Data distribution method and device, related equipment and computer readable storage medium

Abstract

The invention discloses a data distribution method and device, related equipment and a computer readable storage medium. The method comprises the following steps: acquiring first information; the first information represents user plane information of at least one first user; the first information comprises at least one of the following information: GTP-U tunnel identification information; iP address information of the UE; associating the first information with identity identification information of a corresponding first user to obtain second information; the second information represents association information of the first information and identity identification information of a corresponding first user; reporting the second information to a shunting device; and the shunting equipment is used for performing data shunting by using the second information. The user plane information is dynamically allocated when the user accesses the network, and the user plane information needs to be dynamically allocated again when the user accesses the network again, so that the difficulty of acquiring the user plane information of the local user by an illegal user is greatly increased, and the security of the local application is enhanced.

Description

Technical Field

[0001] The present application relates to the field of network communication technology, and in particular to a data diversion method, apparatus, related equipment and computer-readable storage medium. Background Art

[0002] With the continuous emergence of industrial Internet services, Internet of Things application services, and digital services, the demand for dedicated networks (i.e. private networks) within large enterprise parks is gradually increasing. Users in manufacturing, logistics, ports, electricity, and chemical industries are in urgent need of private network solutions for the fifth generation mobile communication technology (5G) industry.

[0003] In the related art, some data diversion solutions have been proposed for the private networks of the 5G industry. However, the data diversion solutions in the related art require the processing of the entire 5G system before the data can be diverted to the local application server, which increases the network processing delay and cannot meet the industrial application needs of the 5G industry private network. In addition, since the data diversion solutions in the related art cannot restrict other users from accessing local applications, this brings security issues to local applications. Summary of the invention

[0004] In order to solve the technical problems existing in the related technologies, the embodiments of the present application provide a data diversion method, an apparatus, related equipment and a computer-readable storage medium.

[0005] To achieve the above purpose, the technical solution of the embodiment of the present application is implemented as follows:

[0006] In a first aspect, an embodiment of the present application provides a data offloading method, which is applied to a first network element device, including:

[0007] Acquire first information; the first information represents user plane information of at least one first user;

[0008] The first information includes at least one of the following:

[0009] General Packet Radio Service (GPRS) Tunneling Protocol for the User Plane (GTP-U) tunnel identification information of the user plane; Internet Protocol (IP) address information of the user equipment (UE);

[0010] Associating the first information with the identity information of the corresponding first user to obtain second information; the second information represents the association information between the first information and the identity information of the corresponding first user;

[0011] The second information is reported to a diversion device; the diversion device is used to perform data diversion using the second information.

[0012] In a second aspect, the embodiment of the present application further provides another data offloading method, which is applied to the offloading device, including:

[0013] Receiving second information reported by the first network element device;

[0014] The second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user;

[0015] The first information includes at least one of the following:

[0016] GTP-U tunnel identification information; UE IP address information;

[0017] The second information is used to perform data distribution.

[0018] In a third aspect, an embodiment of the present application provides a data distribution device, which is applied to a first network element device, including:

[0019] An acquiring unit, configured to acquire first information; the first information represents user plane information of at least one first user;

[0020] The first information includes at least one of the following:

[0021] GTP-U tunnel identification information; UE IP address information;

[0022] an associating unit, configured to associate the first information with the identity information of the corresponding first user to obtain second information; the second information represents the association information between the first information and the identity information of the corresponding first user;

[0023] The reporting unit is used to report the second information to the diversion device; the diversion device is used to use the second information to perform data diversion.

[0024] In a fourth aspect, an embodiment of the present application further provides another data distribution device, which is applied to a distribution device, including:

[0025] A receiving unit, configured to receive second information reported by a first network element device;

[0026] The second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0027] The diversion unit is used to perform data diversion by using the second information.

[0028] In a fifth aspect, an embodiment of the present application provides a first network element device, including: a first processor and a first memory for storing a computer program that can be run on the first processor;

[0029] Among them, when the first processor is used to run the computer program, it executes the steps of the data diversion method on the first network element device side described in the embodiment of the present application.

[0030] In a sixth aspect, an embodiment of the present application provides a traffic distribution device, including: a second processor and a second memory for storing a computer program that can be run on the second processor;

[0031] Wherein, when the second processor is used to run the computer program, it executes the steps of the data diversion method on the diversion device side described in the embodiment of the present application.

[0032] In the seventh aspect, an embodiment of the present application provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of the data diversion method on the first network element device side described in the embodiment of the present application are implemented, or the steps of the data diversion method on the diversion device side described in the embodiment of the present application are implemented.

[0033] The data diversion method, apparatus, related equipment and computer-readable storage medium provided in the embodiments of the present application associate user plane information of at least one first user with the identity information of the corresponding first user through a first network element device to obtain corresponding association information, and report the association information to the diversion device, so that the diversion device uses the user plane information of the first user associated with the identity information of the target user as the basis for diversion, thereby implementing a user-level data diversion strategy for local business data. It can be seen that the diversion device generates a data diversion strategy before the local uplink data is sent, thereby utilizing the data diversion strategy to implement real-time diversion of local business data and reduce network processing delay; and the user plane information is dynamically allocated when the user joins the network, and when the user re-joins the network, its user plane information needs to be dynamically reallocated, which greatly increases the difficulty for illegal users to obtain user plane information of local users and prevents them from impersonating local users to attack local applications, thereby enhancing the security of local applications. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 The data flow diagram of the present invention is as follows: Figure 1 ;

[0035] Figure 2 A schematic diagram of a reporting method for reporting second information to a diversion device provided in an embodiment of the present application;

[0036] Figure 3 The data flow diagram of the present invention is as follows: Figure 2 ;

[0037] Figure 4 A schematic diagram of a local business data hierarchical diversion provided in an embodiment of the present application;

[0038] Figure 5 The data flow diagram of the present invention is as follows: Figure 3 ;

[0039] Figure 6 This is a schematic diagram of the structure of the 5G industry private network in the application scenario of the remote core network;

[0040] Figure 7 This is a schematic diagram of the structure of 5G industry-specific network in the application scenario of sinking core network;

[0041] Figure 8 The data flow diagram of the present invention is as follows: Figure 4 ;

[0042] Fig. 9 A schematic diagram of the structure of a data distribution device according to an embodiment of the present application;

[0043] Fig.10The structure diagram of the data splitting device according to the embodiment of the present application is shown in FIG. Figure 1 ;

[0044] Fig.11 The structure diagram of the data splitting device according to the embodiment of the present application is shown in FIG. Figure 2 ;

[0045] Fig.12 A schematic diagram of the hardware structure of the first network element device in an embodiment of the present application;

[0046] Fig.13 A schematic diagram of the hardware structure of the flow diversion device according to an embodiment of the present application;

[0047] Fig.14 A structural diagram of a data diversion system according to an embodiment of the present application. DETAILED DESCRIPTION

[0048] The present application will be further described in detail below with reference to the accompanying drawings and embodiments.

[0049] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein in the specification of this application are only for the purpose of describing specific embodiments and are not intended to limit this application.

[0050] In the related technologies, some data offloading methods have been proposed for the private networks of the 5G industry, such as the uplink classifier (UL CL) solution, the IPv6 multi-homing solution, the data network name (DNN) solution, the local area data network (LADN) solution, and the network slicing solution. The following is a brief introduction to these data offloading methods in the related technologies.

[0051] Among them, for the UL CL solution, the Session Management Function (SMF) will insert one or more uplink traffic classifiers in the data path of the User Protocol Data Unit (PDU) session during or after the establishment of the PDU session. The session type of UL CL can be IPv4, IPv6, and IPv4v6. UL CL supports traffic detection and traffic forwarding rules based on the SMF, and forwards uplink service flows to different PDU session anchor user plane functions (UPF), as well as merges downlink service flows from different PDU session anchor UPFs on the link to the 5G terminal.

[0052] For the IPv6 Multi-homing solution, SMF supports inserting a multi-homing session branch point in the data path of the PDU session during or after the establishment of the PDU session. The session type of Multi-homing can only be IPv6. In the Multi-homing scenario, UPF needs to support IPv6 multi-homing function, that is, a PDU session can be associated with multiple IPv6 prefixes, forwarding uplink service flows of different IPv6 prefixes to different PDU session anchor UPFs, and merging downlink service flows from different PDU session anchor UPFs to the 5G terminal.

[0053] For the DNN solution, 5G users sign up for a specific DNN in the network. When selecting UPF, SMF selects the destination edge UPF based on the specific DNN provided by the 5G terminal and the tracking area where it is located, thereby completing the establishment of the edge PDU session and accessing the Multi-access Edge Computing (MEC) platform connected to the edge UPF.

[0054] For the LADN solution, when 5G users register with the network, they can obtain local network information, user location information, etc. from the core network. The access and mobility management function (AMF) determines that the 5G terminal appears in the LADN area, and the requested DNN is configured as LADN DNN in the AMF and forwarded to the SMF. Then, the SMF selects the appropriate local edge UPF based on the instructions from the AMF and establishes a local PDU session, thereby realizing local network access and local application access.

[0055] For the network slicing solution, 5G networks divide logical networks for different purposes in the physical network through logical control. For different business priorities, the network allocates different resources, provides different service qualities, and supports different applications. The biggest feature of network slicing is end-to-end isolation. The access control and selection functions of network slices are combined with the availability of slices to guide UEs to access appropriate network slices, support UE slice-related identification decisions and allocations (contracted identification, allowed identification, configured identification), and support decision-making and updates based on the application's slice selection strategy, so as to achieve customization of network functions within slices in different scenarios.

[0056] In addition, the relevant technology also involves solutions such as diversion based on the source IP address in the user's uplink data and modification of the PDU session to establish or modify the uplink information corresponding to the request to the corresponding MEC, as well as local data filtering and analysis by means of splitting messages.

[0057] However, the IPv6 Multi-homing solution, DNN solution, LADN solution and network slicing solution mentioned in the 3GPP standard specifications have new functional requirements for terminals. According to the survey of the industry chain, the terminal's support for related functions still needs to be realized according to business needs. Therefore, the maturity of these end-to-end data diversion solutions still requires a period of development, testing and verification. The UL CL solution involves the insertion, modification and deletion of UL CL triggered under different conditions. The terminal does not perceive the change process of ULCL, but the diversion judgment of inserting UL CL is sent to the destination application, which increases the network processing delay. For the application of vertical industry private networks, especially in industrial control scenarios, lower network processing delay is required, and the above-mentioned local business data diversion solutions require the entire 5G system to process before diverting the data to the local application server, resulting in network processing delay that cannot meet the needs of industrial applications.

[0058] In addition, the data diversion methods in the relevant technologies still have the following deficiencies in response to the needs of 5G industry-specific networks: First, data diversion methods based on non-user identification, including the solutions recommended by the 3GPP standards mentioned above, cannot restrict other users from accessing local applications or local networks, which will bring security issues to local networks and applications; Second, for data diversion methods based on user identification (for example, International Mobile Subscriber Identity (IMSI) and / or Globally Unique Temporary Identifier (GUTI)), the terminal mapping table is a pre-stored data diversion method. When applied, it is necessary to plan and configure in advance, and the information allocated to the user by the 5G core network each time must be consistent, that is, the 5G core network function needs to be customized, and since the user plane information is not dynamically allocated, once the information is leaked, it will also cause security issues.

[0059] Based on this, an embodiment of the present application proposes a data diversion method. In various embodiments of the present application, the user plane information of at least one first user is associated with the identity information of the corresponding first user through a first network element device to obtain corresponding association information, and the association information is reported to the diversion device, so that the diversion device uses the user plane information of the first user associated with the identity information of the target user as the basis for diversion, thereby implementing a user-level data diversion strategy for local business data. It can be seen that the diversion device generates a data diversion strategy before the local uplink data is sent, thereby utilizing the data diversion strategy to implement real-time diversion of local business data and reduce network processing delay; and, the user plane information is dynamically allocated when the user joins the network. When the user re-joins the network, its user plane information needs to be dynamically reallocated, which greatly increases the difficulty for illegal users to obtain the user plane information of local users, and they cannot impersonate local users to attack local applications, thereby enhancing the security of local applications.

[0060] The embodiment of the present application provides a data offloading method, which is applied to a first network element device; Figure 1 The data flow diagram of the present invention is as follows: Figure 1 ;like Figure 1 As shown, the method includes:

[0061] Step 101: Obtain first information.

[0062] Here, the first information represents user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information.

[0063] Among them, the GTP-U tunnel identification information includes at least one of the following: GTP-U endpoint identification; Tunnel endpoint identification (TEID, Tunnel End Point Identifier); GTP-U endpoint identification includes the IP address of the nodes at both ends of the GTP-U tunnel and the User Datagram Protocol (UDP, User Datagram Protocol) port identification, and the default port is 2152. The IP address information of the UE is generally the IP address information assigned by the default bearer, and can also be the IP address information assigned by the 5G industry private network dedicated DNN, which is not specifically limited here.

[0064] Step 102: Associating the first information with the corresponding identity information of the first user to obtain second information.

[0065] The second information represents association information between the first information and the corresponding identity information of the first user.

[0066] In actual application, the first information is associated with the corresponding identity information of the first user in a mapping manner. Specifically, there is a one-to-one correspondence between the first information and the identity information of the first user. Generally speaking, the association information between the first information and the corresponding identity information of the first user is stored in an association table (also called a mapping table) to facilitate subsequent search for the first information associated with the identity information of the first user that successfully matches the identity information of the target user.

[0067] Here, the identity information of the first user includes at least one of the following: IMSI; Subscription Permanent Identifier (SUPI).

[0068] Step 103: reporting the second information to a diversion device; the diversion device is used to perform data diversion using the second information.

[0069] Here, the first network element device can be SMF, that is, in the data diversion method of this embodiment, SMF reports the association information between the first information and the corresponding first user's identity information to the diversion device in real time, so that the diversion device uses the received association information to divert data. It can be seen that the data diversion method of this embodiment only needs to deploy the diversion device, and does not need to be deployed in the core network UPF, that is, there is no need to divert the data to the local application after being processed by the UPF, which reduces the complexity of deployment and implementation and reduces investment costs.

[0070] In actual application, after the control plane registration is completed, the UE initiates a PDU session establishment request to the first network element device. After the first network element device detects that the PDU session is successfully established, the first information can be quickly acquired.

[0071] Based on this, in one embodiment, obtaining the first information includes:

[0072] Receiving a first request initiated by the UE of the at least one first user; the first request represents a PDU session establishment request;

[0073] In response to the first request, a PDU session is established for the UE of the at least one first user, and after the PDU session is successfully established, the first information is obtained.

[0074] Here, the response is used to indicate the conditions or states on which the executed operations depend. When the dependent conditions or states are met, one or more operations executed may be in real time or have a set delay. Unless otherwise specified, there is no restriction on the order of execution of the multiple operations executed.

[0075] In actual application, as for the method of obtaining the first information, the first network element device can dynamically obtain the first information based on the establishment of the session, thereby making the method of obtaining the first information more flexible.

[0076] Based on this, in one embodiment, the GTP-U tunnel identification information includes one of the following: uplink GTP-U tunnel identification information; downlink GTP-U tunnel identification information;

[0077] The obtaining of the first information includes:

[0078] receiving third information sent by the second network element device through the first communication connection; the third information includes at least one of the following: uplink GTP-U tunnel identification information; UE IP address information; the first communication connection is established based on a Packet Forwarding Control Protocol (PFCP) session between the second network element device and the first network element device; and,

[0079] The fourth information sent by the network device is received through the second communication connection; the fourth information represents the downlink GTP-U tunnel identification information; the second communication connection is established based on the PDU session resources between the first network element device and the network device through the third network element device.

[0080] Here, the second network element device may be a UPF, and the first network element device may be an SMF. At this time, the first communication connection is an interactive connection between the SMF and the UPF for establishing a PFCP session, that is, the first communication connection is established based on the PFCP session between the SMF and the UPF. In actual application, the SMF and the UPF interact to establish a PFCP session, and the UPF allocates the third information to the user, and the third information here may include at least one of the following: uplink GTP-U tunnel identification information; UE IP address information.

[0081] It should be noted that if UPF does not assign UE's IP address information to the user, the first network element device, namely SMF itself, will assign UE's IP address information to the user.

[0082] Here, the network device may be a base station, and the third network element device may be an AMF. At this time, the second communication connection is an interactive connection established by SMF through AMF and the base station for PDU session resources. That is to say, the second communication connection is established based on the PDU session resources established by SMF through AMF and the base station. In actual application, SMF interacts with the base station through AMF to establish PDU session resources, and the base station allocates the fourth information to the user, where the fourth information represents the downlink GTP-U tunnel identification information.

[0083] In actual application, the first network element device can select a reporting method as needed, and report the second information to the diversion device in real time through the selected reporting method (for example, through a custom interface reporting method, or through a network exposure function (NEF, Network Exposure Function) network element reporting method). It can be seen that the reporting method of the first network element device reporting the second information in the embodiment of the present application is more diverse, so that the diversion device can use the second information to perform timely and accurate data diversion.

[0084] Based on this, in one embodiment, reporting the second information to the traffic diversion device includes one of the following:

[0085] Reporting the second information to the diversion device through a first interface; the first interface is a custom interface; the first interface is set between the first network element device and the diversion device;

[0086] The second information is reported to the diversion device through a fourth network element device; the fourth network element device represents the NEF network element.

[0087] Figure 2 A schematic diagram of a reporting method for reporting the second information to the diversion device provided in an embodiment of the present application, such as Figure 2 As shown, the first network element device (i.e., SMF) can report the second information, i.e., the association information between the first information (i.e., the user plane information of the networked user) and the corresponding first user's identity information to the diversion device through a custom interface, and can also report the second information to the diversion device through a fourth network element device (i.e., NEF). Here, the first network element device reports the user plane information of all local users in the 5G private network to the diversion device in real time. If the first network element device cannot distinguish between private network users, it reports the user plane information of all networked users to the diversion device in real time. Among them, the reported user plane information of networked users can be the full user plane information or the incremental user plane information, which is not limited here.

[0088] The embodiment of the present application also provides another data diversion method, which is applied to a diversion device. Figure 3 The data flow diagram of the present invention is as follows: Figure 2 ;like Figure 3 As shown, the method includes:

[0089] Step 301: Receive second information reported by a first network element device.

[0090] Here, the second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE's IP address information.

[0091] In one embodiment, the receiving the second information reported by the first network element device includes one of the following:

[0092] receiving second information reported by a first network element device through a first interface; the first interface is a custom interface; the first interface is arranged between the first network element device and the diversion device;

[0093] The second information reported by the first network element device is received through a fourth network element device; the fourth network element device represents the NEF network element.

[0094] Step 302: Use the second information to perform data diversion.

[0095] In actual application, after receiving the second information reported by the first network element device, the diversion device directly determines the data diversion strategy for the target user (i.e., the user to access the local application) locally on the diversion device, thereby using the determined data diversion strategy to achieve real-time diversion of local business data. There is no need to deploy the core network UPF downward, that is, there is no need to process the data through the UPF before diverting it to the local application, thereby reducing the complexity of deployment and implementation and reducing investment costs.

[0096] Based on this, in one embodiment, the step of using the second information to perform data distribution includes:

[0097] Based on the second information, determining identity information of at least one first user;

[0098] In the case where one of the identity information of the at least one first user successfully matches the identity information of the target user, generating a target diversion strategy; the target diversion strategy includes at least fifth information, the fifth information representing the first information associated with the identity information of the first user that successfully matches the identity information of the target user;

[0099] A data diversion operation is performed based on the target diversion strategy.

[0100] In actual application, the target user can open an account in the core network in advance with the target user's identity information (i.e., the user identity information of the local application), and input (i.e., enter) the target user's identity information in the diversion device. The target user's identity information is the user identity information for the target user to access the local application, so that the subsequent diversion device can generate a target diversion strategy based on the target user's identity information.

[0101] Based on this, in one embodiment, the method further includes:

[0102] Acquire the identity information of the target user input by the target user; wherein the identity information of the target user is the information of the target user opening an account in advance in the core network.

[0103] Here, the identity information of the target user includes at least one of the following: IMSI; SUPI.

[0104] In one embodiment, performing the data diversion operation based on the target diversion strategy includes one of the following:

[0105] In the case where the local service data is uplink data, the uplink data is matched using the uplink GTP-U tunnel identification information in the target offload strategy, and the successfully matched uplink data is forwarded to the local application server;

[0106] In the case where the local service data is downlink data, the downlink GTP-U tunnel identification information of the target user is determined based on the target diversion strategy and the destination IP address of the downlink data, the downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identification information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through a network device.

[0107] Specifically, when the uplink data reaches the diversion device, the diversion device will filter the uplink data using the target diversion strategy, that is, match the uplink GTP-U tunnel identification information in the target diversion strategy with the received uplink data, and forward the successfully matched uplink data to the local application server, and continue to send the unmatched uplink data along the N3 path. Here, the local application server can be deployed together with the diversion device, or it can be deployed independently in the MEC. When the diversion device receives the downlink data (which can be a downlink IP data packet) sent by the local application, the diversion device matches the destination IP address of the downlink data with the IP address information of the UE that is effective in the target diversion strategy, thereby matching the downlink GTP-U tunnel identification information of the target user, and using the matched downlink GTP-U tunnel identification information to encapsulate the downlink data into a GTP-U data packet, and send the encapsulated GTP-U data packet to the base station via the N3 path. When the base station receives the encapsulated GTP-U data packet, it continues to forward the encapsulated GTP-U data packet to the UE corresponding to the target user.

[0108] In actual application, in the 5G campus private network of vertical industries, there are often multiple business applications, such as industrial manufacturing, video surveillance, smart warehousing, smart campus, etc. In order to meet the business needs of multiple business applications at the same time, the data diversion method of the embodiment of the present application supports the cascaded use of multiple diversion devices, and divides the business data of local applications according to priority, while continuing to send other non-local business data to the core network UPF network element along the N3 path. Figure 4 A schematic diagram of a local business data hierarchical diversion provided in an embodiment of the present application, such as Figure 4 As shown, in a 5G private network, multiple traffic distribution devices (such as Figure 4 The traffic diversion devices 1 and 2 in the MEC perform hierarchical diversion operations on local business data to meet the diverse business needs of industry users and realize the multi-purpose use of the 5G private network. Among them, the traffic diversion device 1 is deployed separately from the local application server, that is, the local application server is independently deployed in the MEC; the traffic diversion device 2 is deployed together with the local application server.

[0109] In the related art, for the diversion method based on the detection information to obtain the uplink and downlink user plane information of the terminal user, there is a problem that the detection takes time, resulting in the inability to divert in time, and there is also a problem that the detection feedback information is incorrect, resulting in the inability to divert accurately. To solve this technical problem, in an embodiment of the present application, the user plane information of at least one first user is associated with the corresponding first user's identity information through the first network element device, and the corresponding association information is obtained, and the association information is reported to the diversion device, so that the diversion device uses the user plane information of the first user associated with the identity information of the target user as the basis for diversion, and implements the user-level data diversion strategy for local business data. Since the identity information of the target user is entered into the diversion device one by one, the diversion device can realize the timely and accurate diversion of local business data according to the precisely matched data diversion strategy, thereby meeting the needs of 5G industry private network applications.

[0110] The present application embodiment also provides another data distribution method: Figure 5 The data flow diagram of the present invention is as follows: Figure 3 ;like Figure 5 As shown, the method includes:

[0111] Step 501: A first network element device obtains first information.

[0112] Here, the first information represents user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information.

[0113] Step 502: The first network element device associates the first information with the corresponding identity information of the first user to obtain second information.

[0114] Here, the second information represents association information between the first information and the corresponding identity information of the first user.

[0115] Step 503: The first network element device reports the second information to the traffic distribution device.

[0116] Step 504: The traffic distribution device receives the second information reported by the first network element device.

[0117] Step 505: The traffic distribution device performs data distribution using the second information.

[0118] It should be noted that the specific processing process of the first network element device and the traffic diversion device has been described in detail above and will not be repeated here.

[0119] By adopting the technical solution of the embodiment of the present application, the diversion device generates a data diversion strategy before the local uplink data is sent, thereby using the data diversion strategy to realize real-time diversion of local business data and reduce network processing delay; and the user plane information is dynamically allocated when the user joins the network. When the user re-joins the network, its user plane information needs to be dynamically reallocated, which greatly increases the difficulty for illegal users to obtain the user plane information of local users and cannot impersonate local users to attack local applications, thereby enhancing the security of local applications.

[0120] The present application is described below in conjunction with application examples.

[0121] The following uses the local business data in the 5G industry private network as an example to illustrate the data diversion method of this application.

[0122] The following is an explanation of the structure of the 5G industry-specific network. Figure 6 This is a schematic diagram of the structure of the 5G industry-specific network in the application scenario of the remote core network. Figure 7 This is a schematic diagram of the structure of the 5G industry private network in the application scenario of sinking the core network. Figure 6 and Figure 7 , a diversion device is connected in series between the base station and the core network UPF. According to the construction mode of the 5G industry private network, the data diversion method of this application supports both the application scenarios of the remote core network and the application scenarios of the sinking core network. In the application scenario of the remote core network, UPF can consider whether to sink according to actual needs. If the diversion device can meet the forwarding requirements of local application data, there is no need to sink UPF. In addition, the data diversion method of this application also supports the connection of multiple diversion devices in series between the base station and UPF to meet the multi-service needs of industry users and realize the multi-use of one network of 5G private network.

[0123] Based on the above-mentioned 5G industry-specific network structure, the specific processing flow of the data diversion method of the present application is described in detail. Figure 8 The data flow diagram of the present invention is as follows: Figure 4 , combined with Figure 8 The data diversion method of the present application is described. The specific processing flow of the data diversion method includes the following steps:

[0124] Step 1: According to the local user identity information planned for the 5G industry private network deployment, an account is opened for the local user in the core network, and the user identity information for accessing the local application (i.e. the identity information of the target user mentioned above) is entered into the local diversion device.

[0125] Step 2: The local user terminal UE starts to access the 5G private network. After the control plane registration is completed, the UE initiates a PDU session establishment request to the core network. The SMF is responsible for establishing the uplink and downlink GTP-U tunnel identification information of the PDU session and allocating the UE IP (that is, the aforementioned UE IP address information).

[0126] Specifically, first, SMF interacts with UPF to establish a PFCP session, and UPF allocates the GTP-U tunnel identifier of the uplink destination end (i.e., the aforementioned uplink GTP-U tunnel identifier information) and / or UE IP to the user. If UPF does not allocate a UEIP to the user, SMF allocates a UE IP to the user; then, SMF interacts with the base station through AMF to establish PDU session resources, and the base station allocates the GTP-U tunnel identifier of the downlink destination end (i.e., the aforementioned downlink GTP-U tunnel identifier information) to the user; finally, SMF associates the obtained user's GTP-U tunnel identifier information and / or UE IP address (i.e., the aforementioned first information, the first information representing the user plane information of at least one first user) with the user identity identifier to generate an association table.

[0127] Step three, SMF reports the user plane information of the network user and the associated information of the user identity to the diversion device.

[0128] Here, SMF reports the association information between the user plane information of the networked user and the user identity identifier to the diversion device in real time through a customized interface between the SMF and the diversion device or through the NEF network element.

[0129] It should be noted that SMF reports the user plane information of all local users in the 5G private network to the diversion device in real time. If SMF cannot distinguish private network users, it reports the user plane information of all network users to the diversion device in real time. The reported content is full or incremental user plane information.

[0130] Step 4. After receiving the user surface information of all or incremental users connected to the network, the diversion device determines the identity information of at least one user connected to the network (i.e., the identity information of at least one first user mentioned above), and matches it with the user identity information entered in step 1 (i.e., the identity information of the target user mentioned above). Once the match is successful, the user surface information of the user is added to the local diversion strategy (i.e., the generated target diversion strategy mentioned above).

[0131] Step 5. When the uplink user data reaches the diversion device, the GTP-U data is first filtered out, and the non-GTP-U data continues to be sent along the N3 path; secondly, the uplink GTP-U tunnel identification information effective in the local diversion strategy is used to match the uplink user data, and the local data is filtered out. Other unmatched GTP-U data continues to be sent along the N3 path; finally, the GTP-U unsealed IP data packet of the successfully matched local data is forwarded to the local application server.

[0132] Here, the local application server can be deployed together with the diversion device or independently deployed in MEC.

[0133] Step six, when the downlink IP data packet sent by the local application server to the local user arrives at the diversion device, the diversion device matches the downlink destination IP address with the UE IP effective in the local diversion policy, and obtains the downlink GTP-U tunnel identification information of the UE. The diversion device uses its downlink GTP-U tunnel identification to encapsulate the IP data packet into a GTP-U data packet, and sends the encapsulated GTP-U data packet to the base station through the N3 path; the base station continues to process after receiving it, and sends the encapsulated GTP-U data packet to the corresponding local user (that is, the UE corresponding to the aforementioned target user).

[0134] This application also proposes a device for fast diversion of local application data in 5G industry-specific networks. Fig. 9 Schematic diagram of the structure of the data distribution device according to the embodiment of the present application. Fig. 9 As shown, the data splitting device supports forwarding the service data of local users to MEC local applications, and also supports deploying local applications by integrating MEC in the splitting device. The composition structure of the data splitting device in the embodiment of the present application is described below.

[0135] Among them, the user module is used to process the entry of local user identity information, and to receive the user plane information of the networked users reported by SMF or NEF, and to match the received user plane information of the networked users with the locally entered user identity information, and to generate a local diversion strategy for the matching users, as well as processing functions such as adding, deleting, modifying and checking related information.

[0136] The storage module (ie, the memory) is used to store the user identity information (ie, the aforementioned target user identity information) that needs to be locally distributed and local distribution strategy information. The processor provides data calculation and command execution functions for the entire data distribution device.

[0137] The diversion module receives the uplink data sent by the N3 interface of the base station, reads the local diversion strategy from the memory, matches the uplink data using the uplink GTP-U tunnel identifier, and forwards the matched local user data to the MEC local application, and continues to forward the unmatched data to the N3 interface of the core network; the diversion module receives the downlink data sent by the local application, matches the downlink GTP-U tunnel identifier information of the local user according to the downlink destination UE IP, uses the downlink GTP-U tunnel identifier information to encapsulate the downlink data into a GTP-U data packet, and sends the encapsulated GTP-U data packet to the N3 interface of the base station.

[0138] MEC (local application) in the data diversion device is deployed on demand and can provide customers with certain local application processing capabilities.

[0139] The data diversion method of the embodiment of the present application mainly solves the problem of rapid diversion of local user data in the 5G private network of the vertical industry, and realizes the rapid response of local applications. When the data diversion method of the embodiment of the present application diverts local user data, it adopts the GTP-U tunnel identification information and UE IP associated with the local user identity to realize the local data user-level data diversion strategy.

[0140] In the data diversion method of the embodiment of the present application, the user plane information associated with the user identity identifier is the user plane information dynamically allocated when the user enters the network and reported in real time by the SMF. Compared with the method of obtaining user data to detect user plane identification information in the related art, it has two major advantages: first, after the GTP-U tunnel of the local user is established, the SMF reports the GTP-U tunnel identification information to the diversion device, and the diversion device immediately executes the local diversion strategy after matching. The diversion device generates the diversion strategy before sending the local uplink user data, so as to realize the real-time diversion of local user data;

[0141] Secondly, there are definitely false positives and false negatives in the detection of user-side information in the related technology. Wrong information may cause the diversion device to forward non-local data to local applications, and false positives may cause the data that should be diverted to the local area to not be diverted to the local application. In the data diversion method of the embodiment of the present application, the SMF reports the user-side information of all network-connected users to the diversion device in real time for matching, and the user identity information that needs to be diverted locally is entered into the diversion device one by one, so that the local user data can be accurately diverted according to the precise matching diversion strategy. In addition, the user-side information of the local user used for the diversion device to match is the GTP-U tunnel identifier dynamically allocated when the user accesses the network, and when the user re-accesses the network, its GTP-U tunnel identifier will be dynamically allocated again, which greatly increases the difficulty for illegal users to obtain the user-side information of local users, and they cannot impersonate local users to attack local applications, thereby enhancing the security of the local network.

[0142] By deeply exploring the needs of 5G industry private network users, it is found that the park services of industry customers are rich and diverse, and there is a high demand for large-bandwidth, low-latency industry applications. To meet the above needs, the data diversion method of this application deploys local diversion equipment between the base station and UPF on the basis of the large bandwidth satisfied by the native 5G private network, so that local user data is directly matched, unsealed, and forwarded to local applications on the diversion device side, without the need for UPF processing before sending the data to local applications, which greatly reduces the transmission delay of local data in the customer park, and supports local applications to be directly deployed in the diversion equipment, further improving the response speed of local applications. Using the data diversion method of this application, only diversion equipment needs to be deployed in the customer park, and there is no need to deploy the core network UPF downward, which reduces the complexity of deployment implementation and reduces customer investment costs.

[0143] The production resources of vertical industry customers are often the focus of enterprise protection. Once they are attacked by security, the entire production will stagnate, causing significant losses to the enterprise. The data diversion method of this application uses user plane information associated with the user identity identifier reported in real time by SMF for local diversion. The user plane information is dynamically allocated when the user accesses the network, and the user plane information dynamically allocated each time the network accesses is random. It is difficult for illegal users to obtain and use it to impersonate legitimate users to attack local application services, and it has a certain ability to resist security risks.

[0144] Therefore, the data diversion method of the present application can not only meet the industry users' demand for large bandwidth and low latency of 5G private networks, but also enhance the security of local networks and reduce customer investment costs. It is very consistent with the actual needs of vertical industry users and has market prospects for market application.

[0145] In order to implement the data offloading method on the first network element device side of the embodiment of the present application, the embodiment of the present application further provides a data offloading device, which is applied to the first network element device; Fig.10 The structure diagram of the data splitting device according to the embodiment of the present application is shown in FIG. Figure 1 ,like Fig.10 As shown, the data splitting device includes:

[0146] The acquisition unit 1001 is configured to acquire first information; the first information represents user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0147] The associating unit 1002 is configured to associate the first information with the identity information of the corresponding first user to obtain second information; the second information represents the association information between the first information and the identity information of the corresponding first user;

[0148] The reporting unit 1003 is used to report the second information to the diversion device; the diversion device is used to use the second information to perform data diversion.

[0149] In one embodiment, the acquisition unit 1001 is specifically used to:

[0150] Receiving a first request initiated by the UE of the at least one first user; the first request represents a PDU session establishment request;

[0151] In response to the first request, a PDU session is established for the UE of the at least one first user, and after the PDU session is successfully established, the first information is obtained.

[0152] In one embodiment, the GTP-U tunnel identification information includes one of the following: uplink GTP-U tunnel identification information; downlink GTP-U tunnel identification information;

[0153] The acquisition unit 1001 is further specifically used for:

[0154] receiving third information sent by the second network element device through the first communication connection; the third information includes at least one of the following: uplink GTP-U tunnel identification information; UE IP address information; the first communication connection is established based on the PFCP session between the second network element device and the first network element device; and,

[0155] The fourth information sent by the network device is received through the second communication connection; the fourth information represents the downlink GTP-U tunnel identification information; the second communication connection is established based on the PDU session resources between the first network element device and the network device through the third network element device.

[0156] In one embodiment, the reporting unit 1003 is specifically used for one of the following:

[0157] Reporting the second information to the diversion device through a first interface; the first interface is a custom interface; the first interface is set between the first network element device and the diversion device;

[0158] The second information is reported to the diversion device through a fourth network element device; the fourth network element device represents the NEF network element.

[0159] In actual application, the acquisition unit 1001 and the reporting unit 1003 can be implemented by a communication interface in the data diversion device; the association unit 1002 can be implemented by a processor in the data diversion device.

[0160] It should be noted that: the data diversion device provided in the above embodiment only uses the division of the above program modules as an example when performing data diversion. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the data diversion device provided in the above embodiment and the data diversion method embodiment on the first network element device side belong to the same concept. The specific implementation process is detailed in the data diversion method embodiment on the first network element device side, which will not be repeated here.

[0161] In order to implement the data diversion method on the diversion device side of the embodiment of the present application, the embodiment of the present application also provides another data diversion device, which is applied to the diversion device; Fig.11 The structure diagram of the data splitting device according to the embodiment of the present application is shown in FIG. Figure 2 ,like Fig.11 As shown, the data splitting device includes:

[0162] The receiving unit 1101 is configured to receive second information reported by a first network element device;

[0163] The second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0164] The traffic distribution unit 1102 is configured to perform data distribution using the second information.

[0165] In one embodiment, the flow dividing unit 1102 is specifically used for:

[0166] Based on the second information, determining identity information of at least one first user;

[0167] In the case where one of the identity information of the at least one first user successfully matches the identity information of the target user, generating a target diversion strategy; the target diversion strategy includes at least fifth information, the fifth information representing the first information associated with the identity information of the first user that successfully matches the identity information of the target user;

[0168] A data diversion operation is performed based on the target diversion strategy.

[0169] In one embodiment, the receiving unit 1101 is further configured to obtain the identity information of the target user input by the target user; wherein the identity information of the target user is the information of the target user opening an account in advance in the core network.

[0170] In one embodiment, the flow dividing unit 1102 is specifically used for one of the following:

[0171] In the case where the local service data is uplink data, the uplink data is matched using the uplink GTP-U tunnel identification information in the target offload strategy, and the successfully matched uplink data is forwarded to the local application server;

[0172] In the case where the local service data is downlink data, the downlink GTP-U tunnel identification information of the target user is determined based on the target diversion strategy and the destination IP address of the downlink data, the downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identification information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through a network device.

[0173] In actual application, the receiving unit 1101 can be implemented by a communication interface in the data diversion device; the diversion unit 1102 can be implemented by a processor in the data diversion device.

[0174] It should be noted that: the data diversion device provided in the above embodiment only uses the division of the above program modules as an example when performing data diversion. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the data diversion device provided in the above embodiment and the data diversion method embodiment on the diversion device side belong to the same concept. The specific implementation process is detailed in the data diversion method embodiment on the diversion device side, which will not be repeated here.

[0175] Based on the hardware implementation of the above program module, and in order to implement the data offloading method on the first network element device side of the embodiment of the present application, the embodiment of the present application also provides a first network element device, Fig.12 Schematic diagram of the hardware structure of the first network element device in the embodiment of the present application; Fig.12 As shown, the first network element device 120 includes:

[0176] The first communication interface 121 is capable of exchanging information with other devices;

[0177] The first processor 122 is connected to the first communication interface 121 to implement information interaction with other devices, and is used to execute the data offloading method provided above on the first network element device side when running a computer program. The computer program is stored in the first memory 123.

[0178] Specifically, the first communication interface 121 is used to obtain first information; the first information represents user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0179] The first processor 122 is configured to associate the first information with the identity information of the corresponding first user to obtain second information; the second information represents the association information between the first information and the identity information of the corresponding first user;

[0180] The first communication interface 121 is further used to report the second information to a diversion device; the diversion device is used to perform data diversion using the second information.

[0181] In one embodiment, the first communication interface 121 is specifically used for:

[0182] Receiving a first request initiated by the UE of the at least one first user; the first request represents a PDU session establishment request;

[0183] In response to the first request, a PDU session is established for the UE of the at least one first user, and after the PDU session is successfully established, the first information is obtained.

[0184] In another embodiment, the GTP-U tunnel identification information includes one of the following: uplink GTP-U tunnel identification information; downlink GTP-U tunnel identification information;

[0185] The first communication interface 121 is further specifically used for:

[0186] receiving third information sent by the second network element device through the first communication connection; the third information includes at least one of the following: uplink GTP-U tunnel identification information; UE IP address information; the first communication connection is established based on the PFCP session between the second network element device and the first network element device; and,

[0187] The fourth information sent by the network device is received through the second communication connection; the fourth information represents the downlink GTP-U tunnel identification information; the second communication connection is established based on the PDU session resources between the first network element device and the network device through the third network element device.

[0188] In another embodiment, the first communication interface 121 is further specifically used for one of the following:

[0189] Reporting the second information to the diversion device through a first interface; the first interface is a custom interface; the first interface is set between the first network element device and the diversion device;

[0190] The second information is reported to the diversion device through a fourth network element device; the fourth network element device represents the NEF network element.

[0191] It should be noted that the specific processing process of the first communication interface 121 and the first processor 122 can be understood by referring to the data offloading method on the first network element device side.

[0192] Of course, in actual application, the various components in the first network element device 120 are coupled together through the first bus system 124. It can be understood that the first bus system 124 is used to realize the connection and communication between these components. In addition to the data bus, the first bus system 124 also includes a power bus, a control bus and a status signal bus. However, for the sake of clarity, Fig.12 In the figure, various buses are labeled as a first bus system 124 .

[0193] The first memory 123 in the embodiment of the present application is used to store various types of data to support the operation of the first network element device 120. Examples of such data include: any computer program used to operate on the first network element device 120.

[0194] The data offloading method on the first network element device side disclosed in the above embodiment of the present application can be applied to the first processor 122, or implemented by the first processor 122. The first processor 122 may be an integrated circuit chip with signal processing capability. In the implementation process, each step of the data offloading method on the first network element device side can be completed by the hardware integrated logic circuit or software instructions in the first processor 122. The above first processor 122 may be a general processor, a digital signal processor (DSP, Digital Signal Processor), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The first processor 122 can implement or execute the data offloading methods, steps and logic block diagrams on the first network element device side disclosed in the embodiment of the present application. The general processor may be a microprocessor or any conventional processor, etc. In combination with the steps of the data offloading method on the first network element device side disclosed in the embodiment of the present application, it can be directly embodied as being executed by a hardware decoding processor, or being executed by a combination of hardware and software modules in a decoding processor. The software module may be located in a storage medium, which is located in the first memory 123. The first processor 122 reads the information in the first memory 123 and completes the steps of the data diversion method on the first network element device side in combination with its hardware.

[0195] In an exemplary embodiment, the first network element device 120 can be implemented by one or more application-specific integrated circuits (ASIC), DSP, programmable logic device (PLD), complex programmable logic device (CPLD), field-programmable gate array (FPGA), general-purpose processor, controller, microcontroller (MCU), microprocessor, or other electronic components to execute the aforementioned data diversion method on the first network element device side.

[0196] Based on the hardware implementation of the above program module, and in order to implement the data diversion method on the diversion device side of the embodiment of the present application, the embodiment of the present application also provides a diversion device, Fig.13 Schematic diagram of the hardware structure of the shunting device in the embodiment of the present application; Fig.13 As shown, the flow dividing device 130 includes:

[0197] The second communication interface 131 is capable of exchanging information with other electronic devices;

[0198] The second processor 132 is connected to the second communication interface 131 to implement information exchange with other electronic devices and is used to execute the data diversion method provided on the diversion device side when running a computer program. The computer program is stored in the second memory 133.

[0199] Specifically, the second communication interface 131 is used to receive the second information reported by the first network element device;

[0200] The second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0201] The second processor 132 is configured to perform data splitting using the second information.

[0202] In one embodiment, the second processor 132 is specifically configured to:

[0203] Based on the second information, determining identity information of at least one first user;

[0204] In the case where one of the identity information of the at least one first user successfully matches the identity information of the target user, a target diversion strategy is generated; the target diversion strategy includes at least fifth information, the fifth information representing the first information associated with the identity information of the first user that successfully matches the identity information of the target user;

[0205] A data diversion operation is performed based on the target diversion strategy.

[0206] In one embodiment, the second communication interface 131 is further used to obtain the identity information of the target user input by the target user; wherein the identity information of the target user is the information of the target user opening an account in advance in the core network.

[0207] In one embodiment, the second processor 132 is specifically configured to do one of the following:

[0208] In the case where the local service data is uplink data, the uplink data is matched using the uplink GTP-U tunnel identification information in the target offload strategy, and the successfully matched uplink data is forwarded to the local application server;

[0209] In the case where the local service data is downlink data, the downlink GTP-U tunnel identification information of the target user is determined based on the target diversion strategy and the destination IP address of the downlink data, the downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identification information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through a network device.

[0210] It should be noted that the specific processing process of the second communication interface 131 and the second processor 132 can be understood by referring to the data diversion method on the diversion device side.

[0211] Of course, in actual application, the various components in the current dividing device 130 are coupled together through the second bus system 134. It can be understood that the second bus system 134 is used to realize the connection and communication between these components. In addition to the data bus, the second bus system 134 also includes a power bus, a control bus and a status signal bus. However, for the sake of clarity, Fig.13 In the figure, various buses are labeled as a second bus system 134 .

[0212] The second memory 133 in the embodiment of the present application is used to store various types of data to support the operation of the diversion device 130. Examples of such data include: any computer program used to operate on the diversion device 130.

[0213] The data diversion method on the diversion device side disclosed in the above embodiment of the present application can be applied to the second processor 132, or implemented by the second processor 132. The second processor 132 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the data diversion method on the diversion device side can be completed by the hardware integrated logic circuit or software instructions in the second processor 132. The above-mentioned second processor 132 may be a general-purpose processor, DSP, or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The second processor 132 can implement or execute the data diversion methods, steps and logic block diagrams on the diversion device side disclosed in the embodiment of the present application. The general-purpose processor may be a microprocessor or any conventional processor, etc. In combination with the steps of the data diversion method on the diversion device side disclosed in the embodiment of the present application, it can be directly embodied as a hardware decoding processor to execute, or it can be executed by a combination of hardware and software modules in the decoding processor. The software module may be located in a storage medium located in the second memory 133. The second processor 132 reads the information in the second memory 133 and completes the steps of the data diversion method on the diversion device side in combination with its hardware.

[0214] In an exemplary embodiment, the diversion device 130 can be implemented by one or more ASICs, DSPs, PLDs, CPLDs, FPGAs, general-purpose processors, controllers, MCUs (Micro Controller Units), microprocessors (Microprocessors), or other electronic components to execute the aforementioned data diversion method on the diversion device side.

[0215] It can be understood that the memory (including the first memory 123 and the second memory 133) of the embodiment of the present application can be a volatile memory or a non-volatile memory, and can also include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a ferromagnetic random access memory, a flash memory, a magnetic surface memory, an optical disc, or a compact disc read-only memory (CD-ROM); the magnetic surface memory can be a disk memory or a tape memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM, SyncLink Dynamic Random Access Memory), and direct RAM bus random access memory (DRRAM, Direct Rambus Random Access Memory).The memories (including the first memory 123 and the second memory 133 ) described in the embodiments of the present application are intended to include but are not limited to these and any other suitable types of memories.

[0216] In order to implement the method of the embodiment of the present application, the embodiment of the present application also provides a data distribution system, Fig.14 Schematic diagram of the structure of the data distribution system of the embodiment of the present application. Fig.14 As shown, the system includes: a first network element device 1401 and a traffic distribution device 1402.

[0217] It should be noted that the specific processing process of the first network element device 1401 and the diversion device 1402 has been described in detail above and will not be repeated here.

[0218] In an exemplary embodiment, the embodiment of the present application further provides a storage medium, namely a computer storage medium, specifically a computer-readable storage medium, for example, including a first memory 123 storing a computer program, the computer program can be executed by the first processor 122 in the first network element device 120 to complete the steps of the data diversion method on the first network element device side described in the embodiment of the present application, or including a second memory 133 storing a computer program, the computer program can be executed by the second processor 132 in the diversion device 130 to complete the steps of the data diversion method on the diversion device side described in the embodiment of the present application. The computer-readable storage medium can be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disk, or CD-ROM.

[0219] It should be noted that: "first", "second", "third", etc. are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0220] In addition, the technical solutions described in the embodiments of the present application can be combined arbitrarily without conflict.

[0221] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A data diversion method, characterized in that: Applied to the first network element device, including: Acquire first information; the first information represents user plane information of at least one first user; The first information includes at least one of the following: General Packet Radio Service GPRS Tunneling Protocol GTP-U tunnel identification information at the user level; Internet Protocol IP address information of the user equipment UE; Associating the first information with the identity information of the corresponding first user to obtain second information; the second information represents the association information between the first information and the identity information of the corresponding first user; The second information is reported to a diversion device; the diversion device is used to perform data diversion using the second information.

2. The method according to claim 1, characterized in that The obtaining of the first information includes: Receiving a first request initiated by the UE of the at least one first user; the first request represents a protocol data unit PDU session establishment request; In response to the first request, a PDU session is established for the UE of the at least one first user, and after the PDU session is successfully established, the first information is obtained.

3. The method according to claim 1, characterized in that The GTP-U tunnel identification information includes one of the following: uplink GTP-U tunnel identification information; Downlink GTP-U tunnel identification information; The obtaining of the first information includes: receiving third information sent by the second network element device through the first communication connection; the third information includes at least one of the following: uplink GTP-U tunnel identification information; UE IP address information; the first communication connection is established based on a message forwarding control protocol PFCP session between the second network element device and the first network element device; and, The fourth information sent by the network device is received through the second communication connection; the fourth information represents the downlink GTP-U tunnel identification information; the second communication connection is established based on the protocol data unit PDU session resources between the first network element device and the network device through the third network element device.

4. The method according to claim 1, characterized in that: The reporting the second information to the diversion device includes one of the following: Reporting the second information to the diversion device through a first interface; the first interface is a custom interface; the first interface is set between the first network element device and the diversion device; Reporting the second information to the traffic distribution device through a fourth network element device; The fourth network element device represents a network open function NEF network element.

5. A data diversion method, characterized in that: Applied to shunt equipment, including: Receiving second information reported by the first network element device; The second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; The first information includes at least one of the following: General Packet Radio Service GPRS Tunneling Protocol GTP-U tunnel identification information at the user level; Internet Protocol IP address information of the user equipment UE; The second information is used to perform data distribution.

6. The method according to claim 5, characterized in that The utilizing the second information to perform data distribution includes: Based on the second information, determining identity information of at least one first user; In the case where one of the identity information of the at least one first user successfully matches the identity information of the target user, a target diversion strategy is generated; the target diversion strategy includes at least fifth information, the fifth information representing the first information associated with the identity information of the first user that successfully matches the identity information of the target user; A data diversion operation is performed based on the target diversion strategy.

7. The method according to claim 6, characterized in that The method further comprises: Acquire the target user's identity information input by the target user; wherein the target user's identity information is the information of the target user's account opening in advance in the core network.

8. The method according to claim 6, characterized in that The performing of the data diversion operation based on the target diversion strategy includes one of the following: In the case where the local service data is uplink data, the uplink data is matched using the uplink GTP-U tunnel identification information in the target offload strategy, and the successfully matched uplink data is forwarded to the local application server; In the case where the local service data is downlink data, the downlink GTP-U tunnel identification information of the target user is determined based on the target diversion strategy and the destination IP address of the downlink data, the downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identification information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through a network device.

9. A data splitting device, characterized in that: Applied to the first network element device, including: An acquiring unit, configured to acquire first information; the first information represents user plane information of at least one first user; The first information includes at least one of the following: General Packet Radio Service GPRS Tunneling Protocol GTP-U tunnel identification information at the user level; Internet Protocol IP address information of the user equipment UE; an associating unit, configured to associate the first information with the identity information of the corresponding first user to obtain second information; the second information represents the association information between the first information and the identity information of the corresponding first user; The reporting unit is used to report the second information to the diversion device; the diversion device is used to use the second information to perform data diversion.

10. A data splitting device, characterized in that: Applied to shunt equipment, including: A receiving unit, configured to receive second information reported by a first network element device; The second information is obtained by associating the first information with the identity information of the corresponding first user by the first network element device; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: user-level general packet radio service GPRS tunnel protocol GTP-U tunnel identification information; Internet protocol IP address information of user equipment UE; The diversion unit is used to perform data diversion by using the second information.

11. A first network element device, characterized in that: include: a first processor and a first memory for storing a computer program executable on said first processor; Wherein, when the first processor is used to run the computer program, the steps of the method described in any one of claims 1 to 4 are executed.

12. A flow diversion device, characterized in that: include: a second processor and a second memory for storing a computer program executable on the second processor; Wherein, when the second processor is used to run the computer program, the steps of the method described in any one of claims 5 to 8 are executed.

13. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the computer program implements the steps of the method according to any one of claims 1 to 4, or implements the steps of the method according to any one of claims 5 to 8.

Images