Terminal communication method and device, computer equipment and storage medium

Abstract

The invention discloses a terminal communication method and device, computer equipment and a storage medium. Belongs to the technical field of communication, and specifically comprises the following steps: in the case that a firewall exists between a public network UPF network element and a private network UPF network element, in response to a ULCL session establishment request sent by a user terminal, obtaining a public network N9 interface address of the public network UPF network element and a private network conversion interface address of the private network UPF network element; and sending the private network conversion interface address to the public network UPF network element, and sending the public network conversion interface address to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address. Based on the terminal communication method provided by the invention, the public network UPF network element and the private network UPF network element can communicate through the firewall, so that the user terminal can access the private network and the public network at the same time.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a terminal communication method, apparatus, computer equipment and storage medium. Background Art

[0002] With the rapid development of 5G private network services based on the fifth-generation communication technology, the demand for intercommunication between private networks and public networks has become increasingly urgent. However, this has also brought about a series of problems such as network security and operator control. In order to solve these problems, a signaling intercommunication gateway is deployed between the signaling planes of the private network and the public network. Signaling messages between the two networks need to be forwarded through the signaling intercommunication gateway to achieve network isolation, topology hiding, network security and other functions, which not only ensures the security of the public network and private network, but also simplifies the complexity of network connection.

[0003] In the scenario where the UPF (User plane Function) network element is moved down to the private network, some user equipment (UE) has the need to access the private network and the public network at the same time. At this time, the user equipment needs to establish a ULCL (Uplink Classifier) ​​session. However, since the private network UPF network element of the private network and the public network UPF network element of the public network are isolated by a firewall, the private network UPF network element and the public network UPF network element cannot communicate normally, which causes the user equipment to be unable to establish a ULCL session and cannot access the private network and the public network at the same time. Summary of the invention

[0004] Based on this, it is necessary to provide a terminal communication method, device, computer equipment and storage medium that can simultaneously use the public network and the private network to address the above technical problems.

[0005] In a first aspect, the present application provides a terminal communication method, the method comprising:

[0006] In the case where there is a firewall between the public network UPF network element and the private network UPF network element, in response to the ULCL session establishment request sent by the user terminal, the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element are obtained; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall;

[0007] The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

[0008] In one embodiment, obtaining the public network N9 interface address of the public network UPF network element includes:

[0009] Sending a first rule configuration request carrying a first session rule to a public network UPF network element;

[0010] Among them, the first rule configuration request is used to instruct the public network UPF network element to perform corresponding rule configuration based on the first session rule, and to feedback the first rule configuration response message carrying the public network N9 interface address of the public network UPF network element to the SMF network element.

[0011] In one embodiment, obtaining the private network conversion interface address of the private network UPF network element includes:

[0012] Send a second rule configuration request carrying a second session rule to the private network UPF network element; wherein the second rule configuration request is used to instruct the private network UPF network element to perform corresponding rule configuration based on the second session rule, and feedback the private network N9 interface address of the private network UPF network element;

[0013] Get the private network conversion interface address corresponding to the private network N9 interface address.

[0014] In one of the embodiments, sending a second rule configuration request carrying a second session rule to a private network UPF network element includes:

[0015] Through the signaling intercommunication gateway, a second rule configuration request carrying the second session rule is sent to the private network UPF network element.

[0016] In one embodiment, obtaining the private network conversion interface address corresponding to the private network N9 interface address includes:

[0017] The signaling intercommunication gateway receives the private network conversion interface address fed back based on the private network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the private network N9 interface address and the private network conversion interface address.

[0018] In one embodiment, sending the public network conversion interface address to the private network UPF network element based on the public network N9 interface address includes:

[0019] The public network N9 interface address is sent to the signaling intercommunication gateway so that the signaling intercommunication gateway sends the public network conversion interface address to the private network UPF network element based on the public network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the public network N9 interface address and the public network conversion interface address.

[0020] In one of the embodiments, the public network conversion interface address is configured in the modification request message, and the modification request message is used to instruct the private network UPF network element to feedback a modification response message to the signaling intercommunication gateway after receiving the public network conversion interface address;

[0021] Accordingly, the method further includes:

[0022] After receiving the modification response message forwarded by the signaling interworking gateway, a ULCL session establishment response message is fed back to the user terminal.

[0023] In a second aspect, the present application provides a terminal communication device, the device comprising:

[0024] An acquisition module, used to obtain the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element in response to an uplink classifier ULCL session establishment request sent by a user terminal when a firewall exists between the public network user plane function UPF network element and the private network UPF network element; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall;

[0025] The sending module is used to send the private network conversion interface address to the public network UPF network element, and send the public network conversion interface address to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

[0026] In a third aspect, the present application further provides a computer device, the computer device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the following steps when executing the computer program:

[0027] In the case where there is a firewall between the public network UPF network element and the private network UPF network element, in response to the ULCL session establishment request sent by the user terminal, the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element are obtained; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall;

[0028] The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

[0029] In a fourth aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0030] In the case where there is a firewall between the public network UPF network element and the private network UPF network element, in response to the ULCL session establishment request sent by the user terminal, the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element are obtained; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall;

[0031] The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

[0032] In a fifth aspect, the present application further provides a computer program product, the computer program product comprising a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0033] In the case where there is a firewall between the public network UPF network element and the private network UPF network element, in response to the ULCL session establishment request sent by the user terminal, the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element are obtained; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall;

[0034] The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

[0035] The above-mentioned terminal communication method, device, computer equipment and storage medium, in this application, when the public network UPF network element and the private network UPF network element are isolated by a firewall, when the SMF network element receives the ULCL session establishment request sent by the user terminal, it obtains the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element. And send the private network conversion interface address to the public network UPF network element, and send the public network conversion interface address to the private network UPF network element based on the public network N9 interface address. The public network UPF network element and the private network UPF network element communicate through the firewall based on the private network conversion interface address and the public network conversion interface address. When communication is established, the data stream of the user terminal can be forwarded to the private network or the public network, so that the user terminal can access the private network and the public network at the same time. That is to say, based on the terminal communication method of the present application, even when the public network UPF network element and the private network UPF network element are isolated by a firewall, the public network UPF network element and the private network UPF network element can communicate through the firewall, thereby realizing the normal transmission of user flows between the public network UPF network element and the private network UPF network element, that is, the user terminal can access the private network and the public network at the same time. This effectively solves the problem in the prior art that the public network UPF network element and the private network UPF network element cannot communicate normally due to the firewall. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 An application environment diagram of a terminal communication method provided in this embodiment;

[0037] Figure 2 A schematic diagram of a flow chart of a terminal communication method provided in this embodiment;

[0038] Figure 3 A schematic diagram of a process for obtaining a private network conversion interface address corresponding to a private network N9 interface address provided in this embodiment;

[0039] Figure 4 A schematic diagram of the process of sending a public network conversion interface address to a private network UPF network element provided in this embodiment;

[0040] Figure 5 A signaling interaction diagram of the terminal communication method provided in this embodiment;

[0041] Figure 6 A structural block diagram of a terminal communication device provided in this embodiment;

[0042] Figure 7 This is a diagram of the internal structure of the computer device provided in this embodiment. DETAILED DESCRIPTION

[0043] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0044] The terminal communication method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Among them, when there is a firewall between the public network UPF network element and the private network UPF network element, the SMF network element receives the ULCL session establishment request sent by the user terminal, and obtains the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element. The SMF network element sends the private network conversion interface address to the public network UPF network element, and sends the public network conversion interface address to the private network UPF network element based on the public network N9 interface address. The public network UPF network element and the private network UPF network element forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address. Among them, the public network conversion interface address is the interface address of the public network N9 interface address after conversion through the firewall; the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion through the firewall.

[0045] Among them, the public network refers to a public wireless communication network established based on the fifth-generation mobile communication technology 5G, which provides high-speed, low-latency and high-capacity mobile communication services to the majority of users. Correspondingly, the private network refers to a dedicated network established based on the fifth-generation mobile communication technology 5G, which is usually used for specific organizations, enterprises or application scenarios to provide customized high-speed, low-latency and high-security communication services. It should be noted that the private network and public network of this application are explained using 5G private network and 5G public network as examples, and the specific versions of the private network and public network are not limited.

[0046] A ULCL (Uplink Classifier) ​​session is a special session in which a portion of a user's uplink traffic is diverted to the private network and a portion is diverted to the public network UPF network element and forwarded to the public network when the user's uplink traffic passes through the dedicated UPF network element.

[0047] The N9 interface refers to the interface between the private network UPF network element and the public network UPF network element, and is used to transmit the traffic in the user ULCL session that is diverted from the private network UPF network element to the public network UPF network element. The private network N9 interface address refers to the N9 interface address of the private network UPF network element. The public network N9 interface address refers to the N9 interface address of the public network UPF network element.

[0048] The SMF (Session Management Function) network element is responsible for interacting with the separated user plane, establishing, modifying, and releasing sessions, allocating and managing IP addresses, etc.

[0049] UPF (User plane Function) network element is responsible for routing and forwarding user data packets, data interaction with external data network DN, QoS processing of user plane, implementation of flow control rules (such as gating, redirection, and traffic steering), etc. Private network UPF network element refers to the UPF network element sunk into the private network. Public network UPF network element refers to the UPF network element in the public network.

[0050] PFCP (Packet Forwarding Control Protocol): The protocol used when SMF network elements communicate with UPF network elements.

[0051] Figure 1 The NSSF network elements, PCF network elements, NRF network elements, AUSF network elements, UDM network elements, AMF network elements, etc. are all network element devices of the 5G core network, and their specific functions will not be repeated here.

[0052] In one embodiment, Figure 2 is a flow chart of a terminal communication method provided according to an embodiment of the present application, in which the method is applied to Figure 1 Taking the SMF network element in FIG. 1 as an example, the method includes the following steps:

[0053] S201, when there is a firewall between the public network UPF network element and the private network UPF network element, in response to a ULCL session establishment request sent by a user terminal, obtain the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element.

[0054] Among them, the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after being converted by the firewall. The private network UPF network element refers to the UPF network element sunk into the private network. The public network UPF network element refers to the public network UPF network element. Firewall refers to a firewall (Firewall) is a network security device or software used to monitor and control network traffic to protect the communication network from unauthorized access, malware or other network attacks. User terminal (User Equipment, UE) refers to the user's terminal equipment. The user terminal of this application is a terminal equipment with ULCL session requirements, that is, a terminal equipment requesting to access the private network and the public network at the same time. ULCL session establishment request refers to a session establishment request sent by the user terminal to the SMF network element when the user has a ULCL session requirement. The private network N9 interface address refers to the N9 interface address of the private network UPF network element. The public network N9 interface address refers to the N9 interface address of the public network UPF network element.

[0055] Optionally, in the present application, when the user terminal has a ULCL session requirement, a ULCL session establishment request is sent to the SMF network element, for example, a switch associated with the ULCL session is turned on or a ULCL session service is successfully subscribed.

[0056] An optional implementation method for obtaining the public network N9 interface address of the public network UPF network element in this embodiment is to send a first address acquisition request to the public network UPF network element, so that the public network UPF network element feeds back the public network N9 interface address to the SMF network element based on the first address acquisition request.

[0057] An optional implementation method for obtaining the private network conversion interface address of the private network UPF network element in this embodiment is to send a second address acquisition request to the private network UPF network element directly or indirectly (for example, through a signaling intercommunication gateway), so that the private network UPF network element feeds back the private network N9 interface address to the SMF network element based on the second address acquisition request. The SMF network element determines the private network conversion interface address of the private network UPF network element based on the private network N9 interface address and the mapping relationship information; wherein the mapping relationship information at least includes the mapping relationship between the private network N9 interface address and the private network conversion interface address.

[0058] S202, send the private network conversion interface address to the public network UPF network element, and send the public network conversion interface address to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address.

[0059] The public network conversion interface address is the interface address of the public network N9 interface after being converted by the firewall.

[0060] In this embodiment, an optional implementation method for sending the private network conversion interface address to the public network UPF network element is to send a modification request message carrying the private network conversion interface address to the public network UPF network element, so that the public network UPF network element obtains the private network conversion interface address based on the modification request message (for example, PFCP modification request message), and feeds back a modification response message (for example, PFCP modification response message) to the SMF network element.

[0061] In this embodiment, an optional implementation method of sending the public network conversion interface address to the private network UPF network element based on the public network N9 interface address is that the SMF network element determines the public network conversion interface address corresponding to the public network N9 interface address based on the public network N9 interface address and the mapping relationship information. And send the public network conversion interface address to the private network UPF network element. Among them, the mapping relationship information at least includes the mapping relationship between the public network N9 interface address and the public network conversion interface address.

[0062] In this embodiment, due to the isolation effect of the firewall, the existing public network UPF network elements and private network UPF network elements cannot communicate. Based on the method of the present application, the public network UFP network element obtains the private network conversion interface address, and the private network UPF network element obtains the public network conversion interface address. After that, they can communicate indirectly through the firewall to achieve the purpose of transmitting the data stream of the user terminal, thereby realizing the purpose of the user terminal successfully establishing a UCUL session.

[0063] In the above-mentioned terminal communication method, when the public network UPF network element and the private network UPF network element are isolated by a firewall, when the SMF network element receives the ULCL session establishment request sent by the user terminal, it obtains the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element. The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address. The public network UPF network element and the private network UPF network element communicate through the firewall based on the private network conversion interface address and the public network conversion interface address. When communication is established, the data flow of the user terminal can be forwarded to the private network or the public network, so that the user terminal can access the private network and the public network at the same time. That is to say, based on the terminal communication method of the present application, even when the public network UPF network element and the private network UPF network element are isolated by a firewall, the public network UPF network element and the private network UPF network element can communicate through the firewall, thereby realizing the normal transmission of user flows between the public network UPF network element and the private network UPF network element, that is, the user terminal can access the private network and the public network at the same time. This effectively solves the problem in the prior art that the public network UPF network element and the private network UPF network element cannot communicate normally due to the firewall.

[0064] In one of the embodiments, in order to obtain the public network N9 interface address of the public network UPF network element, an optional implementation method of obtaining the public network N9 interface address of the public network UPF network element in S201 includes:

[0065] A first rule configuration request carrying a first session rule is sent to a public network UPF network element.

[0066] The first rule configuration request is used to instruct the public network UPF network element to perform corresponding rule configuration based on the first session rule, and to feedback the first rule configuration response message carrying the public network N9 interface address of the public network UPF network element to the SMF network element. The first session rule refers to the session rule that the public network UPF network element needs to configure when performing UCUL communication.

[0067] Optionally, the first session rules include at least uplink and downlink PDR rules of the N9 interface and uplink and downlink PDR rules of the N6 interface, so that the public network UPF network element configures session rules for the N9 interface and the N6 interface based on the first session rules.

[0068] Optionally, in this embodiment, a first rule configuration request (for example, a PFCP establishment request message) carrying a first session rule is sent to a public network UPF network element. A first rule configuration response message (for example, a PFCP establishment response) fed back by the public network UPF network element based on the first rule configuration request is obtained. The first rule configuration response carries the public network N9 interface address of the public network UPF network element. The first rule configuration response message is also used to indicate to the SMF network element that the public network UPF network element has completed the configuration of the session rule.

[0069] In this embodiment, by sending a first rule configuration request to the public network UPF network element, the public network UPF network element can configure the corresponding session rules and feedback the public network N9 interface address of the public network UPF network element to the SMF network element.

[0070] In one embodiment, in order to obtain the private network conversion interface address of the private network UPF network element, such as Figure 3 As shown, the optional implementation method of obtaining the private network conversion interface address of the private network UPF network element in S201 includes:

[0071] S301, sending a second rule configuration request carrying a second session rule to a private network UPF network element.

[0072] The second rule configuration request is used to instruct the private network UPF network element to perform corresponding rule configuration based on the second session rule and feedback the private network N9 interface address of the private network UPF network element. The second session rule refers to the session rule that the private network UPF network element needs to configure when performing UCUL communication.

[0073] Optionally, the second session rules in this embodiment include at least uplink and downlink PDR rules associated with interfaces such as N3 interface, N6 interface and N9 interface, so that the private network UPF network element configures session rules for interfaces such as N3 interface, N6 interface and N9 interface based on the second session rules.

[0074] Optionally, in this embodiment, a second rule configuration request (e.g., PFCP establishment request message) carrying a second session rule is sent to a private network UPF network element through a signaling intercommunication gateway, and a second rule configuration response message (e.g., PFCP establishment response) is fed back, wherein the second rule configuration response message carries the private network N9 interface address of the private network UPF network element. The signaling intercommunication gateway is a device or software used for signaling exchange and conversion between different communication networks.

[0075] S302, obtain the private network conversion interface address corresponding to the private network N9 interface address.

[0076] Optionally, in this embodiment, the signaling intercommunication gateway receives the private network conversion interface address fed back based on the private network N9 interface address and mapping relationship information. The mapping relationship information includes the mapping relationship between the private network N9 interface address and the private network conversion interface address. Specifically, the signaling intercommunication gateway receives the second rule configuration response message, and the signaling intercommunication gateway determines the private network conversion interface address corresponding to the private network N9 interface address based on the mapping relationship information and the private network N9 interface address in the second rule configuration response message. The signaling intercommunication gateway forwards the second rule configuration response message to the SMF network element, wherein the second rule configuration response message carries the private network conversion interface address. The second rule configuration response message is also used to indicate the completed session rule configuration of the SMF network element and the private network UPF network element.

[0077] In this embodiment, a second rule configuration request carrying a second session rule is sent to the private network UPF network element through the signaling intercommunication gateway. The private network conversion interface address corresponding to the private network N9 interface address is obtained through the signaling intercommunication gateway. Based on this embodiment, not only the private network UPF network element completes the configuration of the corresponding session rules, but also the private network conversion interface address of the private network UPF network element is obtained through the mapping relationship information pre-configured in the signaling intercommunication gateway, which provides technical support for the communication between the public network UPF network element and the private network UPF network element.

[0078] In one of the embodiments, in order to send the public network conversion interface address of the public network UPF network element to the private network UPF network element, such as Figure 4 As shown, an optional implementation method of sending the public network conversion interface address to the private network UPF network element based on the public network N9 interface address in S202 includes:

[0079] S401, sending the public network N9 interface address to the signaling intercommunication gateway, so that the signaling intercommunication gateway sends the public network conversion interface address to the private network UPF network element based on the public network N9 interface address and mapping relationship information.

[0080] The mapping relationship information includes the mapping relationship between the public network N9 interface address and the public network conversion interface address.

[0081] Optionally, the SMF network element sends an initial modification request message carrying the public network N9 interface address to the signaling intercommunication gateway, so that the signaling intercommunication gateway determines the public network conversion interface address corresponding to the public network N9 interface address based on the public network N9 interface address and mapping relationship information. And forward the modification request message carrying the public network conversion interface address to the private network UPF network element.

[0082] Optionally, the modification request message is also used to instruct the private network UPF network element to feed back a modification response message to the signaling intercommunication gateway after receiving the public network conversion interface address.

[0083] Optionally, in this embodiment, after receiving the modification response message forwarded by the signaling interworking gateway, a ULCL session establishment response message is fed back to the user terminal.

[0084] In this embodiment, based on the mapping relationship information pre-configured in the signaling interworking gateway, the purpose of sending the public network conversion interface address to the private network UPF network element is achieved. In addition, the public network conversion interface address is configured in the modification request message, and the modification request message is also used to instruct the private network UPF network element to feedback the modification response message to the signaling interworking gateway after receiving the public network conversion interface address. After receiving the modification response message forwarded by the signaling interworking gateway, the SMF network element feedbacks the ULCL session establishment response message to the user terminal to inform the user terminal that the UCUL session establishment is completed.

[0085] In one embodiment, if Figure 5 As shown, another optional implementation of a terminal communication method includes:

[0086] S501, receiving a ULCL session establishment request sent by a user terminal when a firewall exists between a public network UPF network element and a private network UPF network element.

[0087] S502, the SMF network element sends a first rule configuration request carrying a first session rule to the public network UPF network element.

[0088] S503, the SMF network element sends a second rule configuration request carrying the second session rule to the private network UPF network element through the signaling intercommunication gateway.

[0089] S504, the private network UPF network element performs corresponding rule configuration based on the second session rule, and sends the private network N9 interface address of the private network UPF network element to the signaling intercommunication gateway.

[0090] S505, the signaling intercommunication gateway determines and sends the private network conversion interface address to the SMF network element based on the private network N9 interface address and mapping relationship information. The mapping relationship information includes the mapping relationship between the private network N9 interface address and the private network conversion interface address; the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after being converted by the firewall.

[0091] S506, the public network UPF network element performs corresponding rule configuration based on the first session rule, and feeds back a first rule configuration response message carrying the public network N9 interface address of the public network UPF network element to the SMF network element.

[0092] S507, the SMF network element obtains the private network conversion interface address corresponding to the private network N9 interface address.

[0093] S508, the SMF network element sends the private network conversion interface address to the public network UPF network element.

[0094] S509, the SMF network element sends the public network N9 interface address of the public network UPF network element to the signaling intercommunication gateway, wherein the public network N9 interface address is configured in the modification request message.

[0095] S510, the signaling intercommunication gateway sends the public network conversion interface address of the public network UPF network element to the private network UPF network element based on the public network N9 interface address and the mapping relationship information, so that the public network UPF network element and the private network UPF network element forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address of the public network N9 interface address after conversion by the firewall. The mapping relationship information includes the mapping relationship between the public network N9 interface address and the public network conversion interface address.

[0096] S511, after receiving the public network conversion interface address, the private network UPF network element sends a modification response message to the signaling intercommunication gateway.

[0097] S512, the signaling intercommunication gateway forwards the modification response message to the SMF network element.

[0098] S513, after receiving the modification response message forwarded by the signaling interworking gateway, the SMF network element feeds back a ULCL session establishment response message to the user terminal.

[0099] In this embodiment, when the public network UPF network element and the private network UPF network element are isolated by a firewall, when the SMF network element receives the ULCL session establishment request sent by the user terminal, it obtains the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element. The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address. The public network UPF network element and the private network UPF network element communicate through the firewall based on the private network conversion interface address and the public network conversion interface address. When communication is established, the data flow of the user terminal can be forwarded to the private network or the public network, so that the user terminal can access the private network and the public network at the same time. That is to say, based on the terminal communication method of the present application, even when the public network UPF network element and the private network UPF network element are isolated by a firewall, the public network UPF network element and the private network UPF network element can communicate through the firewall, thereby realizing the normal transmission of user flows between the public network UPF network element and the private network UPF network element, that is, the user terminal can access the private network and the public network at the same time. This effectively solves the problem in the prior art that the public network UPF network element and the private network UPF network element cannot communicate normally due to the firewall.

[0100] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0101] Based on the same inventive concept, the embodiment of the present application also provides a terminal communication device for implementing the terminal communication method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more terminal communication device embodiments provided below can refer to the limitations on the terminal communication method above, and will not be repeated here.

[0102] In one embodiment, by Figure 6 FIG. 2 shows a block diagram of a terminal communication device in an embodiment. Figure 6 As shown, a terminal communication device 1 is provided, the device comprising: an acquisition module 10 and a sending module 20, wherein:

[0103] The acquisition module 10 is used to obtain the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element in response to the uplink classifier ULCL session establishment request sent by the user terminal when there is a firewall between the public network user plane function UPF network element and the private network UPF network element; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall;

[0104] Sending module 20 is used to send the private network conversion interface address to the public network UPF network element, and send the public network conversion interface address to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

[0105] The terminal communication device of the present application, when the public network UPF network element and the private network UPF network element are isolated by a firewall, when the SMF network element receives the ULCL session establishment request sent by the user terminal, it obtains the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element. The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address. The public network UPF network element and the private network UPF network element communicate through the firewall based on the private network conversion interface address and the public network conversion interface address. When communication is established, the data stream of the user terminal can be forwarded to the private network or the public network, so that the user terminal can access the private network and the public network at the same time. That is to say, based on the terminal communication method of the present application, even when the public network UPF network element and the private network UPF network element are isolated by a firewall, the public network UPF network element and the private network UPF network element can communicate through the firewall, thereby realizing the normal transmission of user flows between the public network UPF network element and the private network UPF network element, that is, the user terminal can access the private network and the public network at the same time. This effectively solves the problem in the prior art that the public network UPF network element and the private network UPF network element cannot communicate normally due to the firewall.

[0106] In one embodiment, the Figure 6 The acquisition module 10 is also specifically used for:

[0107] Sending a first rule configuration request carrying a first session rule to a public network UPF network element;

[0108] Among them, the first rule configuration request is used to instruct the public network UPF network element to perform corresponding rule configuration based on the first session rule, and to feedback the first rule configuration response message carrying the public network N9 interface address of the public network UPF network element to the SMF network element.

[0109] In one embodiment, the Figure 6 The acquisition module 10 is also specifically used for:

[0110] Send a second rule configuration request carrying a second session rule to the private network UPF network element; wherein the second rule configuration request is used to instruct the private network UPF network element to perform corresponding rule configuration based on the second session rule, and feedback the private network N9 interface address of the private network UPF network element;

[0111] Get the private network conversion interface address corresponding to the private network N9 interface address.

[0112] In one embodiment, the Figure 6 The acquisition module 10 is also specifically used for:

[0113] Through the signaling intercommunication gateway, a second rule configuration request carrying the second session rule is sent to the private network UPF network element.

[0114] In one embodiment, the Figure 6 The acquisition module 10 is also specifically used for:

[0115] The signaling intercommunication gateway receives the private network conversion interface address fed back based on the private network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the private network N9 interface address and the private network conversion interface address.

[0116] In one embodiment, the Figure 6 The sending module 20 is also specifically used for:

[0117] The public network N9 interface address is sent to the signaling intercommunication gateway, so that the signaling intercommunication gateway sends the public network conversion interface address to the private network UPF network element based on the public network N9 interface address and the mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the public network N9 interface address and the public network conversion interface address; the public network conversion interface address is configured in the modification request message, and the modification request message is used to instruct the private network UPF network element to feedback the modification response message to the signaling intercommunication gateway after receiving the public network conversion interface address.

[0118] Based on the above embodiments, Figure 6 The terminal communication device 1 further comprises:

[0119] The receiving module is used to feed back a ULCL session establishment response message to the user terminal after receiving the modification response message forwarded by the signaling interworking gateway.

[0120] Each module in the above terminal communication device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to each module.

[0121] In one embodiment, a computer device is provided. The computer device may be a platform side, and its internal structure diagram may be as shown in FIG. Figure 7 As shown. The computer device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store information related to detection messages. The network interface of the computer device is used to communicate with an external user side through a network connection. When the computer program is executed by the processor, a terminal communication method is implemented.

[0122] Those skilled in the art will understand that Figure 7 The structure shown in the figure is merely a block diagram of a portion of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. Specifically, the computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0123] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0124] In the case where there is a firewall between the public network UPF network element and the private network UPF network element, in response to the ULCL session establishment request sent by the user terminal, the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element are obtained; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall;

[0125] The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

[0126] In one embodiment, when the processor executes the computer program, the following steps are further implemented: obtaining the public network N9 interface address of the public network UPF network element, including:

[0127] Sending a first rule configuration request carrying a first session rule to a public network UPF network element;

[0128] Among them, the first rule configuration request is used to instruct the public network UPF network element to perform corresponding rule configuration based on the first session rule, and to feedback the first rule configuration response message carrying the public network N9 interface address of the public network UPF network element to the SMF network element.

[0129] In one embodiment, when the processor executes the computer program, the following steps are also implemented: obtaining the private network conversion interface address of the private network UPF network element, including:

[0130] Send a second rule configuration request carrying a second session rule to the private network UPF network element; wherein the second rule configuration request is used to instruct the private network UPF network element to perform corresponding rule configuration based on the second session rule, and feedback the private network N9 interface address of the private network UPF network element;

[0131] Get the private network conversion interface address corresponding to the private network N9 interface address.

[0132] In one embodiment, when the processor executes the computer program, the following steps are further implemented: sending a second rule configuration request carrying a second session rule to a private network UPF network element, including:

[0133] Through the signaling intercommunication gateway, a second rule configuration request carrying the second session rule is sent to the private network UPF network element.

[0134] In one embodiment, when the processor executes the computer program, the following steps are further implemented: obtaining the private network conversion interface address corresponding to the private network N9 interface address, including:

[0135] The signaling intercommunication gateway receives the private network conversion interface address fed back based on the private network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the private network N9 interface address and the private network conversion interface address.

[0136] In one embodiment, when the processor executes the computer program, the following steps are further implemented: sending the public network conversion interface address to the private network UPF network element based on the public network N9 interface address, including:

[0137] The public network N9 interface address is sent to the signaling intercommunication gateway so that the signaling intercommunication gateway sends the public network conversion interface address to the private network UPF network element based on the public network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the public network N9 interface address and the public network conversion interface address.

[0138] In one embodiment, when the processor executes the computer program, the following steps are also implemented: the public network conversion interface address is configured in the modification request message, and the modification request message is used to instruct the private network UPF network element to feedback a modification response message to the signaling intercommunication gateway after receiving the public network conversion interface address;

[0139] Accordingly, the method further includes:

[0140] After receiving the modification response message forwarded by the signaling interworking gateway, a ULCL session establishment response message is fed back to the user terminal.

[0141] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0142] In the case where there is a firewall between the public network UPF network element and the private network UPF network element, in response to the ULCL session establishment request sent by the user terminal, the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element are obtained; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall;

[0143] The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

[0144] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: obtaining the public network N9 interface address of the public network UPF network element, including:

[0145] Sending a first rule configuration request carrying a first session rule to a public network UPF network element;

[0146] Among them, the first rule configuration request is used to instruct the public network UPF network element to perform corresponding rule configuration based on the first session rule, and to feedback the first rule configuration response message carrying the public network N9 interface address of the public network UPF network element to the SMF network element.

[0147] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: obtaining the private network conversion interface address of the private network UPF network element, including:

[0148] Send a second rule configuration request carrying a second session rule to the private network UPF network element; wherein the second rule configuration request is used to instruct the private network UPF network element to perform corresponding rule configuration based on the second session rule, and feedback the private network N9 interface address of the private network UPF network element;

[0149] Get the private network conversion interface address corresponding to the private network N9 interface address.

[0150] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: sending a second rule configuration request carrying a second session rule to a private network UPF network element, including:

[0151] Through the signaling intercommunication gateway, a second rule configuration request carrying the second session rule is sent to the private network UPF network element.

[0152] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: obtaining the private network conversion interface address corresponding to the private network N9 interface address includes:

[0153] The signaling intercommunication gateway receives the private network conversion interface address fed back based on the private network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the private network N9 interface address and the private network conversion interface address.

[0154] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: sending the public network conversion interface address to the private network UPF network element based on the public network N9 interface address, including:

[0155] The public network N9 interface address is sent to the signaling intercommunication gateway so that the signaling intercommunication gateway sends the public network conversion interface address to the private network UPF network element based on the public network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the public network N9 interface address and the public network conversion interface address.

[0156] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the public network conversion interface address is configured in the modification request message, and the modification request message is used to instruct the private network UPF network element to feedback a modification response message to the signaling intercommunication gateway after receiving the public network conversion interface address;

[0157] Accordingly, the method further includes:

[0158] After receiving the modification response message forwarded by the signaling interworking gateway, a ULCL session establishment response message is fed back to the user terminal.

[0159] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0160] In the case where there is a firewall between the public network UPF network element and the private network UPF network element, in response to the ULCL session establishment request sent by the user terminal, the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element are obtained; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall;

[0161] The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element can forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

[0162] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: obtaining the public network N9 interface address of the public network UPF network element, including:

[0163] Sending a first rule configuration request carrying a first session rule to a public network UPF network element;

[0164] Among them, the first rule configuration request is used to instruct the public network UPF network element to perform corresponding rule configuration based on the first session rule, and to feedback the first rule configuration response message carrying the public network N9 interface address of the public network UPF network element to the SMF network element.

[0165] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: obtaining the private network conversion interface address of the private network UPF network element, including:

[0166] Send a second rule configuration request carrying a second session rule to the private network UPF network element; wherein the second rule configuration request is used to instruct the private network UPF network element to perform corresponding rule configuration based on the second session rule, and feedback the private network N9 interface address of the private network UPF network element;

[0167] Get the private network conversion interface address corresponding to the private network N9 interface address.

[0168] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: sending a second rule configuration request carrying a second session rule to a private network UPF network element, including:

[0169] Through the signaling intercommunication gateway, a second rule configuration request carrying the second session rule is sent to the private network UPF network element.

[0170] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: obtaining the private network conversion interface address corresponding to the private network N9 interface address includes:

[0171] The signaling intercommunication gateway receives the private network conversion interface address fed back based on the private network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the private network N9 interface address and the private network conversion interface address.

[0172] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: sending the public network conversion interface address to the private network UPF network element based on the public network N9 interface address, including:

[0173] The public network N9 interface address is sent to the signaling intercommunication gateway so that the signaling intercommunication gateway sends the public network conversion interface address to the private network UPF network element based on the public network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the public network N9 interface address and the public network conversion interface address.

[0174] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the public network conversion interface address is configured in the modification request message, and the modification request message is used to instruct the private network UPF network element to feedback a modification response message to the signaling intercommunication gateway after receiving the public network conversion interface address;

[0175] Accordingly, the method further includes:

[0176] After receiving the modification response message forwarded by the signaling interworking gateway, a ULCL session establishment response message is fed back to the user terminal.

[0177] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0178] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0179] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A terminal communication method, characterized in that: Applied to a session management function (SMF) network element, the method comprises: In the case where there is a firewall between the public network user plane function UPF network element and the private network UPF network element, in response to the uplink classifier ULCL session establishment request sent by the user terminal, the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element are obtained; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall; The private network conversion interface address is sent to the public network UPF network element, and the public network conversion interface address is sent to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

2. The method according to claim 1, characterized in that The obtaining of the public network N9 interface address of the public network UPF network element includes: Sending a first rule configuration request carrying a first session rule to the public network UPF network element; Among them, the first rule configuration request is used to instruct the public network UPF network element to perform corresponding rule configuration based on the first session rule, and to feedback to the SMF network element the first rule configuration response message carrying the public network N9 interface address of the public network UPF network element.

3. The method according to claim 1, characterized in that Obtain the private network conversion interface address of the private network UPF network element, including: Send a second rule configuration request carrying a second session rule to the private network UPF network element; wherein the second rule configuration request is used to instruct the private network UPF network element to perform corresponding rule configuration based on the second session rule, and feedback the private network N9 interface address of the private network UPF network element; Obtain the private network conversion interface address corresponding to the private network N9 interface address.

4. The method according to claim 3, characterized in that The sending a second rule configuration request carrying a second session rule to the private network UPF network element includes: Through the signaling intercommunication gateway, a second rule configuration request carrying the second session rule is sent to the private network UPF network element.

5. The method according to claim 4, characterized in that The obtaining the private network conversion interface address corresponding to the private network N9 interface address includes: Receive the private network conversion interface address fed back by the signaling intercommunication gateway based on the private network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the private network N9 interface address and the private network conversion interface address.

6. The method according to claim 1, characterized in that The sending the public network conversion interface address to the private network UPF network element based on the public network N9 interface address includes: Send the public network N9 interface address to the signaling intercommunication gateway so that the signaling intercommunication gateway sends the public network conversion interface address to the private network UPF network element based on the public network N9 interface address and mapping relationship information; wherein the mapping relationship information includes the mapping relationship between the public network N9 interface address and the public network conversion interface address.

7. The method according to claim 6, characterized in that The public network conversion interface address is configured in the modification request message, and the modification request message is used to instruct the private network UPF network element to feedback a modification response message to the signaling intercommunication gateway after receiving the public network conversion interface address; Accordingly, the method further includes: After receiving the modification response message forwarded by the signaling interworking gateway, a ULCL session establishment response message is fed back to the user terminal.

8. A terminal communication device, characterized in that: Configured in an SMF network element, the device comprises: An acquisition module is used to obtain the public network N9 interface address of the public network UPF network element and the private network conversion interface address of the private network UPF network element in response to an uplink classifier ULCL session establishment request sent by a user terminal when a firewall exists between the public network user plane function UPF network element and the private network UPF network element; wherein the private network conversion interface address is the interface address of the private network N9 interface address of the private network UPF network element after conversion by the firewall; A sending module is used to send the private network conversion interface address to the public network UPF network element, and send the public network conversion interface address to the private network UPF network element based on the public network N9 interface address, so that the public network UPF network element and the private network UPF network element forward the data flow of the user terminal to the private network or the public network through the firewall based on the private network conversion interface address and the public network conversion interface address; wherein the public network conversion interface address is the interface address after the public network N9 interface address is converted by the firewall.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images