Campus network access method and device and medium

Abstract

The invention provides a campus network access method and device and a medium, and relates to the technical field of networks, and the method comprises the steps: allowing a campus network user terminal to use a universal DNN to access a campus network or a public network through a UPF of a core network when the campus network user terminal is located in a campus and a 5G or more network is used; in response to the fact that the campus network user terminal is located in a non-roaming geographical range outside the campus and a 5G or more network is used, allowing the campus network user terminal to access the campus network through the UPF of the core network by using the universal DNN; and allowing the campus network user terminal to access the campus network through the UPF of the core network by using the dedicated DNN in response to the fact that the campus network user terminal is located in the roaming geographical range outside the campus or a network of 4G or below is used. According to the invention, the network access requirements of the campus network user terminal in various scenes inside and outside a campus can be met.

Description

Technical Field

[0001] The present disclosure at least relates to the field of network technology, and in particular to a campus network access method, a campus network access device, and a computer-readable storage medium. Background Art

[0002] In an era of rapid development of information technology, visiting journal websites to check information, remote online classes, multi-scenario interactive teaching, mobile office, etc. have become part of the daily learning and work of teachers and students on campus.

[0003] In the traditional model, campus terminals of teachers and students access the campus intranet through Wi-Fi (Wireless Fidelity, wireless hotspot) on campus, and use VPN (Virtual Private Network) to access the campus intranet outside the campus. The traditional model faces three major pain points: poor experience, high risk, and difficult management. It is difficult to meet the needs of campus teachers and students to access the campus intranet anytime, anywhere, safely and efficiently. Summary of the invention

[0004] The technical problem to be solved by the present disclosure is to provide a campus network access method, a campus network access device and a computer-readable storage medium in response to the above-mentioned shortcomings, so as to solve the problem of how to meet the network access needs of campus network user terminals in various scenarios inside and outside the campus.

[0005] In a first aspect, the present disclosure provides a campus network access method, the method comprising:

[0006] In response to the campus network user terminal being located on campus and using a 5G or higher network, the campus network user terminal is allowed to use a general DNN to access the campus network or public network through the UPF of the core network;

[0007] In response to the campus network user terminal being located within a non-roaming geographic range outside the campus and using a 5G or higher network, the campus network user terminal is allowed to access the campus network through the UPF of the core network using a general DNN;

[0008] In response to the campus network user terminal being located within a roaming geographic range outside the campus, or using a 4G or lower network, allowing the campus network user terminal to access the campus network through the UPF of the core network using a dedicated DNN, the dedicated DNN being configured with campus network dedicated connection information;

[0009] Among them, 5G is the fifth generation of mobile communication technology, DNN is the name of the data network, UPF is the user plane function, and 4G is the fourth generation of mobile communication technology.

[0010] Further, in response to the campus network user terminal being located outside the campus, allowing the campus network user terminal to access the campus network through the UPF of the core network specifically includes:

[0011] Campus network user terminals are allowed to access the first shared UPF outside the campus, access the exclusive UPF located within the campus or the second shared UPF outside the campus through the first shared UPF, and access the campus network through the exclusive UPF or the second shared UPF. The exclusive UPF or the second shared UPF is configured with campus network-specific connection information.

[0012] Further, in response to the method being applied to a core network or a campus network service system including a core network, the method specifically includes:

[0013] The first shared UPF located outside the campus receives a request from a campus network user terminal located outside the campus to access the campus network using a general DNN or a dedicated DNN, obtains the contracted user information of the campus network user terminal from the UDM of the core network, and forwards the request to access the campus network to the exclusive UPF located inside the campus or the second shared UPF located outside the campus according to the contracted user information;

[0014] The exclusive UPF located in the campus or the second shared UPF located outside the campus receives a request from a campus network user terminal located in the campus to access the campus network or the public network using a universal DNN, or receives a request from a campus network user terminal to access the campus network from the first shared UPF, obtains the contracted ULCL policy of the campus network user terminal from the PCF of the core network, and controls the campus network user terminal to access the campus network or the public network according to the contracted ULCL policy;

[0015] Among them, UDM is the unified data management function, PCF is the policy control function, and ULCL is the uplink classifier.

[0016] Further, in response to the method being applied to a campus network user terminal or a campus network service system including a campus network user terminal, the method specifically further includes:

[0017] The campus network user terminal is pre-configured with a general DNN and a dedicated DNN, and pre-signs user information and ULCL policies with the core network, so that the UPF of the core network controls the campus network user terminal to access the campus network or the public network according to the signed user information and the signed ULCL policies;

[0018] Among them, ULCL is the uplink classifier.

[0019] Further, in response to the method being applied to a campus network or a campus network service system including a campus network, the method specifically further includes:

[0020] The campus network allocates a dedicated IP address to the dedicated DNN of the campus network user terminal according to its own IP address range, so that the campus network user terminal carries the dedicated IP address when using the dedicated DNN to access the campus network;

[0021] Among them, IP is the Internet Protocol.

[0022] Further, in response to the method being applied to a campus network user terminal or a campus network service system including a fixed network, WLAN, or FTTH, the method further includes:

[0023] In response to the campus network user terminal being located on campus and using WiFi or wired network, allowing the campus network user terminal to use the account to access the campus network or public network through one of fixed network, WLAN, and FTTH;

[0024] Among them, WLAN is wireless local area network, FTTH is fiber to the home, and WiFi is wireless hotspot.

[0025] Further, in response to the method being applied to a campus network service system, the method further includes:

[0026] The campus network user terminals are authenticated and billed through the AAA billing and authentication server, the Internet behavior of the campus network user terminals is managed through the user behavior server, security protection is provided for the campus network through the intrusion prevention system, and the computing power service of the cloud network is dispatched for the campus network through the central server.

[0027] In a second aspect, the present disclosure provides a campus network access device, the device comprising:

[0028] The first on-campus access module is used to allow the campus network user terminal to access the campus network or the public network through the UPF of the core network using the general DNN in response to the campus network user terminal being located on campus and using a 5G or higher network;

[0029] The off-campus non-roaming access module is used to allow the campus network user terminal to access the campus network through the UPF of the core network using a general DNN in response to the campus network user terminal being located within the non-roaming geographical range outside the campus and using a 5G or higher network;

[0030] An off-campus roaming access module, used to allow the campus network user terminal to access the campus network through the UPF of the core network using a dedicated DNN in response to the campus network user terminal being located within the roaming geographical range outside the campus, or using a 4G or lower network, and the dedicated DNN is configured with dedicated connection information for the campus network;

[0031] Among them, 5G is the fifth generation of mobile communication technology, DNN is the name of the data network, UPF is the user plane function, and 4G is the fourth generation of mobile communication technology.

[0032] Further, the device includes a UPF of a core network, and the UPF of the core network includes:

[0033] A first shared UPF is set up outside the campus and an exclusive UPF is set up inside the campus. The first shared UPF connects the UDM and the exclusive UPF. The exclusive UPF connects the PCF and the campus network. The exclusive UPF is configured with campus network dedicated connection information. The UDM is configured with the contracted user information of the campus network user terminal. The PCF is configured with the contracted ULCL policy of the campus network user terminal; or,

[0034] The first shared UPF and the second shared UPF are set outside the campus, the first shared UPF is connected to the UDM and the second shared UPF, the second shared UPF is connected to the PCF and the campus network, the second shared UPF is configured with campus network dedicated connection information, the UDM is configured with the contracted user information of the campus network user terminal, and the PCF is configured with the contracted ULCL policy of the campus network user terminal;

[0035] Among them, UDM is the unified data management function, PCF is the policy control function, and ULCL is the uplink classifier.

[0036] In a third aspect, the present disclosure provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the campus network access method or the campus network access device as described above is implemented.

[0037] The present disclosure provides a campus network access method, a campus network access device and a computer-readable storage medium. By configuring 5G or above network services for the campus network, the needs of users to access the campus network on campus and outside the campus (including non-roaming and roaming areas) are met. At the same time, the needs of accessing the campus network on 4G or below networks and roaming areas outside the campus are achieved by configuring a dedicated DNN, which can meet the network access needs of campus network user terminals in various scenarios inside and outside the campus. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 is a flow chart of a campus network access method according to an embodiment of the present disclosure;

[0039] Figure 2 It is a structural schematic diagram of a campus network access device according to an embodiment of the present disclosure;

[0040] Figure 3 This is an overall architecture diagram of a campus network according to an embodiment of the present disclosure;

[0041] Figure 4 It is a UPF distribution diagram of a campus network in an embodiment of the present disclosure;

[0042] Figure 5 It is a schematic diagram of WiFi networking of a campus network in an embodiment of the present disclosure;

[0043] Figure 6 It is a schematic diagram of security protection of a campus network according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0044] In order to enable those skilled in the art to better understand the technical solution of the present disclosure, the embodiments of the present disclosure will be further described in detail below with reference to the accompanying drawings.

[0045] It should be understood that the specific embodiments and drawings described herein are only used to explain the present disclosure rather than to limit the present disclosure.

[0046] It can be understood that, in the absence of conflict, the various embodiments of the present disclosure and the various features in the embodiments can be combined with each other.

[0047] It can be understood that, for the convenience of description, the drawings of the present disclosure only show parts related to the present disclosure, while parts irrelevant to the present disclosure are not shown in the drawings.

[0048] It can be understood that each unit and module involved in the embodiments of the present disclosure may correspond to only one physical structure, or may be composed of multiple physical structures, or multiple units and modules may be integrated into one physical structure.

[0049] It will be understood that, in the absence of conflict, the functions and steps marked in the flowcharts and block diagrams of the present disclosure may occur in an order different from that marked in the drawings.

[0050] It is understood that the flowcharts and block diagrams of the present disclosure illustrate the possible architectures, functions, and operations of the systems, devices, equipment, and methods according to the various embodiments of the present disclosure. Each box in the flowchart or block diagram may represent a unit, module, program segment, or code, which contains executable instructions for implementing the specified functions. Moreover, each box or combination of boxes in the block diagram and flowchart may be implemented by a hardware-based system that implements the specified functions, or may be implemented by a combination of hardware and computer instructions.

[0051] It can be understood that the units and modules involved in the embodiments of the present disclosure can be implemented by software or hardware, for example, the units and modules can be located in a processor.

[0052] Embodiment 1:

[0053] like Figure 1 As shown, the present disclosure provides a campus network access method, the method comprising:

[0054] S1. In response to the campus network user terminal being located on campus and using a 5G or higher network, the campus network user terminal is allowed to use a general DNN to access the campus network or public network through the UPF of the core network;

[0055] S2. In response to the campus network user terminal being located within a non-roaming geographical range outside the campus and using a 5G or higher network, the campus network user terminal is allowed to access the campus network through the UPF of the core network using a general DNN;

[0056] S3, in response to the campus network user terminal being located within the roaming geographic range outside the campus, or using a 4G or lower network, allowing the campus network user terminal to access the campus network through the UPF of the core network using a dedicated DNN, the dedicated DNN being configured with campus network dedicated connection information;

[0057] Among them, 5G is the fifth generation of mobile communication technology, DNN is the name of the data network, UPF is the user plane function, and 4G is the fourth generation of mobile communication technology.

[0058] In this embodiment, by configuring 5G or above network services for the campus network, the needs of users to access the campus network inside and outside the campus (including non-roaming and roaming areas) are met. At the same time, the needs of accessing the campus network with 4G or below networks and roaming areas outside the campus are achieved by configuring a dedicated DNN, which can meet the network access needs of campus network user terminals in various scenarios inside and outside the campus.

[0059] Specifically, this embodiment may correspond to the following Figure 1 The method shown provides Figure 2 The device shown includes: an on-campus first access module 1 for executing step S1, an off-campus non-roaming access module 2 for executing step S2, and an off-campus roaming access module 3 for executing step S3. The device may also include an on-campus access module and an off-campus access module, wherein the on-campus access module includes the on-campus first access module 1, and the off-campus access module includes the off-campus non-roaming access module 2 and the off-campus roaming access module 3.

[0060] More specifically, the traditional way of accessing the campus intranet has three major problems: poor experience, high risk, and difficult management. 1) Poor operation experience: frequent login authentication operations for campus Wi-Fi / external VPN are complicated; Poor service experience: poor Wi-Fi coverage affects the service experience on campus, and VPN dial-up outside the campus is stuck and has a large delay; 2) High risk: outside the campus: intranet data passes through the Internet, and the intranet traffic is encrypted through VPN and transmitted through the public network, which has a high risk of business exposure to the public network; inside the campus: Wi-Fi has security risks, and open Wifi networks allow attacks to be everywhere, and unauthorized Wifi devices can easily become the starting point of attacks; 3) Complex network management is difficult: 2C (To Customer) terminals require public and private network switching, multiple mechanisms, and multiple management; Complex maintenance and management: Wi-Fi and VPN network optimization is difficult, fault troubleshooting is difficult, and professional network operation and maintenance personnel are required. Therefore, how to provide campuses with products with better performance, better experience, and lower investment has become a focus of attention.

[0061] In view of this, this embodiment proposes a smart campus network based on a hyper-converged architecture to create a hyper-converged campus network. The hyper-converged campus network is a campus network that integrates multiple networks and dimensions based on the 5G private network. It can realize campus network access within the entire domain for campus users, and can access the campus network and the public network in an indiscriminate "login-free" mode within a non-roaming range (such as within a city), and allows access to the campus network within a roaming range (such as other provinces). Within the non-roaming geographical range (the campus also belongs to the non-roaming geographical range), the terminal uses a general DNN to carry campus network access information, and the core network UPF locates the campus network to be visited based on the access information. Within the roaming geographical range or in networks such as 4G, it is necessary to indicate the connection information of the campus network to be visited through a dedicated DNN.

[0062] like Figure 3 As shown, this embodiment provides an overall architecture of a hyper-converged smart campus network, which can be implemented in a certain city, and the functions that can be realized include non-differentiated access to internal and external networks. General DNN (Data Network Name): can access the campus network and the public network in a non-differentiated "login-free" mode within a certain city; Campus users: Campus contracted users are intelligently diverted to the campus network and the public network based on the access target through the 5G hyper-converged smart campus network; Non-campus users: Non-campus users do not sign up for the intelligent diversion strategy, and cannot directly access the campus network through their mobile phones, but can only access the public network normally; 4G users: After campus users fall back to the 4G network, they can manually change the access point settings to access the campus network; Dedicated DNN: Users can log in to the campus network on the 4G network or outside Tianjin.

[0063] In one implementation, in response to the campus network user terminal being located outside the campus, allowing the campus network user terminal to access the campus network through the UPF of the core network specifically includes:

[0064] Campus network user terminals are allowed to access the first shared UPF outside the campus, access the exclusive UPF located within the campus or the second shared UPF outside the campus through the first shared UPF, and access the campus network through the exclusive UPF or the second shared UPF. The exclusive UPF or the second shared UPF is configured with campus network-specific connection information.

[0065] In this embodiment, the first shared UPF can be as follows Figure 3 2C UPF as shown or Figure 4 The UPF (Nanjing Road) shown in the figure, the exclusive UPF can be as follows Figure 3 Campus human network UPF, campus physical network UPF or Figure 4 The campus network UPF shown in the figure, the second shared UPF can be as follows Figure 4 Layout level UPF (Nanjing Road) shown.

[0066] by Figure 4 For example, the mobile network networking modes of the hyper-converged smart campus network include: 1) Exclusive type: Construction method: Build an exclusive UPF (User Plane Function) on campus for independent use by the school; Applicable campus: Schools with high requirements for security isolation and business experience; Features and advantages: high security, ultra-low latency, ultra-large bandwidth, and customized network. 2) Shared type: Construction method: Connect to the campus intranet through the operator's shared UPF; Applicable campus: various types of large, medium and small schools, university town areas; Features and advantages: low investment, fast deployment, maintenance-free, and customized bandwidth on demand. Connect to the campus intranet (such as Figure 3 The campus network shown in Figure 4 The UPF of the campus network (shown in the figure) needs to collect key information of the school, including the school intranet access equipment: router, switch or firewall; device interface mode: electrical port or optical port; campus intranet IP address; mobile phone assigned IP address (dedicated DNN, 4G and remote Internet access); domain name and DNS information.

[0067] In one implementation, in response to the method being applied to a core network or a campus network service system including a core network, the method specifically includes:

[0068] The first shared UPF located outside the campus receives a request from a campus network user terminal located outside the campus to access the campus network using a general DNN or a dedicated DNN, obtains the contracted user information of the campus network user terminal from the UDM of the core network, and forwards the request to access the campus network to the exclusive UPF located inside the campus or the second shared UPF located outside the campus according to the contracted user information;

[0069] The exclusive UPF located in the campus or the second shared UPF located outside the campus receives a request from a campus network user terminal located in the campus to access the campus network or the public network using a universal DNN, or receives a request from a campus network user terminal to access the campus network from the first shared UPF, obtains the contracted ULCL policy of the campus network user terminal from the PCF of the core network, and controls the campus network user terminal to access the campus network or the public network according to the contracted ULCL policy;

[0070] Among them, UDM is the unified data management function, PCF is the policy control function, and ULCL is the uplink classifier.

[0071] In this embodiment, when a user terminal accesses the campus network on campus, the exclusive UPF or the second shared UPF allows the user to access the campus network according to the contracted ULCL policy, which can avoid access by unauthorized users. When a user terminal accesses the public network on campus, the exclusive UPF or the second shared UPF guides the traffic to the public network according to the contracted ULCL policy, which does not affect the access to the public network. When a user terminal accesses the campus network in a non-roaming area outside the campus, the first shared UPF determines whether it is a campus network user terminal based on the access request and the contracted user information. If it is, the access request is sent to the exclusive UPF or the second shared UPF, and then the access to the campus network is controlled according to the contracted ULCL policy. When a user terminal accesses the campus network in a roaming area outside the campus, the access request must carry the campus network dedicated connection information so that the first shared UPF can find the exclusive UPF or the second shared UPF, thereby achieving access to the campus network.

[0072] exist Figure 3 and Figure 4 The networking mode and architecture shown have evolved into multiple modes that adapt to more campus demand scenarios, including: 1) General DNN + ULCL mode, which meets the scenario of non-perceptual access to campus intranet and extranet in 5G environment, does not support roaming, and the terminal automatically obtains the public network; 2) Dedicated DNN mode, focusing on the management of students' online behavior, facilitating centralized control, and manually switching to dedicated DNN when accessing or roaming through 4G; a dedicated DNN + general DNN + ULCL mode has been formed to meet the non-perceptual access to campus intranet and extranet in 5G environment, as well as the scenario of roaming access to campus intranet in 4G environment or other provinces. The formed campus intranet and extranet scenario modes are shown in Table 1 below:

[0073] Table 1 Campus intranet and extranet scenario modes

[0074]

[0075] Among them, UDM is Unified Data Management; PCF is Policy Control function; TAC is Tracking Area Code.

[0076] In one implementation, in response to the method being applied to a campus network user terminal or a campus network service system including a campus network user terminal, the method specifically further includes:

[0077] The campus network user terminal is pre-configured with a general DNN and a dedicated DNN, and pre-signs user information and ULCL policies with the core network, so that the UPF of the core network controls the campus network user terminal to access the campus network or the public network according to the signed user information and the signed ULCL policies;

[0078] Among them, ULCL is the uplink classifier.

[0079] In this embodiment, the campus network user terminal accesses the campus network in the following ways: 1) Access through 5G network (5G network 5G mobile phone 5G card): When teachers and students who have signed a contract for the campus private network enter the campus private network TAC list area (such as within a certain city), the diversion strategy is triggered, and the campus network UPF performs data diversion according to the destination IP or DNS (Domain Name System) strategy of the user data. For data accessing the campus intranet, it is sent to the campus intranet through the N6 interface of the campus network UPF; for data accessing the Internet, it is sent to the large network 2C UPF through the N9 interface of the campus network UPF, and sent to the Internet through the N6 interface of the large network 2C UPF. 2) Access through 4G network: Since the 4G network does not support the ULCL (UpLink Classifier) ​​strategy, the campus intranet cannot be accessed through the 3gnet APN (Access Point Name) carried by the mobile phone. The APN needs to be set on the mobile phone, and the APN of the mobile phone is changed from 3gnet to the campus private network DNN.

[0080] In one embodiment, in response to the method being applied to a campus network or a campus network service system including a campus network, the method specifically further includes:

[0081] The campus network allocates a dedicated IP address to the dedicated DNN of the campus network user terminal according to its own IP address range, so that the campus network user terminal carries the dedicated IP address when using the dedicated DNN to access the campus network;

[0082] Among them, IP is the Internet Protocol.

[0083] In this embodiment, the dedicated DNN can provide a fixed IP (Internet Protocol), which is bound one-to-one to the mobile phone card. The IP address pool can be specified by the school to avoid conflicts. The dedicated DNN user traffic will push all traffic to the school via UPF.

[0084] In one embodiment, in response to the method being applied to a campus network user terminal or a campus network service system including a fixed network, WLAN, or FTTH, the method further includes:

[0085] In response to the campus network user terminal being located on campus and using WiFi or wired network, allowing the campus network user terminal to use the account to access the campus network or public network through one of fixed network, WLAN, and FTTH;

[0086] Among them, WLAN is wireless local area network, FTTH is fiber to the home, and WiFi is wireless hotspot.

[0087] In this embodiment, the hyper-converged smart campus network is centered on 5G and based on the MEC (Mobile edge computing) platform to achieve 5G, fixed network, and WIFI multi-network integrated access, creating a new generation of 5G + fixed network + WIFI hyper-converged smart campus network. The hyper-converged smart campus network provides services for campus mobile phone APP (Application) terminals, PC (Personal Computer) terminals, smart classroom terminal devices, surveillance cameras and other scenarios. Among them, for teaching use scenarios, a 5G private network access deployment method is adopted to achieve gigabit smart education and medical access services; a gigabit optical network access deployment method is adopted for smart classrooms, and a dual gigabit access deployment method is adopted for smart campus cloud classroom applications and campus smart security and fire protection, so as to achieve large bandwidth access and full business integration effects, and provide a network foundation for the construction of smart campuses and future campus informatization, thereby promoting the construction and development of smart education and smart campuses.

[0088] More specifically, since the campus 5G (fifth generation mobile communication technology) private network, campus Wi-Fi and campus local fixed network are three separate networks, there are problems such as limited bandwidth and high latency across networks. If you do not log in to the campus Wi-Fi and use a VPN, you cannot efficiently download campus network resources, which brings great troubles to cross-campus teaching and office work and online teaching. The problems faced by teaching and scientific research equipment include: there are many types of school business, and various types of business guarantees require different priorities. There are many types of business, and remote office teaching and multi-campus interaction have high latency requirements. A stable private network can guarantee scientific research needs. How to provide the campus with products with better performance, better experience and lower investment, and how to save school investment have become the focus of attention.

[0089] In view of this, this embodiment realizes the integration of mobile network, fixed access network, campus WLAN (Wireless Local Area Network) network and FTTH (Fiber To The Home) network, and supports the construction and deployment of various IT (Internet Technology) applications. By integrating FTTH wired network, Wi-Fi wireless network and 5G network into one network, a hyper-converged smart campus network is realized, the network needs of teachers and students are seamlessly met, and the integration of campus IT system, network management and other traditional servers, network security integration, cloud network edge integration can be achieved. It can completely replace the traditional campus WLAN network with better performance, better experience and lower investment, greatly reducing the school's network capital investment.

[0090] like Figure 3 As shown in the figure, the functions that can be realized by the overall hyper-converged smart campus network include multi-network and multi-dimensional intelligent integration, realizing the integration of mobile network, fixed access network, campus WLAN network and FTTH network, and supporting the construction and deployment of various IT applications. Campus IT system integration: Through the customized development of application layer software in the central server (network center (MEC)), the monitoring and management of various IT systems of the school are realized in the form of computing power supply according to the needs of the school. Integration of traditional servers such as network management: including the integration of fixed / WLAN network management servers, Internet behavior servers (user behavior systems), and AAA (Authentication, Authorization and Accounting) billing authentication servers. Network security integration: using the central server to integrate the fixed network and mobile network security protection and security equipment for centralized protection. Cloud-network-edge integration: using cloud networking to realize the integration of 5G hyper-converged smart campus network and operator cloud (China Unicom cloud) (cloud-network-edge integration).

[0091] like Figure 5 As shown in the figure, the WIFI network of the hyper-converged smart campus network has the following functional improvements: Installation and deployment: Select operators to customize high-end 10G WiFi6 devices and install them inside the dormitory. Each device covers one room. School management: Change the original floor-standing dirty and messy management method, pre-set in advance, convenient, tidy, convenient, and not easy to lose. Student use: Self-service order purchase, use mobile phone numbers as Internet accounts, multiple students can access, and unlimited roaming between dormitories can be achieved. By improving the WIFI network, the original one dormitory one broadband has been changed to one student one broadband, and the public use of 4-6 people has been upgraded to account mobile phone (one person one account).

[0092] The WIFI network networking mode is divided into standard mode and personalized mode. Among them: Standard mode: Access mode: Regional large network BARS (Broadband Remote Access Server); Link access: No adjustment required; OLT (Optical Line Terminal) transformation: Use independent OLT or independent board; Optical modem pre-installation: WiFi6 optical modem, which can be wall-mounted; Internet behavior requirements: Not supported. Personalized mode: Access mode: Xiaoshulin campus dedicated BRAS; Link adjustment: Layer 2 switch connected to dedicated BRAS (OTN (Optical Transport Network) or leased optical fiber); OLT transformation: Same as standard mode; Optical modem pre-installation: Same as standard mode; Internet behavior requirements: Supported.

[0093] WIFI network data configuration includes: OLT transformation: use independent OLT or independent board; link adjustment: BRAS link adjustment for Layer 2 switch. Manual data production: OLT, ONU (Optical Network Unit); dormitory optical modem transformation construction: wall-mounted transformation: power supply transformation, ONU wall-mounted, centralized implementation; desktop placement: traditional installation method of maintenance manager. For campus-specific services, process-driven access layer equipment data is automatically produced; respond to data production needs: BRAS, PORTAL (entrance), RMS (Router Management Service).

[0094] In one embodiment, in response to the method being applied to a campus network service system, the method further includes:

[0095] The campus network user terminals are authenticated and billed through the AAA billing and authentication server, the Internet behavior of the campus network user terminals is managed through the user behavior server, security protection is provided for the campus network through the intrusion prevention system, and the computing power service of the cloud network is dispatched for the campus network through the central server.

[0096] In this embodiment, if Figure 6 As shown in the figure, the security part of the hyper-converged smart campus network includes: the campus UPF is connected to the campus intranet (firewall / router) through a dedicated line via a firewall, and both optical and electrical ports are acceptable, as long as it is connected to the intranet route. The next hop of the firewall / router is connected to the AAA server, and AAA performs authentication and login, and the behavior system records it. The dedicated DNN can provide a fixed IP, which is bound to the mobile phone card one-to-one. The IP address pool can be specified by the school to avoid conflicts. The dedicated DNN user traffic will push all traffic to the school through the UPF. The general DNN ULCL can solve the problem of providing campus intranet access services for campus private network users through the campus UPF, and realize access to the campus intranet based on the city range. For example, the Nanjing Road 2C UPF is used as the Internet exit, and the campus UPF is used as the ULCL UPF to divert data from campus private network users. Users outside the province can switch to the dedicated DNN to access the campus intranet. Whether there is a 10.XXX network segment (a Class A private IP address range, which is usually used in the internal network of large enterprises or organizations due to its large number of addresses) in the campus intranet requires NAT (Network Address Translation, Network Address Traslation) address translation. Network solution level: Shared UPF configures different strategies for each school, isolates the networks between schools, and uses dedicated campus lines to access shared UPF (only student phones allowed by the school to access the campus intranet are allowed to access).

[0097] In addition, the Gigabit optical network of the hyper-converged smart campus network adopts an all-optical access POL (Passive Optical LAN) network solution with GPON (Gigabit Passive Optical Network, Gigabit-Capable PON) as the core technology. The equipment used includes OLT (optical line terminal) aggregation equipment, ONU (Optical Network Unit) multi-service access equipment and SPL (Service Provider Link) passive splitter equipment.

[0098] Before building a hyper-converged smart campus network, you need to collect data according to Table 2 below:

[0099] Table 2 5G campus network information collection table

[0100]

[0101] After collecting and filling in the contents shown in Table 2 above, you can build a hyper-converged smart campus network, including: opening up the physical dedicated line between the school intranet (router / firewall) and China Unicom; opening up the network layer, configuring the interconnection IP, opening up the IP layer, and being able to ping each other; on the basis of IP reachability, starting a GRE (Generic Route Encapsulation) tunnel, one DNN and one GRE tunnel; internal routing pointing, the source IP address segment of the campus network needs to be pointed to the AAA server; the AAA server is configured to configure the policy for the campus network terminal address segment; if there is a 10.XXX network segment in the intranet, NAT address conversion configuration needs to be performed on the firewall.

[0102] The hyper-converged smart campus network described above uses proprietary strategies to achieve non-perception and non-differential access to the campus network and public network by mobile phones; the original fixed network and WLAN network in the school can be connected to the hyper-converged campus network and realize network convergence with the mobile network; various IT systems of the school can be deployed in the hyper-converged campus network, and cloud computing power can be used to save investment and realize IT convergence; the school's original billing authentication, behavior management and other platforms can be migrated to the hyper-converged campus network to achieve centralized management and system integration; the campus hyper-converged network can be used to strengthen the security protection of the campus network and realize security enhancement; through the campus hyper-converged network, the campus network can communicate with the cloud, and the school can share the use of more cloud products to realize cloud-network integration; through real-name authentication for Internet access, students' Internet behavior can be flexibly managed. The hyper-converged smart campus network can be applied in a certain city's universities, and can continue to leverage the network advantages of the hyper-converged smart campus network, and deeply explore the application of network convergence in smart campus teaching management, such as smart freshman orientation, data middle platform, AR (Augmented Reality) distance learning, VR (Virtual Reality) immersive teaching, smart classrooms, etc., to provide better quality and more accurate campus network services and create a new highland for smart campuses.

[0103] The benefits of adopting the hyper-converged smart campus network include: by utilizing the ULCL (Uplink Classifier) ​​strategy unique to 5G private networks, contracted users can access the campus network and the public network without perception and without distinction; the school can deploy various IT systems on campus on the hyper-converged campus network platform, and use China Unicom's computing power to speed up deployment and save investment; the school's original billing authentication, behavior management and other platforms can be migrated to the hyper-converged campus network platform for centralized management; the hyper-converged campus network platform can be used to strengthen the security protection of the campus network; the existing fixed network and WLAN network on campus can be connected to the hyper-converged campus network, and realize the integration of three networks with the mobile network; through the hyper-converged campus network platform, the campus network can be interconnected with the cloud, and the school can share the use of more cloud products.

[0104] Embodiment 2:

[0105] like Figure 2 As shown, the present disclosure provides a campus network access device, the device comprising:

[0106] The first on-campus access module 1 is used to allow the campus network user terminal to access the campus network or the public network through the UPF of the core network using the general DNN in response to the campus network user terminal being located on campus and using a 5G or higher network;

[0107] The off-campus non-roaming access module 2 is used to allow the campus network user terminal to access the campus network through the UPF of the core network using a general DNN in response to the campus network user terminal being located within the non-roaming geographical range outside the campus and using a 5G or higher network;

[0108] The off-campus roaming access module 3 is used to allow the campus network user terminal to access the campus network through the UPF of the core network using a dedicated DNN in response to the campus network user terminal being located within the roaming geographical range outside the campus, or using a 4G or lower network, and the dedicated DNN is configured with dedicated connection information for the campus network;

[0109] Among them, 5G is the fifth generation of mobile communication technology, DNN is the name of the data network, UPF is the user plane function, and 4G is the fourth generation of mobile communication technology.

[0110] It should be noted that the above three modules may not be interconnected, but they will form an integral device.

[0111] In one embodiment, the device is specifically: a campus network user terminal, a core network, a campus network or a campus network service system, and the campus network service system at least includes a campus network user terminal, a core network and a campus network;

[0112] The campus network includes a scientific research platform and an on-campus LAN. The on-campus LAN provides one or more services including access to journal websites for information, remote online classes, multi-scenario interactive teaching, and campus mobile office.

[0113] The campus network service system may also include at least one of a fixed network, WLAN, and FTTH, wherein the fixed network, WLAN, and FTTH allow campus network user terminals located within the campus to access the system using a WiFi or wired network account;

[0114] Among them, WLAN is wireless local area network, FTTH is fiber to the home, and WiFi is wireless hotspot.

[0115] In one embodiment, the apparatus includes a UPF of a core network, and the UPF of the core network includes:

[0116] A first shared UPF is set up outside the campus and an exclusive UPF is set up inside the campus. The first shared UPF connects the UDM and the exclusive UPF. The exclusive UPF connects the PCF and the campus network. The exclusive UPF is configured with campus network dedicated connection information. The UDM is configured with the contracted user information of the campus network user terminal. The PCF is configured with the contracted ULCL policy of the campus network user terminal; or,

[0117] The first shared UPF and the second shared UPF are set outside the campus, the first shared UPF is connected to the UDM and the second shared UPF, the second shared UPF is connected to the PCF and the campus network, the second shared UPF is configured with campus network dedicated connection information, the UDM is configured with the contracted user information of the campus network user terminal, and the PCF is configured with the contracted ULCL policy of the campus network user terminal;

[0118] Among them, UDM is the unified data management function, PCF is the policy control function, and ULCL is the uplink classifier.

[0119] In one embodiment, the device includes an off-campus access module, the off-campus access module includes an off-campus non-roaming access module 2 and an off-campus roaming access module 3, and the off-campus access module is used to respond to the campus network user terminal being located outside the campus, allowing the campus network user terminal to access the campus network through the UPF of the core network, specifically for:

[0120] Campus network user terminals are allowed to access the first shared UPF outside the campus, access the exclusive UPF located within the campus or the second shared UPF outside the campus through the first shared UPF, and access the campus network through the exclusive UPF or the second shared UPF. The exclusive UPF or the second shared UPF is configured with campus network-specific connection information.

[0121] In one embodiment, in response to the device being a core network or a campus network service system including a core network, the device specifically includes:

[0122] The user verification module is specifically a first shared UPF located outside the campus, which is used to receive a request from a campus network user terminal located outside the campus to access the campus network using a general DNN or a dedicated DNN, obtain the contracted user information of the campus network user terminal from the UDM of the core network, and forward the request to access the campus network to the exclusive UPF located inside the campus or the second shared UPF located outside the campus according to the contracted user information;

[0123] The policy control module, specifically, an exclusive UPF located in the campus or a second shared UPF located outside the campus, is used to receive a request from a campus network user terminal located in the campus to access the campus network or the public network using a universal DNN, or receive a request from a campus network user terminal to access the campus network from the first shared UPF, obtain the signed ULCL policy of the campus network user terminal from the PCF of the core network, and control the campus network user terminal to access the campus network or the public network according to the signed ULCL policy;

[0124] Among them, UDM is the unified data management function, PCF is the policy control function, and ULCL is the uplink classifier.

[0125] In one embodiment, in response to the device being a campus network user terminal or a campus network service system including a campus network user terminal, the device specifically further includes:

[0126] The configuration module of the campus network user terminal is used to pre-configure the general DNN and the dedicated DNN, and pre-sign the user information and the ULCL policy with the core network, so that the UPF of the core network controls the campus network user terminal to access the campus network or the public network according to the signed user information and the signed ULCL policy;

[0127] Among them, ULCL is the uplink classifier.

[0128] In one embodiment, in response to the device being a campus network or a campus network service system including a campus network, the device specifically further includes:

[0129] The address allocation module of the campus network is used to allocate a dedicated IP address to the dedicated DNN of the campus network user terminal according to the IP address range of the campus network, so that the campus network user terminal carries the dedicated IP address when using the dedicated DNN to access the campus network;

[0130] Among them, IP is the Internet Protocol.

[0131] In one embodiment, in response to the device being a campus network user terminal or a campus network service system including a fixed network, WLAN, or FTTH, the device further includes:

[0132] The second on-campus access module is used to allow the campus network user terminal to use the account to access the campus network or the public network through one of the fixed network, WLAN, and FTTH in response to the campus network user terminal being located on the campus and using WiFi or wired network;

[0133] Among them, WLAN is wireless local area network, FTTH is fiber to the home, and WiFi is wireless hotspot.

[0134] In one embodiment, in response to the device being a campus network service system, the device further includes:

[0135] AAA billing and authentication server, used to authenticate and bill campus network user terminals through AAA billing and authentication server; user behavior server, used to manage the Internet behavior of campus network user terminals through user behavior server; intrusion prevention system, used to provide security protection for campus network through intrusion prevention system; central server, used to dispatch cloud network computing power services for campus network through central server.

[0136] Embodiment 3:

[0137] Embodiment 3 of the present disclosure provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the campus network access method described in Embodiment 1 or the campus network access device described in Embodiment 2 is implemented.

[0138] The computer-readable storage medium includes volatile or non-volatile, removable or non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, computer program modules or other data). Computer-readable storage media include, but are not limited to, RAM (Random Access Memory), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable read only memory), flash memory or other memory technology, CD-ROM (Compact Disc Read-Only Memory), digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer.

[0139] In addition, the present disclosure may also provide a computer device, including a memory and a processor, wherein the memory stores a computer program. When the processor runs the computer program stored in the memory, the processor executes the campus network access method described in Example 1. The computer device may be a campus network access device as described in Example 2.

[0140] The memory is connected to the processor, the memory may be a flash memory or a read-only memory or other memory, and the processor may be a central processing unit or a single-chip microcomputer.

[0141] Embodiments 1-3 of the present disclosure provide a campus network access method, a campus network access device, and a computer-readable storage medium. By configuring 5G or above network services for the campus network, the needs of users to access the campus network on campus and outside the campus (including non-roaming and roaming areas) are met. At the same time, the needs of accessing the campus network on 4G or below networks and roaming areas outside the campus are achieved by configuring a dedicated DNN, which can meet the network access needs of campus network user terminals in various scenarios inside and outside the campus.

[0142] It is to be understood that the above embodiments are merely exemplary embodiments used to illustrate the principles of the present disclosure, but the present disclosure is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and substance of the present disclosure, and these modifications and improvements are also considered to be within the scope of protection of the present disclosure.

Claims

1. A campus network access method, characterized in that: The method comprises: In response to the campus network user terminal being located on campus and using a 5G or higher network, the campus network user terminal is allowed to use a general DNN to access the campus network or public network through the UPF of the core network; In response to the campus network user terminal being located within a non-roaming geographic range outside the campus and using a 5G or higher network, the campus network user terminal is allowed to access the campus network through the UPF of the core network using a general DNN; In response to the campus network user terminal being located within a roaming geographic range outside the campus, or using a 4G or lower network, allowing the campus network user terminal to access the campus network through the UPF of the core network using a dedicated DNN, the dedicated DNN being configured with campus network dedicated connection information; Among them, 5G is the fifth generation of mobile communication technology, DNN is the name of the data network, UPF is the user plane function, and 4G is the fourth generation of mobile communication technology.

2. The method according to claim 1, characterized in that In response to the campus network user terminal being located outside the campus, allowing the campus network user terminal to access the campus network through the UPF of the core network, specifically including: Campus network user terminals are allowed to access the first shared UPF outside the campus, access the exclusive UPF located within the campus or the second shared UPF outside the campus through the first shared UPF, and access the campus network through the exclusive UPF or the second shared UPF. The exclusive UPF or the second shared UPF is configured with campus network-specific connection information.

3. The method according to claim 2, characterized in that In response to the method being applied to a core network or a campus network service system including a core network, the method specifically includes: The first shared UPF located outside the campus receives a request from a campus network user terminal located outside the campus to access the campus network using a general DNN or a dedicated DNN, obtains the contracted user information of the campus network user terminal from the UDM of the core network, and forwards the request to access the campus network to the exclusive UPF located inside the campus or the second shared UPF located outside the campus according to the contracted user information; The exclusive UPF located in the campus or the second shared UPF located outside the campus receives a request from a campus network user terminal located in the campus to access the campus network or the public network using a universal DNN, or receives a request from a campus network user terminal to access the campus network from the first shared UPF, obtains the contracted ULCL policy of the campus network user terminal from the PCF of the core network, and controls the campus network user terminal to access the campus network or the public network according to the contracted ULCL policy; Among them, UDM is the unified data management function, PCF is the policy control function, and ULCL is the uplink classifier.

4. The method according to any one of claims 1 to 3, characterized in that: In response to the method being applied to a campus network user terminal or a campus network service system including a campus network user terminal, the method specifically further includes: The campus network user terminal is pre-configured with a general DNN and a dedicated DNN, and pre-signs user information and ULCL policies with the core network, so that the UPF of the core network controls the campus network user terminal to access the campus network or the public network according to the signed user information and the signed ULCL policies; Among them, ULCL is the uplink classifier.

5. The method according to any one of claims 1 to 3, characterized in that: In response to the method being applied to a campus network or a campus network service system including a campus network, the method specifically further includes: The campus network allocates a dedicated IP address to the dedicated DNN of the campus network user terminal according to its own IP address range, so that the campus network user terminal carries the dedicated IP address when using the dedicated DNN to access the campus network; Among them, IP is the Internet Protocol.

6. The method according to any one of claims 1 to 3, characterized in that: In response to the method being applied to a campus network user terminal or a campus network service system including a fixed network, WLAN, or FTTH, the method further includes: In response to the campus network user terminal being located on campus and using WiFi or wired network, allowing the campus network user terminal to use the account to access the campus network or public network through one of fixed network, WLAN, and FTTH; Among them, WLAN is wireless local area network, FTTH is fiber to the home, and WiFi is wireless hotspot.

7. The method according to claim 6, characterized in that In response to the method being applied to a campus network service system, the method further includes: The campus network user terminals are authenticated and billed through the AAA billing and authentication server, the Internet behavior of the campus network user terminals is managed through the user behavior server, security protection is provided for the campus network through the intrusion prevention system, and the computing power service of the cloud network is dispatched for the campus network through the central server.

8. A campus network access device, characterized in that: The device comprises: The first on-campus access module is used to allow the campus network user terminal to access the campus network or the public network through the UPF of the core network using the general DNN in response to the campus network user terminal being located on campus and using a 5G or higher network; The off-campus non-roaming access module is used to allow the campus network user terminal to access the campus network through the UPF of the core network using a general DNN in response to the campus network user terminal being located within the non-roaming geographical range outside the campus and using a 5G or higher network; An off-campus roaming access module, used to allow the campus network user terminal to access the campus network through the UPF of the core network using a dedicated DNN in response to the campus network user terminal being located within the roaming geographical range outside the campus, or using a 4G or lower network, and the dedicated DNN is configured with dedicated connection information for the campus network; Among them, 5G is the fifth generation of mobile communication technology, DNN is the name of the data network, UPF is the user plane function, and 4G is the fourth generation of mobile communication technology.

9. The device according to claim 8, characterized in that The device includes a UPF of a core network, and the UPF of the core network includes: A first shared UPF is set up outside the campus and an exclusive UPF is set up inside the campus. The first shared UPF connects the UDM and the exclusive UPF. The exclusive UPF connects the PCF and the campus network. The exclusive UPF is configured with campus network dedicated connection information. The UDM is configured with the contracted user information of the campus network user terminal. The PCF is configured with the contracted ULCL policy of the campus network user terminal; or, The first shared UPF and the second shared UPF are set outside the campus, the first shared UPF is connected to the UDM and the second shared UPF, the second shared UPF is connected to the PCF and the campus network, the second shared UPF is configured with campus network dedicated connection information, the UDM is configured with the contracted user information of the campus network user terminal, and the PCF is configured with the contracted ULCL policy of the campus network user terminal; Among them, UDM is the unified data management function, PCF is the policy control function, and ULCL is the uplink classifier.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the campus network access method as described in any one of claims 1 to 7 or the campus network access device as described in any one of claims 8 to 9 is implemented.

Images