Home gateway service identification method, device and system

Abstract

The invention discloses a home gateway service identification method, device and system, and the method comprises the steps: a home gateway judges an access destination address of a terminal connected with the home gateway so as to identify the type of a service request initiated by the terminal; if the request initiated by the identification terminal is an IPTV service request, the home gateway routes the request to an IPTV private network plane; and if the request initiated by the identification terminal is an Internet service request, the home gateway forwards the request to an Internet plane, and all the remaining ports except the ports used by the IPTV service terminal are connected and bound with a public network. According to the application, two or more services can be accessed at the same time at one port, the requirement of accessing multiple services at the same time by the television is met, and meanwhile, the downlink port of the home gateway is bound based on service identification, so that the security of the port is ensured.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method, device and system for identifying a home gateway service. Background Art

[0002] The services provided by the home gateway include: Internet, IPTV, voice, device management, etc. The devices that use these services are usually single, for example, the IPTV service is the set-top box, the voice service is the telephone, and the Internet is the computer, mobile phone, TV, etc. The port connected to the home gateway is isolated, which results in fixed services accessed by the port. For example, computers, mobile phones, and TVs can access Internet services but cannot access IPTV services. The IPTV port of the home gateway provides an IPTV service channel for the IPTV set-top box, but it is isolated from the Internet service channel and cannot access Internet services. With the development of optical access technology, various business services are brought to various industries such as homes, industrial parks, hotels, high-speed railways, and airports, and the user scale and business types are gradually increasing. With the widespread application of IPTV services, the terminals that carry IPTV services are diverse. For example, a TV carries IPTV services and needs to use both Internet and IPTV services at the same time, but traditional port binding can only access one service, not both. In the full routing mode of the home gateway, although the connected terminal can access two or more services, all ports of the home gateway can access them, which is not conducive to the operator's management of IPTV services and users and lacks security.

[0003] At present, the home gateway needs to identify the services that devices from different downstream ports need to access. The services that devices on the downstream ports may access include one or more of IPTV, Internet, voice, and network management. Currently, the most common way for devices on downstream ports to access multiple services is to access IPTV and the Internet at the same time. At present, the most common way to solve this demand is to set the home gateway to full routing mode. Full routing mode means that the home gateway sends the messages of the downstream devices to different services according to the routing table. In this case, the messages of all downstream devices access different services according to the routing table of the home gateway, that is, all downstream devices of the home gateway can access IPTV, which does not meet the needs of operators to control services. In addition, the current way for downstream devices of the home gateway to access IPTV services is usually port binding. That is, specifying one or two ports to only access IPTV services. Devices connected to the bound ports can only access IPTV services and cannot access Internet services. When the TV carries IPTV services and needs to use both Internet and IPTV services at the same time, it is necessary to manually unplug and plug the network cable to change the port according to the accessed services.

[0004] Therefore, how to access multiple services simultaneously while ensuring the security of their ports is a technical problem that urgently needs to be solved. Summary of the invention

[0005] The main purpose of the present invention is to provide a home gateway service identification method, device and system, which can access two or more services at the same time on one port, thereby solving the demand for a television to access multiple services at the same time. At the same time, the downstream port of the home gateway is bound after service identification to ensure the security of the port.

[0006] In a first aspect, the present application provides a method for identifying a home gateway service, wherein the method comprises the steps of:

[0007] The home gateway determines the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal;

[0008] If the request initiated by the identification terminal is an IPTV service request, the home gateway routes it to the IPTV private network plane;

[0009] If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

[0010] In combination with the first aspect above, as an optional implementation method, a destination address accessed by a terminal data message connected to a home gateway is obtained;

[0011] The home gateway identifies the type of service accessed by the terminal connected to the home gateway according to the routing table information and the destination address accessed by the data message, and the service type includes: IPTV service, Internet service and network management service.

[0012] In combination with the first aspect, as an optional implementation, based on the first WAN connection and the second WAN connection established on the home gateway, VLAN information is set for the first and second WAN connections respectively, and the VLAN_ID of the first WAN connection is set to the first identifier; the VLAN_ID of the second WAN connection is set to the second identifier;

[0013] Based on the set identifier, the VLAN of each service under the WAN connection is analyzed and compared with the VLAN information of the export data message forwarded by the routing table to obtain the service type accessed by the export data message.

[0014] In combination with the first aspect above, as an optional implementation method, different labels are added to data packets from each downstream connection port of the home gateway to identify port information of the source of the data packet, wherein the port information is the port number of the home gateway.

[0015] In combination with the first aspect above, as an optional implementation method, obtaining the port number of the data message and the VLAN information of the egress data message;

[0016] If it is identified that the VLAN information of the egress data message has multiple values, it is determined that the device connected to the home gateway port number needs to access different types of services;

[0017] If the VLAN information identifying the egress data message has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

[0018] In combination with the first aspect above, as an optional implementation method, the working mode of the home gateway is set to full routing mode, and a routing table is configured;

[0019] Among them, the home gateway is used to initiate an IPoE connection and obtain IP, which includes: IPTV private network IP, private network IP, public network IP, and interacts with the IPTV service platform, gateway management platform, and Internet service platform respectively;

[0020] Configuring the routing table includes: receiving configuration information of the routing table sent by the network management platform, and receiving configuration information of binding different ports with different WAN connections sent by the network management platform.

[0021] In combination with the first aspect above, as an optional implementation method, the number of ingress ports corresponding to each export service of the home gateway is managed according to the service management number issued by the user management platform, where the service management number is the number of devices connected to the home gateway to access the service.

[0022] In combination with the first aspect above, as an optional implementation method, the home gateway is used to obtain the IP addresses of the Internet plane, IPTV private network and network management plane respectively, so as to exchange data between the terminal and the IPTV service platform, the Internet platform and the network management platform.

[0023] In combination with the first aspect above, as an optional implementation method, when it is identified that a device connected to one or more ports of the home gateway accesses multiple service types, the MAC address of the port device is obtained and set to a MAC address that can access multiple service types, and the remaining MAC addresses are set to MAC addresses that can only access a single service type.

[0024] In a second aspect, the present application provides a home gateway service identification device, the device comprising:

[0025] An identification module, which is used to use the home gateway to determine the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal;

[0026] A processing module, which is used to identify that if the request initiated by the terminal is an IPTV service request, the home gateway routes it to the IPTV private network plane;

[0027] If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

[0028] In a third aspect, the present application provides a home gateway service identification system, which includes:

[0029] The access module is used to initiate an IPoE connection to obtain multiple IPs, including: IPTV private network IP, TR069 private network IP, public network IP, and interact with the IPTV service platform, gateway management platform, and Internet service platform respectively;

[0030] A management module, which is used to receive the configuration information of the routing table sent by the network management platform, receive the configuration information of binding different ports with different WAN connections sent by the network management platform, and select the corresponding WAN connection when forwarding data;

[0031] A transmission module, which is used to bind all ports except the ports used by the terminal carrying the IPTV service to the public WAN connection, and transmit the data of the IPTV soft terminal using the private WAN connection and the data of other Internet applications using the public WAN connection according to the routing table configured by the management module;

[0032] The security module is used to set MAC filtering rules for the private network WAN connection according to the MAC used by the terminal carrying the IPTV service, so as to only allow the terminal carrying the IPTV service to access.

[0033] The present application provides a method, device and system for identifying home gateway services, wherein the method includes the following steps: the home gateway identifies the type of service request initiated by the terminal by judging the access destination address of the terminal connected to it; if the request initiated by the identified terminal is an IPTV service request, the home gateway routes it to the IPTV private network plane; if the request initiated by the identified terminal is an Internet service request, the home gateway forwards it to the Internet plane, and binds all remaining ports except the port used by the IPTV service terminal to the public network connection. The present application can access two or more services at the same time on one port, solving the need for the TV to access multiple services at the same time, and at the same time, based on the binding of the downstream port of the home gateway after service identification, the security of the port is guaranteed.

[0034] It is to be understood that the foregoing general description and the following detailed description are exemplary only and are not restrictive of the invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0036] Figure 1 A flow chart of a method for identifying a home gateway service provided in an embodiment of the present application;

[0037] Figure 2 A schematic diagram of a home gateway service identification device provided in an embodiment of the present application;

[0038] Figure 3 A schematic diagram of business identification provided in an embodiment of the present application;

[0039] Figure 4 A schematic diagram of an identification system for a home gateway service provided in an embodiment of the present application;

[0040] Figure 5 This is a schematic diagram of the home networking provided in an embodiment of the present application. DETAILED DESCRIPTION

[0041] Here, exemplary embodiments will be described in detail, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Instead, they are merely examples of devices and methods consistent with some aspects of the present invention as detailed in the appended claims.

[0042] Furthermore, the drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. Some of the blocks shown in the drawings are functional entities and do not necessarily correspond to physically or logically separate entities.

[0043] The embodiments of the present application are further described in detail below in conjunction with the accompanying drawings.

[0044] Reference Figure 1 , Figure 1 FIG. 1 is a flow chart of a service binding method provided by the present invention. Figure 1 As shown, the method comprises the steps of:

[0045] Step S101: The home gateway determines the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal.

[0046] Specifically, before identifying the type of service request initiated by the terminal, the working mode of the home gateway is set to full routing mode, and the routing table is configured;

[0047] Among them, the home gateway is used to initiate an IPoE connection and obtain IP, which includes: IPTV private network IP, private network IP, public network IP, and interacts with the IPTV service platform, gateway management platform, and Internet service platform respectively;

[0048] Configuring the routing table includes: receiving configuration information of the routing table sent by the network management platform, and receiving configuration information of binding different ports with different WAN connections sent by the network management platform.

[0049] The specific method is as follows: the home gateway supports initiating IPoE connection. It supports obtaining 3 IPs, including: IPTV private network IP, TR069 private network IP, and public network IP; interacting with IPTV service platform, gateway management platform, and Internet service platform respectively.

[0050] Through network management configuration, the home gateway can work in full routing mode. Specific method: The home gateway supports the network management platform to send the configuration information of the routing table. It supports the gateway platform to send the configuration information of binding different ports with different WAN connections.

[0051] All ports except the ports used by the terminal carrying the IPTV soft terminal are bound to the public WAN connection. According to the routing table configured by the management function, the data of the IPTV soft terminal is transmitted using the private WAN connection, and the data of other Internet applications is transmitted using the public WAN connection.

[0052] Before identification, it also includes: managing the number of inlet ports corresponding to each export service of the home gateway according to the service management number issued by the user management platform, where the service management number is the number of devices connected to the home gateway to access the service.

[0053] Specifically, according to a certain service management quantity issued by the user management platform, the number of ingress ports corresponding to each egress service is managed. For example, if the issued IPTV service management quantity is 2, then the number of IPTV services that can be accessed by the managed ingress ports is 2.

[0054] In one embodiment, the gateway management platform is used for remote management and is responsible for sending the number and type of service management to the user's home gateway (the type refers to the working mode of the home gateway. Currently, there are two working modes: port binding and full routing. The purpose of the present invention is to notify the home gateway to work in full routing mode). The number refers to the number of devices connected to the home gateway that can access a certain service. For example, the number of devices that can access the IPTV service under the home gateway is 2. By default, the number of IPTV services is 1, and the number of Internet connections is the maximum number of device connections. The type sent to the home gateway in the present invention refers to the routing mode and the corresponding routing table under this mode, as well as the user name and password of the IPTV private network. After the home gateway obtains the user name and password of the IPTV private network, the networking function of the home gateway obtains the IP address of the IPTV private network through IPOE.

[0055] Then, the destination address accessed by the terminal data message connected to the home gateway is obtained;

[0056] The home gateway identifies the type of service accessed by the terminal connected to the home gateway according to the routing table information and the destination address accessed by the data message, and the service type includes: IPTV service, Internet service and network management service.

[0057] Among them, the service request type initiated by the terminal is identified. Specifically, based on the first WAN connection and the second WAN connection established on the home gateway, VLAN information is set for the first and second WAN connections respectively, and the VLAN_ID of the first WAN connection is set to the first identifier; the VLAN_ID of the second WAN connection is set to the second identifier; based on the set identifier, the VLAN of each service under the WAN connection is used to analyze and compare the VLAN information of the export data packet forwarded by the routing table to obtain the service type accessed by the export data packet.

[0058] For example, two WAN connections (WAN_Other, WAN_INTERNET) are established on the home gateway, and VLAN information is set for each WAN connection: VLAN_ID of WAN_Other is set to VLAN_ID1, and VLAN_ID of WAN_INTERNET is set to VLAN_ID2. WAN_Other obtains a private network IP through IPoE and PPPoE routing modes, and uses the private network IP to interact with the IPTV private network service platform. WAN_INTERNET obtains a public network IP through routing mode, and uses the public network IP to interact with the public network service platform. Through the VLAN of each service under the WAN connection, the VLAN information of the export data message forwarded by the routing table is analyzed and compared, so as to obtain the export service type. For example, the VLAN of IPTV is VLAN_ID1, and the VLAN of the Internet is VLAN_ID2. If it is an IPTV service, the IPTV private network IP address obtained is used to communicate with the IPTV private network.

[0059] In one embodiment, different labels are added to data packets from each downstream connection port of the home gateway to identify the port information of the source of the data packet, wherein the port information is the port number of the home gateway.

[0060] For ease of understanding, an example is given to label the data packets from each downstream connection port of the home gateway to identify the port information of the data packet source. For example, label the data packet from the first port as a, and label the data packet from the second port as b. It should be explained that the purpose of labeling the message here is to identify the specific port number of the message in the subsequent identification process. The message type has been identified in the above, but it is not known which port the message is on. That is, it is necessary to clarify which port the message is on and which services need to be accessed.

[0061] The service type that the device connected to the home gateway port needs to access is determined through the data message label and service type, and the service type includes: IPTV service, Internet service and network management service. Specifically, the port number of the data message and the VLAN information of the egress data message are obtained; if it is identified that the VLAN information of the egress data message has multiple values, it is determined that the device connected to the home gateway port number needs to access different types of services; if it is identified that the VLAN information of the egress data message has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

[0062] For example, analyze the port information of the data message source (different forms of home gateways have different numbers of downlink ports. They range from 1 to 16. Specifically, it refers to which port of the home gateway) and the service type of this data export, and determine the service type accessed by the device connected to the port. For example, for a message with a data message tag of a, the export data VLAN information is sometimes 85 and sometimes 100. For a message with a data message tag of b, the export data VLAN information is only 100 (for example, the IPTV private network VLAN value is 85, and the public network VLAN value is 100. When the data A message of port a is marked with VLAN 85 at the export, this message is sent to the IPTV private network. Similarly, when the data B message of port a is marked with VLAN 100 at the export, this message is sent to the public private network. In other words, the VLAN of data A of the same port a is 85, and the VLAN of data B is 100. That is, sometimes it is 85, and sometimes it is 100). This means that the device connected to the first port of the home gateway needs to access IPTV and Internet services. This means that the device connected to the second port of the home gateway only has Internet services. It can be understood that at this step, it is possible to accurately identify what services each port data message specifically needs to access.

[0063] Step S102: If the request initiated by the identification terminal is an IPTV service request, the home gateway routes it to the IPTV private network plane.

[0064] It is understandable that if the request initiated by the identification terminal is an IPTV service request, the home gateway transmits the service data using the private WAN connection according to the routing table information, and transmits other service data using the public WAN connection. That is, knowing the access type, it routes it to the destination address through the routing table.

[0065] Step S103: If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

[0066] It is understandable that if the request initiated by the identification terminal is an Internet service request, the home gateway transmits the service data using the public WAN connection according to the routing table information.

[0067] It is understandable that the home gateway, based on the judgment of the destination address of the terminal connected to it and the routing table configuration issued by the platform, identifies that the request initiated by the terminal is an IPTV service request, and routes it to the IPTV private network plane, while for the user's access request for the terminal Internet service, the home gateway forwards it to the Internet plane. All ports except the ports used by the terminal carrying the IPTV soft terminal are bound to the public network WAN connection.

[0068] For example: the home gateway analyzes the messages from each downstream port to determine the services that need to be accessed. (At this time, each port can access A and B) When it is identified that a port needs to access both A and B, it binds other ports to only access the Internet. (At this time, other ports can only access B, so this port can access A and B).

[0069] For example, in the traditional full-route mode, all ports of the home gateway can access IPTV and the Internet. If the home gateway has 4 ports, then the TVs connected to these 4 ports can access IPTV. Operators charge based on the number of IPTV terminals. In this mode, all 4 ports can be accessed, and users who originally opened 1 service can access it with 4 terminals. This causes a loss of revenue for operators.

[0070] In addition, the fact that all four ports can access IPTV also brings security risks to the IPTV platform. For example, if a computer with a virus is also connected to a certain port, it may bring the virus to the IPTV network.

[0071] The solution to this application is as follows:

[0072] Embodiment 1:

[0073] 1. The management platform issues a management requirement to a home gateway with 4 connection ports, which is that the home gateway allows one terminal to access IPTV and the home gateway works in full routing mode.

[0074] 2. The home gateway receives the instruction from the network management platform and sets itself in full routing mode. (Remove the original mode, which is mostly: port 2 is bound to IPTV service, and other ports 1, 3, and 4 are bound to Internet services. Terminals connected to different ports can only access the corresponding services)

[0075] 3. The home gateway starts to obtain data packets from the downstream port and identifies the destination of the packets.

[0076] For example, a user connects a TV with a soft terminal to port 3. Port 1 is connected to a computer or other device.

[0077] The home gateway identifies the messages from each port and their destinations. Once it identifies that the message from port 3 accesses both the Internet and IPTV, it immediately binds ports 1, 2, and 4 to the Internet.

[0078] The result is that ports 1, 2, and 4 can only access the Internet, and port 3 works in routing mode. At this time, only port 3 can access the Internet and IPTV.

[0079] Embodiment 2:

[0080] Based on 1, the operator has opened 2 IPTV services for the customer. Then in step 3 above, after identifying that port 3 accesses IPTV and the Internet, it continues to identify. Waiting for the next port to access IPTV and the Internet. The user now connects port 4 to another TV with a soft terminal. After the home gateway identifies that the message of port 4 also goes to IPTV and the Internet, it binds ports 1 and 2 to the Internet.

[0081] As a result, ports 3 and 4 can access both the Internet and IPTV, while ports 1 and 2 can only access the Internet.

[0082] Embodiment 3:

[0083] Based on 1, if the user changes the original port 3 to a computer and port 2 to a TV, then it is recognized that port 2 needs to access the Internet and IPTV. And the operator has only opened one IPTV service. Then

[0084] The home gateway binds ports 1, 3, and 4 to the Internet.

[0085] Result: Only 2 ports can access IPTV and Internet, the other ports can only access Internet.

[0086] Embodiment 4:

[0087] Based on step 1, get the MAC address of the device on port 3. That is, the MAC address of the TV with the soft terminal. Use this MAC address as the MAC address that can access the Internet and IPTV. Other MAC addresses can only access the Internet.

[0088] Result: No matter which port the TV is connected to, it can access IPTV and the Internet. However, other TVs cannot access it. Even if other TVs are connected to port 3, they cannot access IPTV.

[0089] In one embodiment, the home gateway is used to obtain the IP addresses of the Internet plane, the IPTV private network, and the network management plane respectively, so as to exchange data between the terminal and the IPTV service platform, the Internet platform, and the network management platform. It can be understood that, for example, the message of the terminal TV accessing the IPTV service is sent to the home gateway. After the home gateway identifies the message sent to the IPTV according to the routing table, it obtains the IP address as above and sends it to the IPTV platform for communication. It needs to be explained that the terminal cannot directly obtain the IPTV's IP address, so it is obtained through the home gateway to realize the communication between the terminal and the IPTV. The same applies to other services (Internet, network management).

[0090] Optionally, when it is identified that the number of service types accessed by the device connected to one or more ports of the home gateway is at least two, the MAC address of the port device is obtained, and it is set as a MAC address that can access multiple service types, and the remaining MAC addresses are set as MAC addresses that can only access a single service type. That is, assuming that device D accesses both services A and B, the MAC address of device D can be directly obtained, and all MAC addresses except this MAC address can be set to only access A or B, that is, only one MAC address can access both A and B, and when any MAC address except this MAC address wants to access A and B, it is directly rejected.

[0091] In summary, the home gateway of the present application identifies the service type accessed by the data message after forwarding through the routing table, and labels the data message of each downstream connection port of the home gateway. Through the data message label and service type, confirm the service type that the device connected to the home gateway needs to access. Add a new service management quantity on the user management platform, and send the service management quantity and type to the user's home gateway through the user management platform (purpose: to meet the needs of a small number of users, a family needs two TV soft terminals for IPTV services. Therefore, the operator needs to manage the number of access terminals for a user). The home gateway controls the port binding type through the management information of the user management platform plus the method of identifying the source label of the data message and the export service type. Ultimately, the service management requirements of the operator are achieved.

[0092] Reference Figure 2 , Figure 2 FIG. 1 is a schematic diagram of a service binding device provided by the present invention, such as Figure 2 As shown, the device comprises:

[0093] Identification module 201: It is used to use the home gateway to determine the access destination address of the terminal connected to it, so as to identify the type of service request initiated by the terminal.

[0094] Processing module 202: used for, if the request initiated by the terminal is identified as an IPTV service request, the home gateway routes it to the IPTV private network plane;

[0095] If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

[0096] Further, in a possible implementation manner, the identification module is further used to obtain a destination address accessed by a terminal data message connected to the home gateway;

[0097] The home gateway identifies the type of service accessed by the terminal connected to the home gateway according to the routing table information and the destination address accessed by the data message, and the service type includes: IPTV service, Internet service and network management service.

[0098] Further, in a possible implementation manner, the processing module is further configured to set VLAN information for the first and second WAN connections respectively based on the first WAN connection and the second WAN connection established on the home gateway, and set the VLAN_ID of the first WAN connection to the first identifier; and set the VLAN_ID of the second WAN connection to the second identifier;

[0099] Based on the set identifier, the VLAN of each service under the WAN connection is analyzed and compared with the VLAN information of the export data message forwarded by the routing table to obtain the service type accessed by the export data message.

[0100] Furthermore, in a possible implementation, the processing module is further used to add different labels to the data packets from each downstream connection port of the home gateway to identify the port information of the source of the data packet, wherein the port information is the port number of the home gateway.

[0101] Further, in a possible implementation manner, the processing module is further used to obtain the port number of the data message and the VLAN information of the egress data message;

[0102] If it is identified that the VLAN information of the egress data message has multiple values, it is determined that the device connected to the home gateway port number needs to access different types of services;

[0103] If the VLAN information identifying the egress data message has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

[0104] Furthermore, in a possible implementation manner, the processing module is further used to set the working mode of the home gateway to a full routing mode and configure a routing table;

[0105] Among them, the home gateway is used to initiate an IPoE connection and obtain IP, which includes: IPTV private network IP, private network IP, public network IP, and interacts with the IPTV service platform, gateway management platform, and Internet service platform respectively;

[0106] Configuring the routing table includes: receiving configuration information of the routing table sent by the network management platform, and receiving configuration information of binding different ports with different WAN connections sent by the network management platform.

[0107] Furthermore, in a possible implementation, the processing module is also used to manage the number of ingress ports corresponding to each egress service of the home gateway according to the service management number issued by the user management platform, wherein the service management number is the number of devices connected to the home gateway to access the service.

[0108] Furthermore, in a possible implementation, the identification module is also used to use the home gateway to obtain the IP addresses of the Internet plane, IPTV private network and network management plane respectively, so as to enable the terminal to interact with the IPTV service platform, Internet platform and network management platform.

[0109] Furthermore, in a possible implementation, the processing module is also used to obtain the MAC address of the port device when it is identified that a device connected to one or more ports of the home gateway accesses multiple service types, and set it as a MAC address that can access multiple service types, and set the remaining MAC addresses as MAC addresses that can only access a single service type.

[0110] Reference Figure 3 , Figure 3 FIG. 4 is a schematic diagram of business identification provided by the present invention, such as Figure 3 As shown:

[0111] The gateway management platform is used for remote management and is responsible for sending the number and type of service management to the user's home gateway. The number refers to the number of devices connected to the home gateway that can access a certain service. For example, the number of devices that can access the IPTV service under the home gateway is 2. By default, the number of IPTV services is 1, and the number of Internet connections is the maximum number of device connections. The type sent to the home gateway in the present invention refers to the routing mode and the corresponding routing table under this mode, as well as the user name and password of the IPTV private network. After the home gateway obtains the user name and password of the IPTV private network, the networking function of the home gateway obtains the IP address of the IPTV private network through IPOE.

[0112] The service identification module in the home gateway is responsible for analyzing the service type of the outbound data message. Through the VLAN of each service under the WAN connection, the VLAN information of the outbound data message forwarded by the routing table is analyzed and compared to obtain the outbound service type. For example, the VLAN of IPTV is VLAN_ID1, and the VLAN of the Internet is VLAN_ID2. If it is an IPTV service, it communicates with the IPTV private network through the obtained IPTV private network IP address.

[0113] The port identification module in the home gateway is responsible for labeling the data packets from each downstream connection port of the home gateway to identify the port information of the data packet source. For example, the data packet from the first port is labeled as a, and the data packet from the second port is labeled as b.

[0114] The analysis module is responsible for analyzing the port information of the data message source and the service type of this data export, and determining the service type accessed by the device connected to the port. For example, for a message with a data message label of a, the export data VLAN information is sometimes 85 and sometimes 100. For a message with a data message label of b, the export data VLAN information is only 100. This means that the device connected to the first port of the home gateway needs to access IPTV and Internet services. This means that the device connected to the second port of the home gateway only has Internet services.

[0115] The management module is responsible for managing the number of entry ports corresponding to each export service according to the management number of a certain service issued by the user management platform. For example, if the management number of IPTV services issued is 2, then the number of managed entry ports that can access IPTV services is 2. The method is: after the analysis module gives the IPTV services accessed by the two ports that appear at the same time, the management module binds the other ports to only access Internet services. For example, for a device with four ports, the analysis module gives the first and third ports to access the IPTV service at the same time, then the second and fourth ports are bound to only access the Internet service. (If the user changes the third port to the fourth port, the IPTV services accessed by the two ports that appear at the same time are 1 and 4. At this time, the second and third ports are bound to only access the Internet service)

[0116] Reference Figure 4 , Figure 4 FIG. 1 is a diagram showing a network access system architecture for the intelligent IPTV service provided by the present invention. Figure 4 As shown:

[0117] When users use terminals (TVs), they need to access IPTV services and Internet services. The home gateway works with IPTV soft terminals to support dual-network (supporting access to IPTV services and Internet services at the same time) and intelligent service access. The home gateway needs to obtain two addresses, the Internet plane and the IPTV private network plane. Based on the judgment of the destination address accessed by the terminal (TV) and the routing table configuration issued by the platform, the home gateway distinguishes that the request initiated by the terminal (TV) is an IPTV service request, and routes it to the IPTV private network plane. For the access request of the user's terminal Internet service, the home gateway forwards it to the open Internet plane.

[0118] Among them, the access module is used to initiate an IPoE connection to obtain multiple IPs, including: IPTV private network IP, TR069 private network IP, public network IP, and interact with the IPTV service platform, gateway management platform, and Internet service platform respectively;

[0119] A management module, which is used to receive the configuration information of the routing table sent by the network management platform, receive the configuration information of binding different ports with different WAN connections sent by the network management platform, and select the corresponding WAN connection when forwarding data;

[0120] A transmission module, which is used to bind all ports except the ports used by the terminal carrying the IPTV service to the public WAN connection, and according to the routing table configured by the management module, transmit the data of the IPTV soft terminal using the private WAN connection, and transmit the data of other Internet applications using the public WAN connection;

[0121] A security module is used to set MAC filtering rules for the private network WAN connection according to the MAC used by the terminal carrying the IPTV service (i.e., when it is identified that a device connected to one or more ports of the home gateway accesses multiple service types, the MAC address of the port device is obtained and set as a MAC address that can access multiple service types, and the remaining MAC addresses are set as MAC addresses that can only access a single service type), so as to allow access only by the terminal carrying the IPTV service.

[0122] Reference Figure 5 , Figure 5 FIG. 1 is a schematic diagram of a home network provided by the present invention. Figure 5 As shown:

[0123] The home gateway is connected to the IP network through optical fiber or network cable, and communicates with the IPTV private network and the Internet. A TV or other terminal installed with an IPTV soft terminal can be connected to the home gateway through any port. Mobile phones, computers and other terminals can be connected to the home gateway through wired or wireless methods. (The original solution IPTV service can only be accessed through a designated port, and the designated port can only access IPTV, not the Internet)

[0124] Industry: Home gateways have different business capabilities and different WAN connections. WAN_Other is the WAN connection for accessing IPTV, and WAN_INTERNET is the WAN connection for accessing the Internet.

[0125] To ensure network security: WAN_Other allows designated ports (LAN1 / SSID1, etc.) to access (bind all ports except the designated port to WAN_INTERNET), and WAN_INTERNET can be accessed by all ports. The data of LAN1 port is forwarded through routing. According to the routing configuration table issued by the gateway management platform, the IP data of the target address in the routing table is routed to WAN_Other, and the others are routed to WAN_INTERNET.

[0126] Configure the security policy for WAN_Other to only allow the designated port (LAN1 / SSID1, etc.) to access the terminal device that carries the IPTV soft terminal. This can be achieved by filtering the MAC address of the terminal device that carries the IPTV soft terminal.

[0127] The above description is only a specific implementation of the present application, so that those skilled in the art can understand or implement the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest range consistent with the principles and novel features applied for herein.

Claims

1. A method for identifying a home gateway service, characterized in that: include: The home gateway determines the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal; If the request initiated by the identification terminal is an IPTV service request, the home gateway routes it to the IPTV private network plane; If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

2. The method according to claim 1, characterized in that The home gateway determines the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal, including: Obtaining the destination address accessed by the terminal data message connected to the home gateway; The home gateway identifies the type of service accessed by the terminal connected to the home gateway according to the routing table information and the destination address accessed by the data message, and the service type includes: IPTV service, Internet service and network management service.

3. The method according to claim 2, characterized in that The identifying the service type accessed by the terminal connected to the home gateway comprises: Based on the first WAN connection and the second WAN connection established on the home gateway, VLAN information is set for the first and second WAN connections respectively, and the VLAN_ID of the first WAN connection is set as the first identifier; and the VLAN_ID of the second WAN connection is set as the second identifier; Based on the set identifier, the VLAN of each service under the WAN connection is analyzed and compared with the VLAN information of the export data message forwarded by the routing table to obtain the service type accessed by the export data message.

4. The method according to claim 3, characterized in that: Also includes: Different labels are added to the data messages from each downstream connection port of the home gateway to identify the port information of the source of the data message, wherein the port information is the port number of the home gateway.

5. The method according to claim 4, characterized in that Also includes: Obtain the port number of the data message and the VLAN information of the egress data message; If it is identified that the VLAN information of the egress data message has multiple values, it is determined that the device connected to the home gateway port number needs to access different types of services; If the VLAN information identifying the egress data message has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

6. The method according to claim 1, characterized in that Before the home gateway is used to determine the access destination address of the terminal connected thereto to identify the type of service request initiated by the terminal, the method includes: Set the working mode of the home gateway to full routing mode and configure the routing table; Among them, the home gateway is used to initiate an IPoE connection and obtain IP, which includes: IPTV private network IP, private network IP, public network IP, and interacts with the IPTV service platform, gateway management platform, and Internet service platform respectively; Configuring the routing table includes: receiving configuration information of the routing table sent by the network management platform, and receiving configuration information of binding different ports with different WAN connections sent by the network management platform.

7. The method according to claim 6, characterized in that: Also includes: According to the service management quantity issued by the user management platform, the number of ingress ports corresponding to each egress service of the home gateway is managed, wherein the service management quantity is the number of devices connected to the home gateway to access the service.

8. The method according to claim 1, characterized in that Also includes: The home gateway is used to obtain the IP addresses of the Internet plane, IPTV private network and network management plane respectively, so as to exchange data between the terminal and the IPTV service platform, the Internet platform and the network management platform.

9. The method according to claim 1, characterized in that: Also includes: When it is identified that a device connected to one or more ports of the home gateway accesses multiple service types, the MAC address of the port device is obtained and set as a MAC address that can access multiple service types, and the remaining MAC addresses are set as MAC addresses that can only access a single service type.

10. A home gateway service identification device implementing the home gateway service identification method according to any one of claims 1 to 9, characterized in that: include: An identification module, which is used to use the home gateway to determine the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal; A processing module, which is used to identify that if the request initiated by the terminal is an IPTV service request, the home gateway routes it to the IPTV private network plane; If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

11. A home gateway service identification system, characterized in that: include: The access module is used to initiate an IPoE connection to obtain multiple IPs, including: IPTV private network IP, TR069 private network IP, public network IP, and interact with the IPTV service platform, gateway management platform, and Internet service platform respectively; A management module, which is used to receive the configuration information of the routing table sent by the network management platform, receive the configuration information of binding different ports with different WAN connections sent by the network management platform, and select the corresponding WAN connection when forwarding data; A transmission module, which is used to bind all ports except the ports used by the terminal carrying the IPTV service to the public WAN connection, and according to the routing table configured by the management module, transmit the data of the IPTV soft terminal using the private WAN connection, and transmit the data of other Internet applications using the public WAN connection; The security module is used to set MAC filtering rules for the private network WAN connection according to the MAC used by the terminal carrying the IPTV service, so as to only allow the terminal carrying the IPTV service to access.

Images