to illustrate these positions.
[0024] Optionally, the first information and the security information may both be included in a message header of the first message. For example, the message header of the message includes a first DOH, an SRH, and a second DOH, wherein the next header field of the first DOH is used to indicate the SRH, and in this case, the second DOH includes the above-mentioned first information and security information.
[0025] In the case where the first information and the security information are included in the above-mentioned second DOH, the second DOH may include multiple TLV fields, the multiple TLV fields include a first TLV field and a second TLV field, the first TLV field may include at least one TLV field, and the second TLV field may also include at least one TLV field. The first TLV field includes the first information, and the second TLV field includes the security information.
[0026] Further, for the second information, the second information may be a payload, or the second information may include a parameter set in a message header in addition to the payload. It can be seen that the message header of the first message includes: the first information and the security information, or the first information, the security information and the parameter set. The parameter set may be included in the same or different message header as the first information and the security information.
[0027] For example, the first information, security information and parameter set may be included in the second DOH. For example, the plurality of TLV fields in the second DOH include a first TLV field, a second TLV field and a third TLV field, the first TLV field includes the first information, the second TLV field includes the second information, and the third TLV field includes the parameter set.
[0028] For another example, the message header of the first message includes a first message header and a second message header, the first information is included in the first message header, the second information is included in the second message header, and the parameter set is included in the first message header or the second message header.
[0029] For another example, the message header of the first message includes a first message header, a second message header and a third message header, the first information is included in the first message header, the second information is included in the second message header, and the parameter set is included in the third message header.
[0030] Optionally, the first message includes a message header and a payload. When the head node obtains the first message, it may first obtain the payload (including the data to be transmitted), and then obtain the first message including the message header and the payload based on the payload. Optionally, the payload may also include another message. In this case, the head node does not obtain the payload based on the data to be transmitted, but after receiving the other message, the other message may be used as the payload of the first message, and then the first message is obtained based on the payload. In the case where the payload of the first message includes the received other message, if the second information of the first message includes the payload, then under the effect of the above-mentioned security information, it is possible to implement a security check on the other message, so that the security of the other message is higher. In the case where the payload of the first message does not include the received other message, but includes the data to be transmitted, the length of the payload is shorter. At this time, the transmission bandwidth required for the transmission of the first message is smaller, and the load of the network used to transmit the first message is smaller.
[0031] Further, based on the foregoing, any first message provided in the present application may also include AH, and the AH may be included in the same message header as the first information and the security information. For example, the AH, the first information, and the security information may be included in the second DOH. For example, the multiple TLV fields of the second DOH include a TLV field corresponding to the AH, and the TLV field includes the AH. The second DOH may use different TLV fields to carry the AH, the first information, and the security information, or the second DOH may use different TLV fields to carry the AH, the first information, the security information, and the parameter set. Alternatively, the second DOH may include the AH in the same TLV field with the first information, the security information, or the parameter set.
[0032] Optionally, the first message is an SRv6 message or other messages, which is not limited in this application.
[0033] In a fifth aspect, the present application provides a message transmission device, which is arranged in an intermediate node, and the message transmission device includes: a receiving module, a processing module and a forwarding module. The receiving module is used to receive a first message; wherein the first message includes: first information, security information and second information, the first information is information used for use by the intermediate node, the security information is used to perform security verification on the second information, and the second information is information used only for use by the tail node; the processing module is used to use the first information in the first message; and the forwarding module is used to forward the first message.
[0034] In a sixth aspect, the present application provides a message transmission device, which is arranged at a tail node, and the message transmission device includes: a receiving module, a security verification module and a processing module. The receiving module is used to receive a first message; wherein the first message includes: first information, security information and second information, the first information is information used for use by the intermediate node, the security information is used to perform security verification on the second information, and the second information is information used only for use by the tail node. The security verification module is used to perform security verification on the second information based on the security information, and the processing module is used to use the second information after security verification.
[0035] The first message in the fifth and sixth aspects may have the characteristics of the first message in the fourth aspect, which will not be elaborated in this application.
[0036] In the seventh aspect, the present application provides a message transmission device, which includes: a processor and a memory, wherein the memory stores a program; the processor is used to call the program stored in the memory so that the message transmission device executes the message transmission method described in any design in the first aspect.
[0037] In an eighth aspect, the present application provides a message transmission device, comprising: a processor and a memory, wherein a program is stored in the memory; the processor is used to call the program stored in the memory so that the message transmission device executes the message transmission method described in any design in the second aspect.
[0038] In the ninth aspect, the present application provides a message transmission device, which includes: a processor and a memory, wherein the memory stores a program; the processor is used to call the program stored in the memory so that the message transmission device executes the message transmission method described in any design in the third aspect.
[0039] In a tenth aspect, the present application provides a message transmission system, comprising: a head node, an intermediate node, and a tail node; the head node comprises the message transmission device described in any design of the fourth aspect, the intermediate node comprises the message transmission device described in any design of the fifth aspect, and the tail node comprises the message transmission device described in any design of the sixth aspect. Alternatively, the head node comprises the message transmission device described in any design of the seventh aspect, the intermediate node comprises the message transmission device described in any design of the eighth aspect, and the tail node comprises the message transmission device described in any design of the ninth aspect;
[0040] In the eleventh aspect, the present application provides a computer-readable storage medium, which stores a computer program; when the computer program is run on a computer, the computer executes the message transmission method described in any one of the designs in the first aspect; or, when the computer program is run on a computer, the computer executes the message transmission method described in any one of the designs in the second aspect; or, when the computer program is run on a computer, the computer executes the message transmission method described in any one of the designs in the third aspect.
[0041] In the twelfth aspect, a computer program product comprising instructions is provided, which, when the computer program product is run on a computer, enables the computer to execute the message transmission method as described in any design of the first aspect; or, when the computer program product is run on a computer, enables the computer to execute the message transmission method as described in any design of the second aspect; or, when the computer program product is run on a computer, enables the computer to execute the message transmission method as described in any design of the third aspect.
[0042] The technical effects brought about by any design method in the second aspect to the twelfth aspect can refer to the technical effects brought about by the corresponding design method in the first aspect, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS
[0043] Figure 1 A schematic diagram of the structure of a message transmission device provided by the present application;
[0044] Figure 2 A schematic diagram of a message transmission system provided for this application;
[0045] Figure 3 A schematic diagram of another message transmission system provided for this application;
[0046] Figure 4 A schematic diagram of the structure of a message provided for this application;
[0047] Figure 5 A flowchart of a message transmission method provided by this application;
[0048] Figure 6 A schematic diagram of the structure of another message provided for this application;
[0049] Figure 7 A schematic diagram of the structure of a message transmission device provided by the present application;
[0050] Figure 8 A schematic diagram of the structure of another message transmission device provided by the present application;
[0051] Fig. 9 A schematic diagram of the structure of another message transmission device provided in the present application. DETAILED DESCRIPTION
[0052] In order to make the principles and technical solutions of the present application clearer, the implementation methods of the present application will be further described in detail below in conjunction with the accompanying drawings.
[0053] An embodiment of the present application provides a message transmission system, which includes multiple communication nodes (such as gateways, routers, terminals, servers, etc.). The communication node may include a message transmission device, which may be a communication device or a part of a communication device (such as an interface board, etc.). By way of example, the message transmission device may include: a processor; the processor is used to couple with a memory, and after reading instructions in the memory, execute the method performed by the message transmission device as described in the embodiment of the present application according to the instructions. In the message transmission device, the number of processors may be multiple, and the memory coupled to the processor may be independent of the processor or the message transmission device, or may be within the processor or network device. The memory may be a physically independent unit, or it may be a storage space on a cloud server or a network hard disk, etc. Optionally, the memory may be one or more. When the number of memories is multiple, they may be located in the same or different locations, and may be used independently or in combination. Exemplarily, when the memory is located inside the message transmission device, please refer to Figure 1 , Figure 1 The schematic diagram of the structure of a message transmission device provided in an embodiment of the present application. The message transmission device 200 includes: a processor 202 and a memory 201, wherein the memory 201 is used to store programs, and the processor 202 is used to call the programs stored in the memory 201 so that the message transmission device executes a corresponding method or function. Optionally, as Figure 1 As shown, the message transmission device 200 may also include at least one communication interface 203 and at least one communication bus 204. The memory 201, the processor 202, and the communication interface 203 are communicatively connected via the communication bus 204. The communication interface 203 is used to communicate with other devices under the control of the processor 202, and the processor 202 can call the program stored in the memory 201 via the communication bus 204.
[0054] Communication nodes in a message transmission system can communicate with each other by transmitting messages. For example, please refer to Figure 2 , the message transmission system includes: a head node and a tail node (both are communication nodes). The head node can encapsulate a first message and send the first message to the tail node. After receiving the first message, the tail node can parse the first message to extract the data included in the payload of the first message. The first message includes a message header and a payload, the payload includes data, and the tail node can parse the first message based on the message header to extract the data included in the payload.
[0055] Figure 2 In the example, the first message does not pass through the intermediate node during the process of being transmitted from the head node to the tail node. In an achievable manner, the first message may also pass through the intermediate node during the process of being transmitted from the head node to the tail node. Figure 3 As shown, in Figure 2 On the basis of the message transmission system shown, the message transmission system also includes an intermediate node, and the intermediate node is located on the link between the head node and the tail node. The head node can send a first message to the intermediate node. After receiving the first message, the intermediate node can forward the first message to the tail node based on the message header of the first message. After receiving the first message, the tail node can parse the first message based on the message header of the first message to extract the data included in the payload. The message header of the first message includes a basic message header. The basic message header is used to support the transmission of the message from the source address (such as the address of the head node mentioned above) to the destination address. In addition to the basic message header, the message header of the first message may also include multiple extended message headers. The extended message header is used to extend the transmission of the message between the source address and the destination address. For example, taking the first message as an SRv6 message, the structure of the first message can be as follows Figure 4 As shown, the first message includes: a message header and a payload arranged in sequence, and the message header includes: a basic message header (internet protocol version 6 (IPv6) header) and multiple extended message headers arranged in sequence. The multiple extended message headers include: a hop by hop (HBH) extended message header, DOH1, SRH, AH, ESP header and DOH2.
[0056] The basic message header (IPv6 header) includes the source address (source address) and destination address (destination address) of the first message and other basic information required for message transmission.
[0057] The information included in the extended message header is used to implement some extended functions related to the transmission of the first message on the basis of the basic message header. For example, the SRH in the multiple extended message headers includes segment routing information. The segment routing information can be a segment identifier list, and the segment identifier list includes segment identifiers (SIDs) of multiple nodes. The segment identifier list is used to indicate that the first message is transmitted along the path where the multiple nodes are located. Optionally, the above-mentioned multiple extended message headers may also not include SRH, that is, the first message will not be transmitted along the path where the multiple nodes are located, so that the multiple extended message headers do not include DOH1 either.
[0058] As another example, the information included in the AH in the multiple extended message headers is mainly used to provide data source verification, data integrity verification and message replay prevention functions. For example, the information is used to authenticate the entire first message, and the node receiving the first message can authenticate the integrity of the first message based on the information.
[0059] As another example, the information included in the ESP header in the multiple extended message headers is mainly used to provide encryption, data source verification, data integrity verification and message replay prevention functions. For example, the information is used to encrypt the first part in the first message and authenticate the second part in the first message. The node receiving the first message can decrypt the first part based on the information and verify the integrity of the second part. The first part can include DOH2 and a payload, and the second part can include an ESP header, DOH2 and a payload.
[0060] As another example, DOH2 may include app aware networking (APN) information and / or generalized IPv6 tunnel (GIP6) information, etc. APN information may also be referred to as application information, and APN information may include: application identification information (APN ID) and application requirement parameter information (APNParameters). Among them, APN ID is used to distinguish different application flows and different users of a certain / class of applications, etc., and APN ID may be an application group identifier (APP Group ID), a user group identifier (User Group ID), etc. Application requirement parameter information may include: information on network performance requirement parameters that applications are concerned about, such as bandwidth, latency, jitter, packet loss rate, etc. DOH2 may include multiple TLV fields, and DOH2 may use these TLV fields to include information. In the case where DOH2 includes APN information and / or GIP6 information, DOH2 includes: a TLV field including APN information, and / or, a TLV field including GIP6 information.
[0061] The structure of the first message can also be Figure 4 The structures shown are different, for example, the first message may further include other parts (such as a transmission control protocol (TCP) message header) between DOH2 and the payload. The first message may further include an ESP tail.
[0062] The AH in the above multiple extended message headers can authenticate the first message, and the ESP header can encrypt the first part of the first message and authenticate the second part. It can be seen that the AH and ESP headers can play a role in the security of the message, and both the AH and ESP headers can play a role in security verification. Since the message itself does not integrate security features, malicious users can easily forge the address of the message, modify the message content, replay previous data packets, and intercept and view the content of the data packet during transmission. Therefore, the security services provided by the AH and ESP headers can improve the security of message transmission.
[0063] The message header of the first message includes a variety of information. In the process of transmitting the first message along a certain transmission path, some of the information needs to be used by the intermediate node, and some of the information needs to be used by the tail node but not by the intermediate node. For example, the segment identifier list in the above SRH needs to be used by the intermediate node, the APN information and GIP6 information in DOH2 need to be used by the intermediate node, and the above load needs to be used by the tail node but not by the intermediate node. Among them, when the intermediate node uses the information, it can report the information to the controller (not shown in the accompanying drawings), or change the information, or forward the first message based on the information. When using the information, the tail node can also report the information to the controller, or perform relevant statistics based on the information, or decide whether to discard the first message based on the information. The embodiment of the present application does not limit the operations performed by the intermediate node using the information and the operations performed by the tail node using the information.
[0064] The ESP header in the conventional technology not only encrypts the payload, but also encrypts some information in the message header that needs to be used by the intermediate nodes. However, the intermediate nodes do not have the decryption capability, so these encrypted information that needs to be used by the intermediate nodes cannot be used by the intermediate nodes. For example, the first part of the ESP header encryption includes the above-mentioned DOH2. During the transmission of the first message, the APN ID included in DOH2 needs to be transmitted by the intermediate nodes (as shown above) during the transmission of the first message. Figure 3However, the intermediate node does not have the ability to decrypt the first part based on the ESP header. In this way, the information included in DOH2 cannot be used by the intermediate node, and the extended function of the information included in DOH2 cannot be realized. Moreover, the information that may be modified in DOH2 will conflict with the "encryption" and "authentication" functions of the ESP header. If the above-mentioned ESP header is placed between DOH2 and the payload, so that the first part and the second part do not include the above-mentioned DOH2, the information included in DOH2 will not be encrypted and authenticated, resulting in the problem that the information included in DOH2 has low security.
[0065] Therefore, the current security verification has the following two problems: 1. If the security verification includes encryption, and the encrypted object includes information that the intermediate node needs to use, the intermediate node will not be able to perceive the information. 2. If the security verification includes authentication, and the authenticated object includes information that the intermediate node needs to change, the authenticated object cannot be authenticated at the end node.
[0066] The embodiment of the present application provides a message transmission method, in which the first message in the method includes the first information, the second information and the security information, and the second information targeted by the security check of the security information is information used only for the tail node, so that the information that the intermediate node needs to use is the first information, and the information that the intermediate node does not need to use and the tail node needs to use is the second information, and the security information does not need to perform security checks on the information that the intermediate node needs to use. If the security check includes encryption, then on the premise of ensuring the security of the first message, the intermediate node can use the unencrypted first information to implement the extended function brought by the first information. Since the security information is not used to perform security checks on the first information, even if the first information changes during the transmission process, it does not conflict with the object (the second information) targeted by the security check of the security information. When the security check includes authentication, the authenticated object (the second information) can be authenticated at the tail node.
[0067] For example, Figure 5 A flowchart of a message transmission method provided in an embodiment of the present application, such as Figure 5 As shown, the method includes:
[0068] S101. The head node obtains a first message; the first message includes first information, security information and second information. The first information is information for use by the intermediate node, the security information is used to perform security verification on the second information, and the second information is information only for use by the tail node.
[0069] The first message includes first information, safety information and second information. These three information will be described below.
[0070] (1) The first information is information used by the intermediate node. For example, the first information includes: at least one of APN information and GIP6 information. Taking the APN ID in the APN information as an example, when the intermediate node uses the APN ID, it can report the APN ID to the controller, or modify the APN ID, or determine the forwarding method of the first message based on the APN ID.
[0071] On this basis, the first information may also be information used by the tail node. When using the first information, the tail node may also report the first information to the controller, or collect statistics on the first information, or determine whether to discard the first message based on the first information, or perform corresponding processing on the first message based on the first information.
[0072] (2) The security information is used to perform security verification on the second information. The security information may be an ESP header or other information with a security verification function. The security verification may be encryption, or authentication, or encryption and authentication, etc.
[0073] (3) The second information is information used only by the tail node. For example, the second information may include a payload, which is used only by the tail node, and the intermediate node does not need to pay attention to the payload. For another example, the second information includes a parameter set in addition to the payload, and the parameter set is carried in the message header of the first message. When the first message also includes an ESP tail, the second information may also include an ESP tail. For another example, the second information may not include a payload, but include the parameter set. By way of example, these parameter sets may include: a line-identification option, a home address, etc.
[0074] In addition, in addition to the first information, security information and the second information, the first message may also include other information (such as the aforementioned SRH, DOH1, etc.). The other information may be used by at least one of the intermediate nodes and the tail node, which is not limited in this embodiment of the present application.
[0075] Furthermore, the first message includes a message header and a payload. When acquiring the first message, the head node may first acquire the payload (including the data to be transmitted), and then acquire the first message including the message header and the payload based on the payload.
[0076] S102: The head node sends a first message to the intermediate node.
[0077] After encapsulating the first message, the head node may send the first message to the intermediate node according to the message header of the first message. Optionally, when the message header of the first message includes an SRH, the head node may send the first message according to the segment identifier list in the SRH, so that the first message is transmitted to the intermediate node along the path indicated by the segment identifier list.
[0078] S103: The intermediate node uses the first information in the first message.
[0079] After receiving the first message, the intermediate node can read the first information in the first message and use the first information. For example, in S103, the intermediate node can report the first information to the controller, or the intermediate node can modify the first information, or the intermediate node can determine the forwarding method of the first message according to the first information.
[0080] S104: The intermediate node forwards the first message to the tail node.
[0081] After using the first information, the intermediate node may continue to transmit the first message to the tail node. For example, when the intermediate node uses the first information to determine the forwarding mode of the first message in S103, the intermediate node may forward the first message in S104 using the forwarding mode so that the first message can be transmitted to the tail node.
[0082] Optionally, when the message header of the first message includes the SRH, the intermediate node may also forward the first message according to the segment identifier list in the SRH, so that the first message is transmitted to the tail node along the path indicated by the segment identifier list.
[0083] In the case where an intermediate node is included between the head node and the tail node, one or more intermediate nodes may be included between the head node and the tail node. In the case where there is only one intermediate node, the first message is transmitted from the intermediate node to the tail node; in the case where there are multiple intermediate nodes, the first message passes through multiple intermediate nodes in sequence and is finally transmitted to the tail node.
[0084] S105. The tail node performs a security check on the second information based on the security information.
[0085] After receiving the first message, the tail node may identify the security information and the second information in the first message, and perform security verification on the second information based on the security information, for example, decrypting or authenticating the second information, or both.
[0086] S106. The tail node uses the second information after security verification.
[0087] After performing security verification on the second information, the tail node may use the second information after security verification. For example, when the second information includes a payload, the tail node may extract data in the payload. When the second information does not include a payload, the tail node may also parse the payload to obtain the data included in the payload. When the second information includes a parameter set, the tail node may report the parameter set to the controller, or perform relevant statistics based on the parameter set, or decide whether to discard the first message based on the parameter set.
[0088] The tail node may also use the first information after security verification. For example, the tail node may report the first information to the controller, or collect statistics on the first information, or decide whether to discard the first message based on the first information, or perform corresponding processing on the data extracted from the payload based on the first information.
[0089] In the embodiment of the present application, the second information for which the security information is subjected to security verification is information used only by the tail node. In this way, the information that the intermediate node needs to use is the first information, and the information that the intermediate node does not need to use and the tail node needs to use is the second information. The security information does not need to perform security verification on the information that the intermediate node needs to use. If the security verification includes encryption, then on the premise of ensuring the security of the first message, the intermediate node can use the unencrypted first information to implement the extended function brought by the first information. Since the security information is not used to perform security verification on the first information, even if the first information changes during the transmission process, it does not conflict with the object (second information) targeted by the security verification of the security information. When the security verification includes authentication, the authenticated object (second information) can be authenticated at the tail node.
[0090] Furthermore, the embodiments of the present application do not limit the positions of the first information, security information, and second information in the first message, and some examples of these positions are given below.
[0091] For example, the first information and the security information may be included in the same message header of the first message. Figure 4 Take the SRv6 message shown in the figure as an example. Figure 6 As shown, the message header of the first message includes a first DOH (such as Figure 6 DOH1), SRH and second DOH (such as Figure 6 DOH2 in the first DOH), wherein the next header field of the first DOH is used to indicate the SRH. In this case, the second DOH includes the above-mentioned first information and security information. Figure 6 The message shown does not include Figure 4 The AH and ESP headers in the packet are shown.
[0092] In the case where the first information and the security information are included in the above-mentioned second DOH, such as Figure 6 As shown, the second DOH may include multiple TLV fields, and the multiple TLV fields include a first TLV field and a second TLV field ( Figure 6 The first TLV field may include at least one TLV field, and the second TLV field may also include at least one TLV field. The first TLV field includes first information, and the second TLV field includes security information.
[0093] For example, part of the first information may be included in the first TLV field, and another part of the information and the security information may be included in the second TLV field; or part of the first information and the security information may be included in the first TLV field, and another part of the security information may be included in the second TLV field. Figure 6 As shown, in addition to multiple TLV fields, DOH2 may also include a next header field and a header extended length (Hdr Ext Len) field, and the next header field, the header extended length field and the multiple TLV fields are arranged in sequence.
[0094] In the embodiment of the present application, the first message is an SRv6 message, and the first information and security information are included in DOH2 as an example. The first message may not be an SRv6 message (for example, the first message is an Internet protocol (IP) message different from the SRv6 message). At least one of the first information and the security information may also be included in the message header of the first message, which is different from the second DOH (such as a basic message header, SRH), or at least one of the first information and the security information may not be included in the message header of the first message. For example, when the message header of the first message does not include the above-mentioned first DOH and SRH, the message header only includes one DOH, and at this time, the DOH includes the first information and security information. For another example, the message header of the first message includes: a first message header and a second message header, the first message header includes the first information, and the second message header includes security information, and the first message header and the second message header are different message headers of the first message. It can be seen that the first information and the security information are included in different message headers of the first message. Optionally, one of the first packet header and the second packet header may be the second DOH, or neither the first packet header nor the second packet header may be the second DOH.
[0095] Further, when the second information includes the parameter set in addition to the parameter set, the message header of the first message includes: the first information, the security information and the parameter set. The parameter set may be included in the same or different message header as the first information and the security information.
[0096] For example, the first information, security information and parameter set may be included in the second DOH. For example, the plurality of TLV fields in the second DOH include a first TLV field, a second TLV field and a third TLV field, the first TLV field includes the first information, the second TLV field includes the second information, and the third TLV field includes the parameter set.
[0097] For another example, the message header of the first message includes a first message header and a second message header, the first information is included in the first message header, the second information is included in the second message header, and the parameter set is included in the first message header or the second message header.
[0098] For another example, the message header of the first message includes a first message header, a second message header and a third message header, the first information is included in the first message header, the second information is included in the second message header, and the parameter set is included in the third message header.
[0099] In the above content, the example of the head node obtaining a payload based on the data to be transmitted and then obtaining a first message based on the payload is taken. Optionally, the payload may also include another message. In this case, the head node does not obtain the payload based on the data to be transmitted, but after receiving the other message, the head node may use the other message as the payload of the first message and then obtain the first message based on the payload.
[0100] In the case where the payload of the first message includes another received message, if the second information of the first message includes the payload, then under the effect of the above security information, the security verification of the other message can be realized, so that the security of the other message is relatively high. In the case where the payload of the first message does not include another received message, but includes data to be transmitted, the length of the payload is relatively short. At this time, the transmission bandwidth required for the transmission of the first message is relatively small, and the load of the network used to transmit the first message is relatively small.
[0101] Further, based on the foregoing, any first message provided in the embodiments of the present application may also include an AH, which may be included in the same message header as the security information in multiple message headers of the first message, for example, the AH and the security information may be included in the second DOH.
[0102] For example, the multiple TLV fields of the second DOH include a TLV field corresponding to AH, and the TLV field includes AH. The second DOH may use different TLV fields to carry AH, the first information, and the security information, or the second DOH may use different TLV fields to carry AH, the first information, the security information, and the parameter set. Alternatively, the second DOH may include AH and the first information, the security information, or the parameter set in the same TLV field.
[0103] The embodiment of the present application provides a first message, which does not include an AH and an ESP header, and in the first message, at least one of the AH and the security information can be included in the same message header among multiple message headers of the first message with other information (such as at least one of the first information and the parameter set). For example, the AH, the security information, the first information, and the parameter set are all included in the second DOH, and the second DOH can use different TLV fields to include the AH, the security information, the first information, and the parameter set.
[0104] Combined with the above Figures 1 to 6 , describes in detail the message transmission method provided by the embodiment of the present application. In order to implement the functions described in the above methods, the communication node needs to include hardware and / or software modules corresponding to the execution of each function. In combination with the execution process of each method described in the embodiments disclosed herein, the embodiments of the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application in combination with the embodiments, but such implementation should not be considered to exceed the scope of the embodiments of the present application.
[0105] This embodiment can divide the functional modules of the corresponding device according to the above method embodiment. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware. The division of modules in this embodiment is schematic, specifically as a possible division method of a logical function, and there may be other division methods in actual implementation.
[0106] When the functional module division method is adopted, the following will be combined Figure 7 , Figure 8 and Fig. 9 Describe the message transmission device provided in the embodiment of the present application.
[0107] For example, Figure 7 A schematic diagram of the structure of a message transmission device provided in an embodiment of the present application, the message transmission device can be arranged in the head node in the aforementioned content, such as Figure 7As shown, the message transmission device includes: an acquisition module 301 and a sending module 302. The acquisition module 301 is used to acquire a first message; the sending module 302 is used to send the first message, and the first message includes: first information, security information, and second information. The first information is information used for use by the intermediate node, and the security information is used to perform security verification on the second information. The second information is information used only for use by the tail node. The operations performed by the acquisition module 301 can refer to S101 in the aforementioned embodiment, and the operations performed by the sending module 201 can refer to S102 in the aforementioned embodiment. The embodiments of this application will not be described in detail here.
[0108] The first information may include: at least one of APN information and GIP6 information. The first information may not include APN information and GIP6 information, which is not limited in the embodiments of the present application. The security information may be an ESP header or other information with a security verification function. The second information may include a payload, which is only used by the tail node, and the intermediate node does not need to pay attention to the payload. For another example, in addition to the payload, the second information also includes a parameter set, which is included in the message header of the first message. For another example, the second information may not include a payload, but include the parameter set.
[0109] The first message in the embodiment of the present application includes the first information, the second information and the security information. The second information for which the security information is to be security-verified is information that is only used by the tail node. In this way, the information that the intermediate node needs to use is the first information, and the information that the intermediate node does not need to use and the tail node needs to use is the second information. The security information does not need to perform security verification on the information that the intermediate node needs to use. If the security verification includes encryption, then on the premise of ensuring the security of the first message, the intermediate node can use the unencrypted first information to implement the extended function brought by the first information. Since the security information is not used to perform security verification on the first information, even if the first information changes during the transmission process, it does not conflict with the object (the second information) targeted by the security verification of the security information. When the security verification includes authentication, the authenticated object (the second information) can be authenticated at the tail node.
[0110] Furthermore, the embodiments of the present application do not limit the positions of the first information, security information, and second information in the first message, and some examples of these positions are given below.
[0111] Optionally, the first information and the security information may both be included in a message header of the first message. For example, the message header of the message includes a first DOH, an SRH, and a second DOH, wherein the next header field of the first DOH is used to indicate the SRH, and in this case, the second DOH includes the above-mentioned first information and security information.
[0112] In the case where the first information and the security information are included in the above-mentioned second DOH, the second DOH may include multiple TLV fields, the multiple TLV fields include a first TLV field and a second TLV field, the first TLV field may include at least one TLV field, and the second TLV field may also include at least one TLV field. The first TLV field includes the first information, and the second TLV field includes the security information.
[0113] Further, for the second information, the second information may be a payload, or the second information may include a parameter set in a message header in addition to the payload. It can be seen that the message header of the first message includes: the first information and the security information, or the first information, the security information and the parameter set. The parameter set may be included in the same or different message header as the first information and the security information.
[0114] For example, the first information, security information and parameter set may be included in the second DOH. For example, the plurality of TLV fields in the second DOH include a first TLV field, a second TLV field and a third TLV field, the first TLV field includes the first information, the second TLV field includes the second information, and the third TLV field includes the parameter set.
[0115] For another example, the message header of the first message includes a first message header and a second message header, the first information is included in the first message header, the second information is included in the second message header, and the parameter set is included in the first message header or the second message header.
[0116] For another example, the message header of the first message includes a first message header, a second message header and a third message header, the first information is included in the first message header, the second information is included in the second message header, and the parameter set is included in the third message header.
[0117] Optionally, the first message includes a message header and a payload. When the head node obtains the first message, it may first obtain the payload (including the data to be transmitted), and then obtain the first message including the message header and the payload based on the payload. Optionally, the payload may also include another message. In this case, the head node does not obtain the payload based on the data to be transmitted, but after receiving the other message, the other message may be used as the payload of the first message, and then the first message is obtained based on the payload. In the case where the payload of the first message includes the received other message, if the second information of the first message includes the payload, then under the effect of the above-mentioned security information, the security verification of the other message can be realized, so that the security of the other message is higher. In the case where the payload of the first message does not include the received other message, but includes the data to be transmitted, the length of the payload is shorter. At this time, the transmission bandwidth required for the transmission of the first message is smaller, and the load of the network used to transmit the first message is smaller.
[0118] Further, based on the foregoing, any first message provided in the embodiments of the present application may also include AH, and the AH may be included in the same message header as the first information and security information. For example, AH, the first information and security information may be included in the second DOH. For example, the multiple TLV fields of the second DOH include a TLV field corresponding to AH, and the TLV field includes AH. The second DOH may use different TLV fields to carry AH, the first information and security information, or the second DOH may use different TLV fields to carry AH, the first information, security information and a parameter set. Alternatively, the second DOH may include AH in the same TLV field with the first information, security information or parameter set.
[0119] Optionally, the first message is an SRv6 message or other messages, which is not limited in the embodiment of the present application.
[0120] Figure 8 A schematic diagram of the structure of another message transmission device provided in an embodiment of the present application, wherein the message transmission device is arranged at an intermediate node, such as Figure 8 As shown, the message transmission device includes: a receiving module 501, a processing module 402 and a forwarding module 403. The receiving module 501 is used to receive a first message; wherein the first message includes: first information, security information and second information, the first information is information used for use by the intermediate node, the security information is used to verify the security of the second information, and the second information is information only used by the tail node; the processing module 402 is used to use the first information in the first message; the forwarding module 403 is used to forward the first message. The operations performed by the receiving module 501 can refer to the operations related to the intermediate node in S102 in the aforementioned embodiment, the operations performed by the processing module 402 can refer to S103 in the aforementioned embodiment, and the operations performed by the forwarding module 403 can refer to S104 in the aforementioned embodiment, and the embodiments of the present application will not be described in detail here.
[0121] Fig. 9 A schematic diagram of the structure of another message transmission device provided in an embodiment of the present application, wherein the message transmission device is provided at an end node, such as Fig. 9As shown, the message transmission device includes: a receiving module 501, a security verification module 502 and a processing module 503. The receiving module 501 is used to receive a first message; wherein the first message includes: first information, security information and second information, the first information is information for use by the intermediate node, the security information is used to perform security verification on the second information, and the second information is information only for use by the tail node. The security verification module 502 is used to perform security verification on the second information based on the security information, and the processing module 503 is used to use the second information after security verification. The operations performed by the receiving module 501 can refer to the operations related to the tail node in S104 in the aforementioned embodiment, the operations performed by the security verification module 502 can refer to S105 in the aforementioned embodiment, and the operations performed by the processing module 503 can refer to S106 in the aforementioned embodiment, and the embodiments of the present application are not described in detail here.
[0122] When an integrated unit is used, the message transmission device provided in the head node, the intermediate node or the tail node provided in the embodiment of the present application may include a processing module, a storage module and a communication module. Among them, the processing module can be used to control and manage the actions of the device, for example, it can be used to support the device to perform the actions performed by the head node, the intermediate node or the tail node in the above S101 to S106. The storage module can be used to support the device to execute storage program codes and data, etc. The communication module can be used for the communication between the device and other devices.
[0123] Among them, the processing module can be a processor or a controller. It can implement or execute various exemplary logic boxes, modules and circuits described in conjunction with the disclosure of the embodiments of the present application. The processor can also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of digital signal processing (DSP) and a microprocessor, and the like. The storage module can be a memory. The communication module can be a device that interacts with other devices, such as a radio frequency circuit, a Bluetooth chip, a Wi-Fi chip, etc.
[0124] In one embodiment, when the processing module is a processor, the storage module is a memory, and the communication module is a communication interface, the message transmission device involved in this embodiment can be as follows: Figure 1 In one implementation, the above modules included in the message transmission device may be computer programs stored in a memory and called by a processor to implement corresponding execution functions of each module.
[0125] The embodiment of the present application also provides a communication system, which includes a head node, an intermediate node and a tail node. The head node is used to perform the operations performed by the head node in any message transmission method provided in the embodiment of the present application, the intermediate node is used to perform the operations performed by the intermediate node in any message transmission method provided in the embodiment of the present application, and the tail node is used to perform the operations performed by the tail node in any message transmission method provided in the embodiment of the present application.
[0126] The head node may include any one of the message transmission devices provided in the head node according to the embodiments of the present application (such as Figure 7 The intermediate node includes any one of the message transmission devices provided in the intermediate node according to the embodiment of the present application (such as Figure 8 The tail node includes any one of the message transmission devices provided in the tail node according to the embodiment of the present application (such as Fig. 9 device shown).
[0127] An embodiment of the present application provides a computer storage medium, in which a computer program is stored; when the computer program is run on a computer, the computer executes a method performed by a head node, an intermediate node or a tail node in any one of the message transmission methods provided in the embodiments of the present application.
[0128] An embodiment of the present application also provides a computer program product containing instructions. When the computer program product is run on a communication device, the communication device executes any method performed by a head node, an intermediate node or a tail node in any message transmission method provided in the embodiment of the present application.
[0129] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product, and the computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website site, a computer, a server or a data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server, a data center, etc. that contains one or more available media integrated. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium, or a semiconductor medium (e.g., a solid-state hard disk), etc.
[0130] In this application, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance. The term "at least one" means one or more, and "plurality" means two or more, unless otherwise expressly limited. The term "and / or" is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone.
[0131] The different types of embodiments such as the method embodiments and device embodiments provided in the embodiments of the present application can refer to each other, and the embodiments of the present application are not limited thereto. The sequence of operations of the method embodiments provided in the embodiments of the present application can be appropriately adjusted, and the operations can also be increased or decreased accordingly according to the circumstances. Any technician familiar with the technical field can easily think of the changed methods within the technical scope disclosed in the present application, and they should be included in the protection scope of the present application, so they will not be repeated.
[0132] In the corresponding embodiments provided in the present application, it should be understood that the disclosed systems and devices, etc. can be implemented by other configuration methods. For example, the device embodiments described above are only schematic, for example, the division of modules is only a logical function division, and there may be other division methods in actual implementation, such as multiple modules can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or modules, which can be electrical or other forms.
[0133] The units described as separate components may or may not be physically separated, and the components described as units may or may not be physical units, and may be located in one place or distributed on multiple devices. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.
[0134] The above is only an optional implementation of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present application, and these modifications or replacements should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.
Claims
1. A message transmission method, characterized in that: The method comprises: The head node obtains a first message, where the first message includes: first information, security information, and second information, where the first information is information used by the intermediate node, the security information is used to perform security verification on the second information, and the second information is information used only by the tail node; The head node sends the first message.
2. The method according to claim 1, characterized in that The message header of the first message includes the first information and the security information.
3. The method according to claim 1 or 2, characterized in that: The message header of the first message includes a first destination options header, a segment routing header, and a second destination options header. The next header field of the first destination options header is used to indicate the segment routing header. The second destination options header includes: the first information and the security information.
4. The method according to claim 3, characterized in that The second destination option header includes: a first type-length-value TLV field and a second TLV field, the first TLV field includes the first information, and the second TLV field includes the security information.
5. The method according to claim 1 or 2, characterized in that: The message header of the first message includes a first message header and a second message header, the first message header includes the first information, and the second message header includes the security information.
6. The method according to any one of claims 1 to 5, characterized in that: The second information includes a payload.
7. The method according to claim 2, characterized in that The second information includes a payload and a parameter set, and the parameter set included in the second information is included in a message header of the first message.
8. The method according to claim 3 or 4, characterized in that: The second information includes a payload and a parameter set, and the parameter set included in the second information is included in the second destination option header.
9. The method according to claim 5, characterized in that The second information includes a payload and a parameter set, and the message header of the first message further includes a third message header, and the third message header includes the parameter set included in the second information.
10. The method according to any one of claims 1 to 9, characterized in that: The first information includes: at least one of the following: application-aware network APN information and generalized Internet Protocol version 6 tunnel GIP6 information.
11. The method according to any one of claims 6 to 9, characterized in that: The head node obtains the first message, including: The head node obtains the load; The head node obtains the first message based on the payload.
12. A message transmission device, characterized in that: The message transmission device is arranged at the head node, and the message transmission device comprises: an acquisition module, configured to acquire a first message, wherein the first message includes: first information, security information, and second information, wherein the first information is information used by an intermediate node, the security information is used to perform security verification on the second information, and the second information is information used only by an end node; A sending module is used to send the first message.
13. The message transmission device according to claim 12, characterized in that: The message header of the first message includes the first information and the security information.
14. The message transmission device according to claim 12 or 13, characterized in that: The message header of the first message includes a first destination options header, a segment routing header, and a second destination options header. The next header field of the first destination options header is used to indicate the segment routing header. The second destination options header includes: the first information and the security information.
15. The message transmission device according to claim 14, characterized in that: The second destination option header includes: a first type-length-value TLV field and a second TLV field, the first TLV field includes the first information, and the second TLV field includes the security information.
16. The message transmission device according to claim 12 or 13, characterized in that: The message header of the first message includes a first message header and a second message header, the first message header includes the first information, and the second message header includes the security information.
17. The message transmission device according to any one of claims 12 to 16, characterized in that: The second information includes a payload.
18. The message transmission device according to claim 13, characterized in that: The second information includes a payload and a parameter set, and the parameter set included in the second information is included in a message header of the first message.
19. The message transmission device according to claim 14 or 15, characterized in that: The second information includes a payload and a parameter set, and the parameter set included in the second information is included in the second destination option header.
20. The message transmission method according to claim 16, characterized in that: The second information includes a payload and a parameter set, and the message header of the first message further includes a third message header, and the third message header includes the parameter set included in the second information.
21. The message transmission device according to any one of claims 12 to 20, characterized in that: The first information includes: at least one of the following: application-aware network APN information and generalized Internet Protocol version 6 tunnel GIP6 information.
22. The message transmission device according to any one of claims 17 to 20, characterized in that: The acquisition module is used for: obtaining the load; The first message is obtained based on the payload.