Detection of traffic from relayed devices in communication network

Abstract

A method for detecting and processing traffic from relayed or tethered devices in a communication network. The method comprises: obtaining, at a terminal device, network address information of a relayed device from a first network node, wherein the terminal device acts as a relay of the relayed device; transmitting the network traffic received from the relay device from the terminal device towards a second network node, wherein the network traffic includes network address information; and determining, at the second network node, that the traffic is related to the relayed device based on the network address information. In some embodiments, the method further includes receiving, at the terminal device from the first network node, an indication that network address information of a relayed device connected to the terminal device should be obtained. In some embodiments, the method further includes transmitting, from the terminal device to the first network node, an indication of the capability of the terminal device to obtain the network address information of the relayed device.

Description

Technical Field

[0001] The present invention relates generally to traffic classification and management in mobile or communication networks and, more particularly, to the detection and processing of traffic from devices which are relayed by user equipment of a mobile or communication network. Background Art

[0002] In 3GPP fifth generation (5G) networks, the access and mobility management function (AMF) supports termination of NAS signaling, NAS encryption and integrity protection, registration management, connection management, mobility management, access authentication and authorization, security context management, etc. The policy control function (PCF) supports a unified policy framework to govern network behavior. Specifically, the PCF provides PCC (Policy and Charging Control) rules to the PCEF (Policy and Charging Enforcement Function) (i.e., the SMF / UPF that executes policy and charging decisions according to the supplied PCC rules). The session management function (SMF) supports: session establishment, modification and release, as well as policy-related functionality, such as: termination of the interface towards the policy control function, charging data collection, control and coordination of charging data collection at the UPF, and support of the charging interface. The user plane function (UPF) supports the processing of user plane services, including packet inspection, packet routing and forwarding, service usage reporting, and QoS processing of the user plane (e.g., UL / DL rate enforcement).

[0003] It is possible for a user equipment (UE) to act as a relay for other devices. An example of this is tethering, which is the practice of sharing a UE's internet connection with other connected UEs or user equipment. Tethering creates a mobile hotspot in the UE that acts as a relay. Tethering enables UEs or user equipment that do not have a built-in mobile data plan to connect to the internet by connecting to a relaying UE. Tethering is also more secure than a user device connecting using a public hotspot.

[0004] The problematic aspect is that when a UE acting as a relay (e.g., in network sharing) shares its connection with other devices (via the relay device), the UE uses its own IP range for traffic for the network sharing devices that is transmitted to the mobile network, and therefore, it is impossible for the network operator to detect that the traffic is traffic via the relay device by checking the IP information of the traffic, because all traffic is behind the same IP address.

[0005] Network operators use a variety of mechanisms (e.g., OS fingerprinting) to detect network sharing. However, with the increasing encryption of services and some advanced users hacking UEs to avoid network-side network sharing detection, it is becoming increasingly difficult for network operators to detect services or network sharing from relayed devices. Summary of the invention

[0006] It is an object of the present invention to be able to detect and differentially handle traffic from relayed or network-shared devices in a communications network.

[0007] A first aspect of the present invention relates to a method for detecting and processing services from a relayed or network-shared device in a communication network, performed by a terminal device. The method comprises: obtaining network address information of a relayed device from a first network node at the terminal device, wherein the terminal device acts as a relay for the relayed device; and transmitting network services received from the relayed device from the terminal device toward a second network node, wherein the network services include network address information. In some embodiments, the method further comprises: receiving an indication from the first network node at the terminal device that network address information of a relayed device connected to the terminal device should be obtained, in particular, wherein the indication is transmitted during the attachment or registration of the terminal device to the communication network or during the establishment of a user session with the communication network; and based on the indication, initiating the acquisition of network address information of the relayed device connected to the terminal device at the terminal device. In some embodiments, the method further comprises transmitting an indication of the terminal device's ability to obtain network address information of the relayed device from the terminal device to the first network node, in particular, wherein the indication is transmitted during the attachment or registration of the terminal device to the communication network or during the establishment of a user session with the communication network. In some embodiments, the method further comprises transmitting, from the terminal device to the first network node, an indication of releasing network address information associated with the relay device, in particular, wherein the indication is transmitted in response to the disconnection of the relay device from the terminal device. In some embodiments, the acquisition of the network address information is performed in response to the connection of the relay device to the terminal device. In some embodiments, the network address information is an IP address, an IP address range, or an IP address prefix. In some embodiments, the network address information is included in the service of the relay device as part of the source IP address information. In some embodiments, the relay device is a network sharing device connected to the terminal device. In some embodiments, the first network node is an access and mobility management function (AMF), the second network node is a user plane function (UPF), and the terminal device is a user equipment (UE).

[0008] A second aspect of the present invention relates to a method for detecting and processing services from a relayed or network-shared device in a communication network, performed by a first network node. The method comprises transmitting network address information of a relayed device from the first network node to a terminal device, wherein the terminal device acts as a relay of the relayed device. In some embodiments, the method further comprises transmitting from the first network node to the terminal device an indication that network address information of a relayed device connected to the terminal device should be obtained, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communication network or during establishment of a user session with the communication network. In some embodiments, the method further comprises receiving from the terminal device at the first network node an indication of the terminal device's ability to obtain network address information of a relayed device, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communication network or during establishment of a user session with the communication network. In some embodiments, the method further comprises transmitting from the first network node to a third network node an indication of the terminal device's ability to obtain network address information of a relayed device, in particular, wherein the indication is transmitted during establishment of a user session with the communication network. In some embodiments, the method further comprises: receiving an indication of releasing network address information associated with the relayed device from the terminal device at the first network node, in particular, wherein the indication is transmitted in response to the disconnection of the relayed device from the terminal device; and transmitting an indication of releasing the network address information associated with the relayed device from the first network node to the third network node. In some embodiments, the transmission of the network address information to the terminal device is performed in response to the connection of the relayed device to the terminal device. In some embodiments, the network address information is an IP address, an IP address range, or an IP address prefix. In some embodiments, the network address information is included in the service of the relayed device as part of the source IP address information. In some embodiments, the relayed device is a network-sharing device connected to the terminal device. In some embodiments, the first network node is an access and mobility management function (AMF), the third network node is a session management function (SMF), and the terminal device is a user equipment (UE).

[0009] A third aspect of the present invention relates to a method for detecting and processing a business from a relayed or network-shared device in a communication network, performed by a second network node. The method comprises: receiving a network business received from a relayed device from a terminal device at a second network node, wherein the network business comprises network address information, wherein the terminal device acts as a relay for the relayed device; and determining at the second network node that the business is related to the relayed device based on the network address information. In some embodiments, the method further comprises transmitting from the second network node to a third network node an indication of support for the ability to detect the business of the relayed device based on the network address information. In some embodiments, the method further comprises receiving network address information related to the relayed device from the third network node at the second network node, in particular, wherein the network address information is included in an information element, and in particular, wherein the network address information is determined at the third network node or received from the first network node. In some embodiments, the method further comprises: receiving an indication of releasing the network address information related to the relayed device from the third network node at the second network node; and releasing the network address information related to the relayed device at the second network node to stop detecting the business of the relayed device. In some embodiments, the network address information is an IP address, an IP address range, or an IP address prefix. In some embodiments, the third network node transmits network address information to the second network node in a framed routing or framed ipv6 routing information element. In some embodiments, the third network node transmits network address information to the second network node for at least one packet detection rule (PDR). In some embodiments, the network address information is included in the service of the relay device as part of the source IP address information. In some embodiments, the relay device is a network sharing device connected to the terminal device. In some embodiments, the second network node is a user plane function (UPF), the third network node is a session management function (SMF), and the terminal device is a user equipment (UE).

[0010] Other aspects of the invention relate to mobile network nodes, in particular terminal devices (101, 700), second network nodes (103, 900), first network nodes (106, 800), third network nodes (107), which are configured to perform the corresponding methods as described herein. Other aspects of the invention relate to computer programs and computer program products.

[0011] In some embodiments, the terminal device is a user equipment (UE). In some embodiments, the second network node is a user plane function (UPF). In some embodiments, the first network node is an access and mobility management function (AMF). In some embodiments, the third network node is a session management function (SMF).

[0012] Advantageously, the solution disclosed herein enables a UE acting as a relay (eg, hotspot) to request and obtain the IP address / range / prefix of the (eg, tethering) device it is relaying.

[0013] More advantageously, the solution disclosed herein enables the UPF to identify / classify / differentiate relayed (eg, network sharing) traffic and apply corresponding policies.

[0014] Further advantageously, the solution disclosed herein enables network operators to define and apply different policy actions to traffic via relayed (eg, network sharing) devices.

[0015] Additional objects, features, and advantages of the concepts disclosed herein will become apparent from the following description, claims, and accompanying drawings, or may be learned by practice of the concepts and described techniques as set forth herein. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to best describe the manner in which the disclosed concepts can be implemented and to define other objects, advantages, and features of the present disclosure, a more specific description is provided below and is illustrated in the accompanying drawings. Under the understanding that these drawings depict only exemplary embodiments of the invention and are therefore not to be considered limiting of the scope, the examples will be described and explained with additional specificity and detail through the use of the accompanying drawings.

[0017] Figure 1 An example networking system according to certain embodiments of the solutions described herein is shown.

[0018] Figures 2A-2D An example signaling diagram is shown, illustrating a procedure according to a specific embodiment of the solution described herein.

[0019] Figure 3 An example flow chart illustrating a method performed by a UE according to a specific embodiment of the solution described herein is shown.

[0020] Figure 4 An example flow chart illustrating a method performed by a mobile network node according to certain embodiments of the solutions described herein is shown.

[0021] Figure 5 An example flow chart illustrating a method performed by a mobile network node according to certain embodiments of the solutions described herein is shown.

[0022] Figure 6 An example block diagram of a UE configured according to certain embodiments of the solutions described herein is shown.

[0023] Figure 7 An example block diagram of a mobile network node configured according to certain embodiments of the solutions described herein is shown.

[0024] Figure 8 An example block diagram of a mobile network node configured according to certain embodiments of the solutions described herein is shown. DETAILED DESCRIPTION

[0025] The present invention will now be described in detail below with reference to the accompanying drawings, in which embodiments of the present invention or examples of implementation are shown. However, the present invention can be embodied or implemented in many different forms, and should not be construed as being limited to the embodiments set forth herein. On the contrary, these embodiments are provided so that the present disclosure will be thorough and complete, and these embodiments will fully convey the scope of the present invention to those skilled in the art. It should also be noted that these embodiments are not mutually exclusive. Components from one embodiment may be defaulted to exist / use in another embodiment. These embodiments of the disclosed subject matter are presented as teaching examples, and should not be construed as limiting the scope of the disclosed subject matter. For example, without departing from the scope of the described subject matter, some details of the described embodiments may be modified, omitted or expanded.

[0026] The example embodiments described herein occur in the context of telecommunications networks, including but not limited to telecommunications networks conforming to and / or otherwise incorporating aspects of fifth generation (5G) architecture. Figure 1 is an example networking system 100 according to an example embodiment of the present disclosure. Figure 1 Specifically shown is a user equipment (UE) 101, which can communicate with a (radio) access network (RAN) 102 and an access and mobility management function (AMF) 106 and a user plane function (UPF) 103. The AMF 106 can in turn communicate with core network services including a session management function (SMF) 107 and a policy control function (PCF) 111. The core network services can also communicate with an application server / application function (AS / AF) 113. Other networking services also include a network slice selection function (NSSF) 108, an authentication server function (AUSF) 105, a user data management (UDM) 112, a network exposure function (NEF) 109, a network repository function (NRF) 110, and a data network (DN) 104. In some example implementations of the embodiments of the present disclosure, each entity in the networking system 100 is considered a network function (NF). One or more additional instances of NF can be incorporated into the networking system.

[0027] The solution described herein aims to enable detection and differential handling of traffic from relayed or tethered devices in a communication network.

[0028] The present disclosure provides a method for detecting and processing services from a relayed or network-shared device in a communication network. The method includes: obtaining network address information of a relayed device from a first network node at a terminal device, wherein the terminal device acts as a relay of the relayed device; transmitting network services received from the relayed device from the terminal device toward a second network node, wherein the network services include network address information; and determining at the second network node that the services are related to the relayed device based on the network address information. In some embodiments, the method also includes: receiving an indication from the first network node at the terminal device that the network address information of the relayed device connected to the terminal device should be obtained, in particular, wherein the indication is transmitted during the attachment or registration of the terminal device to the communication network or during the establishment of a user session with the communication network; and based on the indication, initiating the acquisition of the network address information of the relayed device connected to the terminal device at the terminal device. In some embodiments, the method also includes transmitting an indication of the terminal device's ability to obtain the network address information of the relayed device from the terminal device to the first network node, in particular, wherein the indication is transmitted during the attachment or registration of the terminal device to the communication network or during the establishment of a user session with the communication network. In some embodiments, the method further comprises transmitting, from the first network node to the third network node, an indication of a capability of the terminal device to obtain network address information of the relayed device, in particular, wherein the indication is transmitted during establishment of a user session with the communication network. In some embodiments, the method further comprises: transmitting, from the second network node to the third network node, an indication of support for the capability to detect services of the relayed device based on the network address information; and selecting, at the third network node, for the terminal device, a second network node that supports the capability to obtain network address information of the relayed device. In some embodiments, the method further comprises transmitting, from the third network node to the second network node, network address information related to the relayed device, in particular, wherein the network address information is included in an information element, and in particular, wherein the network address information is determined at the third network node or received from the first network node. In some embodiments, the method further comprises: transmitting from the terminal device to the first network node an indication to release the network address information associated with the relayed device, in particular, wherein the indication is transmitted in response to the disconnection of the relayed device from the terminal device; transmitting from the first network node to the third network node an indication to release the network address information associated with the relayed device; transmitting from the third network node to the second network node an indication to release the network address information associated with the relayed device; and releasing the network address information associated with the relayed device at the second network node to stop detecting the service of the relayed device. In some embodiments, the obtaining of the network address information is performed in response to the connection of the relayed device to the terminal device. In some embodiments, the network address information is an IP address, an IP address range, or an IP address prefix.In some embodiments, the third network node transmits network address information to the second network node in a framed routing or framed ipv6 routing information element. In some embodiments, the third network node transmits network address information to the second network node for at least one packet detection rule (PDR). In some embodiments, the network address information is included in the service of the relay device as part of the source IP address information. In some embodiments, the relay device is a network sharing device connected to the terminal device. In some embodiments, the first network node is an access and mobility management function (AMF), the second network node is a user plane function (UPF), the third network node is a session management function (SMF), and the terminal device is a user equipment (UE).

[0029] The present disclosure also provides a mobile network node, in particular a terminal device (101, 600), a second network node (103, 800), a first network node (106, 700), and a third network node (107, 00), which are configured to perform the corresponding methods as described herein. In some embodiments, the terminal device is a user equipment (UE) 101. In some embodiments, the second network node is a user plane function (UPF) 103. In some embodiments, the first network node is an access and mobility management function (AMF) 106. In some embodiments, the third network node is a session management function (SMF) 107.

[0030] The present disclosure also provides a corresponding computer program and a computer program product comprising code (eg in the form of a computer program) which, when executed on a processing circuit of a mobile network node, causes the mobile network node to perform the disclosed method.

[0031] Advantageously, the solution disclosed herein enables a UE acting as a relay (eg, hotspot) to request and obtain the IP address / range / prefix of the (eg, tethering) device it is relaying.

[0032] More advantageously, the solution disclosed herein enables the UPF to identify / classify / differentiate relayed (eg, network sharing) traffic and apply corresponding policies.

[0033] Further advantageously, the solution disclosed herein enables network operators to define and apply different policy actions to traffic via relayed (eg, network sharing) devices.

[0034] The solution and the features included therein are further described below.

[0035] The present disclosure proposes a solution based on requesting, acquiring and releasing IP addresses and / or ranges by a UE acting as a relay to be used as source addresses for flows via relayed (eg, tethering) devices.

[0036] A UE acting as a relay (eg, hotspot) requests and obtains the IP address and / or range of the (eg, tethering) device it is relaying, when capable, and uses the obtained information as the source address of traffic via the relay device.

[0037] The proposed mechanism consists of the following steps:

[0038] During the PFCP association process, the UPF reports new capabilities to the SMF (e.g.

[0039] "Acquired via the IP range of the relay / network sharing device"), allowing the SMF to select a UPF that supports this capability on a per PFCP session basis.

[0040] Communication between the UE and the Mobile Network Operator (MNO) regarding new capabilities (e.g.

[0041] The MNO supports the negotiation of the new capability ("Acquire via relay / network sharing device's IP range"). For example, in the registration request from the UE to the MNO (AMF), the UE indicates the new capability ("Acquire via relay / network sharing device's IP range"). If the MNO also supports this capability, it indicates this to the UE.

[0042] At PDU session establishment, when the subscriber requires detection via relay / tethering, the AMF indicates to the UE that the IP range should be requested when connecting the device by using a relay / tethering connection.

[0043] During a PDU session, if a UE (which acts as a relay, e.g., a hotspot) has received the above indication, when a new device needs to connect to the UE acting as a relay (e.g., a hotspot), the UE acting as a relay (e.g., a hotspot) shall request a new IPv4 or IPv6 address or range. The UE shall send all relayed / network-shared traffic from / to the device according to the received IP range or address (e.g., using an IP address in the range as the source IP address).

[0044] • Since the session is marked as relay / tethering capable, the SMF can provide the UPF with the IP address provided to the hotspot using the existing "Framed (IPv6) Routing" Information Element (IE) or a dedicated IE.

[0045] • The IE used above may be provided only for a group of PDRs for which the network operator wants to differentiate between relayed / network shared traffic.

[0046] The UPF uses the IP address / s received in the IE to identify the

[0047] The network shares the services generated by the device and applies the corresponding policy actions.

[0048] When disconnected from a hotspot connection via a relay / tethering device, the UE acting as a relay (e.g., hotspot) requests the AMF to release the IP address / IP address range, then the AMF notifies the SMF, and the SMF updates the UPF session to perform the IP address / IP address range release.

[0049] In the following the drawings are described in detail which show examples of embodiments of the solution.

[0050] Figures 2A-2D A signaling diagram is shown, which illustrates a process for detecting and processing traffic from a relayed or network-sharing device in a communication network. The process is performed by a terminal device (101, 600), a second network node (103, 800), a first network node (106, 700), and a third network node (107). In some embodiments, the terminal device is a user equipment (UE) 101. In some embodiments, the second network node is a user plane function (UPF) 103. In some embodiments, the first network node is an access and mobility management function (AMF) 106. In some embodiments, the third network node is a session management function (SMF) 107.

[0051] In steps 1 to 2), during the PFCP association process between the UPF and SMF entities, the mechanism for reporting UPF capabilities includes the capability (e.g., "Support IP address acquisition via relay / network sharing devices: IPAT, see bold in the table below"). This allows the SMF to know which UPFs support this capability and can therefore influence the UPF selection.

[0052] Table 1: UP functional characteristics In steps 3 and 4), the UE (acting as a relay) indicates the capability (e.g. "IP range acquisition for network sharing devices") to the AMF in the Registration Request. If the MNO supports this capability, it indicates this to the UE in the Registration Accept message.

[0053] In steps 5 to 8), the UE triggers the PDU session establishment process. As part of the process, the AMF creates a policy association with the PCF (step 7), and the SMF creates a policy association with the PCF (step 8).

[0054] In steps 9 and 10), the PCF retrieves the subscriber policy profile (ie, policy data for the PDU session for that user) from the UDR, which in this example includes policies for relay / tethering control based on IP range acquisition via the relay / tethering device.

[0055] In steps 11 and 12), the PCF generates PCC rules, which include the above network sharing control policy obtained based on the IP range of the relay / network sharing device.

[0056] In steps 13 to 15), SMF selects a UPF that supports the "IP range acquisition via relay / network sharing device" capability and triggers the PFCP session establishment process towards the UPF to indicate the PDR and corresponding execution actions (FAR, QER, URR, etc.) for the PDU session.

[0057] In steps 16 and 17), the PCF sends an indication of requesting the IP range of the relay / network sharing device towards the UE through the AMF by triggering the NpcfAMPolicyControl Create Response message included in the extended protocol configuration option (ePCO).

[0058] In step 18), the AMF triggers a PDU session establishment response including the above-mentioned ePCO field (which includes an indication of the IP range of the requested relay / network sharing device).

[0059] In step 19), the UE stores an indication of the IP range requested to be shared via the relay / network.

[0060] In steps 20 and 21), the connection is made via the relay / tethering device through the UE acting as a relay (eg, hotspot).

[0061] In steps 22 and 23), the UE requests the IPv4 address / range / prefix or IPv6 address / range / prefix of the relay / network sharing device based on the information stored in step 19. The UE triggers a SMPolicyControl request message including an indication of requesting the IPv4 or IPv6 address information of the relay / network sharing device.

[0062] In step 24), AMF forwards the information in step 23 to SMF.

[0063] In steps 25 and 26), SMF allocates an IPv4 address / range / prefix or an IPv6 address / range / prefix to the relay / network sharing device and triggers an SMPolicyControl response message to AMF, which includes the allocated IPv4 address / range / prefix or IPv6 address / range / prefix of the relay / network sharing device.

[0064] In step 27), the AMF forwards the message in step 26 to the UE.

[0065] In step 28), the UE stores the allocated IPv4 address / range / prefix or IPv6 address / range / prefix via the relay / network sharing device.

[0066] In steps 28 and 29), in parallel with step 26, the SMF sends the allocated IPv4 address / range / prefix or IPv6 address / range / prefix via the relay / network sharing device to the UPF by triggering a PFCP session modification request including the allocated IPv4 address / range / prefix or IPv6 address / range / prefix via the relay / network sharing device.

[0067] In steps 30 and 31), the UPF stores the IPv4 address / range / prefix or IPv6 address / range / prefix via the relay / network sharing device and replies to the SMF indicating a successful operation.

[0068] In steps 32 and 33), the relay / network sharing device starts sending application traffic through the UE acting as a relay (eg, hotspot).

[0069] In steps 34 and 35), based on the information stored in step 28, the UE sets the source IP address for the traffic from the relayed / network-shared device.

[0070] In step 36), the UPF detects traffic from the relay / network sharing device and applies corresponding policies.

[0071] The solution described in the present disclosure may involve a radio access network (RAN) in the communication between the UE and the communication network acting as a relay. The RAN may perform the functionality (or a subset of the functionality) of the AMF as described in the present disclosure, or may act as a transparent intermediary between the UE and the AMF.

[0072] Finally, the solution described in this disclosure is not only applicable to 5G network architecture, but the same mechanism can be applied to 4G by:

[0073] ·UDR replaced by SPR

[0074] · PCRF replaces PCF

[0075] · Replace SMF with PGW-C or TDF-C

[0076] · Replace UPF with PGW-U or TDF-U

[0077] In the following, flow charts are described in detail, which flow charts illustrate examples of embodiments of the solution.

[0078] The embodiments correspond to methods performed by and involving a terminal device (101, 600), a second network node (103, 800), a first network node (106, 700), and a third network node (107).

[0079] Figure 3 is a flow chart illustrating a method performed by a terminal device for detecting and processing traffic from a relayed or network-shared device in a communication network.

[0080] In step S-301, the terminal device transmits to the first network node an indication of the terminal device's ability to obtain network address information via a relay device, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communication network or during establishment of a user session with the communication network.

[0081] In step S-302, the terminal device receives an indication from the first network node that network address information of a relayed device connected to the terminal device should be obtained, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communication network or during establishment of a user session with the communication network.

[0082] In step S-303, the terminal device initiates acquisition of network address information of the relay device connected to the terminal device based on the instruction.

[0083] In step S-304, the terminal device obtains network address information of the relayed device from the first network node, wherein the terminal device acts as a relay of the relayed device.

[0084] In step S-305, the terminal device transmits the network traffic received from the relay device toward the second network node, wherein the network traffic includes the network address information.

[0085] In step S-306, the terminal device transmits an instruction to release the network address information related to the relayed device to the first network node, in particular, wherein the instruction is transmitted in response to the relayed device being disconnected from the terminal device.

[0086] In some embodiments, obtaining of the network address information is performed in response to connection with the terminal device via a relay device.

[0087] In some embodiments, the network address information is an IP address, an IP address range, or an IP address prefix.

[0088] In some embodiments, the network address information is included in the traffic passing through the relay device as part of the source IP address information.

[0089] In some embodiments, the relayed device is a tethered device connected to the terminal device.

[0090] In some embodiments, the first network node is an Access and Mobility Management Function (AMF), the second network node is a User Plane Function (UPF), and the terminal device is a User Equipment (UE).

[0091] Figure 4 is a flow chart illustrating a method performed by a first network node for detecting and processing traffic from a relayed or network-shared device in a communication network.

[0092] In step S-401, the first network node receives from a terminal device an indication of the terminal device's ability to obtain network address information via a relay device, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communication network or during establishment of a user session with the communication network.

[0093] In step S-402, the first network node transmits an indication of the capability of the terminal device to obtain network address information of the relayed device to the third network node, in particular, wherein the indication is transmitted during establishment of a user session with the communication network.

[0094] In step S-403, the first network node transmits an indication to the terminal device that network address information of a relay device connected to the terminal device should be obtained, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communication network or during establishment of a user session with the communication network.

[0095] In step S-404, the first network node transmits network address information of the relay device to the terminal device, wherein the terminal device acts as a relay via the relay device.

[0096] In step S-405, the first network node receives an instruction to release network address information related to the relayed device from the terminal device, in particular, wherein the instruction is transmitted in response to disconnection of the relayed device from the terminal device.

[0097] In step S-406, the first network node transmits an instruction to release the network address information related to the relayed device to the third network node.

[0098] In some embodiments, the transmission of the network address information to the terminal device is performed in response to a connection with the terminal device via the relay device.

[0099] In some embodiments, the network address information is an IP address, an IP address range, or an IP address prefix.

[0100] In some embodiments, the network address information is included in the traffic passing through the relay device as part of the source IP address information.

[0101] In some embodiments, the relayed device is a tethered device connected to the terminal device.

[0102] In some embodiments, the first network node is an Access and Mobility Management Function (AMF), the third network node is a Session Management Function (SMF), and the terminal device is a User Equipment (UE).

[0103] Figure 5 is a flow chart illustrating a method performed by a second network node for detecting and processing traffic from a relayed or network-shared device in a communication network.

[0104] In step S-501, the second network node transmits an indication of support for a capability to detect traffic via a relay device based on network address information to a third network node.

[0105] In step S-502, the second network node receives network address information related to the relayed device from the third network node, in particular, wherein the network address information is included in an information element, and in particular, wherein the network address information is determined at the third network node or received from the first network node.

[0106] In step S-503, the second network node receives, from the terminal device, network traffic received from the relay device, wherein the network traffic includes network address information, wherein the terminal device acts as a relay via the relay device.

[0107] In step S-504, the second network node determines that the traffic is related to the relayed device based on the network address information.

[0108] In step S-505, the second network node receives an instruction to release the network address information related to the relayed device from the third network node.

[0109] In step S-506, the second network node releases the network address information related to the relayed device to stop detecting the traffic of the relayed device.

[0110] In some embodiments, the network address information is an IP address, an IP address range, or an IP address prefix.

[0111] In some embodiments, the third network node transmits the network address information to the second network node in a framed routing or framed ipv6 routing information element.

[0112] In some embodiments, the third network node transmits network address information to the second network node for at least one packet detection rule (PDR).

[0113] In some embodiments, the network address information is included in the traffic passing through the relay device as part of the source IP address information.

[0114] In some embodiments, the relayed device is a tethered device connected to the terminal device.

[0115] In some embodiments, the second network node is a User Plane Function (UPF), the third network node is a Session Management Function (SMF), and the terminal device is a User Equipment (UE).

[0116] Figure 6 600 (also referred to as a communication device, mobile terminal, mobile communication terminal, wireless device, wireless communication device, wireless terminal, mobile device, wireless communication terminal, user equipment node / terminal / device, etc.) configured to provide wireless communication according to an embodiment of the present disclosure. As shown, the communication device UE may include an antenna 607 and a transceiver circuit 601 (also referred to as a transceiver), the transceiver circuit 601 including a transmitter and a receiver, the transmitter and the receiver being configured to provide uplink and downlink radio communications with (one or more) base stations of a radio access network (also referred to as RAN nodes). The UE may also include: a processing circuit 603 (also referred to as a processor) coupled to the transceiver circuit, and a memory circuit 605 (also referred to as a memory, e.g., corresponding to a device-readable medium) coupled to the processing circuit. The memory circuit 605 may include a computer-readable program code, such as an application client 609, which, when executed by the processing circuit 603, causes the processing circuit to perform operations according to the embodiments disclosed herein. According to other embodiments, the processing circuit 603 may be defined to include a memory, so that a separate memory circuit is not required. The UE 600 may also include an interface (e.g., a user interface) coupled to the processing circuit 603, and / or the UE may be incorporated in a vehicle. As discussed herein, the operations of the UE may be performed by the processing circuit 603 and / or the transceiver circuit 601. For example, the processing circuit 603 may control the transceiver circuit 601 to: transmit communications to a radio access network node (also referred to as a base station) over a radio interface through the transceiver circuit 601, and / or receive communications from a RAN node over a radio interface through the transceiver circuit 601. In addition, modules may be stored in the memory circuit 605, and these modules may provide instructions such that: when the instructions of the modules are executed by the processing circuit 603, the processing circuit 603 performs corresponding operations (e.g., the operations disclosed herein for example embodiments related to the UE).

[0117] Figure 7is a block diagram illustrating elements of a mobile network node 700 of a mobile communications network. In some embodiments, the mobile network node 700 is an AMF 106. As shown, the mobile network node may include a network interface circuit 701 (also referred to as a network interface) configured to provide communication with a core network and / or other nodes of the network. The mobile network node may also include: a processing circuit 702 (also referred to as a processor) coupled to the network interface circuit, and a memory circuit 703 (also referred to as a memory) coupled to the processing circuit. The memory circuit 703 may include a computer-readable program code that, when executed by the processing circuit 702, causes the processing circuit to perform operations according to the embodiments disclosed herein. According to other embodiments, the processing circuit 702 may be defined to include a memory, thereby eliminating the need for a separate memory circuit. As discussed herein, the operation of the mobile network node may be performed by the processing circuit 702 and / or the network interface circuit 701. For example, the processing circuit 702 may control the network interface circuit 701 to transmit communications to one or more other network nodes through the network interface circuit 701, and / or receive communications from one or more other network nodes through the network interface circuit. In addition, modules may be stored in the memory 703, and these modules may provide instructions so that when the instructions of the modules are executed by the processing circuit 702, the processing circuit 702 performs corresponding operations (e.g., the operations discussed below for example embodiments related to core network nodes).

[0118] Figure 8800 is a block diagram illustrating elements of a mobile network node 800 of a mobile communication network. In some embodiments, the mobile network node 800 is a UPF 103. As shown, the mobile network node may include a network interface circuit 801 (also referred to as a network interface) configured to provide communication with a core network and / or other nodes of the network. The mobile network node may also include: a processing circuit 802 (also referred to as a processor) coupled to the network interface circuit, and a memory circuit 803 (also referred to as a memory) coupled to the processing circuit. The memory circuit 803 may include a computer-readable program code that, when executed by the processing circuit 802, causes the processing circuit to perform operations according to the embodiments disclosed herein. According to other embodiments, the processing circuit 802 may be defined to include a memory, thereby eliminating the need for a separate memory circuit. As discussed herein, the operation of the mobile network node may be performed by the processing circuit 802 and / or the network interface circuit 801. For example, the processing circuit 802 may control the network interface circuit 801 to transmit communications to one or more other network nodes through the network interface circuit 801, and / or receive communications from one or more other network nodes through the network interface circuit. In addition, modules may be stored in the memory 803, and these modules may provide instructions so that when the instructions of the modules are executed by the processing circuit 802, the processing circuit 802 performs corresponding operations (e.g., the operations discussed below for example embodiments related to core network nodes).

[0119] Embodiments within the scope of the present invention may also include a computer-readable medium for carrying or storing computer-executable instructions or data structures. This computer-readable medium can be any available medium that can be accessed by a general or special-purpose computer. As an example and not limitation, this tangible computer-readable medium may include: RAM, ROM, EEPROM, CD-ROM or other optical disk storage devices, disk storage devices or other magnetic storage devices, or any other medium that can be used to carry or store the required program code components in the form of computer-executable instructions or data structures. When information is transmitted or provided to a computer through a network or another communication connection (hardwired, wireless or a combination thereof), the computer appropriately regards the connection as a computer-readable medium. Therefore, any such connection is appropriately referred to as a computer-readable medium. The combination of the above items should also be included in the scope of tangible computer-readable media.

[0120] Computer executable instructions include, for example, instructions and data that cause a general-purpose computer, a special-purpose computer, or a special-purpose processing device to perform a specific function or group of functions. Computer executable instructions also include program modules that are executed by computers in a stand-alone or network environment. Typically, program modules include routines, programs, objects, components, and data structures that perform specific tasks or implement specific abstract data types. Computer executable instructions, associated data structures, and program modules represent examples of program code components for performing the steps of the methods disclosed herein. A specific sequence of such executable instructions or associated data structures represents an example of corresponding actions for implementing the functions described in such steps.

[0121] Those skilled in the art will appreciate that other embodiments of the present invention may be practiced in a network computing environment having many types of computer system configurations, including personal computers, handheld devices, multiprocessor systems, microprocessor-based or programmable consumer electronics, network PCs, minicomputers, mainframe computers, and the like. Embodiments may also be practiced in a distributed computing environment, where tasks are performed by local and remote processing devices connected through a communication network (via hardwired links, wireless links, or a combination thereof). In a distributed computing environment, program modules may be located in local and remote memory storage devices.

[0122] Communications at various stages of the described system may be performed via local area networks, token ring networks, the Internet, corporate intranets, 802.11 family wireless signals, fiber optic networks, radio or microwave transmissions, etc. Although the underlying communication technology may change, the basic principles described herein still apply.

[0123] The various embodiments described above are provided only as illustrations and should not be construed as limiting the present invention. For example, the principles herein can be applied to any remote control device. In addition, those skilled in the art will recognize that the communication between the remote controller and the remote control device does not need to be limited to the communication on the local area network, but can include the communication on the infrared channel, Bluetooth or any other suitable communication interface. Those skilled in the art will easily recognize that the various modifications and changes that can be made to the present invention without following the example embodiments and applications shown and described herein and without departing from the scope of the present disclosure.

[0124] The terms used herein are only used for the purpose of describing various embodiments and are not intended to limit the exemplary embodiments. As used herein, the singular forms "a, an" and "the" are also intended to include plural forms, unless the context clearly indicates otherwise. It will also be understood that the terms "includes, including" and "comprises, comprising" when used in this specification specify the presence of the features, integers, steps, operations, elements or components and combinations thereof, but do not exclude the presence or addition of one or more other features, integers, steps, operations, elements or components and combinations thereof. In addition, all terms used in the claims will be interpreted according to their common meanings in the technical field, unless otherwise clearly defined herein. All references to "a / an / the element, device, assembly, part, module, step, etc." will be openly interpreted as referring to at least one instance of an element, device, assembly, part, module, step, etc., unless otherwise clearly stated. Unless clearly stated, the steps of any method disclosed herein do not have to be performed in the exact order disclosed.

Claims

1. A method for detecting and processing traffic from a relayed or network-shared device in a communication network, the method comprising: obtaining, at a terminal device, network address information of a relayed device from a first network node, wherein the terminal device acts as a relay for the relayed device; transmitting, from the terminal device toward a second network node, network traffic received from the relayed device, wherein the network traffic includes the network address information; as well as It is determined at the second network node that the traffic is related to the relayed device based on the network address information.

2. The method according to claim 1, further comprising: receiving, at the terminal device, from the first network node, an indication that the network address information of the relayed device connected to the terminal device should be obtained, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communications network or during establishment of a user session with the communications network; as well as Based on the indication, obtaining of the network address information of the relayed device connected to the terminal device is initiated at the terminal device.

3. The method according to any one of claims 1 to 2, further comprising: An indication of the terminal device's ability to obtain the network address information via a relay device is transmitted from the terminal device to the first network node, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communications network or during establishment of a user session with the communications network.

4. The method according to claim 3, further comprising: The indication of the capability of the terminal device to obtain the network address information via a relayed device is transmitted from the first network node to a third network node, in particular, wherein the indication is transmitted during establishment of a user session with the communication network.

5. The method according to any one of claims 1 to 4, further comprising: transmitting, from the second network node to the third network node, an indication of support for a capability to detect traffic via a relay device based on the network address information; as well as The second network node supporting a capability of obtaining the network address information of the device via the relay is selected for the terminal device at the third network node.

6. The method according to any one of claims 1 to 5, further comprising: The network address information related to the relayed device is transmitted from the third network node to the second network node, in particular, wherein the network address information is comprised in an information element, and in particular, wherein the network address information is determined at the third network node or received from the first network node.

7. The method according to any one of claims 1 to 6, further comprising: transmitting, from the terminal device to the first network node, an indication to release the network address information associated with the relayed device, in particular, wherein the indication is transmitted in response to a disconnection of the relayed device from the terminal device; transmitting, from the first network node to the third network node, the indication to release the network address information associated with the relayed device; transmitting, from the third network node to the second network node, the indication to release the network address information associated with the relayed device; as well as The network address information related to the relayed device is released at the second network node to stop detecting traffic of the relayed device.

8. The method according to any one of claims 1 to 7, wherein: The acquisition of the network address information is performed in response to the connection with the terminal device via the relay device.

9. The method according to any one of claims 1 to 8, wherein: The network address information is an IP address, an IP address range or an IP address prefix.

10. The method according to claim 9, wherein: The third network node transmits the network address information to the second network node in a framed routing or framed ipv6 routing information element.

11. The method according to any one of claims 1 to 10, wherein: The third network node transmits the network address information to the second network node for at least one packet detection rule PDR.

12. The method according to any one of claims 1 to 11, wherein: The network address information is included in the traffic passing through the relay device as a part of the source IP address information.

13. The method according to any one of claims 1 to 12, wherein: The relayed device is a network-sharing device connected to the terminal device.

14. The method according to any one of claims 1 to 13, wherein: The first network node is an access and mobility management function AMF, the second network node is a user plane function UPF, the third network node is a session management function SMF, and the terminal device is a user equipment UE.

15. A method for detecting and processing traffic from a relayed or network-shared device in a communication network, performed by a terminal device, the method comprising: obtaining, at a terminal device, network address information of a relayed device from a first network node, wherein the terminal device acts as a relay for the relayed device; as well as The network traffic received from the relayed device is transmitted from the terminal device toward a second network node, wherein the network traffic includes the network address information.

16. The method according to claim 15, further comprising: receiving, at the terminal device, from the first network node, an indication that the network address information of the relayed device connected to the terminal device should be obtained, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communications network or during establishment of a user session with the communications network; as well as Based on the indication, obtaining of the network address information of the relayed device connected to the terminal device is initiated at the terminal device.

17. The method according to any one of claims 15 to 16, further comprising: An indication of the terminal device's ability to obtain the network address information via a relay device is transmitted from the terminal device to the first network node, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communications network or during establishment of a user session with the communications network.

18. The method according to any one of claims 15 to 17, further comprising: An indication to release the network address information related to the relayed device is transmitted from the terminal device to the first network node, in particular, wherein the indication is transmitted in response to the relayed device being disconnected from the terminal device.

19. The method according to any one of claims 15 to 18, wherein: The acquisition of the network address information is performed in response to the connection with the terminal device via the relay device.

20. The method according to any one of claims 15 to 19, wherein: The network address information is an IP address, an IP address range or an IP address prefix.

21. The method according to any one of claims 15 to 20, wherein: The network address information is included in the traffic passing through the relay device as a part of the source IP address information.

22. The method according to any one of claims 15 to 21, wherein: The relayed device is a network-sharing device connected to the terminal device.

23. The method according to any one of claims 15 to 22, wherein: The first network node is an access and mobility management function AMF, the second network node is a user plane function UPF, and the terminal device is a user equipment UE.

24. A method performed by a first network node for detecting and processing traffic from a relayed or network-shared device in a communication network, the method comprising: The network address information of the relayed device is transmitted from the first network node to the terminal device, wherein the terminal device acts as a relay for the relayed device.

25. The method according to claim 24, further comprising: An indication is transmitted from the first network node to the terminal device that the network address information of the relayed device connected to the terminal device should be obtained, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communication network or during establishment of a user session with the communication network.

26. The method according to any one of claims 24 to 25, further comprising: Receiving, at the first network node, from the terminal device an indication of the terminal device's ability to obtain the network address information via the relay device, in particular, wherein the indication is transmitted during attachment or registration of the terminal device to the communications network or during establishment of a user session with the communications network.

27. The method according to claim 26, further comprising: The indication of the capability of the terminal device to obtain the network address information via a relayed device is transmitted from the first network node to a third network node, in particular, wherein the indication is transmitted during establishment of a user session with the communication network.

28. The method according to any one of claims 24 to 27, further comprising: receiving, at the first network node, from the terminal device an indication to release the network address information associated with the relayed device, in particular, wherein the indication is transmitted in response to a disconnection of the relayed device from the terminal device; as well as The indication to release the network address information related to the relayed device is transmitted from the first network node to the third network node.

29. The method according to any one of claims 24 to 28, wherein: In response to the connection with the terminal device via the relay device, the transmission of the network address information to the terminal device is performed.

30. The method of any one of claims 24 to 29, wherein: The network address information is an IP address, an IP address range or an IP address prefix.

31. The method of any one of claims 24 to 30, wherein: The network address information is included in the traffic passing through the relay device as a part of the source IP address information.

32. The method of any one of claims 24 to 31, wherein: The relayed device is a network-sharing device connected to the terminal device.

33. The method of any one of claims 24 to 32, wherein: The first network node is an access and mobility management function AMF, the third network node is a session management function SMF, and the terminal device is a user equipment UE.

34. A method performed by a second network node for detecting and processing traffic from a relayed or network-shared device in a communication network, the method comprising: receiving, at a second network node, from a terminal device network traffic received from a relayed device, wherein the network traffic includes network address information, wherein the terminal device acts as a relay for the relayed device; as well as It is determined at the second network node that the traffic is related to the relayed device based on the network address information.

35. The method of claim 34, further comprising: An indication of support for a capability to detect traffic via a relay device based on the network address information is transmitted from the second network node to a third network node.

36. The method according to any one of claims 34 to 35, further comprising: The network address information related to the relayed device is received at the second network node from the third network node, in particular, wherein the network address information is comprised in an information element, and in particular, wherein the network address information is determined at the third network node or received from the first network node.

37. The method of any one of claims 34 to 36, further comprising: receiving, at the second network node from the third network node, an indication to release the network address information related to the relayed device; as well as The network address information related to the relayed device is released at the second network node to stop detecting traffic of the relayed device.

38. The method of any one of claims 34 to 37, wherein: The network address information is an IP address, an IP address range or an IP address prefix.

39. The method of claim 38, wherein: The third network node transmits the network address information to the second network node in a framed routing or framed ipv6 routing information element.

40. The method of any one of claims 34 to 39, wherein: The third network node transmits the network address information to the second network node for at least one packet detection rule PDR.

41. The method of any one of claims 34 to 40, wherein: The network address information is included in the traffic passing through the relay device as a part of the source IP address information.

42. The method of any one of claims 34 to 41, wherein: The relayed device is a network-sharing device connected to the terminal device.

43. The method of any one of claims 34 to 42, wherein: The second network node is a user plane function UPF, the third network node is a session management function SMF, and the terminal device is a user equipment UE.

44. An apparatus for detecting and processing traffic from a relayed or network-shared device in a communications network, the apparatus comprising a processor and a memory, the memory containing instructions executable by the processor such that the apparatus is operable to perform a method according to any one of claims 15 to 23.

45. An apparatus for detecting and processing traffic from a relayed or network-shared device in a communications network, the apparatus comprising a processor and a memory, the memory containing instructions executable by the processor such that the apparatus is operable to perform a method according to any one of claims 24 to 33.

46. ​​An apparatus for detecting and processing traffic from a relayed or network-shared device in a communications network, the apparatus comprising a processor and a memory, the memory containing instructions executable by the processor such that the apparatus is operable to perform a method according to any one of claims 34 to 43.

47. A system comprising the apparatus according to claim 44, the apparatus according to claim 45 and the apparatus according to claim 46.

48. A computer implemented system comprising one or more processors and one or more computer storage media storing computer usable instructions which, when used by the one or more processors, cause the one or more processors to perform the method of any one of claims 15 to 43.

49. A computer program comprising instructions which, when executed on at least one processor, cause the at least one processor to perform the method according to any one of claims 15 to 43.

50. A computer program product embodied on a non-transitory machine-readable medium, comprising instructions executable by a processor, causing the processor to perform the method according to any one of claims 15 to 43.

Images