Home gateway service identification method, device and system

Abstract

The present invention discloses a method, device, and system for identifying home gateway services. The method includes the following steps: the home gateway determines the access destination address of a terminal connected to the home gateway to identify the type of service request initiated by the terminal; if the request initiated by the terminal is identified as an IPTV service request, the home gateway routes the request to the IPTV private network plane; if the request initiated by the terminal is identified as an Internet service request, the home gateway forwards the request to the Internet plane and binds all remaining ports, except for the port used by the IPTV service terminal, to the public network connection. This application enables simultaneous access to two or more services on a single port, addressing the need for a television to access multiple services simultaneously. Furthermore, based on service identification, the home gateway's downlink ports are bound to ensure port security.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method, device and system for identifying home gateway services. Background Art

[0002] Home gateways provide services including internet, IPTV, voice, and device management. Devices that access these services are typically single devices, such as set-top boxes for IPTV, telephones for voice, and computers, mobile phones, and televisions for internet access. Ports connected to the home gateway are isolated, resulting in fixed services accessible through these ports. For example, computers, mobile phones, and televisions can access internet services but not IPTV. The home gateway's IPTV port provides an IPTV service channel for the IPTV set-top box, but is isolated from the internet service channel and cannot access internet services. Advances in optical access technology have brought a variety of services to various sectors, including homes, industrial parks, hotels, high-speed rail stations, and airports, leading to a gradual increase in user base and service types. The widespread adoption of IPTV services has led to a diverse range of terminals carrying IPTV services. For example, televisions carrying IPTV services require both internet and IPTV services. However, traditional port binding only allows access to one service, not both. In the home gateway's full-routing mode, while connected terminals can access two or more services, all ports on the home gateway are accessible, hindering operator management of IPTV services and users and lacking security.

[0003] Currently, home gateways need to identify the services that devices on different downstream ports need to access. Devices on these downstream ports may access one or more of the following services: IPTV, the internet, voice, and network management. Currently, the most common way for devices on these downstream ports to access multiple services is to simultaneously access IPTV and the internet. The most common way to address this requirement is to set the home gateway to full routing mode. Full routing mode means that the home gateway routes packets from downstream devices to different services based on its routing table. In this case, packets from all downstream devices access different services based on the home gateway's routing table. This means that all devices connected to the home gateway can access IPTV, which does not meet the operator's service management requirements. Furthermore, the current method for devices connected to the home gateway to access IPTV services is typically port binding. This designates one or two ports as being solely responsible for accessing IPTV services. Devices connected to bound ports can only access IPTV services and cannot access internet services. If a TV is carrying IPTV services and requires both internet and IPTV services, manually removing and reinstalling the network cable and changing the port is necessary depending on the services being accessed.

[0004] Therefore, how to access multiple services simultaneously while ensuring the security of their ports is a technical problem that urgently needs to be solved. Summary of the Invention

[0005] The main purpose of the present invention is to provide a home gateway service identification method, device and system, which can simultaneously access two or more services on one port, solving the need for a television to access multiple services at the same time. At the same time, the downstream port of the home gateway is bound based on service identification to ensure the security of the port.

[0006] In a first aspect, the present application provides a method for identifying a home gateway service, wherein the method comprises the steps of:

[0007] The home gateway determines the type of service request initiated by the terminal by judging the destination address of the terminal connected to it;

[0008] If the request initiated by the terminal is identified as an IPTV service request, the home gateway routes it to the IPTV private network plane;

[0009] If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

[0010] In combination with the first aspect above, as an optional implementation method, obtaining a destination address accessed by a data message of a terminal connected to a home gateway;

[0011] The home gateway identifies the service type accessed by the terminal connected to the home gateway according to the routing table information and the destination address accessed by the data message, and the service type includes: IPTV service, Internet service and network management service.

[0012] In combination with the first aspect above, as an optional implementation, based on the first WAN connection and the second WAN connection established on the home gateway, VLAN information is set for the first and second WAN connections respectively, and the VLAN_ID of the first WAN connection is set to the first identifier; and the VLAN_ID of the second WAN connection is set to the second identifier;

[0013] Based on the set identifier, the VLAN of each service under the WAN connection is analyzed and compared with the VLAN information of the export data message forwarded by the routing table to obtain the service type accessed by the export data message.

[0014] In combination with the first aspect above, as an optional implementation method, different labels are added to data packets from each downstream connection port of the home gateway to identify the port information of the data packet source, where the port information is the port number of the home gateway.

[0015] In combination with the first aspect above, as an optional implementation, obtaining the port number of the data packet and the VLAN information of the egress data packet;

[0016] If it is identified that the VLAN information of the egress data packet has multiple values, it is determined that the device connected to the home gateway port number needs to access different types of services;

[0017] If the VLAN information identifying the egress data message has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

[0018] In combination with the first aspect above, as an optional implementation method, the working mode of the home gateway is set to full routing mode, and a routing table is configured;

[0019] Among them, the home gateway is used to initiate IPoE connection and obtain IP, which includes: IPTV private network IP, private network IP, public network IP, and interact with IPTV service platform, gateway management platform, and Internet service platform respectively;

[0020] Configuring the routing table includes: receiving configuration information of the routing table sent by the network management platform, and receiving configuration information of binding different ports with different WAN connections sent by the network management platform.

[0021] In combination with the first aspect above, as an optional implementation method, the number of entry ports corresponding to each export service of the home gateway is managed according to the service management quantity issued by the user management platform, where the service management quantity is the number of devices connected to the home gateway to access the service.

[0022] In combination with the first aspect above, as an optional implementation method, the home gateway is used to obtain the IP addresses of the Internet plane, IPTV private network and network management plane respectively, so as to enable data interaction between the terminal and the IPTV service platform, Internet platform and network management platform.

[0023] In combination with the first aspect above, as an optional implementation method, when it is identified that a device connected to one or more ports of the home gateway accesses multiple service types, the MAC address of the port device is obtained and set to a MAC address that can access multiple service types, and the remaining MAC addresses are set to MAC addresses that can only access a single service type.

[0024] In a second aspect, the present application provides a home gateway service identification device, which includes:

[0025] An identification module, which is used to use the home gateway to determine the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal;

[0026] a processing module configured to, if identifying that the request initiated by the terminal is an IPTV service request, route the request to the IPTV private network plane via the home gateway;

[0027] If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

[0028] In a third aspect, the present application provides a home gateway service identification system, which includes:

[0029] The access module is used to initiate an IPoE connection to obtain multiple IP addresses, including IPTV private network IP, TR069 private network IP, and public network IP, and interact with the IPTV service platform, gateway management platform, and Internet service platform respectively;

[0030] The management module is used to receive the configuration information of the routing table issued by the network management platform, receive the configuration information of binding different ports with different WAN connections issued by the network management platform, and select the corresponding WAN connection when forwarding data;

[0031] a transmission module for binding all ports except those used by terminals carrying IPTV services to a public WAN connection, and transmitting data from IPTV soft terminals using the private WAN connection and data from other Internet applications using the public WAN connection according to the routing table configured by the management module;

[0032] The security module is used to set MAC filtering rules for the private network WAN connection according to the MAC used by the terminal carrying the IPTV service, so as to only allow the terminal carrying the IPTV service to access.

[0033] The present application provides a method, device, and system for identifying home gateway services, wherein the method includes the following steps: the home gateway determines the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal; if the request initiated by the terminal is identified as an IPTV service request, the home gateway routes it to the IPTV private network plane; if the request initiated by the terminal is identified as an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection. The present application can access two or more services simultaneously on one port, solving the need for a television to access multiple services simultaneously. At the same time, based on service identification, the downlink port of the home gateway is bound to ensure port security.

[0034] It should be understood that the foregoing general description and the following detailed description are exemplary only and are not restrictive of the invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0036] Figure 1 A flow chart of a home gateway service identification method provided in an embodiment of the present application;

[0037] Figure 2 A schematic diagram of a home gateway service identification device provided in an embodiment of the present application;

[0038] Figure 3 This is a schematic diagram of business identification provided in an embodiment of the present application;

[0039] Figure 4 A schematic diagram of an identification system for a home gateway service provided in an embodiment of the present application;

[0040] Figure 5 This is a schematic diagram of the home networking provided in an embodiment of the present application. DETAILED DESCRIPTION

[0041] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. In the following description, when referring to the drawings, like numbers in different figures represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments are not intended to represent all possible embodiments consistent with the present invention. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present invention, as detailed in the appended claims.

[0042] Furthermore, the drawings are merely schematic illustrations of the present disclosure and are not necessarily drawn to scale. Some of the blocks shown in the drawings are functional entities that do not necessarily correspond to physically or logically separate entities.

[0043] The embodiments of the present application are further described in detail below with reference to the accompanying drawings.

[0044] Reference Figure 1 , Figure 1 The figure shows a flow chart of a service binding method provided by the present invention, as shown in FIG. Figure 1 As shown, the method includes the steps of:

[0045] Step S101: The home gateway determines the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal.

[0046] Specifically, before identifying the type of service request initiated by the terminal, the working mode of the home gateway is set to full routing mode and the routing table is configured;

[0047] Among them, the home gateway is used to initiate IPoE connection and obtain IP, which includes: IPTV private network IP, private network IP, public network IP, and interact with IPTV service platform, gateway management platform, and Internet service platform respectively;

[0048] Configuring the routing table includes: receiving configuration information of the routing table sent by the network management platform, and receiving configuration information of binding different ports with different WAN connections sent by the network management platform.

[0049] The specific method is as follows: the home gateway supports initiating IPoE connections and obtaining three IP addresses, including: IPTV private network IP, TR069 private network IP, and public network IP; interacting with the IPTV service platform, gateway management platform, and Internet service platform respectively.

[0050] Through network management configuration, the home gateway can be set to full routing mode. Specifically, the home gateway supports the network management platform to issue routing table configuration information. The gateway platform also supports issuing configuration information for binding different ports to different WAN connections.

[0051] Bind all ports except those used by the IPTV soft terminal to the public WAN connection. Based on the routing table configured by the management function, IPTV soft terminal data is transmitted using the private WAN connection, while data from other Internet applications is transmitted using the public WAN connection.

[0052] Before identification, it also includes: managing the number of entry ports corresponding to each export service of the home gateway according to the service management quantity issued by the user management platform, where the service management quantity is the number of devices connected to the home gateway to access the service.

[0053] Specifically, the number of ingress ports corresponding to each egress service is managed based on the service management quantity issued by the user management platform. For example, if the IPTV service management quantity issued is 2, then the number of managed ingress ports that can access IPTV services is 2.

[0054] In one embodiment, the gateway management platform is used for remote management and is responsible for sending the number and type of service management to the user's home gateway (the type refers to the working mode of the home gateway. Currently, there are two working modes: port binding and full routing. The purpose of the present invention is to notify the home gateway to work in full routing mode). The number refers to the number of devices connected to the home gateway that can access a certain service. For example, the number of devices that can access the IPTV service under the home gateway is 2. By default, the number of IPTV services is 1, and the number of Internet services is the maximum number of device connections. The type sent to the home gateway in the present invention refers to the routing mode and the corresponding routing table under this mode, as well as the user name and password of the IPTV private network. After the home gateway obtains the user name and password of the IPTV private network, the networking function of the home gateway obtains the IP address of the IPTV private network through IPOE.

[0055] Then, the destination address accessed by the terminal data message connected to the home gateway is obtained;

[0056] The home gateway identifies the service type accessed by the terminal connected to the home gateway according to the routing table information and the destination address accessed by the data message, and the service type includes: IPTV service, Internet service and network management service.

[0057] Among them, the service request type initiated by the terminal is identified. Specifically, based on the first WAN connection and the second WAN connection established on the home gateway, VLAN information is set for the first and second WAN connections respectively, and the VLAN_ID of the first WAN connection is set to the first identifier; the VLAN_ID of the second WAN connection is set to the second identifier; based on the set identifier, the VLAN of each service under the WAN connection is used to analyze and compare the VLAN information of the export data packet forwarded through the routing table to obtain the service type accessed by the export data packet.

[0058] For example, two WAN connections (WAN_Other and WAN_INTERNET) are established on the home gateway. VLAN information is set for each WAN connection: WAN_Other's VLAN_ID is set to VLAN_ID1, and WAN_INTERNET's VLAN_ID is set to VLAN_ID2. WAN_Other obtains a private IP address through IPoE or PPPoE routing and uses it to interact with the IPTV private network service platform. WAN_INTERNET obtains a public IP address through routing and uses it to interact with the public network service platform. The VLAN information of outbound data packets forwarded through the routing table is analyzed and compared based on the VLANs of each service on the WAN connection to determine the outbound service type. For example, the IPTV VLAN is VLAN_ID1, and the Internet VLAN is VLAN_ID2. For IPTV services, communication with the IPTV private network is performed using the obtained IPTV private network IP address.

[0059] In one embodiment, different labels are added to data packets from each downlink connection port of the home gateway to identify the port information of the data packet source, wherein the port information is the port number of the home gateway.

[0060] For easier understanding, let's take an example: data packets from each downstream port of a home gateway are tagged to identify the port from which they originate. For example, data packets from the first port are tagged with label a, and data packets from the second port are tagged with label b. It's important to note that tagging packets here allows for the subsequent identification of their specific port numbers. While the packet type has been identified above, the port from which the packet originates remains unknown. The next step is to determine which port the packet originates from and which services it needs to access.

[0061] The data packet tag and service type are used to determine the service type that the device connected to the home gateway port needs to access. These service types include IPTV services, Internet services, and network management services. Specifically, the data packet's port number and the VLAN information of the outgoing data packet are obtained. If the outgoing data packet's VLAN information contains multiple values, it is determined that the device connected to the home gateway port number needs to access different types of services. If the outgoing data packet's VLAN information contains only one value, it is determined that the device connected to the home gateway port number only needs to access one type of service.

[0062] For example, by analyzing the port information of the data packet source (different types of home gateways have different numbers of downlink ports, ranging from 1 to 16. Specifically, it refers to which port of the home gateway) and the service type of this data outlet, the service type accessed by the device connected to this port can be determined. For example, for a packet with data packet tag a, the outbound data VLAN information is sometimes 85 and sometimes 100. For a packet with data packet tag b, the outbound data VLAN information is only 100 (for example, the IPTV private network VLAN value is 85, and the public network VLAN value is 100. When a data A packet from port a is marked with VLAN 85 at the outlet, this packet is sent to the IPTV private network. Similarly, when a data B packet from port a is marked with VLAN 100 at the outlet, this packet is sent to the public private network. In other words, the VLAN of data A on the same port a is 85, and the VLAN of data B is 100. That is, sometimes it is 85, and sometimes it is 100). This indicates that the device connected to the first port of the home gateway needs to access IPTV and Internet services. This means that the device connected to the second port of the home gateway only has Internet services. It can be understood that at this step, it is possible to accurately identify what service each port data message specifically needs to access.

[0063] Step S102: If the request initiated by the terminal is identified as an IPTV service request, the home gateway routes it to the IPTV private network plane.

[0064] It is understood that if the request initiated by the terminal is identified as an IPTV service request, the home gateway will use the routing table information to transmit the service data using the private WAN connection, and the data of other services using the public WAN connection. In other words, knowing the access type, it routes it to the destination address through the routing table.

[0065] Step S103: If the request initiated by the terminal is identified as an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

[0066] It is understandable that if the request initiated by the identification terminal is an Internet service request, the home gateway transmits the service data using the public WAN connection according to the routing table information.

[0067] It is understood that the home gateway, based on its judgment of the destination address of the terminal connected to it and the routing table configuration issued by the platform, identifies the terminal's request as an IPTV service request and routes it to the IPTV private network plane. For user access requests for terminal Internet services, the home gateway forwards them to the Internet plane. All ports, except those used by the terminal carrying the IPTV soft terminal, are bound to the public WAN connection.

[0068] For example, a home gateway analyzes packets from each downstream port to determine which services need to be accessed. (At this point, each port can access both A and B.) If a port is identified as needing access to both A and B, it binds the remaining ports to only access the Internet. (At this point, the remaining ports can only access B, so the port can access both A and B.)

[0069] For example, in the traditional full-route model, all ports on the home gateway can access IPTV and the internet. If the home gateway has four ports, then all TVs connected to those four ports can access IPTV. Operators charge based on the number of IPTV terminals. In this model, if all four ports are accessible, a user who originally subscribed to one service can now access it from four terminals, resulting in revenue losses for the operator.

[0070] Furthermore, the fact that all four ports can access IPTV also poses security risks to the IPTV platform. For example, if a computer with a virus is connected to a certain port, it may introduce the virus to the IPTV network.

[0071] The solution to this application is as follows:

[0072] Example 1:

[0073] 1. The management platform issues a management requirement to a home gateway with 4 connection ports, which is that the home gateway allows one terminal to access IPTV and the home gateway works in full routing mode.

[0074] 2. The home gateway receives instructions from the network management platform and sets itself to full routing mode. (Remove the original mode, which is mostly: port 2 is bound to IPTV services, and the other ports 1, 3, and 4 are bound to Internet services. Terminals connected to different ports can only access the corresponding services.)

[0075] 3. The home gateway starts to obtain data packets from the downstream port and identifies the destination of the packets.

[0076] For example, a user connects a TV with a soft terminal to port 3. Port 1 is connected to a computer or other device.

[0077] The home gateway identifies the packets coming from each port and their destinations. Once it recognizes that the packet from port 3 is accessing both the Internet and IPTV, it immediately binds ports 1, 2, and 4 to the Internet.

[0078] The result is that ports 1, 2, and 4 can only access the Internet, and port 3 works in routing mode. At this time, only port 3 can access the Internet and IPTV.

[0079] Example 2:

[0080] Based on step 1, the operator has enabled two IPTV services for this customer. In step 3 above, after identifying that port 3 is accessing IPTV and the internet, the operator continues identifying the next port to access IPTV and the internet. The user then connects port 4 to another TV with a soft terminal. After the home gateway recognizes that packets from port 4 are also destined for IPTV and the internet, it binds ports 1 and 2 to the internet.

[0081] As a result, ports 3 and 4 can access both the Internet and IPTV, while ports 1 and 2 can only access the Internet.

[0082] Example 3:

[0083] Based on 1, if the user changes the original port 3 to a computer and port 2 to a TV, then it is recognized that port 2 needs to access the Internet and IPTV. And the operator has only opened one IPTV service. Then

[0084] The home gateway binds ports 1, 3, and 4 to the Internet.

[0085] Result: Only port 2 can access IPTV and the Internet, and the other ports can only access the Internet.

[0086] Example 4:

[0087] Based on step 1, obtain the MAC address of the device on port 3. This is the MAC address of the TV with the soft terminal. Use this MAC address as the MAC address that can access the Internet and IPTV. Other MAC addresses can only access the Internet.

[0088] Result: No matter which port the TV is connected to, it can access IPTV and the Internet. However, other TVs cannot access IPTV. Even if other TVs are connected to port 3, they cannot access IPTV.

[0089] In one embodiment, a home gateway is used to obtain the IP addresses of the internet, IPTV private network, and network management plane, respectively, to enable data exchange between the terminal and the IPTV service platform, the internet platform, and the network management platform. It is understood that, for example, a terminal television accessing an IPTV service sends a message to the home gateway. The home gateway, based on its routing table, identifies the message as being destined for the IPTV and, using the above-described method, sends the IP address to the IPTV platform for communication. It should be noted that the terminal cannot directly obtain the IPTV's IP address, so it obtains it through the home gateway to enable communication between the terminal and the IPTV. The same principle applies to other services (internet, network management).

[0090] Optionally, when it is identified that a device connected to one or more ports of the home gateway accesses at least two service types, the MAC address of the device at that port is obtained and set as a MAC address that can access multiple service types, and the remaining MAC addresses are set as MAC addresses that can only access a single service type. That is, assuming that device D accesses both services A and B, the MAC address of device D can be directly obtained, and all MAC addresses except that MAC address can be set to only access A or B. That is, only one MAC address can access both A and B. If any MAC address other than that MAC address attempts to access both A and B, it will be directly denied.

[0091] In summary, the home gateway of this application identifies the service type accessed by the data message forwarded through the routing table, and labels the data message of each downstream connection port of the home gateway. Through the data message label and service type, the service type that the device connected to the home gateway needs to access is confirmed. The service management quantity is added to the user management platform, and the service management quantity and type are sent to the user's home gateway through the user management platform (purpose: to meet the needs of a small number of users, one family needs two TV soft terminals for IPTV services. Therefore, the operator needs to manage the number of access terminals for one user). The home gateway controls the port binding type through the management information of the user management platform plus the method of identifying the source label of the data message and the export service type. Ultimately, the service management requirements of the operator are achieved.

[0092] Reference Figure 2 , Figure 2 FIG. 1 is a schematic diagram of a service binding device provided by the present invention, as shown in FIG. Figure 2 As shown, the device includes:

[0093] Identification module 201: It is used to use the home gateway to determine the access destination address of the terminal connected to it, so as to identify the type of service request initiated by the terminal.

[0094] Processing module 202: used to route the request initiated by the terminal to the IPTV private network plane if it is identified as an IPTV service request;

[0095] If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection.

[0096] Furthermore, in a possible implementation manner, the identification module is further configured to obtain a destination address accessed by a data message of a terminal connected to the home gateway;

[0097] The home gateway identifies the service type accessed by the terminal connected to the home gateway according to the routing table information and the destination address accessed by the data message, and the service type includes: IPTV service, Internet service and network management service.

[0098] Furthermore, in a possible implementation, the processing module is further configured to, based on the first WAN connection and the second WAN connection established on the home gateway, set VLAN information for the first and second WAN connections, respectively, and set the VLAN_ID of the first WAN connection to the first identifier; and set the VLAN_ID of the second WAN connection to the second identifier;

[0099] Based on the set identifier, the VLAN of each service under the WAN connection is analyzed and compared with the VLAN information of the export data message forwarded by the routing table to obtain the service type accessed by the export data message.

[0100] Furthermore, in a possible implementation, the processing module is further configured to add different labels to data packets from each downstream connection port of the home gateway to identify port information of the data packet source, wherein the port information is the port number of the home gateway.

[0101] Furthermore, in a possible implementation manner, the processing module is further configured to obtain the port number of the data message and VLAN information of the egress data message;

[0102] If it is identified that the VLAN information of the egress data packet has multiple values, it is determined that the device connected to the home gateway port number needs to access different types of services;

[0103] If the VLAN information identifying the egress data message has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

[0104] Furthermore, in a possible implementation manner, the processing module is further configured to set the working mode of the home gateway to a full routing mode and configure a routing table;

[0105] Among them, the home gateway is used to initiate IPoE connection and obtain IP, which includes: IPTV private network IP, private network IP, public network IP, and interact with IPTV service platform, gateway management platform, and Internet service platform respectively;

[0106] Configuring the routing table includes: receiving configuration information of the routing table sent by the network management platform, and receiving configuration information of binding different ports with different WAN connections sent by the network management platform.

[0107] Furthermore, in a possible implementation, the processing module is also used to manage the number of ingress ports corresponding to each egress service of the home gateway according to the service management quantity issued by the user management platform, where the service management quantity is the number of devices connected to the home gateway to access the service.

[0108] Furthermore, in a possible implementation, the identification module is also used to use the home gateway to obtain the IP addresses of the Internet plane, IPTV private network and network management plane respectively, so as to enable the terminal to interact with the IPTV service platform, Internet platform and network management platform.

[0109] Furthermore, in a possible implementation, the processing module is also used to obtain the MAC address of the port device when it is identified that a device connected to one or more ports of the home gateway accesses multiple service types, and set it to a MAC address that can access multiple service types, and set the remaining MAC addresses to MAC addresses that can only access a single service type.

[0110] Reference Figure 3 , Figure 3 The following is a schematic diagram of the service identification provided by the present invention, as shown in FIG. Figure 3 As shown:

[0111] The gateway management platform, used for remote management, is responsible for sending the number and type of service management to the user's home gateway. The number refers to the number of devices connected to the home gateway that can access a certain service. For example, the number of devices that can access the IPTV service under the home gateway is 2. By default, the number of IPTV services is 1, and the number of Internet connections is the maximum number of device connections. In the present invention, the type sent to the home gateway is the routing mode and the corresponding routing table under this mode, as well as the username and password of the IPTV private network. After the home gateway obtains the username and password of the IPTV private network, the home gateway's networking function obtains the IPTV private network IP address through IPOE.

[0112] The service identification module in the home gateway is responsible for analyzing the service type of outgoing data packets. It uses the VLANs of each service connected to the WAN to analyze and compare the VLAN information of the outgoing data packets forwarded by the routing table to determine the outgoing service type. For example, the VLAN for IPTV is VLAN_ID1, and the VLAN for the Internet is VLAN_ID2. For IPTV services, communication with the IPTV private network is performed using the obtained IPTV private network IP address.

[0113] The port identification module in the home gateway is responsible for tagging data packets from each downstream port of the home gateway to identify the port information of the data packet source. For example, the data packet from the first port is tagged with label a, and the data packet from the second port is tagged with label b.

[0114] The analysis module analyzes the data packet's source port information and the service type of this data outlet to determine the service type accessed by the device connected to that port. For example, a packet with data packet tag a may have the outbound data VLAN information sometimes as 85 and sometimes as 100. A packet with data packet tag b may have the outbound data VLAN information only as 100. This indicates that the device connected to the home gateway's first port needs to access both IPTV and Internet services. This indicates that the device connected to the home gateway's second port only needs Internet services.

[0115] The management module is responsible for managing the number of entry ports corresponding to each export service based on the number of certain service management issued by the user management platform. For example, if the number of IPTV service management issued is 2, then the number of managed entry ports that can access IPTV services is 2. The method is: after the analysis module gives the IPTV services accessed by 2 ports that appear at the same time, the management module binds the other ports to only be able to access Internet services. For example, if there is a device with 4 ports, and the analysis module gives the 1st and 3rd ports access to the IPTV service at the same time, the 2nd and 4th ports are bound to only access the Internet service. (If the user changes the 3rd port to the 4th port, the IPTV services accessed by the 2 ports that appear at the same time are 1 and 4. At this time, the 2nd and 3rd ports are bound to only access the Internet service)

[0116] Reference Figure 4 , Figure 4 The network access system architecture of the intelligent IPTV service provided by the present invention is shown as follows: Figure 4 As shown:

[0117] Users need to access both IPTV and internet services through their terminals (TVs). The home gateway, in conjunction with the IPTV soft terminal, supports dual-network access (simultaneous access to both IPTV and internet services) and intelligent service access. The home gateway must obtain addresses for both the internet plane and the IPTV private network plane. Based on the terminal (TV)'s destination address and the platform-delivered routing table configuration, the home gateway identifies requests from the terminal (TV) as IPTV service requests and routes them to the IPTV private network plane. For user requests for internet services from the terminal, the home gateway forwards them to the open internet plane.

[0118] Among them, the access module is used to initiate an IPoE connection to obtain multiple IPs, including: IPTV private network IP, TR069 private network IP, public network IP, and interact with the IPTV service platform, gateway management platform, and Internet service platform respectively;

[0119] The management module is used to receive the configuration information of the routing table issued by the network management platform, receive the configuration information of binding different ports with different WAN connections issued by the network management platform, and select the corresponding WAN connection when forwarding data;

[0120] a transmission module for binding all ports except those used by terminals carrying IPTV services to a public WAN connection, and transmitting data from IPTV soft terminals using the private WAN connection and data from other Internet applications using the public WAN connection according to the routing table configured by the management module;

[0121] The security module is used to set MAC filtering rules for the private network WAN connection based on the MAC used by the terminal carrying the IPTV service (i.e., when it is identified that a device connected to one or more ports of the home gateway accesses multiple service types, the MAC address of the port device is obtained and set as a MAC address that can access multiple service types, and the remaining MAC addresses are set as MAC addresses that can only access a single service type) to allow access only to the terminal carrying the IPTV service.

[0122] Reference Figure 5 , Figure 5 The diagram of the home networking provided by the present invention is shown as follows: Figure 5 As shown:

[0123] The home gateway is connected to the IP network via optical fiber or network cable, communicating with the IPTV network and the Internet. A TV or other terminal equipped with an IPTV soft terminal can access the home gateway through any port. Mobile phones, computers, and other terminals can also access the home gateway through wired or wireless means. (Under the previous solution, IPTV services could only be accessed through a designated port, and this designated port could only access IPTV and not the Internet.)

[0124] Industry Insider: Home gateways have different service capabilities and different WAN connections. WAN_Other is the WAN connection for accessing IPTV, and WAN_INTERNET is the WAN connection for accessing the Internet.

[0125] To ensure network security, WAN_Other allows access from designated ports (LAN1 / SSID1, etc.) (binding all ports except the designated port to WAN_INTERNET). WAN_INTERNET is accessible from all ports. LAN1 port data is forwarded through routing. According to the routing configuration table issued by the gateway management platform, IP data with the destination address in the routing table is routed to WAN_Other, while all other IP data is routed to WAN_INTERNET.

[0126] Configure a security policy for WAN_Other to allow only designated ports (LAN1 / SSID1, etc.) hosting IPTV soft terminals to access the network. This can be achieved by filtering the MAC addresses of the IPTV soft terminals.

[0127] The foregoing is merely a list of specific embodiments of the present application, intended to enable those skilled in the art to understand or implement the present application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application is not limited to the embodiments shown herein, but is intended to conform to the broadest scope consistent with the principles and novel features of the present application.

Claims

1. A method for identifying home gateway services, characterized in that: include: The home gateway determines the type of service request initiated by the terminal by judging the destination address of the terminal connected to it; If the request initiated by the terminal is identified as an IPTV service request, the home gateway routes it to the IPTV private network plane; If the request initiated by the terminal is identified as an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection; According to the MAC address used by the terminal carrying the IPTV service, set MAC filtering rules for the private network WAN connection to allow only the terminal carrying the IPTV service to access.

2. The method according to claim 1, characterized in that The home gateway determines the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal, including: Obtain the destination address accessed by the terminal data message connected to the home gateway; The home gateway identifies the service type accessed by the terminal connected to the home gateway according to the routing table information and the destination address accessed by the data message, and the service type includes: IPTV service, Internet service and network management service.

3. The method according to claim 2, characterized in that The identifying the service type accessed by the terminal connected to the home gateway includes: Based on the first WAN connection and the second WAN connection established on the home gateway, set VLAN information for the first and second WAN connections respectively, and set the VLAN_ID of the first WAN connection to the first identifier; and set the VLAN_ID of the second WAN connection to the second identifier; Based on the set identifier, the VLAN of each service under the WAN connection is analyzed and compared with the VLAN information of the export data message forwarded by the routing table to obtain the service type accessed by the export data message.

4. The method according to claim 3, characterized in that Also includes: Different labels are added to the data packets from each downlink connection port of the home gateway to identify the port information of the data packet source, wherein the port information is the port number of the home gateway.

5. The method according to claim 4, characterized in that Also includes: Get the port number of the data packet and the VLAN information of the egress data packet; If it is identified that the VLAN information of the egress data packet has multiple values, it is determined that the device connected to the home gateway port number needs to access different types of services; If the VLAN information identifying the egress data message has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

6. The method according to claim 1, wherein Before the home gateway is used to determine the access destination address of the terminal connected thereto to identify the type of service request initiated by the terminal, the method includes: Set the working mode of the home gateway to full routing mode and configure the routing table; Among them, the home gateway is used to initiate IPoE connection and obtain IP, which includes: IPTV private network IP, private network IP, public network IP, and interact with IPTV service platform, gateway management platform, and Internet service platform respectively; Configuring the routing table includes: receiving configuration information of the routing table sent by the network management platform, and receiving configuration information of binding different ports with different WAN connections sent by the network management platform.

7. The method according to claim 6, characterized in that Also includes: According to the service management quantity issued by the user management platform, the number of ingress ports corresponding to each egress service of the home gateway is managed, where the service management quantity is the number of devices connected to the home gateway to access the service.

8. The method according to claim 1, characterized in that Also includes: The home gateway is used to obtain the IP addresses of the Internet plane, IPTV private network and network management plane respectively, so as to enable the terminal to exchange data with the IPTV service platform, Internet platform and network management platform.

9. The method according to claim 1, characterized in that Also includes: When it is identified that a device connected to one or more ports of the home gateway accesses multiple service types, the MAC address of the port device is obtained and set as a MAC address that can access multiple service types, and the remaining MAC addresses are set as MAC addresses that can only access a single service type.

10. A home gateway service identification device for implementing the home gateway service identification method according to any one of claims 1 to 8, characterized in that: include: An identification module, which is used to use the home gateway to determine the access destination address of the terminal connected to it to identify the type of service request initiated by the terminal; a processing module configured to, if identifying that the request initiated by the terminal is an IPTV service request, route the request to the IPTV private network plane via the home gateway; If the request initiated by the terminal is identified as an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except the port used by the IPTV service terminal to the public network connection; The security module is also used to set MAC filtering rules for the private network WAN connection according to the MAC used by the terminal carrying the IPTV service, so as to only allow the terminal carrying the IPTV service to access.

11. A home gateway service identification system, characterized in that: include: The access module is used to initiate an IPoE connection to obtain multiple IP addresses, including IPTV private network IP, TR069 private network IP, and public network IP, and interact with the IPTV service platform, gateway management platform, and Internet service platform respectively; The management module is used to receive the configuration information of the routing table issued by the network management platform, receive the configuration information of binding different ports with different WAN connections issued by the network management platform, and select the corresponding WAN connection when forwarding data; a transmission module for binding all ports except those used by terminals carrying IPTV services to a public WAN connection, and transmitting data from IPTV soft terminals using the private WAN connection and data from other Internet applications using the public WAN connection according to the routing table configured by the management module; The security module is used to set MAC filtering rules for the private network WAN connection according to the MAC used by the terminal carrying the IPTV service, so as to only allow the terminal carrying the IPTV service to access.

Images