Data transmission method and device, medium, equipment and product

Abstract

The invention discloses a data transmission method and device, a medium, equipment and a product, relates to the technical field of communication, and is used for improving the security of terminal equipment. The method is applied to a fixed mobile convergence FMC gateway, and a dedicated virtual transmission channel is arranged between the FMC gateway and each private network gateway in a plurality of private network gateways. The method comprises the following steps: receiving an access request message of terminal equipment; the access request message is used for requesting target service data; determining a target private network gateway corresponding to the source address of the terminal equipment in the plurality of private network gateways; forwarding the access request message to a target private network gateway through a dedicated virtual transmission channel with the target private network gateway to obtain target service data; and sending the target service data to the terminal equipment.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of communication technology, and in particular, to a data transmission method, apparatus, medium, equipment and product. Background Art

[0002] With the rapid development of Internet technology, terminal devices can remotely access the data of home smart terminals (such as home cameras, etc.). When a terminal device remotely accesses the data of a home smart terminal, it needs to forward the data of the home smart terminal to the terminal device through the Internet public cloud, which may cause data leakage risks.

[0003] In order to reduce the risk of data leakage of home smart terminals, it is usually possible to upgrade and enhance the functions of some network elements such as the existing UPF network elements and UDM network elements. It is also necessary to incrementally develop the operator's BOSS system and build a new accompanying private network home UPF network element to access the data of home smart terminals based on the private network, which is relatively complex. Summary of the invention

[0004] The present application provides a data transmission method, apparatus, medium, equipment and product for improving the security of data on home smart terminals.

[0005] In order to achieve the above objectives, this application adopts the following technical solutions:

[0006] In a first aspect, a data transmission method is provided, which is applied to a fixed mobile convergence FMC gateway, wherein a dedicated virtual transmission channel is set between the FMC gateway and each of a plurality of private network gateways, and the method comprises: receiving an access request message of a terminal device; the access request message is used to request target service data; determining a target private network gateway corresponding to a source address of the terminal device among the plurality of private network gateways; forwarding the access request message to the target private network gateway through the dedicated virtual transmission channel between the FMC gateway and the target private network gateway to obtain the target service data; and sending the target service data to the terminal device.

[0007] Optionally, determining a target private network gateway corresponding to the source address of the terminal device among multiple private network gateways includes: obtaining an initial mapping relationship; the initial mapping relationship includes a mapping relationship between multiple source addresses and multiple private network gateways; when the initial mapping relationship does not include the source address of the terminal device, obtaining configuration information of the terminal device; and determining, based on the configuration information, a target private network gateway corresponding to the source address of the terminal device among multiple private network gateways.

[0008] Optionally, obtaining the configuration information of the terminal device includes: sending a first indication message to the UPF network element; the first indication message is used to obtain the configuration information; receiving an auxiliary http data packet from the UPF network element to obtain the configuration information of the terminal device; the auxiliary http data packet is obtained based on the source address and identification information of the terminal device.

[0009] Optionally, the auxiliary http packet is sent by the UPF network element when the URL address of the original http packet is the target URL address; the target URL address is a preconfigured URL address; and the original http packet is sent by the terminal device in response to the first indication message.

[0010] Optionally, based on the configuration information, determine the target private network gateway corresponding to the source address of the terminal device among multiple private network gateways, including: determining whether the terminal device has access rights to the target private network device based on the identification information; when the terminal device has access rights to the target private network device, determine the target private network gateway corresponding to the source address of the terminal device among multiple private network gateways.

[0011] Based on the technical solution provided by this application, when the terminal device needs to access the target business data in the private network device, the FMC gateway can determine the target private network gateway corresponding to the source address of the terminal device among multiple private network gateways, and then obtain the target business data in the target private network device according to the target private network gateway. In this way, the process does not need to be transmitted in the public network, which improves the security of data transmission. In addition, the process does not require upgrading the existing network equipment, but only requires the creation of a new FMC gateway to accurately determine the private network that matches the terminal device and access the required data in the private network, reducing the complexity of accessing private network data.

[0012] In a second aspect, a data transmission method is provided, which is applied to a terminal device, and the method includes: sending an access request message to a fixed mobile convergence FMC gateway; the access request message is used to request target business data; the FMC gateway determines a target private network gateway corresponding to a source address of the terminal device among multiple private network gateways, and forwards the access request message to the target private network gateway through a dedicated virtual transmission channel between the target private network gateway and the target private network gateway to obtain the target business data; and receives the target business data.

[0013] Optionally, a first indication message from a UPF network element is received; the first indication message is used to obtain configuration information; an original http packet is sent to the UPF network element, so that the UPF network element sends an auxiliary http packet to the FMC gateway when the URL address of the original http packet is the target URL address; the auxiliary http data packet is obtained based on the source address and identification information of the terminal device.

[0014] In a third aspect, a data transmission device is provided, which is applied to a fixed mobile convergence FMC gateway, wherein a dedicated virtual transmission channel is set between the FMC gateway and each of a plurality of private network gateways, and the device comprises: a receiving unit, a processing unit, and a sending unit; the receiving unit is used to receive an access request message of a terminal device; the access request message is used to request target service data; the processing unit is used to determine a target private network gateway corresponding to a source address of the terminal device among a plurality of private network gateways; the sending unit is used to forward the access request message to the target private network gateway through a dedicated virtual transmission channel between the FMC gateway and the target private network gateway to obtain the target service data; the sending unit is also used to send the target service data to the terminal device.

[0015] Optionally, the processing unit is specifically used to: obtain an initial mapping relationship; the initial mapping relationship includes a mapping relationship between multiple source addresses and multiple private network gateways; when the initial mapping relationship does not include the source address of the terminal device, obtain the configuration information of the terminal device; and determine, according to the configuration information, a target private network gateway among multiple private network gateways corresponding to the source address of the terminal device.

[0016] Optionally, the receiving unit is specifically used to: send a first indication message to the UPF network element; the first indication message is used to obtain configuration information; receive an auxiliary http data packet from the UPF network element to obtain configuration information of the terminal device; the auxiliary http data packet is obtained based on the source address and identification information of the terminal device.

[0017] Optionally, the auxiliary http packet is sent by the UPF network element when the URL address of the original http packet is the target URL address; the target URL address is a preconfigured URL address; and the original http packet is sent by the terminal device in response to the first indication message.

[0018] Optionally, the processing unit is specifically used to: determine whether the terminal device has access rights to the target private network device based on the identification information; if the terminal device has access rights to the target private network device, determine the target private network gateway corresponding to the source address of the terminal device among multiple private network gateways.

[0019] In a fourth aspect, a data transmission device is provided, which is applied to a terminal device, and the device includes: a sending unit and a receiving unit; the sending unit is used to send an access request message to a fixed mobile convergence FMC gateway; the access request message is used to request target business data; the FMC gateway is used to determine a target private network gateway corresponding to a source address of the terminal device among multiple private network gateways, and forward the access request message to the target private network gateway through a dedicated virtual transmission channel between the target private network gateway and the target private network gateway to obtain the target business data; the receiving unit is used to receive the target business data.

[0020] Optionally, the receiving unit is also used to receive a first indication message from the UPF network element; the first indication message is used to obtain configuration information; the sending unit is also used to send an original http packet to the UPF network element, so that the UPF network element sends an auxiliary http packet to the FMC gateway when the URL address of the original http packet is the target URL address; the auxiliary http data packet is obtained based on the source address and identification information of the terminal device.

[0021] In a fifth aspect, a data transmission device is provided, which can implement the functions performed by the data transmission device in the above-mentioned aspects or each possible design. The functions can be implemented through hardware, such as: in one possible design, the data transmission device may include: a processor and a communication interface, and the processor can be used to support the data transmission device to implement the functions involved in the above-mentioned first aspect or any possible design of the first aspect.

[0022] In another possible design, the data transmission device may further include a memory, the memory being used to store computer-executable instructions and data necessary for the data transmission device. When the data transmission device is running, the processor executes the computer-executable instructions stored in the memory, so that the data transmission device performs the first aspect or any possible data transmission method of the first aspect.

[0023] In the sixth aspect, a computer-readable storage medium is provided, which may be a readable non-volatile storage medium, and which stores computer instructions or programs. When the computer-readable storage medium is run on a computer, the computer can execute the first aspect or any possible data transmission method of the above aspects.

[0024] In a seventh aspect, a computer program product comprising instructions is provided, which, when executed on a computer, enables the computer to execute the data transmission method of the first aspect or any possible design of the above aspects.

[0025] In an eighth aspect, an electronic device is provided, the electronic device comprising one or more processors and one or more memories. The one or more memories are coupled to the one or more processors, the one or more memories are used to store computer program codes, the computer program codes include computer instructions, and when the one or more processors execute the computer instructions, the electronic device executes the data transmission method as described in the first aspect or any possible design of the first aspect.

[0026] In a ninth aspect, a chip system is provided, the chip system including a processor and a communication interface, the chip system can be used to implement the function performed by the data transmission device in the first aspect or any possible design of the first aspect. In one possible design, the chip system also includes a memory, the memory is used to store program instructions and / or data. The chip system can be composed of a chip, or it can include a chip and other discrete devices, without limitation. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 A schematic diagram of the structure of a data transmission system provided in an embodiment of the present application;

[0028] Figure 2 A structural diagram of another data transmission system provided in an embodiment of the present application;

[0029] Figure 3 A schematic diagram of the structure of a data transmission device provided in an embodiment of the present application;

[0030] Figure 4 A flowchart of a data transmission method provided in an embodiment of the present application;

[0031] Figure 5 A flowchart of another data transmission method provided in an embodiment of the present application;

[0032] Figure 6 A flowchart of another data transmission method provided in an embodiment of the present application;

[0033] Figure 7 A schematic diagram of the structure of another data transmission device provided in an embodiment of the present application;

[0034] Figure 8 A schematic diagram of the structure of another data transmission device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0035] In order to enable ordinary persons in the art to better understand the technical solutions of the present disclosure, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings.

[0036] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present disclosure described herein can be implemented in an order other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the embodiments of the present application as detailed in the attached claims.

[0037] It should also be understood that the term “comprising” indicates the presence of described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements and / or components.

[0038] With the rapid development of Internet technology, terminal devices can remotely access the data of home smart terminals (such as home cameras, etc.). When a terminal device remotely accesses the data of a home smart terminal, it needs to forward the data of the home smart terminal to the terminal device through the Internet public cloud. The data of the home smart terminal is at risk of data leakage. In addition, traditional remote access is limited by the transmission bandwidth of the network, and the data transmission rate is low.

[0039] In order to reduce the risk of data leakage of home smart terminals, it is usually possible to upgrade and enhance the functions of some network elements such as the existing UPF network elements and UDM network elements. It is also necessary to incrementally develop the operator's BOSS system and build a new accompanying private network home UPF network element to access the data of home smart terminals based on the private network, which is relatively complex.

[0040] In view of this, an embodiment of the present application provides a data transmission method, including: receiving an access request message from a terminal device; the access request message is used to request target business data; determining a target private network gateway corresponding to a source address of the terminal device among multiple private network gateways; forwarding the access request message to the target private network gateway through a dedicated virtual transmission channel between the target private network gateway and the target private network gateway to obtain the target business data; and sending the target business data to the terminal device.

[0041] The method provided in the embodiment of the present application is described in detail below with reference to the accompanying drawings.

[0042] It should be noted that the network system described in the embodiment of the present application is to more clearly illustrate the technical solution of the embodiment of the present application, and does not constitute a limitation on the technical solution provided in the embodiment of the present application. Ordinary technicians in this field can know that with the evolution of network systems and the emergence of other network systems, the technical solution provided in the embodiment of the present application is also applicable to similar technical problems.

[0043] Figure 1 FIG. 1 is a schematic diagram of a data transmission system 10 provided in an embodiment of the present application. Figure 1 As shown, the data transmission system 10 may include a terminal device 11 and an FMC gateway 12 .

[0044] Among them, the terminal device 11 can be used to access the target business data in the target private network device. It can also be called a terminal, a mobile station (MS), a mobile terminal (MT), etc., which is a device that provides voice and / or data connectivity to users. For example, the terminal device 11 can be a handheld device with wireless connection function, a vehicle-mounted device, etc. Specifically, it can be: a smart phone (mobile phone), a pocket personal computer (PPC), a handheld computer, a personal digital assistant (PDA), a laptop computer, a tablet computer, a wearable device, or a vehicle-mounted device, etc. The embodiments of the present application do not limit the specific technology, specific number, and specific device form adopted by the terminal device 11.

[0045] Among them, the FMC gateway 12 involved in the embodiment of the present application is a gateway device that supports the integration of fixed networks and mobile networks. It mainly realizes the connection between fixed networks and mobile networks. It supports multiple network interfaces and protocols, and can perform call conversion, data transmission and other services between fixed networks and mobile networks, providing users with a more convenient and efficient communication experience. The embodiment of the present application does not limit the specific technology, specific number and specific device form of the FMC gateway 12.

[0046] Figure 2 FIG. 1 is a schematic diagram of the structure of another data transmission system 10 provided in an embodiment of the present application. Figure 2 As shown, the data transmission system 10 may include a terminal device 11, an FMC gateway 12, an access network device 13, a core network device 14, a private network gateway 15 (also referred to as a fixed-line private network gateway), and a private network device 16.

[0047] Among them, the access network device 13 can be a next generation radio access network device (NG-RAN). The access network device 13 is respectively connected to the terminal device 11 and the core network device 14. For example, the access network device 13 and the terminal device 11 can be connected to each other through the N1 interface. The access network device 13 and the core network device 14 can be connected to each other through the N2 interface and the N3 interface. For example, the access network device 13 and the AMF network element in the core network device 14 can be connected to each other through the N2 interface. The access network device 13 and the UPF network element in the core network device 14 can be connected to each other through the N3 interface.

[0048] Among them, the core network equipment 14 may include access and mobility management function (AMF) network elements, session management function (SMF) network elements, user plane function (UPF) and other network function (NF) network elements.

[0049] Among them, the AMF network element and the terminal device 11 can be connected through the N1 interface communication, and the AMF network element and the access network device 13 can be connected through the N2 interface communication. The AMF network element is responsible for the access and mobility management of the terminal device, including user authentication, location management, session management, etc. The SMF network element is responsible for the establishment, modification and deletion of user sessions, as well as the management and billing of data traffic. The UPF network element is responsible for the forwarding and processing of user data, including the encapsulation, decapsulation, and routing of data packets.

[0050] A virtual private network (VPN) tunnel is pre-established between the private network gateway 15 and the FMC gateway 12. The private network gateway 15 and the FMC gateway 12 can be connected in communication via the pre-established VPN tunnel. The private network gateway 15 is connected in communication with the private network device 16.

[0051] The number of the private network devices 16 may be one or more. The types of the private network devices may be camera devices, printers, network attached storage (NAS) devices, and the like.

[0052] When implementing it specifically, Figure 1 and Figure 2 Each device in the Figure 3 The structure shown, or including Figure 3Parts shown. Figure 3 The structure diagram of a data transmission device 200 provided in an embodiment of the present application is shown in FIG. 2 . The data transmission device 200 may be a network device, or the data transmission device 200 may be a chip or a system on a chip in a network device. Figure 3 As shown, the data transmission device 200 includes a processor 201 , a communication interface 202 and a communication line 203 .

[0053] Furthermore, the data transmission device 200 may further include a memory 204 . The processor 201 , the memory 204 and the communication interface 202 may be connected via a communication line 203 .

[0054] The processor 201 is a CPU, a general processor, a network processor (NP), a digital signal processor (DSP), a microprocessor, a microcontroller, a programmable logic device (PLD), or any combination thereof. The processor 201 may also be other devices with processing functions, such as circuits, devices, or software modules, without limitation.

[0055] The communication interface 202 is used to communicate with other devices or other communication networks. The communication interface 202 can be a module, a circuit, a communication interface or any device capable of implementing communication.

[0056] The communication line 203 is used to transmit information between the components included in the data transmission device 200.

[0057] The memory 204 is used to store instructions, where the instructions may be computer programs.

[0058] The memory 204 may be a read-only memory (ROM) or other types of static storage devices that can store static information and / or instructions, or a random access memory (RAM) or other types of dynamic storage devices that can store information and / or instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), magnetic disk storage media or other magnetic storage devices, etc., without limitation.

[0059] It should be noted that the memory 204 can exist independently of the processor 201, or can be integrated with the processor 201. The memory 204 can be used to store instructions or program codes or some data, etc. The memory 204 can be located inside the data transmission device 200, or outside the data transmission device 200, without limitation. The processor 201 is used to execute the instructions stored in the memory 204 to implement the data transmission method provided in the following embodiments of the present application.

[0060] In one example, the processor 201 may include one or more CPUs, for example, Figure 3 CPU0 and CPU1 in.

[0061] As an optional implementation, the data transmission device 200 includes multiple processors, for example, Figure 3 In addition to the processor 201, a processor 205 may also be included.

[0062] It should be pointed out that Figure 3 The composition shown in the Figure 1 and Figure 2 The limitations of each device in Figure 3 In addition to the parts shown, Figure 1 and Figure 2 The individual devices in the Figure 3 More or fewer components, or combinations of certain components, or different arrangements of components.

[0063] In the embodiment of the present application, the chip system may be composed of a chip, or may include a chip and other discrete devices.

[0064] In addition, the actions, terms, etc. involved in the various embodiments of the present application can refer to each other without limitation. The message name or parameter name in the message exchanged between the various devices in the embodiments of the present application is only an example, and other names can also be used in the specific implementation without limitation.

[0065] In order to clearly describe the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish the same or similar items with substantially the same functions and effects. Those skilled in the art can understand that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference.

[0066] It should be noted that, in this application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in this application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0067] In the present application, "at least one" means one or more, and "plurality" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0068] Combine the following Figure 1 and Figure 2 The data transmission system shown describes the data transmission method provided in the embodiment of the present application.

[0069] Figure 4 A flow chart of a data transmission method provided in an embodiment of the present application is shown as follows: Figure 4 As shown, the method includes the following S301-S304:

[0070] S301: A terminal device sends an access request message to a fixed mobile convergence FMC gateway. Correspondingly, the FMC gateway receives the access request message from the terminal device.

[0071] The access request message includes the source address and destination address of the terminal device and is used to access target service data in the target private network device.

[0072] As a possible implementation, the terminal device may send an access request message to the fixed mobile convergence FMC gateway in response to the control instruction. Correspondingly, the FMC gateway receives the access request message from the terminal device.

[0073] It should be noted that the control instruction may refer to an instruction generated in response to a control operation of an operator. For example, the control instruction may be an instruction input by an operator through an input device (such as a keyboard) of a terminal device, or may be a control instruction input by an operator through a touch device set on the terminal device.

[0074] In one example, when an operator needs to access target business data in a target private network device, the control instruction may be an instruction for the operator to open application software corresponding to the target private network device.

[0075] In another example, when an operator needs to access target service data in a target private network device, the control instruction may be an instruction for the operator to jump to a destination address corresponding to the target private network device.

[0076] For example, the destination address may be a configured IP address of a broadband local area network.

[0077] For example, when the target private network devices include a camera, a printer, and a NAS device, the IP address of the camera may be 192.168.1.2, the IP address of the NAS device may be 192.168.1.3, and the IP address of the printer may be 192.168.1.4.

[0078] When a user needs to access target service data (such as high-definition movies) stored in a NAS device, the user can send an access request message with a destination address of 192.168.1.3 to the FMC gateway through a terminal device.

[0079] The following is combined with the above Figure 3 The process of sending an access request message by a terminal device is described. The process of sending an access request message by a terminal device may include the following S1-S3:

[0080] S1. The terminal device sends an access request message to the wireless access network device; correspondingly, the wireless access network receives the access request message.

[0081] In one example, the terminal device may send an access request message to the wireless access network device via the N1 interface.

[0082] S2. The wireless access network device sends an access request message to the UPF network element; correspondingly, the UPF network element receives the access request message.

[0083] In one example, the wireless access network device may send an access request message to the UPF network element via the N3 interface.

[0084] It should be noted that before sending the access request message, the terminal device can send a PDU session request message to the AMF network element through the wireless access network device. Accordingly, the AMF network element receives the PDU session request message and sends a PDU session request message to the SMF network element. Accordingly, the SMF network element receives the PDU session establishment request message; and sends a packet forwarding control protocol (PFCP) session establishment request message (PFCPSession Establishment Request) to the UPF network element through the N4 interface to complete the establishment of the PDU session.

[0085] The PFCP session establishment request message includes a business rule, which is used to specify that access request messages with a private network address as the destination address are all forwarded to the FMC gateway, and those with a public network address as the destination address are forwarded to the public network.

[0086] In some embodiments, the PFCP session establishment request message further includes a header enhancement information element (HeaderEnrichment IE).

[0087] IE stands for header enhancement field, which may include, for example, identification information and IP address of the terminal device.

[0088] S3. The UPF network element sends an access request message to the FMC gateway; correspondingly, the FMC gateway receives the access request message.

[0089] In one example, the access request message includes a source address (such as an IP address) of the terminal device. The UPF network element can determine the type of the IP address, and send the access request message to the FMC gateway when the source address of the terminal device is a private network address.

[0090] When the source address of the terminal device is a public network address, the UPF network element can send an access request message to the public network.

[0091] It should be noted that the UPF network element pre-stores multiple private network addresses to determine the type of the source address of the terminal device. For example, the private network address may be 192.168.1.0 / 24.

[0092] S302: The FMC gateway determines a target private network gateway corresponding to a source address of a terminal device among multiple private network gateways.

[0093] Among them, the first mapping relationship includes a mapping relationship between multiple source addresses and multiple private network gateways; the first mapping relationship includes the source address of the terminal device.

[0094] The target private network gateway is connected to the target private network device corresponding to the destination address. For example, the operator can assign a VPN account to each private network gateway, and each private network gateway can establish a VPN connection with the FMC gateway through the VPN account. Different private network gateways are connected to the FMC gateway through different dedicated VPN tunnels, and the FMC gateway establishes a routing table pointing to the private network gateway.

[0095] As a possible implementation manner, the FMC gateway may determine, from the first mapping relationship, a private network gateway having a mapping relationship with the source address of the terminal device, and determine the private network gateway as the target private network gateway.

[0096] In one example, the first mapping relationship may include a mapping relationship between multiple source addresses and VPN accounts (which may be referred to as users) corresponding to multiple private network gateways.

[0097] For example, the first mapping relationship can be represented by the following Table 1.

[0098] Table 1 The first mapping relationship

[0099] Source Address VPN Account 10.4.4.2 bjhdsd606 10.4.4.1 Bjxcds515

[0100] It should be noted that Table 1 is only an exemplary description, and the first mapping relationship may also include corresponding relationships between other source addresses and VPN accounts, without limitation.

[0101] In actual applications, when the terminal device does not access the destination address for the first time, the FMC gateway can determine the target private network gateway according to the source address of the terminal device and the first mapping relationship.

[0102] When the terminal device accesses the destination address for the first time, the FMC gateway does not store the source address of the terminal device, that is, does not store the mapping relationship between the source address of the terminal device and the private network gateway, and cannot determine the target private network gateway. The FMC gateway can establish a mapping relationship between the source address of the terminal device and the private network gateway, obtain a first mapping relationship, and determine the target private network gateway based on the first mapping relationship.

[0103] The process of establishing a mapping relationship between the source address of the terminal device and the private network gateway and obtaining the first mapping relationship can refer to the description in the subsequent parts and will not be repeated here.

[0104] As another possible implementation method, the FMC gateway can determine whether the terminal device has activated the private network service (also known as the fixed-mobile direct service), and if the private network service is activated, determine the private network gateway that has a mapping relationship with the source address of the terminal device from the first mapping relationship, and determine the private network gateway as the target private network gateway.

[0105] It should be noted that the first mapping relationship may also include identification information of a terminal device that has activated a private network service. The FMC gateway may determine that the terminal device has activated the private network service when the first mapping relationship includes the identification information of the terminal device, and may determine that the terminal device has not activated the private network service when the first mapping relationship does not include the identification information of the terminal device.

[0106] In some embodiments, when it is determined that the terminal device has not activated the private network service, the FMC gateway may send an activation link for the private network service to the terminal device.

[0107] In actual applications, the target private network gateway can be an optical modem, router, etc. deployed by the operator for the user.

[0108] S303. The FMC gateway forwards the access request message to the target private network gateway through the dedicated virtual transmission channel between the FMC gateway and the target private network gateway to obtain the target service data.

[0109] The target business data is the data requested to be accessed by the access request message.

[0110] As a possible implementation method, after determining the target private network gateway, the FMC gateway can obtain the target service data in the target private network device based on the dedicated VPN tunnel between the FMC gateway and the target private network gateway.

[0111] In one example, combining the above Figure 2 , the FMC gateway can send an access request message to the target private network gateway. Correspondingly, the target private network gateway receives the access request message and sends the access request message to the target private network device corresponding to the destination IP address in the access request message. Correspondingly, the target private network device receives the access request message and sends the target service data to the FMC gateway through the target private network gateway.

[0112] S304. The FMC gateway sends the target service data to the terminal device; correspondingly, the terminal device receives the target service data.

[0113] As a possible implementation method, the FMC gateway can send the target service data to the UPF network element, and the UPF network element can send the target service data to the terminal device based on the established PDF session.

[0114] In some embodiments, in order to further improve the security of data transmission, the FMC gateway may encrypt the target service data and send the encrypted target service data to the terminal device; the terminal device receives the encrypted target service data, decrypts the encrypted target service data, and obtains the target service data.

[0115] Based on the technical solution provided by this application, when the terminal device needs to access the target business data in the private network device, the FMC gateway can determine the target private network gateway corresponding to the source address of the terminal device among multiple private network gateways, and then obtain the target business data in the target private network device according to the target private network gateway. In this way, the process does not need to be transmitted in the public network, which improves the security of data transmission. In addition, the process does not require upgrading the existing network equipment, but only requires the creation of a new FMC gateway to accurately determine the private network that matches the terminal device and access the required data in the private network, reducing the complexity of accessing private network data.

[0116] A possible embodiment, Figure 5 A flow chart of another data transmission method is shown, such as Figure 5 As shown, the present application may also include the following S401-S403.

[0117] S401. The FMC gateway obtains an initial mapping relationship.

[0118] The initial mapping relationship includes a mapping relationship between multiple source addresses and multiple private network gateways; the initial mapping relationship does not include a source address of a terminal device.

[0119] In an example, the initial mapping relationship may be as shown in Table 2 below:

[0120] Table 2 Initial mapping relationship

[0121] Source Address VPN Account none bjhdsd606 10.4.4.1 bjhdsd606 10.4.4.3 Bjxcds515

[0122] It should be noted that Table 2 is only an exemplary description, and the initial mapping relationship may also include mapping relationships between other source addresses and VPN accounts, which are not limited here.

[0123] In another example, the initial mapping relationship may also include identification information of multiple terminal devices, mapping relationships between multiple source addresses and multiple private network gateways. The initial mapping relationship may be as shown in Table 3 below:

[0124] Table 3 Initial mapping relationship

[0125]

[0126] It should be noted that Table 3 is only an exemplary description, and the initial mapping relationship may also include identification information of other terminal devices, a mapping relationship between a source address and a VPN account, which is not limited here.

[0127] As a possible implementation manner, the FMC gateway may obtain an initial mapping relationship from a preset database when receiving an access request message from a terminal device for the first time.

[0128] S402: When the initial mapping relationship does not include the source address of the terminal device, the FMC gateway obtains configuration information of the terminal device.

[0129] The configuration information includes the identification information and source address of the terminal device.

[0130] As a possible implementation method, after obtaining the access request message, the FMC gateway parses the source address of the terminal device in the access request message, and then matches the source address of the terminal device with the initial mapping relationship. If the initial mapping relationship does not include the source address of the terminal device, the first indication message is sent to the terminal device.

[0131] The first indication message is used to instruct the terminal device to send identification information of the terminal device and a source address of the terminal device to the FMC gateway.

[0132] In combination with the above Table 2, when the source address of the terminal device is 10.4.4.2, the FMC gateway matches based on the initial mapping relationship in Table 2. The initial mapping relationship in Table 2 does not include the source address 10.4.4.2 of the terminal device, that is, the identity of the terminal device and the bound target private network gateway cannot be identified temporarily. The FMC gateway can send a first indication message to the terminal device.

[0133] In some embodiments, the FMC gateway may be pre-configured with a WEB page, and the FMC gateway may redirect the access request message of the terminal device to the WEB page, and send the first indication message to the terminal device based on the WEB page.

[0134] The WEB page may include prompt information instructing the terminal device to send identification information of the terminal device and a source address of the terminal device to the FMC gateway.

[0135] In some embodiments, the first indication message includes an information acquisition script, and the terminal device can obtain the identification information of the terminal device and the source address of the terminal device in response to the running operation of the information acquisition script, and send the identification information of the terminal device and the source address of the terminal device to the FMC gateway.

[0136] In one example, after the terminal device jumps to the WEB page indicated by the first indication message, the WEB page may include the information acquisition script. The terminal device may respond to a click operation on the information acquisition script in the WEB page to implement the running operation of the information acquisition script, obtain the identification information of the terminal device and the source address of the terminal device, and send the identification information of the terminal device and the source address of the terminal device to the FMC gateway.

[0137] In some other embodiments, the first indication message may include a hypertext transfer protocol (HTTP) packet sending script, and the terminal device may obtain identification information of the terminal device and a source address of the terminal device in response to the running operation of the HTTP packet sending script, and send the identification information of the terminal device and the source address of the terminal device to the FMC gateway.

[0138] In one example, after the terminal device jumps to the WEB page indicated by the first indication message, the WEB page may include the HTTP packet sending script. The terminal device may respond to a click operation on the HTTP packet sending script in the WEB page to implement the running operation of the HTTP packet sending script, obtain the identification information of the terminal device and the source address of the terminal device, and send the identification information of the terminal device and the source address of the terminal device to the FMC gateway.

[0139] Combined with the above Figure 2 In response to the running operation of the HTTP packet sending script, the terminal device sends the original HTTP packet to the UPF. After receiving the original HTTP packet, the UPF can add the identification information of the terminal device and the source address of the terminal device to the original HTTP packet to obtain an auxiliary HTTP packet, and send the auxiliary HTTP packet to the FMC gateway; accordingly, the FMC gateway receives the auxiliary HTTP packet to obtain the identification information of the terminal device and the source address of the terminal device.

[0140] In some embodiments, the HTTP packet may include the uniform resource locator (URL) address of the WEB page. After receiving the original HTTP packet, the UPF network element may determine whether the URL address in the HTTP packet is a URL address in the whitelist.

[0141] When the URL address in the original HTTP packet belongs to the URL address in the whitelist, the UPF network element can add the identification information of the terminal device and the source address of the terminal device to the original HTTP packet, obtain an auxiliary HTTP packet, and send the auxiliary HTTP packet to the FMC gateway; accordingly, the FMC gateway receives the auxiliary HTTP packet to obtain the identification information of the terminal device and the source address of the terminal device.

[0142] When the URL address in the original HTTP packet does not belong to the URL address in the whitelist, the UPF network element does not need to process the original HTTP packet and directly forwards the original HTTP packet to the destination address corresponding to the original HTTP packet.

[0143] It should be noted that the URL address in the HTTP packet can be pre-configured as needed, for example, it can be www.gw.com.

[0144] S403: Determine, according to the configuration information, a target private network gateway corresponding to the source address of the terminal device among the multiple private network gateways.

[0145] As a possible implementation method, the FMC gateway can establish a mapping relationship between the identification information of the terminal device and the source address of the terminal device based on the configuration information, and update the mapping relationship to the initial mapping relationship to obtain a first mapping relationship, and then determine the target private network gateway corresponding to the source address of the terminal device among multiple private network gateways based on the first mapping relationship.

[0146] In a possible embodiment, in order to establish a mapping relationship between the identification information of the terminal device and the source address of the terminal device, the present application may further include the following S501-S502.

[0147] S501. The FMC gateway determines, based on identification information of the terminal device, whether the terminal device has access rights to a target private network device.

[0148] As a possible implementation, the first mapping relationship may further include identification information of multiple terminal devices, mapping relationships between multiple source addresses and multiple private network gateways, and the FMC gateway may determine that the terminal device has access rights to the target private network device when the identification information of the multiple terminal devices included in the first mapping relationship includes identification information of the terminal device corresponding to the access request message. When the identification information of the multiple terminal devices included in the first mapping relationship does not include identification information of the terminal device corresponding to the access request message, it is determined that the terminal device does not have access rights to the target private network device.

[0149] It should be noted that not having access rights to the target private network device may mean that the terminal device has not activated the private network service (also known as fixed-mobile direct access service).

[0150] In actual applications, after the terminal device activates the private network service, the FMC gateway can store the mapping relationship between the terminal device's identification information and the private network gateway (vpn account).

[0151] In an example, suppose there are two groups of family users (Family A and Family B) who have activated private network services. The operator assigns VPN accounts and passwords to the broadband LANs of the two groups of families respectively. The VPN account of Family A is bjhdsd606, and the VPN account of Family B is bjxcds515. Family A has two mobile user members C and D, and Family B has one mobile user member E. The operator assigns terminal device identification information to these three users. The identification information of the terminal device of user C is aB3c5D7eF9g1, the identification information of the terminal device of user D is 2h4I6j8kLmNo, and the identification information of the terminal device of user E is Zp1qRs2tUv3w.

[0152] It should be noted that after the terminal device activates the private network service, the FMC gateway only stores the terminal device's identification and VPN, but does not store the terminal device's source IP address. The FMC gateway will store the terminal device's source IP address only after the terminal device accesses the target service data in the target private network device.

[0153] In actual applications, in order to ensure the security of user data and prevent the disclosure of user contract information, code numbers and other data, it is not recommended to directly use SUPI, GPSI, PEI, IMSI, MSISDN, IMEI and other terminal equipment identification information. Instead, a terminal equipment identification information is allocated to mobile network users who have activated the fixed-mobile direct service and written into the user contract information and policy.

[0154] S502: When the terminal device has access rights to the target private network device, the FMC gateway determines a target private network gateway corresponding to the source address of the terminal device from among multiple private network gateways.

[0155] As a possible implementation method, when the terminal device has access rights to the target private network device, the FMC gateway can write the identification information and source address of the terminal device into a table item with a mapping relationship, establish a mapping relationship between the identification information of the terminal device and the source address of the terminal device, and determine the target private network gateway corresponding to the source address of the terminal device among multiple private network gateways based on the mapping relationship.

[0156] In one example, the identification information of the terminal device is aB3c5D7eF9g1, and the source address of the terminal device is 10.4.4.2. In the case where the initial mapping relationship may be the above Table 3, the first mapping relationship may be the following Table 4.

[0157] Table 4 The first mapping relationship

[0158]

[0159] It should be noted that Table 4 is only an exemplary description, and the first may also include identification information of other terminal devices, a mapping relationship between a source address and a VPN account, which is not limited here.

[0160] Further, after establishing a mapping relationship between the identification information of the terminal device and the source address of the terminal device, the FMC gateway may activate a web page pop-up prompt, where the web page pop-up prompt is used to instruct and guide the user to initiate an access request message again.

[0161] In some embodiments, when the terminal device does not have access rights to the target private network device, the FMC gateway may determine that the access request is not approved and discard the data packet corresponding to the access request message.

[0162] Figure 6 A flowchart of another data transmission method provided in an embodiment of the present application is shown as follows: Figure 6 As shown, the method includes the following S11-S23:

[0163] S11. Establish a VPN tunnel between the FMC gateway and the target private network gateway.

[0164] In some embodiments, the operator can assign a VPN account to each private network gateway, and each private network gateway establishes a VPN connection with the FMC gateway through the VPN account. There is a dedicated VPN tunnel between each fixed-line private network and the fixed-mobile converged gateway, and the FMC gateway establishes and maintains routing tables pointing to these private network gateways.

[0165] S12. The FMC gateway deploys the WEB page and configures the initial mapping relationship.

[0166] The specific implementation of this step may refer to S401 and will not be described in detail here.

[0167] S13. UPF network element configures HTTP header enhancement function.

[0168] Among them, the HTTP header enhancement function is used to enhance the header of the WEB page http packet corresponding to the URL address.

[0169] For example, the header of the http packet may be enhanced by adding the identifier of the terminal device sending the http packet and the source IP address to the header of the http packet.

[0170] S14: Establish a PDU session and session rules.

[0171] In some embodiments, the terminal device can request the AMF network element to establish a PDU session through NG-RAN, and the 5G core network control plane (5G Core Control Plane, 5GC CP) completes the establishment of the PDU session according to the 3GPP standard process. The specific establishment process can refer to the existing technology and will not be repeated here.

[0172] During this process, the SMF network element can send a PFCP Session EstablishmentRequest message to the UPF through the N4 interface to issue session rules. The session rules are used to specify that the UPF network element forwards all destination addresses with private network addresses (each private network address is 192.168.1.0 / 24 network) to the FMC gateway, and forwards all destination addresses with public network addresses to the Internet.

[0173] S15. The terminal device sends an access request message to the UPF network element.

[0174] The specific implementation of this step may refer to S301 and will not be described in detail here.

[0175] S16. When the destination address is a private network address, the UPF sends an access request message to the FMC gateway.

[0176] The specific implementation of this step may refer to S301 and will not be described in detail here.

[0177] S17: When the initial mapping relationship does not include the source address of the terminal device, the FMC gateway sends a first indication message to the terminal device.

[0178] The specific implementation of this step may refer to S402 and will not be described in detail here.

[0179] S18. The terminal device sends the original HTTP packet to the UPF network element.

[0180] The specific implementation of this step may refer to S403 and will not be described in detail here.

[0181] S19. The UPF network element adds the identification information of the terminal device and the source address of the terminal device to the original HTTP packet to obtain an auxiliary HTTP packet, and sends the auxiliary HTTP packet to the FMC gateway.

[0182] The specific implementation of this step may refer to S403 and will not be described in detail here.

[0183] S20. When the terminal device has access rights to the target private network device, the FMC gateway establishes a mapping relationship between the identification information of the terminal device and the source address of the terminal device, and updates the mapping relationship to an initial mapping relationship to obtain a first mapping relationship.

[0184] The specific implementation of this step may refer to S403 and will not be described in detail here.

[0185] S21. The terminal device resends an access request message to the FMC gateway.

[0186] The specific implementation of this step may refer to S403 and will not be described in detail here.

[0187] S22. The FMC gateway determines a target private network gateway according to the source address of the terminal device and the first mapping relationship.

[0188] The specific implementation of this step may refer to S302 and will not be described in detail here.

[0189] S23. The FMC gateway sends an access request message to the target private network device based on the target private network gateway.

[0190] The specific implementation of this step may refer to S303 and will not be described in detail here.

[0191] The embodiment of the present application can divide the data transmission device into functional modules or functional units according to the above method example. For example, each functional module or functional unit can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules or functional units. Among them, the division of modules or units in the embodiment of the present application is schematic, which is only a logical function division, and there may be other division methods in actual implementation.

[0192] In the case of dividing each functional module into corresponding functional modules, Figure 7 A schematic diagram of the structure of another data transmission device 700 is shown, which may be a data transmission device, or a chip, processor, etc. used in a data transmission device. The data transmission device 700 may be used to perform the functions of the data transmission device involved in the above embodiments. Figure 7The data transmission device 700 shown may include: a receiving unit 701, a processing unit 702, and a sending unit 703; the receiving unit 701 is used to receive an access request message from a terminal device; the access request message is used to request target business data; the processing unit 702 is used to determine a target private network gateway corresponding to a source address of the terminal device among multiple private network gateways; the sending unit 703 is used to forward the access request message to the target private network gateway through a dedicated virtual transmission channel between the target private network gateway and the target private network gateway to obtain the target business data; the sending unit 703 is also used to send the target business data to the terminal device.

[0193] Optionally, processing unit 702 is specifically used to: obtain an initial mapping relationship; the initial mapping relationship includes a mapping relationship between multiple source addresses and multiple private network gateways; when the initial mapping relationship does not include the source address of the terminal device, obtain configuration information of the terminal device; and determine, based on the configuration information, a target private network gateway among multiple private network gateways corresponding to the source address of the terminal device.

[0194] Optionally, the receiving unit 701 is specifically used to: send a first indication message to the UPF network element; the first indication message is used to obtain configuration information; receive an auxiliary http data packet from the UPF network element to obtain configuration information of the terminal device; the auxiliary http data packet is obtained based on the source address and identification information of the terminal device.

[0195] Optionally, the auxiliary http packet is sent by the UPF network element when the URL address of the original http packet is the target URL address; the target URL address is a preconfigured URL address; and the original http packet is sent by the terminal device in response to the first indication message.

[0196] Optionally, the processing unit 702 is specifically used to: determine whether the terminal device has access rights to the target private network device based on the identification information; if the terminal device has access rights to the target private network device, determine the target private network gateway corresponding to the source address of the terminal device among multiple private network gateways.

[0197] Figure 8 A schematic diagram of the structure of another data transmission device 800 is shown, which may be a data transmission device, or a chip, processor, etc. used in a data transmission device. The data transmission device 800 may be used to perform the functions of the data transmission device involved in the above embodiments. Figure 8The data transmission device 800 shown may include: a sending unit 801 and a receiving unit 802; the sending unit 801 is used to send an access request message to a fixed mobile convergence FMC gateway; the access request message is used to request target service data; the FMC gateway is used to determine the target private network gateway corresponding to the source address of the terminal device among multiple private network gateways, and forward the access request message to the target private network gateway through a dedicated virtual transmission channel between the target private network gateway and the target private network gateway to obtain the target service data; the receiving unit 802 is used to receive the target service data.

[0198] Optionally, the receiving unit 802 is also used to receive a first indication message from the UPF network element; the first indication message is used to obtain configuration information; the sending unit 801 is also used to send an original http packet to the UPF network element, so that the UPF network element sends an auxiliary http packet to the FMC gateway when the URL address of the original http packet is the target URL address; the auxiliary http data packet is obtained based on the source address and identification information of the terminal device.

[0199] The embodiment of the present application also provides a computer-readable storage medium. All or part of the processes in the above method embodiments can be completed by a computer program to instruct the relevant hardware, and the program can be stored in the above computer-readable storage medium. When the program is executed, it may include the processes of the above method embodiments. The computer-readable storage medium can be an internal storage unit of the data transmission device (including the data sending end and / or the data receiving end) of any of the above embodiments, such as a hard disk or memory of the data transmission device. The above computer-readable storage medium can also be an external storage device of the above terminal device, such as a plug-in hard disk equipped on the above terminal device, a smart memory card (smart media card, SMC), a secure digital (secure digital, SD) card, a flash card (flash card), etc. Further, the above computer-readable storage medium can also include both the internal storage unit of the above data transmission device and an external storage device. The above computer-readable storage medium is used to store the above computer program and other programs and data required by the above data transmission device. The above computer-readable storage medium can also be used to temporarily store data that has been output or is to be output.

[0200] It should be noted that the terms "first" and "second" in the specification, claims and drawings of the present application are used to distinguish different objects rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or devices.

[0201] It should be understood that in the present application, "at least one (item)" means one or more, "more than one" means two or more, "at least two (items)" means two or three and more than three, and "and / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0202] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0203] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules or units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0204] The units described as separate components may or may not be physically separated, and the components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place or distributed in multiple different places. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0205] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0206] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor (processor) to perform all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard drives, ROM, RAM, magnetic disks or optical disks.

[0207] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto, and any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A data transmission method, characterized in that: Applied to a fixed mobile convergence FMC gateway, a dedicated virtual transmission channel is set between the FMC gateway and each of the multiple private network gateways; the method comprises: Receiving an access request message from a terminal device; the access request message is used to request target service data; Determine a target private network gateway corresponding to the source address of the terminal device among the multiple private network gateways; forwarding the access request message to the target private network gateway via a dedicated virtual transmission channel between the target private network gateway and the target private network gateway to obtain the target service data; Sending the target service data to the terminal device.

2. The method according to claim 1, characterized in that The determining a target private network gateway corresponding to the source address of the terminal device among the multiple private network gateways includes: Obtaining an initial mapping relationship; the initial mapping relationship includes a mapping relationship between multiple source addresses and multiple private network gateways; When the initial mapping relationship does not include the source address of the terminal device, obtaining configuration information of the terminal device; According to the configuration information, a target private network gateway corresponding to the source address of the terminal device among the multiple private network gateways is determined.

3. The method according to claim 1, characterized in that The obtaining of the configuration information of the terminal device includes: Sending a first indication message to a UPF network element; the first indication message is used to obtain the configuration information; Receive an auxiliary http data packet from the UPF network element to obtain configuration information of the terminal device; the auxiliary http data packet is obtained based on the source address and identification information of the terminal device.

4. The method according to claim 3, characterized in that: The auxiliary http packet is sent by the UPF network element when the URL address of the original http packet is the target URL address; the target URL address is a preconfigured URL address; the original http packet is sent by the terminal device in response to the first indication message.

5. The method according to claim 2, characterized in that: The step of determining, according to the configuration information, a target private network gateway corresponding to the source address of the terminal device among the multiple private network gateways includes: Determining, based on the identification information, whether the terminal device has access rights to the target private network device; In a case where the terminal device has access rights to the target private network device, a target private network gateway corresponding to the source address of the terminal device is determined among the multiple private network gateways.

6. A data transmission method, characterized in that: Applied to a terminal device, the method comprises: Sending an access request message to a fixed mobile convergence FMC gateway; the access request message is used to request target service data; the FMC gateway determines a target private network gateway corresponding to the source address of the terminal device among the multiple private network gateways, and forwards the access request message to the target private network gateway through a dedicated virtual transmission channel between the FMC gateway and the target private network gateway to obtain the target service data; The target service data is received.

7. The method according to claim 6, characterized in that The method further comprises: receiving a first indication message from the UPF network element; the first indication message is used to obtain the configuration information; An original http packet is sent to the UPF network element, so that the UPF network element sends an auxiliary http packet to the FMC gateway when the URL address of the original http packet is the target URL address; the auxiliary http data packet is obtained according to the source address and identification information of the terminal device.

8. A data transmission device, characterized in that: Applied to a fixed mobile convergence FMC gateway, a dedicated virtual transmission channel is set between the FMC gateway and each of the multiple private network gateways, and the device includes: a receiving unit, a processing unit, and a sending unit; The receiving unit is used to receive an access request message from a terminal device; the access request message is used to request target service data; The processing unit is used to determine a target private network gateway corresponding to the source address of the terminal device among the multiple private network gateways; The sending unit is used to forward the access request message to the target private network gateway through a dedicated virtual transmission channel between the target private network gateway and the target private network gateway to obtain the target service data; The sending unit is further used to send the target service data to the terminal device.

9. A data transmission device, characterized in that: Applied to a terminal device, the device comprises: a sending unit and a receiving unit; The sending unit is configured to send an access request message to a fixed mobile convergence FMC gateway; the access request message is used to request target service data; the FMC gateway determines a target private network gateway corresponding to the source address of the terminal device among the multiple private network gateways, and forwards the access request message to the target private network gateway through a dedicated virtual transmission channel between the FMC gateway and the target private network gateway to obtain the target service data; The receiving unit is used to receive the target service data.

10. A computer-readable storage medium, characterized in that: The readable storage medium stores instructions, and when the instructions are executed, the method according to any one of claims 1 to 5, or claim 6 or 7 is implemented.

11. An electronic device, characterized in that: include: A processor, a memory and a communication interface; wherein the communication interface is used for the electronic device to communicate with other devices or networks; The memory is used to store one or more programs, which include computer-executable instructions. When the electronic device is running, the processor executes the computer-executable instructions stored in the memory to enable the electronic device to execute any one of claims 1-5, or the method of claim 6 or 7.

12. A computer program product, comprising computer instructions, characterized in that: When the computer instructions are executed by a processor, the method described in any one of claims 1 to 5, or claim 6 or 7 is implemented.

Images