Data shunting method, device, related equipment and computer readable storage medium

Abstract

The application discloses a data shunting method and device, related equipment and a computer readable storage medium. The method comprises the following steps: obtaining first information; the first information represents user plane information of at least one first user; the first information comprises at least one of the following: GTP-U tunnel identification information; IP address information of a UE; associating the first information with identity identification information of the corresponding first user to obtain second information; the second information represents association information of the first information and the identity identification information of the corresponding first user; and reporting the second information to a shunting device; the shunting device is used for shunting data by using the second information. In the application, the user plane information is dynamically allocated when a user logs in a network, and the user plane information needs to be dynamically allocated again when the user logs in the network again, so that the difficulty of obtaining the user plane information of a local user by an illegal user is greatly increased, and the security of a local application is enhanced.

Description

Technical Field

[0001] This application relates to the field of network communication technology, and in particular to a data splitting method, apparatus, related equipment, and computer-readable storage medium. Background Technology

[0002] With the continuous emergence of industrial internet services, IoT applications, and digitalization, the demand for dedicated networks (i.e., private networks) within large enterprise parks is gradually increasing. Users in manufacturing, logistics, ports, power, and chemical industries urgently need private network solutions based on 5G (5th Generation Mobile Communication Technology).

[0003] In related technologies, some data offloading schemes have been proposed for private networks in the 5G industry. However, the data offloading schemes in these technologies require the entire 5G system to process the data before it can be offloaded to the local application server, which increases network processing latency and thus cannot meet the needs of industrial applications in 5G private networks. Furthermore, since the data offloading schemes in these technologies cannot restrict other users from accessing local applications, this raises security issues for local applications. Summary of the Invention

[0004] To address the technical problems existing in related technologies, embodiments of this application provide a data splitting method, apparatus, related equipment, and computer-readable storage medium.

[0005] To achieve the above objectives, the technical solution of this application embodiment is implemented as follows:

[0006] In a first aspect, embodiments of this application provide a data offloading method, applied to a first network element device, comprising:

[0007] Obtain first information; the first information represents user face information of at least one first user;

[0008] The first information includes at least one of the following:

[0009] Tunnel identification information for the General Packet Radio Service (GPRS) Tunneling Protocol for the User Plane (GTP-U) at the user level; Internet Protocol (IP) address information for the User Equipment (UE);

[0010] The first information is associated with the identity information of the corresponding first user to obtain the second information; the second information represents the association information between the first information and the identity information of the corresponding first user.

[0011] The second information is reported to the data splitting device; the data splitting device is used to split the data using the second information.

[0012] Secondly, embodiments of this application also provide another data splitting method, applied to a splitting device, including:

[0013] Receive the second information reported by the first network element device;

[0014] Wherein, the second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user;

[0015] The first information includes at least one of the following:

[0016] GTP-U tunnel identification information; UE IP address information;

[0017] The second information is used for data splitting.

[0018] Thirdly, embodiments of this application provide a data offloading device applied to a first network element device, comprising:

[0019] An acquisition unit is configured to acquire first information; the first information represents user plane information of at least one first user.

[0020] The first information includes at least one of the following:

[0021] GTP-U tunnel identification information; UE IP address information;

[0022] The association unit is used to associate the first information with the identity information of the corresponding first user to obtain the second information; the second information represents the association information between the first information and the identity information of the corresponding first user.

[0023] The reporting unit is used to report the second information to the splitting device; the splitting device is used to split the data using the second information.

[0024] Fourthly, embodiments of this application also provide another data splitting device, applied to a splitting equipment, including:

[0025] The receiving unit is used to receive the second information reported by the first network element device;

[0026] Wherein, the second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0027] The data splitting unit is used to split data using the second information.

[0028] Fifthly, embodiments of this application provide a first network element device, including: a first processor and a first memory for storing a computer program capable of running on the first processor;

[0029] Wherein, when the first processor is used to run the computer program, it executes the steps of the data diversion method on the first network element device side as described in the embodiments of this application.

[0030] Sixthly, embodiments of this application provide a shunt device, including: a second processor and a second memory for storing a computer program capable of running on the second processor;

[0031] Wherein, when the second processor is used to run the computer program, it executes the steps of the data splitting method on the splitting device side as described in the embodiments of this application.

[0032] In a seventh aspect, embodiments of this application provide a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, it implements the steps of the data offloading method on the first network element device side as described in embodiments of this application, or implements the steps of the data offloading method on the offloading device side as described in embodiments of this application.

[0033] The data offloading method, apparatus, related devices, and computer-readable storage medium provided in this application embodiment associate the user plane information of at least one first user with the corresponding identity information of the first user through a first network element device to obtain corresponding association information, and report the association information to the offloading device. The offloading device then uses the user plane information of the first user associated with the identity information of the target user as the basis for offloading, realizing a user-level data offloading strategy for local business data. It is evident that the offloading device generates the data offloading strategy before the local uplink data is sent, thereby achieving real-time offloading of local business data and reducing network processing latency. Furthermore, the user plane information is dynamically allocated when a user joins the network. When a user rejoins the network, their user plane information needs to be dynamically reassigned, greatly increasing the difficulty for unauthorized users to obtain the user plane information of local users and preventing them from impersonating local users to attack local applications, thus enhancing the security of local applications. Attached Figure Description

[0034] Figure 1 This is a flowchart illustrating the data splitting method according to an embodiment of this application. Figure 1 ;

[0035] Figure 2 A schematic diagram illustrating the reporting method for reporting second information to the diversion device provided in this application embodiment;

[0036] Figure 3 This is a flowchart illustrating the data splitting method according to an embodiment of this application. Figure 2 ;

[0037] Figure 4 A schematic diagram illustrating a hierarchical distribution of local business data provided in an embodiment of this application;

[0038] Figure 5 This is a flowchart illustrating the data splitting method according to an embodiment of this application. Figure 3 ;

[0039] Figure 6 A schematic diagram of the 5G industry private network architecture in the application scenario of remote core network;

[0040] Figure 7 A schematic diagram of the 5G industry private network architecture in application scenarios where the core network is deployed to a lower level.

[0041] Figure 8 This is a flowchart illustrating the data splitting method according to an embodiment of this application. Figure 4 ;

[0042] Figure 9 This is a schematic diagram of the composition structure of the data splitting device according to an embodiment of this application;

[0043] Figure 10This is a schematic diagram of the composition and structure of the data splitting device according to an embodiment of this application. Figure 1 ;

[0044] Figure 11 This is a schematic diagram of the composition and structure of the data splitting device according to an embodiment of this application. Figure 2 ;

[0045] Figure 12 This is a schematic diagram of the hardware composition structure of the first network element device in an embodiment of this application;

[0046] Figure 13 This is a schematic diagram of the hardware composition structure of the diversion device according to an embodiment of this application;

[0047] Figure 14 This is a schematic diagram of the data diversion system according to an embodiment of this application. Detailed Implementation

[0048] The present application will now be described in further detail with reference to the accompanying drawings and embodiments.

[0049] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of this application.

[0050] In related technologies, several data offloading methods have been proposed for private networks in the 5G industry, such as the Uplink Classifier (UL CL) scheme, the IPv6 Multi-homing scheme, the Data Network Name (DNN) scheme, the Local Area Data Network (LADN) scheme, and the network slicing scheme. The following is a brief introduction to these data offloading methods in related technologies.

[0051] In the UL CL solution, the Session Management Function (SMF) inserts one or more uplink traffic classifiers into the data path of the PDU session during or after the PDU session is established. The session type in UL CL can be IPv4, IPv6, or IPv4v6. UL CL supports traffic detection and forwarding rules based on the SMF, forwarding uplink traffic flows to different PDU session anchor points (User Plane Functions) and merging downlink traffic flows from different PDU session anchor points (UPFs) on the link to the 5G terminal.

[0052] For IPv6 multi-homing solutions, the SMF supports inserting multi-homing session branch points into the data path of the PDU session during or after session establishment. The session type for multi-homing can only be IPv6. In multi-homing scenarios, the UPF needs to support IPv6 multi-homing functionality, meaning that a PDU session can be associated with multiple IPv6 prefixes, forwarding uplink traffic from different IPv6 prefixes to different PDU session anchor UPFs, and merging downlink traffic from different PDU session anchor UPFs into the 5G terminal.

[0053] For the DNN solution, 5G users subscribe to a specific DNN on the network. When the SMF selects a UPF, it selects the target edge UPF based on the specific DNN provided by the 5G terminal and the tracking area it is in, thereby completing the establishment of the edge PDU session and enabling access to the multi-access edge computing (MEC) platform that is connected to the edge UPF.

[0054] For the LADN scheme, when a 5G user registers with the network, it can obtain local network information, user location information, etc. from the core network. The Access and Mobility Management Function (AMF) determines that the 5G terminal is in the LADN area, and the requested DNN is configured as an LADN DNN in the AMF and forwarded to the SMF. Then, the SMF selects the appropriate local edge UPF and establishes a local PDU session based on the instructions from the AMF, thereby realizing local network access and local application access.

[0055] For network slicing solutions, 5G networks use logical control to divide the physical network into logical networks for different purposes. Different resources are allocated to different service priorities, providing different qualities of service to support different applications. The biggest feature of network slicing is end-to-end isolation. The access control and selection functions of network slices, combined with slice availability, guide the UE to access the appropriate network slice. It supports the decision-making and allocation of UE slice-related identifiers (subscribed identifiers, permitted identifiers, configured identifiers), and supports decision-making and updates according to the application's slice selection strategy, achieving customization of network functions within slices for different scenarios.

[0056] In addition, related technologies also involve solutions such as traffic splitting based on the source IP address in the user's uplink data and modifying the uplink information corresponding to the PDU session establishment or modification request to the corresponding MEC, as well as performing data filtering and analysis locally through optical packet splitting.

[0057] However, the IPv6 Multi-homing, DNN, LADN, and network slicing schemes mentioned in the 3GPP standards impose new functional requirements on terminals. According to industry chain research, terminal support for these functions still depends on commercial needs. Therefore, the maturity of end-to-end data offloading solutions requires a period of development, testing, and verification. The UL CL scheme involves the insertion, modification, and deletion of UL CLs under different conditions. The terminal is not aware of the UL CL change process, but the offloading judgment for inserting UL CLs before sending them to the destination application increases network processing latency. For vertical industry private network applications, especially in industrial control scenarios, lower network processing latency is required. The aforementioned local business data offloading schemes all require processing by the entire 5G system before data can be offloaded to the local application server, resulting in network processing latency that cannot meet the needs of industrial applications.

[0058] Furthermore, the data offloading methods in related technologies still have the following shortcomings for the needs of 5G industry private networks: First, for data offloading methods based on non-user identifiers, including the 3GPP standard recommendations mentioned above, they cannot restrict other users from accessing local applications or local networks, which will bring security problems to the local network and applications; Second, for data offloading methods based on pre-stored terminal mapping tables of user identifiers (such as International Mobile Subscriber Identity (IMSI) and / or Globally Unique Temporary Identifier (GUTI)), it is necessary to plan and configure in advance, and the information allocated to users by the 5G core network must be consistent each time. That is, customized 5G core network functions are required. Moreover, since user plane information is not dynamically allocated, information leakage will also cause security problems.

[0059] Based on this, this application proposes a data diversion method. In various embodiments of this application, a first network element device associates the user plane information of at least one first user with the corresponding identity information of the first user to obtain the corresponding association information. The association information is then reported to the diversion device. The diversion device uses the user plane information of the first user associated with the identity information of the target user as the diversion basis to realize a user-level data diversion strategy for local business data. It can be seen that the diversion device generates the data diversion strategy before the local uplink data is sent, thereby realizing real-time diversion of local business data and reducing network processing latency. Furthermore, the user plane information is dynamically allocated when the user joins the network. When the user rejoins the network, their user plane information needs to be dynamically reassigned, which greatly increases the difficulty for unauthorized users to obtain the user plane information of local users and makes it impossible to impersonate local users to attack local applications, thereby enhancing the security of local applications.

[0060] This application provides a data offloading method, which is applied to a first network element device; Figure 1 This is a flowchart illustrating the data splitting method according to an embodiment of this application. Figure 1 ;like Figure 1 As shown, the method includes:

[0061] Step 101: Obtain the first information.

[0062] Here, the first information represents user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information.

[0063] The GTP-U tunnel identification information includes at least one of the following: GTP-U endpoint identifier; Tunnel End Point Identifier (TEID); the GTP-U endpoint identifier includes the IP addresses of the nodes at both ends of the GTP-U tunnel and the User Datagram Protocol (UDP) port identifier, with the default port being 2152. The UE's IP address information is generally the default assigned IP address, or it can be the IP address assigned by the dedicated DNN of the 5G industry private network; no specific limitation is made here.

[0064] Step 102: Associate the first information with the identity information of the corresponding first user to obtain the second information.

[0065] The second information represents the association information between the first information and the corresponding identity information of the first user.

[0066] In practical applications, the first information is associated with the corresponding first user's identity information in a mapping manner. Specifically, there is a one-to-one correspondence between the first information and the first user's identity information. Generally speaking, the association information between the first information and the corresponding first user's identity information is stored in an association table (also called a mapping table) to facilitate subsequent retrieval of the first information associated with the first user's identity information that has successfully matched the target user's identity information.

[0067] Here, the first user's identity information includes at least one of the following: IMSI; Subscription Permanent Identifier (SUPI).

[0068] Step 103: Report the second information to the data splitting device; the data splitting device is used to split data using the second information.

[0069] Here, the first network element device can be an SMF (Software-Defined Function). That is, in this embodiment, the data offloading method involves the SMF reporting the association information between the first information and the corresponding first user's identity information to the offloading device in real time. The offloading device then uses the received association information to offload the data. Therefore, this embodiment's data offloading method only requires the deployment of the offloading device, eliminating the need for a core network UPF (User-Defined Function) deployment. In other words, it eliminates the need for UPF processing before offloading data to local applications, reducing deployment complexity and investment costs.

[0070] In practical applications, after the UE completes control plane registration, it initiates a PDU session establishment request to the first network element device. Once the first network element device detects that the PDU session has been successfully established, it can quickly obtain the first information.

[0071] Based on this, in one embodiment, obtaining the first information includes:

[0072] Receive a first request initiated by the UE of the at least one first user; the first request represents a PDU session establishment request;

[0073] In response to the first request, a PDU session is established for the UE of the at least one first user, and the first information is obtained after the PDU session is successfully established.

[0074] Here, "response" is used to indicate the conditions or states on which the operation performed depends. When the conditions or states on which the operation depends are met, one or more operations performed can be performed in real time or with a set delay. Unless otherwise specified, there is no restriction on the order in which the multiple operations are performed.

[0075] In practical applications, regarding the acquisition method of the first information, the first network element device can dynamically obtain the first information based on the establishment of a session, thereby making the acquisition method of the first information more flexible.

[0076] Based on this, in one embodiment, the GTP-U tunnel identification information includes one of the following: uplink GTP-U tunnel identification information; downlink GTP-U tunnel identification information;

[0077] The acquisition of the first information includes:

[0078] The UE receives third information from a second network element via a first communication connection; the third information includes at least one of the following: uplink GTP-U tunnel identification information; the UE's IP address information; the first communication connection is established based on a Packet Forwarding Control Protocol (PFCP) session between the second and first network elements; and...

[0079] The second communication connection receives the fourth information sent by the network device; the fourth information represents the downlink GTP-U tunnel identification information; the second communication connection is established based on the PDU session resources between the first network element device and the network device through the third network element device.

[0080] Here, the second network element can be a UPF, and the first network element can be an SMF. In this case, the first communication connection is an interactive connection for establishing a PFCP session between the SMF and the UPF. That is, the first communication connection is established based on the PFCP session between the SMF and the UPF. In practical applications, the SMF and UPF interact to establish a PFCP session, and the UPF allocates third information to the user. This third information may include at least one of the following: uplink GTP-U tunnel identification information; UE IP address information.

[0081] It should be noted that if the UPF does not assign the UE's IP address information to the user, the first network element device, namely the SMF, will assign the UE's IP address information to the user.

[0082] Here, the network device can be a base station, and the third network element device can be an AMF (Active Network Provider). In this case, the second communication connection is an interactive connection established by the SMF and the base station through the AMF to establish PDU session resources. That is, the second communication connection is based on the PDU session resources established by the SMF and the base station through the AMF. In practical applications, the SMF interacts with the base station through the AMF to establish PDU session resources, and the base station allocates fourth information to the user. This fourth information represents the downlink GTP-U tunnel identification information.

[0083] In practical applications, the first network element device can select a reporting method as needed. Through the selected reporting method (such as reporting through a custom interface or reporting through a Network Exposure Function (NEF) network element), the second information is reported to the distribution device in real time. It can be seen that the reporting methods of the first network element device for reporting the second information in this embodiment are more diverse, so that the distribution device can use the second information to perform timely and accurate data distribution.

[0084] Based on this, in one embodiment, reporting the second information to the splitter device includes one of the following:

[0085] The second information is reported to the traffic splitting device through a first interface; the first interface is a custom interface; the first interface is located between the first network element device and the traffic splitting device.

[0086] The second information is reported to the diversion device through the fourth network element device; the fourth network element device represents the NEF network element.

[0087] Figure 2 This is a schematic diagram illustrating the reporting method for reporting second information to the diversion device provided in an embodiment of this application, as shown below. Figure 2 As shown, the first network element device (i.e., SMF) can report the second information, namely the association information between the first information (i.e., the user plane information of the network-connected user) and the corresponding identity information of the first user, to the traffic distribution device through a custom interface. Alternatively, it can report the second information to the traffic distribution device through the fourth network element device (i.e., NEF). Here, the first network element device reports the user plane information of all local users in the 5G private network to the traffic distribution device in real time. If the first network element device cannot distinguish between private network users, it reports the user plane information of all network-connected users to the traffic distribution device in real time. The reported user plane information of the network-connected users can be the full set of user plane information or incremental user plane information; no limitation is made here.

[0088] This application also provides another data splitting method, which is applied to a splitting device. Figure 3 This is a flowchart illustrating the data splitting method according to an embodiment of this application. Figure 2 ;like Figure 3 As shown, the method includes:

[0089] Step 301: Receive the second information reported by the first network element device.

[0090] Here, the second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information.

[0091] In one embodiment, the second information reported by the first network element device includes one of the following:

[0092] The second information reported by the first network element device is received through the first interface; the first interface is a custom interface; the first interface is set between the first network element device and the traffic splitting device.

[0093] The fourth network element device receives the second information reported by the first network element device; the fourth network element device represents the NEF network element.

[0094] Step 302: Use the second information to perform data splitting.

[0095] In practical applications, after receiving the second information reported by the first network element, the data offloading device directly determines the data offloading strategy for the target user (i.e., the user who wants to access the local application) locally. In this way, the determined data offloading strategy is used to realize the real-time offloading of local business data. There is no need for the core network UPF to be deployed, that is, there is no need to process the data through the UPF before offloading it to the local application, which reduces the complexity of deployment and implementation and lowers investment costs.

[0096] Based on this, in one embodiment, the data splitting using the second information includes:

[0097] Based on the second information, the identity information of at least one first user is determined;

[0098] If one of the identity information of the at least one first user is successfully matched with the identity information of the target user, a target traffic diversion strategy is generated; the target traffic diversion strategy includes at least a fifth piece of information, the fifth piece of information representing the first information associated with the identity information of the first user that is successfully matched with the identity information of the target user;

[0099] Data splitting operations are performed based on the target splitting strategy.

[0100] In practical applications, target users can pre-register their identity information (i.e., the user identity information of local applications) in the core network and input (i.e. record) the target user's identity information in the traffic distribution device. This target user's identity information is the user identity information for the target user to access local applications, so that the traffic distribution device can generate target traffic distribution strategies based on the target user's identity information.

[0101] Based on this, in one embodiment, the method further includes:

[0102] Obtain the target user's identity information input by the target user; wherein, the target user's identity information is the information of the target user's pre-registered account on the core network.

[0103] Here, the target user's identity information includes at least one of the following: IMSI; SUPI.

[0104] In one embodiment, performing data splitting operations based on the target splitting strategy includes one of the following:

[0105] When the local business data is uplink data, the uplink data is matched using the uplink GTP-U tunnel identifier information in the target diversion strategy, and the successfully matched uplink data is forwarded to the local application server.

[0106] When the local service data is downlink data, the downlink GTP-U tunnel identifier information of the target user is determined based on the target traffic splitting policy and the destination IP address of the downlink data. The downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identifier information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through the network device.

[0107] Specifically, when uplink data arrives at the distribution device, the distribution device filters the uplink data using the target distribution policy. This involves matching the uplink GTP-U tunnel identifier information in the target distribution policy with the received uplink data. Successfully matched uplink data is forwarded to the local application server, while unmatched uplink data continues to be sent via the N3 path. Here, the local application server can be co-deployed with the distribution device or deployed independently in the MEC. When the distribution device receives downlink data (which can be downlink IP packets) from the local application, it matches the destination IP address of the downlink data with the IP address information of the UE in effect under the target distribution policy. This matches the downlink GTP-U tunnel identifier information of the target user. The distribution device then encapsulates the downlink data into GTP-U packets using the matched downlink GTP-U tunnel identifier information and sends the encapsulated GTP-U packets to the base station via the N3 path. Upon receiving the encapsulated GTP-U packets, the base station forwards them to the corresponding UE of the target user.

[0108] In practical applications, 5G campus private networks in vertical industries often involve multiple business applications, such as industrial manufacturing, video surveillance, smart warehousing, and smart parks. To simultaneously meet the business needs of multiple applications, the data offloading method in this application supports the cascading use of multiple offloading devices. It hierarchically offloads local application business data according to priority, while other non-local business data continues to be sent to the core network UPF element via the N3 path. Figure 4 This application provides a schematic diagram of a hierarchical distribution of local business data, as shown in the embodiments of this application. Figure 4 As shown, in a 5G private network, multiple traffic offloading devices (e.g.) are used. Figure 4 The two traffic splitting devices (1 and 2) perform hierarchical traffic splitting operations on local business data to meet the diverse business needs of industry users and realize the multi-purpose use of the 5G private network. Among them, traffic splitting device 1 is deployed separately from the local application server, that is, the local application server is deployed independently in the MEC; traffic splitting device 2 is deployed together with the local application server.

[0109] In related technologies, methods for offloading uplink and downlink user plane information of terminal users based on detection information have drawbacks such as the time required for detection leading to delayed offloading, and erroneous detection feedback information resulting in inaccurate offloading. To address these issues, in this embodiment, a first network element device associates the user plane information of at least one first user with the corresponding identity information of the first user to obtain relevant association information. This association information is then reported to the offloading device. The offloading device uses the user plane information of the first user associated with the identity information of the target user as the basis for offloading, implementing a user-level data offloading strategy for local service data. Since the identity information of the target user is entered into the offloading device one by one, the offloading device can achieve timely and accurate offloading of local service data according to a precisely matched data offloading strategy, thereby meeting the needs of 5G private network applications.

[0110] This application also provides another data splitting method. Figure 5 This is a flowchart illustrating the data splitting method according to an embodiment of this application. Figure 3 ;like Figure 5 As shown, the method includes:

[0111] Step 501: The first network element device obtains the first information.

[0112] Here, the first information represents user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information.

[0113] Step 502: The first network element device associates the first information with the identity information of the corresponding first user to obtain the second information.

[0114] Here, the second information represents the association information between the first information and the corresponding identity information of the first user.

[0115] Step 503: The first network element device reports the second information to the diversion device.

[0116] Step 504: The diversion device receives the second information reported by the first network element device.

[0117] Step 505: The splitting device uses the second information to split the data.

[0118] It should be noted that the specific processing procedures of the first network element device and the traffic splitting device have been described in detail above, and will not be repeated here.

[0119] The technical solution adopted in this application embodiment generates a data diversion strategy before the local uplink data is sent, thereby realizing real-time diversion of local business data and reducing network processing latency. Furthermore, the user plane information is dynamically allocated when the user joins the network. When the user rejoins the network, their user plane information needs to be dynamically reassigned, which greatly increases the difficulty for unauthorized users to obtain the user plane information of local users and makes it impossible for them to impersonate local users to attack local applications, thereby enhancing the security of local applications.

[0120] The present application will be described below with reference to application examples.

[0121] The following section uses local business data in a 5G industry private network as an example to illustrate the data diversion method of this application.

[0122] The following section will explain the structure of 5G industry private network. Figure 6 This is a schematic diagram of the structure of a 5G industry private network in a remote core network application scenario. Figure 7 For a schematic diagram of the 5G industry private network architecture in the application scenario of the core network being deployed downwards, please refer to [reference needed]. Figure 6 and Figure 7 By connecting a data offloading device in series between the base station and the core network UPF, and following the construction model of 5G industry private networks, the data offloading method of this application supports both application scenarios in remote core networks and application scenarios in decentralized core networks. In the application scenario of remote core networks, the UPF can be decentralized according to actual needs. If the offloading device can meet the forwarding needs of local application data, then it is not necessary to decentralize the UPF. In addition, the data offloading method of this application also supports connecting multiple offloading devices in series between the base station and the UPF to meet the multi-service needs of industry users and realize the multi-purpose use of a single 5G private network.

[0123] Based on the above-mentioned 5G industry private network structure, the specific processing flow of the data diversion method in this application is explained in detail. Figure 8 This is a flowchart illustrating the data splitting method according to an embodiment of this application. Figure 4 , combined Figure 8 The data offloading method of this application is described. The specific processing flow of this data offloading method includes the following steps:

[0124] Step 1: Based on the local user identification information in the 5G industry private network deployment plan, open accounts for local users in the core network, and at the same time, enter the user identification information (i.e., the aforementioned target user identification information) in the local offloading device to access local applications.

[0125] Step 2: The local user terminal (UE) begins to access the 5G private network. After the UE completes the control plane registration, it initiates a PDU session establishment request to the core network. The SMF is responsible for establishing the uplink and downlink GTP-U tunnel identification information for the PDU session and allocating the UE IP (i.e., the aforementioned UE IP address information).

[0126] Specifically, firstly, the SMF and UPF interact to establish a PFCP session. The UPF allocates an uplink destination GTP-U tunnel identifier (i.e., the aforementioned uplink GTP-U tunnel identifier information) and / or UE IP to the user. If the UPF does not allocate a UE IP to the user, the SMF allocates a UE IP to the user. Then, the SMF interacts with the base station through the AMF to establish PDU session resources. The base station allocates a downlink destination GTP-U tunnel identifier (i.e., the aforementioned downlink GTP-U tunnel identifier information) to the user. Finally, the SMF associates the obtained user's GTP-U tunnel identifier information and / or UE IP address (i.e., the aforementioned first information, which represents the user plane information of at least one first user) with the user's identity identifier to generate an association table.

[0127] Step 3: The SMF reports the association information between the user face information and the user identity identifier of the user who is joining the network to the diversion device.

[0128] Here, SMF reports the association information between the user plane information and the user identity identifier of the network user to the distribution device in real time through a custom interface between the distribution device and the distribution device or through the NEF network element.

[0129] It should be noted that SMF reports the user plane information of all local users in the 5G private network to the traffic distribution device in real time. If SMF cannot distinguish between private network users, it reports the user plane information of all users who have joined the network to the traffic distribution device in real time. The reported content is either full or incremental user plane information.

[0130] Step 4: After receiving the user face information of all or incremental new users, the traffic distribution device determines the identity information of at least one new user (i.e., the identity information of at least one first user mentioned above) and matches it with the user identity information entered in Step 1 (i.e., the identity information of the target user mentioned above). Once a match is successful, the user face information of that user is added to the local traffic distribution strategy (i.e., the target traffic distribution strategy mentioned above).

[0131] Step 5: When uplink user data arrives at the splitting device, firstly, GTP-U data is filtered out, while non-GTP-U data continues to be sent along the N3 path; secondly, the uplink GTP-U tunnel identifier information that is effective in the local splitting policy is used to match the uplink user data, filtering out local data, while other unmatched GTP-U data continues to be sent along the N3 path; finally, the GTP-U deblocked IP packets of the successfully matched local data are forwarded to the local application server.

[0132] Here, the local application server can be deployed either co-located with the distribution device or independently in the MEC.

[0133] Step 6: When the downlink IP data packet sent by the local application server to the local user arrives at the traffic splitting device, the traffic splitting device matches the downlink destination IP address with the UE IP address that is effective in the local traffic splitting policy, obtains the downlink GTP-U tunnel identifier information of the UE, uses its downlink GTP-U tunnel identifier to encapsulate the IP data packet into a GTP-U data packet, and sends the encapsulated GTP-U data packet to the base station through the N3 path; after receiving it, the base station continues to process it and sends the encapsulated GTP-U data packet to the corresponding local user (i.e., the UE corresponding to the aforementioned target user).

[0134] This application also proposes a device for rapid offloading of local application data in 5G industry private networks. Figure 9 This is a schematic diagram of the composition structure of the data splitting device according to an embodiment of this application, as shown below. Figure 9 As shown, this data offloading device supports forwarding local user business data to MEC local applications, and also supports deploying local applications by co-locating MEC within the offloading device. The composition and structure of the data offloading device according to this application embodiment are described below.

[0135] The user module is used to process the input of local user identification information, receive user face information of network users reported by SMF or NEF, match the received user face information of network users with the locally input user identification information, generate local traffic distribution strategies for the matched users, and perform other processing functions such as adding, deleting, modifying and querying relevant information.

[0136] The storage module (i.e., the memory) is used to store user identification information that needs to be localized (i.e., the aforementioned target user identification information) and localized data splitting strategies. The processor provides data processing and command execution functions for the entire data splitting device.

[0137] The traffic splitting module receives uplink data sent from the base station's N3 interface, reads the local traffic splitting policy from the memory, matches the uplink data using the uplink GTP-U tunnel identifier, and forwards the matched local user data to the MEC local application. Unmatched data is forwarded to the core network's N3 interface. The traffic splitting module receives downlink data sent from the local application, matches the local user's downlink GTP-U tunnel identifier information based on the downlink destination UE IP, encapsulates the downlink data into GTP-U data packets using the downlink GTP-U tunnel identifier information, and sends the encapsulated GTP-U data packets to the base station's N3 interface.

[0138] The MEC (Local Application) in the data offloading device is deployed on demand, which can provide customers with a certain local application processing capability.

[0139] The data offloading method in this application primarily addresses the issue of rapid offloading of local user data in vertical industry 5G private networks, enabling rapid response for local applications. When offloading local user data, this method employs GTP-U tunnel identification information and UE IP associated with the local user's identity, implementing a user-level data offloading strategy for local data.

[0140] In the data offloading method of this application embodiment, the user plane information associated with the user identity identifier is the user plane information dynamically allocated when the user joins the network, which is reported by the SMF in real time. Compared with the method of obtaining user data to detect user plane identifier information in related technologies, it has two major advantages: First, after the local user's GTP-U tunnel is established, the SMF reports the GTP-U tunnel identifier information to the offloading device. After the offloading device matches, it immediately executes the local offloading strategy. The offloading device generates the offloading strategy before the local uplink user data is sent, so as to realize the real-time offloading of local user data.

[0141] Secondly, in related technologies, the detection of user plane information inevitably involves false positives and false negatives. Incorrect information may cause the offloading device to forward non-local data to local applications, while false negatives may prevent data that should be offloaded locally from being offloaded to local applications. However, the data offloading method in this application embodiment involves the SMF reporting the user plane information of all network-connected users to the offloading device in real time for matching. Furthermore, the user identity information required for local offloading is entered into the offloading device one by one, enabling accurate offloading of local user data according to a precise matching offloading strategy. In addition, the user plane information of local users used for matching by the offloading device is a dynamically assigned GTP-U tunnel identifier when the user joins the network. When a user rejoins the network, their GTP-U tunnel identifier is dynamically reassigned, greatly increasing the difficulty for unauthorized users to obtain the user plane information of local users and preventing them from impersonating local users to attack local applications, thereby enhancing the security of the local network.

[0142] By deeply understanding the needs of 5G private network users, industry customers have diverse campus businesses and high demands for high-bandwidth, low-latency industry applications. To meet these needs, this application's data offloading method, while ensuring high bandwidth in the native 5G private network, deploys local offloading equipment between the base station and the UPF. This allows local user data to be directly matched, decapsulated, and forwarded to local applications on the offloading equipment side, eliminating the need for UPF processing before delivery. This significantly reduces the transmission latency of local data within the customer's campus and supports direct deployment of local applications within the offloading equipment, further improving application response speed. Using this data offloading method, only the offloading equipment needs to be deployed within the customer's campus; there is no need for core network UPF deployment, reducing deployment complexity and lowering customer investment costs.

[0143] Production resources of vertical industry clients are often a key focus of enterprise protection. A security attack could bring the entire production process to a standstill, causing significant losses. This application's data diversion method uses user plane information linked to user identity identifiers, reported in real-time by the SMF, for local diversion. This user plane information is dynamically assigned when a user joins the network, and the assignment is random each time. This makes it difficult for malicious users to obtain and use this information to impersonate legitimate users and attack local application services, thus providing a certain degree of resilience against security risks.

[0144] Therefore, the data offloading method of this application can not only meet the network requirements of industry users for high bandwidth and low latency of 5G private networks, but also enhance the security of local networks and reduce customer investment costs. It is very much in line with the actual needs of vertical industry users and has market prospects for market application.

[0145] In order to implement the data splitting method on the first network element device side of the present application embodiment, the present application embodiment also provides a data splitting device, which is applied to the first network element device; Figure 10 This is a schematic diagram of the composition and structure of the data splitting device according to an embodiment of this application. Figure 1 ,like Figure 10 As shown, the data splitting device includes:

[0146] The acquisition unit 1001 is used to acquire first information; the first information represents user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0147] The association unit 1002 is used to associate the first information with the identity information of the corresponding first user to obtain the second information; the second information represents the association information between the first information and the identity information of the corresponding first user.

[0148] The reporting unit 1003 is used to report the second information to the splitting device; the splitting device is used to split the data using the second information.

[0149] In one embodiment, the acquisition unit 1001 is specifically used for:

[0150] Receive a first request initiated by the UE of the at least one first user; the first request represents a PDU session establishment request;

[0151] In response to the first request, a PDU session is established for the UE of the at least one first user, and the first information is obtained after the PDU session is successfully established.

[0152] In one embodiment, the GTP-U tunnel identification information includes one of the following: uplink GTP-U tunnel identification information; downlink GTP-U tunnel identification information;

[0153] The acquisition unit 1001 is further specifically used for:

[0154] The UE receives third information from a second network element via a first communication connection; the third information includes at least one of the following: uplink GTP-U tunnel identification information; the UE's IP address information; the first communication connection is established based on a PFCP session between the second network element and the first network element; and...

[0155] The second communication connection receives the fourth information sent by the network device; the fourth information represents the downlink GTP-U tunnel identification information; the second communication connection is established based on the PDU session resources between the first network element device and the network device through the third network element device.

[0156] In one embodiment, the reporting unit 1003 is specifically used for one of the following:

[0157] The second information is reported to the traffic splitting device through a first interface; the first interface is a custom interface; the first interface is located between the first network element device and the traffic splitting device.

[0158] The second information is reported to the diversion device through the fourth network element device; the fourth network element device represents the NEF network element.

[0159] In practical applications, the acquisition unit 1001 and the reporting unit 1003 can be implemented by the communication interface in the data splitting device; the association unit 1002 can be implemented by the processor in the data splitting device.

[0160] It should be noted that the data splitting device provided in the above embodiments is only illustrated by the division of the above program modules. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device can be divided into different program modules to complete all or part of the processing described above. In addition, the data splitting device provided in the above embodiments and the data splitting method embodiment on the first network element device side belong to the same concept. For details of its specific implementation process, please refer to the data splitting method embodiment on the first network element device side, which will not be repeated here.

[0161] In order to implement the data splitting method on the splitting device side of the embodiments of this application, the embodiments of this application also provide another data splitting device, which is applied to the splitting device; Figure 11 This is a schematic diagram of the composition and structure of the data splitting device according to an embodiment of this application. Figure 2 ,like Figure 11 As shown, the data splitting device includes:

[0162] The receiving unit 1101 is used to receive the second information reported by the first network element device;

[0163] Wherein, the second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0164] The splitting unit 1102 is used to split data using the second information.

[0165] In one embodiment, the shunt unit 1102 is specifically used for:

[0166] Based on the second information, the identity information of at least one first user is determined;

[0167] If one of the identity information of the at least one first user is successfully matched with the identity information of the target user, a target traffic diversion strategy is generated; the target traffic diversion strategy includes at least a fifth piece of information, the fifth piece of information representing the first information associated with the identity information of the first user that is successfully matched with the identity information of the target user;

[0168] Data splitting operations are performed based on the target splitting strategy.

[0169] In one embodiment, the receiving unit 1101 is further configured to obtain the identity information of the target user input by the target user; wherein the identity information of the target user is the information of the target user's pre-registered account on the core network.

[0170] In one embodiment, the shunt unit 1102 is specifically used for one of the following:

[0171] When the local business data is uplink data, the uplink data is matched using the uplink GTP-U tunnel identifier information in the target diversion strategy, and the successfully matched uplink data is forwarded to the local application server.

[0172] When the local service data is downlink data, the downlink GTP-U tunnel identifier information of the target user is determined based on the target traffic splitting policy and the destination IP address of the downlink data. The downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identifier information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through the network device.

[0173] In practical applications, the receiving unit 1101 can be implemented by the communication interface in the data splitting device; the splitting unit 1102 can be implemented by the processor in the data splitting device.

[0174] It should be noted that the data splitting device provided in the above embodiments is only illustrated by the division of the above program modules. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device can be divided into different program modules to complete all or part of the processing described above. In addition, the data splitting device provided in the above embodiments and the data splitting method embodiments on the splitting device side belong to the same concept. For details of its implementation process, please refer to the data splitting method embodiments on the splitting device side, which will not be repeated here.

[0175] Based on the hardware implementation of the above program modules, and in order to implement the data offloading method on the first network element device side of this application embodiment, this application embodiment also provides a first network element device. Figure 12 This is a schematic diagram of the hardware composition structure of the first network element device according to an embodiment of this application; as shown... Figure 12 As shown, the first network element device 120 includes:

[0176] The first communication interface 121 is capable of exchanging information with other devices;

[0177] The first processor 122 is connected to the first communication interface 121 to enable information interaction with other devices. When running a computer program, it executes the data offloading method provided above for the first network element device side. The computer program is stored in the first memory 123.

[0178] Specifically, the first communication interface 121 is used to acquire first information; the first information represents user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0179] The first processor 122 is configured to associate the first information with the identity information of the corresponding first user to obtain second information; the second information represents the association information between the first information and the identity information of the corresponding first user.

[0180] The first communication interface 121 is also used to report the second information to the splitting device; the splitting device is used to perform data splitting using the second information.

[0181] In one embodiment, the first communication interface 121 is specifically used for:

[0182] Receive a first request initiated by the UE of the at least one first user; the first request represents a PDU session establishment request;

[0183] In response to the first request, a PDU session is established for the UE of the at least one first user, and the first information is obtained after the PDU session is successfully established.

[0184] In another embodiment, the GTP-U tunnel identification information includes one of the following: uplink GTP-U tunnel identification information; downlink GTP-U tunnel identification information;

[0185] The first communication interface 121 is also specifically used for:

[0186] The UE receives third information from a second network element via a first communication connection; the third information includes at least one of the following: uplink GTP-U tunnel identification information; the UE's IP address information; the first communication connection is established based on a PFCP session between the second network element and the first network element; and...

[0187] The second communication connection receives the fourth information sent by the network device; the fourth information represents the downlink GTP-U tunnel identification information; the second communication connection is established based on the PDU session resources between the first network element device and the network device through the third network element device.

[0188] In another embodiment, the first communication interface 121 is also specifically used for one of the following:

[0189] The second information is reported to the traffic splitting device through a first interface; the first interface is a custom interface; the first interface is located between the first network element device and the traffic splitting device.

[0190] The second information is reported to the diversion device through the fourth network element device; the fourth network element device represents the NEF network element.

[0191] It should be noted that the specific processing procedures of the first communication interface 121 and the first processor 122 can be understood by referring to the data diversion method on the first network element device side described above.

[0192] Of course, in practical applications, the various components in the first network element device 120 are coupled together through the first bus system 124. It can be understood that the first bus system 124 is used to realize the connection and communication between these components. In addition to the data bus, the first bus system 124 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, in... Figure 12 The general designated all buses as the first bus system 124.

[0193] In this embodiment, the first memory 123 is used to store various types of data to support the operation of the first network element device 120. Examples of such data include any computer program used to operate on the first network element device 120.

[0194] The data offloading method for the first network element device side disclosed in the above embodiments of this application can be applied to the first processor 122, or implemented by the first processor 122. The first processor 122 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above data offloading method for the first network element device side can be completed by the integrated logic circuit of the hardware or by instructions in the form of software in the first processor 122. The first processor 122 may be a general-purpose processor, a digital signal processor (DSP), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The first processor 122 can implement or execute the data offloading methods, steps, and logic block diagrams for the first network element device side disclosed in the embodiments of this application. The general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the data offloading method for the first network element device side disclosed in the embodiments of this application can be directly reflected as being executed by a hardware decoding processor, or being executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a storage medium, which is located in the first memory 123. The first processor 122 reads the information in the first memory 123 and, in conjunction with its hardware, completes the steps of the aforementioned data diversion method on the first network element device side.

[0195] In an exemplary embodiment, the first network element device 120 may be implemented by one or more application-specific integrated circuits (ASICs), DSPs, programmable logic devices (PLDs), complex programmable logic devices (CPLDs), field-programmable gate arrays (FPGAs), general-purpose processors, controllers, microcontrollers (MCUs), microprocessors, or other electronic components to execute the aforementioned data offloading method on the first network element device side.

[0196] Based on the hardware implementation of the above program modules, and in order to implement the data splitting method on the splitting device side of this application embodiment, this application embodiment also provides a splitting device. Figure 13 This is a schematic diagram of the hardware structure of the diversion device according to an embodiment of this application; as shown Figure 13 As shown, the shunt device 130 includes:

[0197] The second communication interface 131 is capable of exchanging information with other electronic devices;

[0198] The second processor 132 is connected to the second communication interface 131 to enable information interaction with other electronic devices. When running a computer program, it executes the data splitting method provided above for the splitting device side. The computer program is stored in the second memory 133.

[0199] Specifically, the second communication interface 131 is used to receive the second information reported by the first network element device;

[0200] Wherein, the second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: GTP-U tunnel identification information; UE IP address information;

[0201] The second processor 132 is used to perform data splitting using the second information.

[0202] In one embodiment, the second processor 132 is specifically used for:

[0203] Based on the second information, the identity information of at least one first user is determined;

[0204] If one of the identity information of the at least one first user is successfully matched with the identity information of the target user, a target traffic diversion strategy is generated; the target traffic diversion strategy includes at least a fifth piece of information, the fifth piece of information representing the first information associated with the identity information of the first user that is successfully matched with the identity information of the target user;

[0205] Data splitting operations are performed based on the target splitting strategy.

[0206] In one embodiment, the second communication interface 131 is further configured to acquire the identity information of the target user input by the target user; wherein the identity information of the target user is information about the target user's pre-registered account on the core network.

[0207] In one embodiment, the second processor 132 is specifically used for one of the following:

[0208] When the local business data is uplink data, the uplink data is matched using the uplink GTP-U tunnel identifier information in the target diversion strategy, and the successfully matched uplink data is forwarded to the local application server.

[0209] When the local service data is downlink data, the downlink GTP-U tunnel identifier information of the target user is determined based on the target traffic splitting policy and the destination IP address of the downlink data. The downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identifier information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through the network device.

[0210] It should be noted that the specific processing procedures of the second communication interface 131 and the second processor 132 can be understood by referring to the data splitting method on the splitting device side described above.

[0211] Of course, in practical applications, the various components in the shunt device 130 are coupled together via the second bus system 134. It can be understood that the second bus system 134 is used to realize the connection and communication between these components. In addition to the data bus, the second bus system 134 also includes a power bus, a control bus, and a status signal bus. However, for clarity, in... Figure 13 The various buses are all labeled as the second bus system 134.

[0212] The second memory 133 in this embodiment is used to store various types of data to support the operation of the splitter device 130. Examples of such data include any computer program used to operate on the splitter device 130.

[0213] The data splitting method on the device side disclosed in the above embodiments of this application can be applied to the second processor 132, or implemented by the second processor 132. The second processor 132 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above data splitting method on the device side can be completed by the integrated logic circuit of the hardware or by instructions in the form of software in the second processor 132. The second processor 132 may be a general-purpose processor, DSP, or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The second processor 132 can implement or execute the data splitting methods, steps, and logic block diagrams on the device side disclosed in the embodiments of this application. The general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the data splitting method on the device side disclosed in the embodiments of this application can be directly reflected as being executed by a hardware decoding processor, or being executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a storage medium, which is located in the second memory 133. The second processor 132 reads the information in the second memory 133 and, in conjunction with its hardware, completes the steps of the aforementioned data splitting method on the splitting device side.

[0214] In an exemplary embodiment, the data splitting device 130 may be implemented by one or more ASICs, DSPs, PLDs, CPLDs, FPGAs, general-purpose processors, controllers, MCUs (Micro Controller Units), microprocessors, or other electronic components to perform the aforementioned data splitting method on the data splitting device side.

[0215] It is understood that the memory (including the first memory 123 and the second memory 133) in the embodiments of this application can be volatile memory or non-volatile memory, or both. Non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), magnetic random access memory (FRAM), flash memory, magnetic surface memory, optical disc, or compact disc read-only memory (CD-ROM); magnetic surface memory can be disk storage or magnetic tape storage. Volatile memory can be random access memory (RAM), which is used as an external cache. By way of example, but not limitation, many forms of RAM are available, such as Static Random Access Memory (SRAM), Synchronous Static Random Access Memory (SSRAM), Dynamic Random Access Memory (DRAM), Synchronous Dynamic Random Access Memory (SDRAM), Double Data Rate Synchronous Dynamic Random Access Memory (DDRSDRAM), Enhanced Synchronous Dynamic Random Access Memory (ESDRAM), SyncLink Dynamic Random Access Memory (SLDRAM), and Direct Rambus Random Access Memory (DRRAM).The memories described in the embodiments of this application (including the first memory 123 and the second memory 133) are intended to include, but are not limited to, these and any other suitable types of memories.

[0216] To implement the method of the embodiments of this application, the embodiments of this application also provide a data diversion system. Figure 14 This is a schematic diagram of the data offloading system according to an embodiment of this application, as shown below. Figure 14 As shown, the system includes: a first network element device 1401 and a traffic splitter device 1402.

[0217] It should be noted that the specific processing procedures of the first network element device 1401 and the splitter device 1402 have been described in detail above, and will not be repeated here.

[0218] In an exemplary embodiment, this application also provides a storage medium, namely a computer storage medium, specifically a computer-readable storage medium, such as a first memory 123 storing a computer program, which can be executed by a first processor 122 in a first network element device 120 to complete the steps of the data offloading method on the first network element device side described in the aforementioned embodiment. Alternatively, it may include a second memory 133 storing a computer program, which can be executed by a second processor 132 in an offloading device 130 to complete the steps of the data offloading method on the offloading device side described in the aforementioned embodiment. The computer-readable storage medium may be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disc, or CD-ROM.

[0219] It should be noted that terms such as "first," "second," and "third" are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0220] Furthermore, the technical solutions described in the embodiments of this application can be combined arbitrarily without conflict.

[0221] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A data splitting method, characterized in that, Applied to the first network element equipment, including: Obtain first information; the first information represents user face information of at least one first user; The first information includes at least one of the following: User-level General Packet Radio Service (GPRS) Tunneling Protocol (GTP-U) tunnel identification information; User Equipment (UE) Internet Protocol (IP) address information; The first information is associated with the identity information of the corresponding first user to obtain the second information; the second information represents the association information between the first information and the identity information of the corresponding first user. The second information is reported to the data splitting device so that the data splitting device can use the second information to perform data splitting. The step of reporting the second information to the data splitting device so that the data splitting device can use the second information for data splitting includes: The second information is reported to the traffic splitting device, so that the traffic splitting device can determine the identity information of at least one first user based on the second information; if one of the identity information of the at least one first user successfully matches the identity information of the target user, a target traffic splitting policy is generated; if the local service data is uplink data, the uplink GTP-U tunnel identifier information in the target traffic splitting policy is used to match the uplink data, and the successfully matched uplink data is forwarded to the local application server; if the local service data is downlink data, the downlink GTP-U tunnel identifier information of the target user is determined based on the target traffic splitting policy and the destination IP address of the downlink data, the downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identifier information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through the network device.

2. The method according to claim 1, characterized in that, The acquisition of the first information includes: Receive a first request initiated by the UE of at least one first user; the first request represents a Protocol Data Unit (PDU) session establishment request. In response to the first request, a PDU session is established for the UE of the at least one first user, and the first information is obtained after the PDU session is successfully established.

3. The method according to claim 1, characterized in that, The GTP-U tunnel identification information includes one of the following: uplink GTP-U tunnel identification information; Downlink GTP-U tunnel signage information; The acquisition of the first information includes: The UE receives third information from a second network element via a first communication connection; the third information includes at least one of the following: uplink GTP-U tunnel identification information; the UE's IP address information; the first communication connection is established based on a Message Forwarding Control Protocol (PFCP) session between the second and first network elements; and... The second communication connection receives the fourth information sent by the network device; the fourth information represents the downlink GTP-U tunnel identification information; the second communication connection is established based on the Protocol Data Unit (PDU) session resources between the first network element device and the network device through the third network element device.

4. The method according to claim 1, characterized in that, The step of reporting the second information to the splitter device includes one of the following: The second information is reported to the traffic splitting device through a first interface; the first interface is a custom interface; the first interface is set between the first network element device and the traffic splitting device. The second information is reported to the diversion device via the fourth network element device; The fourth network element device represents the Network Open Function (NEF) network element.

5. A data splitting method, characterized in that, Applications in shunt devices include: Receive the second information reported by the first network element device; Wherein, the second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; The first information includes at least one of the following: User-level General Packet Radio Service (GPRS) Tunneling Protocol (GTP-U) tunnel identification information; User Equipment (UE) Internet Protocol (IP) address information; The second information is used for data splitting; The step of using the second information for data splitting includes: Based on the second information, the identity information of at least one first user is determined; If one of the identity information of the at least one first user is successfully matched with the identity information of the target user, a target traffic diversion strategy is generated. When the local business data is uplink data, the uplink data is matched using the uplink GTP-U tunnel identifier information in the target diversion strategy, and the successfully matched uplink data is forwarded to the local application server. When the local service data is downlink data, the downlink GTP-U tunnel identifier information of the target user is determined based on the target traffic splitting policy and the destination IP address of the downlink data. The downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identifier information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through the network device.

6. The method according to claim 5, characterized in that, The target traffic diversion strategy includes at least a fifth piece of information, which represents the first information associated with the identity information of the first user that is successfully matched with the identity information of the target user.

7. The method according to claim 6, characterized in that, The method further includes: Obtain the target user's identity information input by the target user; wherein, the target user's identity information is the information of the target user's pre-registered account on the core network.

8. A data splitting device, characterized in that, Applied to the first network element equipment, including: An acquisition unit is configured to acquire first information; the first information represents user plane information of at least one first user. The first information includes at least one of the following: User-level General Packet Radio Service (GPRS) Tunneling Protocol (GTP-U) tunnel identification information; User Equipment (UE) Internet Protocol (IP) address information; The association unit is used to associate the first information with the identity information of the corresponding first user to obtain the second information; the second information represents the association information between the first information and the identity information of the corresponding first user. A reporting unit is used to report the second information to a data splitting device, so that the data splitting device can use the second information to perform data splitting. Specifically, the reporting unit is used for: The second information is reported to the traffic splitting device, so that the traffic splitting device can determine the identity information of at least one first user based on the second information; if one of the identity information of the at least one first user successfully matches the identity information of the target user, a target traffic splitting policy is generated; if the local service data is uplink data, the uplink GTP-U tunnel identifier information in the target traffic splitting policy is used to match the uplink data, and the successfully matched uplink data is forwarded to the local application server; if the local service data is downlink data, the downlink GTP-U tunnel identifier information of the target user is determined based on the target traffic splitting policy and the destination IP address of the downlink data, the downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identifier information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through the network device.

9. A data splitting device, characterized in that, Applications in shunt devices include: The receiving unit is used to receive the second information reported by the first network element device; Wherein, the second information is obtained by the first network element device associating the first information with the identity information of the corresponding first user; the second information represents the association information between the first information and the identity information of the corresponding first user; the first information represents the user plane information of at least one first user; the first information includes at least one of the following: user-level General Packet Radio Service (GPRS) Tunnel Protocol (GTP-U) tunnel identification information; user equipment (UE) Internet Protocol (IP) address information; A data splitting unit is used to split data using the second information; Specifically, the current splitting unit is used for: Based on the second information, the identity information of at least one first user is determined; If one of the identity information of the at least one first user is successfully matched with the identity information of the target user, a target traffic diversion strategy is generated. When the local business data is uplink data, the uplink data is matched using the uplink GTP-U tunnel identifier information in the target diversion strategy, and the successfully matched uplink data is forwarded to the local application server. When the local service data is downlink data, the downlink GTP-U tunnel identifier information of the target user is determined based on the target traffic splitting policy and the destination IP address of the downlink data. The downlink data is encapsulated into a GTP-U data packet using the downlink GTP-U tunnel identifier information, and the GTP-U data packet is forwarded to the UE corresponding to the target user through the network device.

10. A first network element device, characterized in that, include: A first processor and a first memory for storing computer programs capable of running on the first processor; Wherein, when the first processor is used to run the computer program, it performs the steps of the method according to any one of claims 1 to 4.

11. A diversion device, characterized in that, include: A second processor and a second memory for storing computer programs capable of running on the second processor; Wherein, when the second processor is used to run the computer program, it performs the steps of the method according to any one of claims 5 to 7.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 4, or the steps of the method according to any one of claims 5 to 7.

Images