Home width value added service processing system and method, equipment, medium and product

Abstract

The invention relates to the technical field of communication, and provides a home wide value added service processing system and method, equipment, a medium and a product. According to the system, the limitation that the traditional home wide value-added service must be operated in a local area network environment is eliminated, and the user operation entrance indirectly processes the value-added service through the cloud gateway network element management system, so that the user operation entrance can be quickly applied on a large scale by relying on a third-party entrance such as a WeChat applet. And on the other hand, service clouding is simply and quickly realized, a flexible service arrangement linkage mechanism is provided, the delivery cycle of the existing home-wide value-added service is shortened, quick online of the value-added service is realized, the network bandwidth cost is reduced, and the processing efficiency of the home-wide value-added service is improved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a home broadband value-added service processing system and method, equipment, medium and product. Background Art

[0002] Currently, the gigabit strategy has significantly increased the penetration of gigabit broadband. While gateway devices costing only a few hundred yuan are required to process 1Gbps of traffic in real time, gateway performance remains far from sufficient to support the diversification and scale of home broadband value-added services. While it's theoretically possible to significantly improve processing performance by upgrading the hardware configuration of home broadband gateways, this will result in a significant increase in equipment costs. Edge and central clouds theoretically possess inexhaustible computing power, offering unlimited possibilities for home broadband value-added services. However, traditional cloud computing technologies, such as public and private clouds, are expensive and costly, given the unique characteristics of home broadband users and networks. They struggle to meet the high bandwidth, low computing power, low unit price, and long-term user connectivity requirements of home broadband. Consequently, the processing efficiency of home broadband value-added services is low. Summary of the Invention

[0003] The embodiments of the present application provide a home broadband value-added service processing system and method, device, medium, and product to solve the problem of low efficiency in home broadband value-added service processing in the prior art.

[0004] In a first aspect, an embodiment of the present application provides a home broadband value-added service processing system, including:

[0005] A user operation portal, a white box gateway, a cloud gateway, and a cloud gateway network element management system; the white box gateway and the cloud gateway are communicatively connected based on a virtual extended local area network (VXLAN) tunnel; the cloud gateway network element management system is communicatively connected to the cloud gateway; and a user terminal is communicatively connected to the cloud gateway network element management system via the user operation portal.

[0006] The user terminal is used to send user operation instructions to the cloud gateway network element management system;

[0007] The cloud gateway network element management system is configured to perform service processing on the target application based on the user operation instruction and send update information of the user's configuration policy to the cloud gateway;

[0008] The white box gateway is configured to perform VXLAN encapsulation on the Internet access traffic of the user terminal and send the encapsulated first VXLAN traffic to the cloud gateway;

[0009] The cloud gateway is used to perform value-added service processing based on the first VXLAN traffic.

[0010] In one embodiment, the cloud gateway is specifically configured to:

[0011] Identifying bandwidth users based on the virtual network identifier of the VXLAN tunnel;

[0012] Decapsulating the first VXLAN traffic of the bandwidth user to obtain the Internet access traffic;

[0013] Performing service chain orchestration and scheduling on the Internet traffic to determine the processing priority of the value-added services subscribed by the bandwidth user;

[0014] Based on the processing priority, the value-added services subscribed by the bandwidth users are diverted.

[0015] In one embodiment, the business processing includes at least start-stop processing, upgrade processing and uninstall processing; the cloud gateway network element management system is specifically used to: update user information, device information and business information library based on the processing results of the business processing.

[0016] In one embodiment, the user terminal is further configured to send subscription information to the broadband access authentication server;

[0017] The broadband access authentication server is used to synchronize the subscription information to the home service open platform;

[0018] The home service open platform is used to synchronize the subscription information to the cloud gateway network element management system;

[0019] The cloud gateway network element management system is further used to update user information, device information and service information library based on the subscription information, and send the user's configuration policy to the cloud gateway.

[0020] In one embodiment, the user terminal is further configured to send broadband activation information to the white box gateway;

[0021] The white box gateway is further configured to initiate an Ethernet-based point-to-point communication protocol PPPoE dial-up to a broadband access authentication server based on the broadband activation information;

[0022] The broadband access authentication server is used to complete the bandwidth access authentication based on PPPoE dial-up, send the bandwidth access success information to the white box gateway, and synchronize the user information to the home service open platform;

[0023] The white box gateway is further configured to obtain configuration information of the cloud gateway based on the bandwidth access success information, and initiate VXLAN tunnel establishment information to the cloud gateway;

[0024] The cloud gateway is further configured to send a user access request to the cloud gateway network element management system based on the establishment information of the VXLAN tunnel;

[0025] The cloud gateway network element management system is further configured to send a query request for user bandwidth information to the home service open platform based on the user access request;

[0026] The home service open platform is configured to return the user bandwidth information to the cloud gateway network element management system based on the query request;

[0027] The cloud gateway network element management system is further configured to verify the user's access network information based on the user bandwidth information and send a verification result to the cloud gateway;

[0028] The cloud gateway is further configured to send information on successful establishment of the VXLAN tunnel to the white box gateway based on the verification result.

[0029] In one embodiment, the user terminal is further configured to send a Dynamic Host Configuration Protocol (DHCP) request to the white box gateway;

[0030] The white box gateway is further configured to perform VXLAN encapsulation on the DHCP request to obtain second VXLAN traffic; perform PPPoE encapsulation on the second VXLAN traffic to obtain first PPPoE traffic; and send the first PPPoE traffic to a broadband access authentication server;

[0031] The broadband access authentication server is further configured to decapsulate the first PPPoE traffic to obtain the second VXLAN traffic, and send the second VXLAN traffic to the cloud gateway;

[0032] The cloud gateway is further configured to decapsulate the second VXLAN traffic to obtain the DHCP request; generate a DHCP reply message based on the DHCP request; perform VXLAN encapsulation on the DHCP reply message to obtain third VXLAN traffic; and send the third VXLAN traffic to the broadband access authentication server;

[0033] The broadband access authentication server is further configured to perform PPPoE encapsulation on the third VXLAN traffic to obtain second PPPoE traffic; and send the second PPPoE traffic to the white box gateway;

[0034] The white box gateway is further configured to decapsulate the second PPPoE traffic, decapsulate the decapsulation result of the second PPPoE traffic, obtain the DHCP reply message, and send the DHCP reply message to the user terminal;

[0035] The user terminal is further configured to obtain a local area network IP based on the DHCP reply message.

[0036] In one embodiment, the user terminal is further configured to send IP traffic to the white box gateway;

[0037] The white box gateway is further configured to perform VXLAN encapsulation on the IP traffic to obtain fourth VXLAN traffic; perform PPPoE encapsulation on the fourth VXLAN traffic to obtain third PPPoE traffic; and send the third PPPoE traffic to a broadband access authentication server;

[0038] The broadband access authentication server is further configured to decapsulate the third PPPoE traffic to obtain the fourth VXLAN traffic, and send the fourth VXLAN traffic to the cloud gateway;

[0039] The cloud gateway is further configured to decapsulate the fourth VXLAN traffic to obtain the IP traffic; perform value-added service chain processing based on the IP traffic, and perform VXLAN encapsulation on the result of the value-added service chain processing to obtain fifth VXLAN traffic; and send the fifth VXLAN traffic to the broadband access authentication server;

[0040] The broadband access authentication server is further configured to perform PPPoE encapsulation on the fifth VXLAN traffic to obtain fourth PPPoE traffic; and send the fourth PPPoE traffic to the white box gateway;

[0041] The white box gateway is further used to decapsulate the fourth PPPoE traffic and decapsulate the decapsulation result of the fourth PPPoE traffic to obtain the processing result of the value-added service chain processing; and send the processing result of the value-added service chain processing to the user terminal.

[0042] In a second aspect, an embodiment of the present application provides a method for processing a home broadband value-added service, including:

[0043] Receive first VXLAN traffic sent by the white box gateway; the first VXLAN traffic is obtained by encapsulating Internet access traffic of the user terminal;

[0044] Identify bandwidth users based on virtual network identification of VXLAN tunnels;

[0045] Decapsulating the first VXLAN traffic of the bandwidth user to obtain the Internet access traffic;

[0046] Performing service chain orchestration and scheduling on the Internet traffic to determine the processing priority of the value-added services subscribed by the bandwidth user;

[0047] Based on the processing priority, the value-added services subscribed by the bandwidth users are diverted.

[0048] In a third aspect, an embodiment of the present application provides an electronic device, including a processor and a memory storing a computer program, wherein when the processor executes the program, the steps of the home broadband value-added service processing method described in the first aspect are implemented.

[0049] In a fourth aspect, an embodiment of the present application provides a non-transitory computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the steps of the method for processing home broadband value-added services described in the first aspect are implemented.

[0050] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the steps of the method for processing home broadband value-added services in the first aspect.

[0051] The home broadband value-added service processing system and method, equipment, media, and products provided in the embodiments of this application eliminate the limitation that traditional home broadband value-added services must operate within a local area network environment. The user operation portal indirectly processes the value-added service through the cloud gateway network element management system, allowing the user operation portal to achieve rapid and large-scale application through third-party portals such as WeChat applets. Furthermore, it enables extremely simple and rapid cloud migration of services, possesses a flexible service orchestration and linkage mechanism, shortens the existing home broadband value-added service delivery cycle, enables rapid rollout of value-added services, reduces network bandwidth costs, and improves the efficiency of home broadband value-added service processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] In order to more clearly illustrate the technical solutions in the present application or the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0053] Figure 1 This is a structural diagram of a home broadband value-added service processing system provided by an embodiment of the present application;

[0054] Figure 2 This is a flow chart of the home broadband value-added service interaction provided by an embodiment of the present application;

[0055] Figure 3 This is a schematic diagram of the process of user broadband access provided by an embodiment of the present application;

[0056] Figure 4 This is a flow chart of the interaction of LAN IP allocation for a user terminal device provided in an embodiment of the present application;

[0057] Figure 5 This is a flow chart of basic broadband Internet access service interaction provided by an embodiment of the present application;

[0058] Figure 6 This is a flowchart of a method for processing a home broadband value-added service provided by an embodiment of the present application;

[0059] Figure 7 It is a structural diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0060] To make the objectives, technical solutions, and advantages of this application more clear, the technical solutions in this application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of this application. Obviously, the described embodiments are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without making any creative efforts are within the scope of protection of this application.

[0061] Figure 1 This is the structural intention of the home broadband value-added service processing system provided by the embodiment of this application. Figure 1 The embodiment of the present application provides a home broadband value-added service processing system, which mainly includes: a user operation portal, a white box gateway (pCPE), a cloud gateway (vCPE), and a cloud gateway network element management system. The white box gateway and the cloud gateway are connected to each other through a VXLAN (Virtual Extensible Local Area Network) tunnel; the cloud gateway network element management system is connected to the cloud gateway; and the user terminal is connected to the cloud gateway network element management system through the user operation portal. The functions of each component are as follows:

[0062] (1) User operation portal: The operation portal of traditional home broadband gateways and routers requires the installation of a client APP or the use of a web browser. It can only be used in a broadband local area network environment and lacks a public network connection platform.

[0063] The user operation portal provided in the embodiment of the present application does not communicate directly with the user-side gateway (i.e., white box gateway), but instead sends operation control instructions to the cloud gateway through the cloud gateway network element management system, realizing the traditional home broadband gateway operation experience. At the same time, the user operation portal communicates with the cloud gateway network element management system and no longer relies on the broadband LAN environment. Therefore, the user operation portal can rely on WeChat applet, mobile business hall, cloud gateway APP, PC client, official website, website, etc. Users can roam freely and are no longer restricted to the user-side gateway LAN, thereby improving the user experience.

[0064] (2) White Box Gateway: A white box gateway is a physical gateway on the user side. It is understandable that a white box gateway is very simple in function. It only retains user-side access programs such as the PPPoE (Point-to-Point Protocol Over Ethernet) client and the DHCP (Dynamic Host Configuration Protocol) client, as well as Layer 2 learning capabilities and VXLAN tunneling capabilities. This simplifies the functions of traditional home broadband gateways and no longer relies on specific gateway manufacturers, achieving white boxization.

[0065] The white-box gateway sends all outbound LAN traffic from its connected devices to the cloud gateway through a VXLAN tunnel, laying the foundation for cloud-based services. Outbound LAN traffic refers to data traffic sent from devices connected to the white-box gateway (such as computers and mobile phones) to external networks (such as the internet), specifically data traffic sent from the private LAN where the white-box gateway resides to the public internet. At the user operation level, the user experience is that of operating a physical white-box gateway, while business logic is actually executed in the cloud. The white-box gateway only performs Layer 2 transparent transmission of traffic.

[0066] (3) Cloud Gateway: It operates as a cloud service and mainly includes several major functions:

[0067] 3.1) Large Layer 2 tunnel functions such as VXLAN: Used to establish a logical direct connection channel with the user-side physical gateway, allowing all home broadband traffic to be sent to the cloud, including outbound traffic from devices connected to the home intranet and BUM (Broadcast, Unknown-unicast and Multicast) traffic.

[0068] 3.2) Basic Gateway Functions: LAN (Local Area Network) side DHCP, DNS (Domain Name System), NAT (Network Address Translation), ALG (Application Layer Gateway), network security firewall and other basic broadband Internet access and security-related functions.

[0069] 3.3) Value-added service processing and diversion: Provides value-added services based on users, applications, IP quintuples, etc. and diverts traffic to corresponding value-added service servers. This function completes the processing of value-added services at the underlying traffic forwarding layer.

[0070] 3.4) Northbound interface: Users connect to the cloud gateway network element management system to report network equipment, message flow statistics, etc., and at the same time receive control and user operation instructions from the cloud gateway network element management system, and convert them into corresponding device execution instructions to process and divert traffic.

[0071] (4) Cloud Gateway Element Management System: As the core system for connecting the cloud gateway with peripheral systems and elements, it connects to the cloud gateway in the south, to the provincial and group-level home service open platforms in the north, and to user operation portals and partners in the horizontal direction. The Cloud Gateway Element Management System connects to partners through standard system interfaces to enable application listing, delisting, and updates.

[0072] The cloud gateway network element management system includes the following management contents:

[0073] Device management: including cloud gateway management, downstream device management, version management, and device-user relationship management.

[0074] User management: includes managing the user information database, user business information, user device information, and user application status.

[0075] Business management: including order management, package management, business document management and business area management, etc.

[0076] Application management: including application version management, application push upgrades, application reporting information management, and application control.

[0077] Ecosystem management: including user entry management, capability exposure, manufacturer entry management, and ecosystem construction.

[0078] System monitoring: device CPU, storage, gateway monitoring, system reports, disaster recovery backup, and log alarms, etc.

[0079] Based on the various parts of the home broadband value-added service processing system, the value-added service processing implemented includes:

[0080] User terminal, used to send user operation instructions to the cloud gateway network element management system;

[0081] The cloud gateway network element management system is used to perform business processing on the target application based on user operation instructions and send user configuration policy update information to the cloud gateway;

[0082] The white box gateway is used to perform VXLAN encapsulation on the Internet traffic of the user terminal and send the encapsulated first VXLAN traffic to the cloud gateway;

[0083] The cloud gateway is configured to perform value-added service processing based on the first VXLAN traffic.

[0084] refer to Figure 2, the user sends user operation instructions to the cloud gateway network element management system through the user terminal (such as a computer, mobile phone, etc.), and the user operation instructions include application start and stop instructions, upgrade instructions, and uninstall instructions.

[0085] Based on user operation instructions, the cloud gateway network element management system identifies the application requiring service processing, namely the target application, and then performs service processing on the target application, such as starting, stopping, upgrading, and uninstalling the target application. Based on the service processing results, the system then updates user information, device information, and the service information database. For example, updating user information includes updating user personal information, device information, and service information; updating device information includes updating device hardware information, software version, and configuration information; and updating the service information database includes updating user-subscribed value-added services and service usage. Furthermore, the system sends updated user configuration policy information to the cloud gateway, such as updating speed limits or traffic diversion for a specific user or device.

[0086] The white box gateway performs VXLAN encapsulation on the Internet traffic of the user terminal and sends the encapsulated first VXLAN traffic to the cloud gateway.

[0087] The cloud gateway processes value-added services based on the first VXLAN traffic. Home broadband value-added services refer to a series of value-added services provided to users based on broadband access services, including but not limited to video on demand, online games, cloud storage, and smart home.

[0088] Specifically, the cloud gateway identifies bandwidth users based on the virtual network identifier (VXLAN Network Identifier, VNI) of the VXLAN tunnel; decapsulates the bandwidth user's first VXLAN traffic to obtain Internet access traffic; performs service chain orchestration and scheduling on the Internet access traffic to determine the processing priority of the value-added services subscribed by the bandwidth user; and based on the processing priority, diverts the value-added services subscribed by the bandwidth user.

[0089] For example, after receiving the encapsulated data packet (i.e., the first VXLAN traffic), the cloud gateway identifies the broadband user based on the VXLAN tunnel VNI identifier and decapsulates the broadband user's traffic, restoring the original IP packet, i.e., the Internet traffic. The cloud gateway then queries the broadband user's service status and, based on the user's subscription information and usage of value-added services, orchestrates and schedules the decapsulated Internet traffic. For example, it performs quality control and optimization based on the characteristics and priority of the value-added services to determine the processing priority of the value-added services. Furthermore, based on the processing priority, the cloud gateway distributes the value-added services subscribed by the bandwidth user. For example, if a user subscribes to a video acceleration service, the cloud gateway processes the user's video traffic through a dedicated acceleration server to provide faster loading speeds and a better user experience. Alternatively, if a user subscribes to a security protection service, the cloud gateway performs security inspection and filtering on the user's traffic to prevent malicious attacks, virus transmission, and network threats.

[0090] In a specific embodiment, suppose a home broadband user subscribes to a video acceleration service. When this user accesses the internet through their home broadband, their traffic data is encapsulated using VXLAN and transmitted to the cloud network. Upon receiving the data packet, the cloud gateway identifies the user based on the VXLAN tunnel VNI and decapsulates the data. The cloud gateway then queries the user's service status and, upon discovering that they have subscribed to the video acceleration service, routes the user's video traffic to a specific acceleration server, providing faster loading times and a better user experience.

[0091] The home broadband value-added service processing system provided in this embodiment eliminates the limitation that traditional home broadband value-added services must operate within a local area network environment. The user operation portal indirectly processes value-added services through the cloud gateway network element management system, allowing the user operation portal to achieve rapid and large-scale application through third-party portals such as WeChat mini-programs. Furthermore, it enables extremely simple and rapid cloud migration of services, with a flexible service orchestration and linkage mechanism, shortening the existing home broadband value-added service delivery cycle, enabling rapid rollout of value-added services, reducing network bandwidth costs, and improving home broadband value-added service processing efficiency.

[0092] Based on the above embodiment, the present application embodiment provides an ordering business process, referring to Figure 2 , specifically including the following steps:

[0093] The user terminal is also used to send subscription information to the broadband access authentication server;

[0094] Broadband access authentication server, used to synchronize subscription information to the home service open platform;

[0095] Home service open platform, used to synchronize subscription information to the cloud gateway network element management system;

[0096] The cloud gateway network element management system is also used to update user information, device information and business information library based on subscription information, and send user configuration policies to the cloud gateway.

[0097] It should be noted that the broadband access authentication server is a general term for the BRAS (Broadband Remote Access Server) server and the AAA (Authentication Authorization and Accounting) server, which is an important component for providing broadband access service authentication, authorization and accounting functions.

[0098] Subscription involves users selecting and subscribing to specific value-added services. Users can choose and subscribe to services from the operator's list of value-added services based on their needs and interests. For example, the user terminal sends subscription information to the provincial BRAS / AAA system. After receiving the subscription information, the provincial BRAS / AAA system processes the subscription and synchronizes the order with the primary / secondary home service open platform. The primary / secondary home service open platform synchronizes the order with the cloud gateway network element management system. The cloud gateway network element management system updates the user, device, and service information database and distributes policy configurations to the cloud gateway.

[0099] For example, users can subscribe to streaming media acceleration services on the operator's value-added service platform. During the subscription process, users need to select the desired streaming platform (such as Netflix, YouTube, etc.) and pay the corresponding subscription fee. Once the subscription is successful, the user's Internet traffic will be prioritized for streaming media acceleration when passing through the cloud gateway.

[0100] The subscription service process provided in the embodiments of this application enables real-time updates and transmission of subscription information through data synchronization between the broadband access authentication server, the home service open platform, and the cloud gateway network element management system, ensuring data consistency across all systems. The cloud gateway network element management system can promptly update user information, device information, and service information repositories based on subscription information, ensuring data accuracy across all systems and providing better user services and management. The subscription service process solution offers advantages such as automation, real-time data synchronization, accuracy, and personalized customization, improving service processing efficiency and user experience.

[0101] Based on the above embodiment, the present application embodiment provides a user broadband access process, referring to Figure 3 , specifically including the following steps:

[0102] The user terminal is also used to send broadband activation information to the white box gateway;

[0103] The white box gateway is also used to initiate Ethernet-based point-to-point communication protocol PPPoE dial-up to the broadband access authentication server based on broadband activation information;

[0104] Broadband access authentication server, used to complete bandwidth access authentication based on PPPoE dial-up, send bandwidth access success information to the white box gateway, and synchronize user information to the home service open platform;

[0105] The white box gateway is also used to obtain the configuration information of the cloud gateway based on the bandwidth access success information and initiate VXLAN tunnel establishment information to the cloud gateway;

[0106] The cloud gateway is also used to send user access requests to the cloud gateway network element management system based on the VXLAN tunnel establishment information;

[0107] The cloud gateway network element management system is also used to send a query request for user bandwidth information to the home service open platform based on the user access request;

[0108] The home service open platform is used to return user bandwidth information to the cloud gateway network element management system based on query requests;

[0109] The cloud gateway network element management system is also used to verify the user's access network information based on the user's bandwidth information and send the verification result to the cloud gateway;

[0110] The cloud gateway is also used to send VXLAN tunnel establishment success information to the white box gateway based on the verification result.

[0111] Specifically, the user terminal sends broadband activation information to the white-box gateway. Based on the broadband activation information, the white-box gateway initiates a PPPoE dial-up call to the broadband access authentication server. The broadband access authentication server performs bandwidth access authentication and, upon completion, sends a bandwidth access success message to the white-box gateway. It also synchronizes the user information with the home service open platform. Based on the bandwidth access success message, the white-box gateway obtains the cloud gateway's configuration information and initiates a VXLAN tunnel establishment request to the cloud gateway. After receiving the VXLAN tunnel establishment request, the cloud gateway sends a user access request to the cloud gateway network element management system. Based on the user access request, the cloud gateway network element management system sends a query request for user bandwidth information to the home service open platform. After receiving the query request, the home service open platform returns the user bandwidth information to the cloud gateway network element management system. The cloud gateway network element management system verifies access based on the user bandwidth information and updates the user information and device information database. If access is granted, it sends a user access notification to the cloud gateway. Based on the verification result, the cloud gateway sends a message to the white-box gateway confirming the successful establishment of the VXLAN tunnel.

[0112] The user broadband access process provided by the embodiments of this application does not require manual user intervention, thus avoiding the impact of human factors on the access process and improving access efficiency and stability. By establishing a VXLAN tunnel, virtual tunnel communication can be achieved, thereby reducing the deployment and maintenance costs of physical tunnels and increasing network scalability. Through the cooperation of the cloud gateway and the cloud gateway network element management system, real-time verification of user access network information can be achieved, ensuring network security and stability. The user broadband access process solution has the advantages of high automation, high network security, and low cost.

[0113] Based on the above embodiment, the present application embodiment provides a user terminal device LAN side IP address allocation, reference Figure 4 , specifically including the following steps:

[0114] The user terminal is also used to send a Dynamic Host Configuration Protocol DHCP request to the white box gateway;

[0115] The white box gateway is further configured to perform VXLAN encapsulation on the DHCP request to obtain second VXLAN traffic; perform PPPoE encapsulation on the second VXLAN traffic to obtain first PPPoE traffic; and send the first PPPoE traffic to the broadband access authentication server.

[0116] The broadband access authentication server is further configured to decapsulate the first PPPoE traffic to obtain the second VXLAN traffic, and send the second VXLAN traffic to the cloud gateway;

[0117] The cloud gateway is further configured to decapsulate the second VXLAN traffic to obtain a DHCP request; generate a DHCP reply message based on the DHCP request; perform VXLAN encapsulation on the DHCP reply message to obtain a third VXLAN traffic; and send the third VXLAN traffic to the broadband access authentication server.

[0118] The broadband access authentication server is further configured to perform PPPoE encapsulation on the third VXLAN traffic to obtain second PPPoE traffic; and send the second PPPoE traffic to the white box gateway.

[0119] The white box gateway is further configured to decapsulate the second PPPoE traffic, decapsulate the decapsulation result of the second PPPoE traffic, obtain a DHCP reply message, and send the DHCP reply message to the user terminal;

[0120] The user terminal is also used to obtain a LAN IP based on the DHCP reply message.

[0121] Specifically, the user terminal sends a DHCP request to the white box gateway, requesting a LAN IP address. The white box gateway performs VXLAN encapsulation on the DHCP request to obtain the second VXLAN traffic, and performs PPPoE encapsulation on the traffic to obtain the first PPPoE traffic, which is then sent to the broadband access authentication server. The broadband access authentication server decapsulates the first PPPoE traffic to obtain the second VXLAN traffic, and sends it to the cloud gateway. The cloud gateway decapsulates the second VXLAN traffic to obtain the DHCP request, generates a DHCP reply message based on the DHCP request, and performs VXLAN encapsulation on the DHCP reply message to obtain the third VXLAN traffic, which is then sent to the broadband access authentication server. The broadband access authentication server performs PPPoE encapsulation on the third VXLAN traffic to obtain the second PPPoE traffic, and sends it to the white box gateway. The white box gateway decapsulates the second PPPoE traffic, decapsulates the decapsulation result again, obtains the DHCP reply message, and sends it to the user terminal. The user terminal obtains the LAN IP address based on the DHCP reply message.

[0122] The embodiments of this application provide a solution for allocating IP addresses on the LAN side of user terminal devices, enabling automatic allocation and configuration of LAN-side IP addresses for user terminal devices, enabling users to conveniently connect to the local area network and obtain network services. Furthermore, the use of technologies such as VXLAN and PPPoE ensures secure data transmission and isolation, improving the reliability and security of network services.

[0123] Based on the above embodiment, the present application embodiment provides a normal broadband Internet access process for users, referring to Figure 5 , specifically including the following steps:

[0124] User terminals are also used to send IP traffic to the white box gateway;

[0125] The white box gateway is further configured to perform VXLAN encapsulation on the IP traffic to obtain fourth VXLAN traffic; perform PPPoE encapsulation on the fourth VXLAN traffic to obtain third PPPoE traffic; and send the third PPPoE traffic to the broadband access authentication server.

[0126] The broadband access authentication server is further configured to decapsulate the third PPPoE traffic to obtain the fourth VXLAN traffic, and send the fourth VXLAN traffic to the cloud gateway.

[0127] The cloud gateway is further configured to decapsulate the fourth VXLAN traffic to obtain IP traffic; perform value-added service chain processing based on the IP traffic, and perform VXLAN encapsulation on the result of the value-added service chain processing to obtain fifth VXLAN traffic; and send the fifth VXLAN traffic to the broadband access authentication server.

[0128] The broadband access authentication server is further configured to perform PPPoE encapsulation on the fifth VXLAN traffic to obtain fourth PPPoE traffic; and send the fourth PPPoE traffic to the white box gateway.

[0129] The white box gateway is further used to decapsulate the fourth PPPoE traffic and decapsulate the decapsulation result of the fourth PPPoE traffic to obtain the processing result of the value-added service chain processing; and send the processing result of the value-added service chain processing to the user terminal.

[0130] Specifically, the user terminal sends IP traffic to the white box gateway. The white box gateway performs VXLAN encapsulation on the IP traffic to obtain fourth VXLAN traffic. The white box gateway performs PPPoE encapsulation on the fourth VXLAN traffic to obtain third PPPoE traffic, and sends it to the broadband access authentication server. The broadband access authentication server decapsulates the third PPPoE traffic to obtain fourth VXLAN traffic, and sends it to the cloud gateway. The cloud gateway decapsulates the fourth VXLAN traffic to obtain IP traffic. The cloud gateway performs value-added service chain processing based on the IP traffic, and performs VXLAN encapsulation on the processing result of the value-added service chain processing to obtain fifth VXLAN traffic, and sends it to the broadband access authentication server. The broadband access authentication server performs PPPoE encapsulation on the fifth VXLAN traffic to obtain fourth PPPoE traffic, and sends it to the white box gateway. The white box gateway decapsulates the fourth PPPoE traffic, and decapsulates the decapsulation result again to obtain the processing result of the value-added service chain processing. The white box gateway sends the processing result of the value-added service chain processing to the user terminal.

[0131] The normal broadband Internet access process for users provided in the embodiment of the present application uses technologies such as VXLAN and PPPoE to ensure the secure transmission of data and the reliability of network services.

[0132] Figure 6 This is a flow chart of a method for processing home broadband value-added services provided by an embodiment of the present application. Figure 6 , this embodiment of the application provides a method for processing a home broadband value-added service, which may include:

[0133] Step 100: Receive first VXLAN traffic sent by the white box gateway;

[0134] Step 200: Identify bandwidth users based on the virtual network identifier of the VXLAN tunnel;

[0135] Step 300: decapsulate the first VXLAN traffic of the bandwidth user to obtain the Internet access traffic;

[0136] Step 400: performing service chain orchestration and scheduling on the Internet traffic to determine the processing priority of the value-added services subscribed by the bandwidth user;

[0137] Step 500: Based on the processing priority, the value-added services subscribed by the bandwidth user are diverted.

[0138] After receiving the encapsulated data packet (i.e., the first VXLAN traffic), the cloud gateway identifies the broadband user based on the VXLAN tunnel VNI identifier and decapsulates the broadband user's traffic, restoring the original IP packet (i.e., the Internet traffic). The cloud gateway then queries the broadband user's service status and, based on the user's subscription information and usage of value-added services, orchestrates and schedules the decapsulated Internet traffic. For example, it performs quality control and optimization based on the characteristics and priority of the value-added services to determine the processing priority of the value-added services. Furthermore, based on the processing priority, the cloud gateway distributes the value-added services subscribed by the bandwidth user. For example, if a user subscribes to a video acceleration service, the cloud gateway processes the user's video traffic through a dedicated acceleration server to provide faster loading speeds and a better user experience. Alternatively, if a user subscribes to a security protection service, the cloud gateway performs security inspection and filtering on the user's traffic to prevent malicious attacks, virus transmission, and network threats.

[0139] In a specific embodiment, suppose a home broadband user subscribes to a video acceleration service. When this user accesses the internet through their home broadband, their traffic data is encapsulated using VXLAN and transmitted to the cloud network. Upon receiving the data packet, the cloud gateway identifies the user based on the VXLAN tunnel VNI and decapsulates the data. The cloud gateway then queries the user's service status and, upon discovering that they have subscribed to the video acceleration service, routes the user's video traffic to a specific acceleration server, providing faster loading times and a better user experience.

[0140] The home broadband value-added service processing method provided in this embodiment eliminates the limitation that traditional home broadband value-added services must operate within a local area network environment. The user operation portal indirectly processes the value-added service through the cloud gateway network element management system, allowing the user operation portal to achieve rapid and large-scale application through third-party portals such as WeChat mini-programs. Furthermore, it enables extremely simple and rapid cloud migration of services, with a flexible service orchestration and linkage mechanism, shortening the existing home broadband value-added service delivery cycle, enabling rapid rollout of value-added services, reducing network bandwidth costs, and improving the efficiency of home broadband value-added service processing.

[0141] In order to further analyze and explain the home broadband value-added service processing system proposed in this application, refer to Figure 1 And the following examples.

[0142] The embodiment of the present application specifically proposes a system architecture and method for realizing a home broadband value-added service ecosystem based on a broadband cloud gateway. The method clarifies the linkage and interaction logic between the cloud gateway and the surrounding business systems and surrounding network elements. The method can achieve an equivalent replacement of the experience of home broadband value-added service products on the market, and solve the problem of poor experience of competing products on the market, including that they can only be operated and used in a local area network, require additional equipment to be purchased, and require the installation of an APP or client separately. The method reduces the complexity of implementing the home broadband gateway, enables services to be put on the cloud, and at the same time has a flexible business orchestration linkage mechanism, shortens the existing home broadband value-added service delivery cycle, realizes the rapid launch of value-added services, and reduces network bandwidth costs. The method solves the problem that traditional operators can only sell broadband resources and find it difficult to form business stickiness, builds a home broadband value-added service ecosystem, and builds a broadband application store.

[0143] The system architecture for realizing the home broadband value-added service ecosystem based on broadband cloud gateway mainly includes four parts: user operation portal, white box gateway (pCPE), cloud gateway (vCPE) and cloud gateway network element management system.

[0144] refer to Figure 1 In a specific embodiment, a user logs in and uses the user operation portal to conduct business operations on the primary / secondary home service open platform, such as ordering, renewing, and canceling value-added services. The primary / secondary home service open platform synchronizes service subscription information, user information, and broadband information with the cloud gateway network element management system. The cloud gateway network element management system receives information sent by users through the user operation portal regarding viewing and operating the cloud gateway and its connected devices, service usage information, and personalized Internet configuration information. The cloud gateway network element management system sends application start / stop, upgrade, and uninstall information, real-time application operation control, user operation configuration and policies, and system and application information reporting to the cloud gateway. On the other hand, the cloud gateway network element management system connects to partners through the system standard interface to implement application listing, delisting, and updating. The white box gateway performs VXLAN encapsulation on the user's Internet traffic and sends it to the cloud gateway through a VXLAN tunnel. The cloud gateway performs different traffic routing based on service type.

[0145] In addition to injecting traffic back into the BRAS, the cloud gateway can integrate with the value-added service acceleration private network to directly route the service traffic of high-value paying users to the accelerated private network, enabling direct service access and a single jump to the cloud. The overall logical sequence is divided into three phases: broadband access, VXLAN tunnel establishment, and value-added service delivery.

[0146] Broadband access phase: After subscribing to broadband services, users power on their home broadband gateway (i.e., a white box gateway), establish broadband dial-up access using PPPoE or IPoE, and initiate and complete broadband access authentication with the BRAS. This phase ensures network connectivity at the IP layer, and provides the foundation for establishing a VXLAN tunnel between the home broadband gateway and the cloud gateway.

[0147] During the VXLAN tunnel establishment phase, the home broadband gateway pre-configures cloud gateway parameters based on the broadband access response received in the previous phase and initiates a VXLAN tunnel establishment request to the designated cloud gateway. The VXLAN tunnel is established between the home broadband gateway and the cloud gateway, creating a logically direct connection. Based on the established VXLAN tunnel interface, the home broadband gateway performs device configuration and directs all outbound traffic to the VXLAN tunnel interface. The cloud gateway stores and records the VXLAN tunnel information corresponding to each broadband user and can distinguish broadband users based on the VXLAN tunnel VNI.

[0148] During the value-added service phase, the user's normal Internet traffic is encapsulated via VXLAN on the home broadband gateway and sent to the cloud gateway. The cloud gateway identifies the broadband user based on the VXLAN tunnel VNI identifier, queries the user's service status, decapsulates the traffic via VXLAN, orchestrates and schedules the decapsulated IP traffic, and performs relevant value-added service processing based on the service chain orchestration and scheduling results. After the cloud gateway processes the value-added service, the user's Internet traffic has several destinations: normal Internet traffic (which needs to be injected back into the BRAS), traffic requiring network acceleration (further routed to the value-added service acceleration network), downlink traffic to the home gateway (encapsulated via VXLAN and sent to the home broadband gateway), and traffic that needs to be blocked and discarded (for example, if the user has activated the green Internet service, the related abnormal traffic will be discarded).

[0149] The embodiment of the present application provides a system architecture and method for implementing a home broadband value-added service ecosystem based on a broadband cloud gateway. This eliminates the limitation that traditional home broadband value-added services must operate in a local area network environment. The user operation portal indirectly processes the value-added service through the cloud gateway network element management system, allowing the user operation portal to rely on third-party portals such as WeChat applets for rapid and large-scale application. On the other hand, it enables extremely simple and rapid cloud migration of services, possesses a flexible service orchestration linkage mechanism, shortens the existing home broadband value-added service delivery cycle, enables rapid launch of value-added services, reduces network bandwidth costs, and solves the problem that traditional operators can only sell broadband resources and have difficulty in forming service stickiness. It builds a home broadband value-added service ecosystem and a broadband application store.

[0150] Figure 7 An example of a physical structure diagram of an electronic device is shown below. Figure 7As shown, the electronic device may include: a processor 710, a communication interface 720, a memory 730, and a communication bus 740, wherein the processor 710, the communication interface 720, and the memory 730 communicate with each other via the communication bus 740. The processor 710 may call a computer program in the memory 730 to execute the steps of the method for processing a home broadband value-added service, for example, including:

[0151] Receive first VXLAN traffic sent by the white box gateway; the first VXLAN traffic is obtained by encapsulating Internet access traffic of the user terminal;

[0152] Identify bandwidth users based on virtual network identification of VXLAN tunnels;

[0153] Decapsulating the first VXLAN traffic of the bandwidth user to obtain the Internet access traffic;

[0154] Performing service chain orchestration and scheduling on the Internet traffic to determine the processing priority of the value-added services subscribed by the bandwidth user;

[0155] Based on the processing priority, the value-added services subscribed by the bandwidth users are diverted.

[0156] In addition, the logic instructions in the above-mentioned memory 730 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0157] On the other hand, embodiments of the present application further provide a non-transitory computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the steps of the home broadband value-added service processing method provided in each of the above embodiments are implemented, for example, including:

[0158] Receive first VXLAN traffic sent by the white box gateway; the first VXLAN traffic is obtained by encapsulating Internet access traffic of the user terminal;

[0159] Identify bandwidth users based on virtual network identification of VXLAN tunnels;

[0160] Decapsulating the first VXLAN traffic of the bandwidth user to obtain the Internet access traffic;

[0161] Performing service chain orchestration and scheduling on the Internet traffic to determine the processing priority of the value-added services subscribed by the bandwidth user;

[0162] Based on the processing priority, the value-added services subscribed by the bandwidth users are diverted.

[0163] On the other hand, embodiments of the present application further provide a computer program product, comprising a computer program. The computer program may be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can perform the steps of the home broadband value-added service processing method provided in each of the above embodiments, for example, including:

[0164] Receive first VXLAN traffic sent by the white box gateway; the first VXLAN traffic is obtained by encapsulating Internet access traffic of the user terminal;

[0165] Identify bandwidth users based on virtual network identification of VXLAN tunnels;

[0166] Decapsulating the first VXLAN traffic of the bandwidth user to obtain the Internet access traffic;

[0167] Performing service chain orchestration and scheduling on the Internet traffic to determine the processing priority of the value-added services subscribed by the bandwidth user;

[0168] Based on the processing priority, the value-added services subscribed by the bandwidth users are diverted.

[0169] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, i.e., they may be located in one location or distributed across multiple network units. Some or all of the modules may be selected based on actual needs to achieve the objectives of the present embodiment. Persons of ordinary skill in the art will be able to understand and implement the present invention without inventive effort.

[0170] Through the description of the above embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus a necessary general hardware platform, or of course, by hardware. Based on this understanding, the essence of the above technical solution or the part that contributes to the existing technology can be embodied in the form of a software product. The computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a magnetic disk, an optical disk, etc., and includes a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or certain parts of the embodiments.

[0171] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A home broadband value-added service processing system, characterized in that: It includes a user operation portal, a white box gateway, a cloud gateway, and a cloud gateway network element management system; the white box gateway and the cloud gateway are connected to each other through a virtual extended local area network (VXLAN) tunnel; the cloud gateway network element management system is connected to the cloud gateway; The user terminal is connected to the cloud gateway network element management system through the user operation portal; The user terminal is used to send user operation instructions to the cloud gateway network element management system; The cloud gateway network element management system is configured to perform service processing on the target application based on the user operation instruction and send update information of the user's configuration policy to the cloud gateway; The white box gateway is configured to perform VXLAN encapsulation on the Internet access traffic of the user terminal and send the encapsulated first VXLAN traffic to the cloud gateway; The cloud gateway is used to perform value-added service processing based on the first VXLAN traffic.

2. The home broadband value-added service processing system according to claim 1, characterized in that: The cloud gateway is specifically used for: Identifying bandwidth users based on the virtual network identifier of the VXLAN tunnel; Decapsulating the first VXLAN traffic of the bandwidth user to obtain the Internet access traffic; Performing service chain orchestration and scheduling on the Internet traffic to determine the processing priority of the value-added services subscribed by the bandwidth user; Based on the processing priority, the value-added services subscribed by the bandwidth users are diverted.

3. The home broadband value-added service processing system according to claim 2, characterized in that: The business processing includes at least start-stop processing, upgrade processing and uninstall processing; the cloud gateway network element management system is specifically used to: update user information, device information and business information library based on the processing results of the business processing.

4. The home broadband value-added service processing system according to claim 1, characterized in that: The user terminal is further configured to send subscription information to the broadband access authentication server; The broadband access authentication server is used to synchronize the subscription information to the home service open platform; The home service open platform is used to synchronize the subscription information to the cloud gateway network element management system; The cloud gateway network element management system is further used to update user information, device information and service information library based on the subscription information, and send the user's configuration policy to the cloud gateway.

5. The home broadband value-added service processing system according to claim 1, characterized in that: The user terminal is further configured to send broadband activation information to the white box gateway; The white box gateway is further configured to initiate an Ethernet-based point-to-point communication protocol PPPoE dial-up to a broadband access authentication server based on the broadband activation information; The broadband access authentication server is used to complete the bandwidth access authentication based on PPPoE dial-up, send the bandwidth access success information to the white box gateway, and synchronize the user information to the home service open platform; The white box gateway is further configured to obtain configuration information of the cloud gateway based on the bandwidth access success information, and initiate VXLAN tunnel establishment information to the cloud gateway; The cloud gateway is further configured to send a user access request to the cloud gateway network element management system based on the establishment information of the VXLAN tunnel; The cloud gateway network element management system is further configured to send a query request for user bandwidth information to the home service open platform based on the user access request; The home service open platform is configured to return the user bandwidth information to the cloud gateway network element management system based on the query request; The cloud gateway network element management system is further configured to verify the user's access network information based on the user bandwidth information and send a verification result to the cloud gateway; The cloud gateway is further configured to send information on successful establishment of the VXLAN tunnel to the white box gateway based on the verification result.

6. The home broadband value-added service processing system according to claim 1, characterized in that: The user terminal is further configured to send a Dynamic Host Configuration Protocol DHCP request to the white box gateway; The white box gateway is further configured to perform VXLAN encapsulation on the DHCP request to obtain second VXLAN traffic; perform PPPoE encapsulation on the second VXLAN traffic to obtain first PPPoE traffic; and send the first PPPoE traffic to a broadband access authentication server; The broadband access authentication server is further configured to decapsulate the first PPPoE traffic to obtain the second VXLAN traffic, and send the second VXLAN traffic to the cloud gateway; The cloud gateway is further configured to decapsulate the second VXLAN traffic to obtain the DHCP request; Generating a DHCP reply message based on the DHCP request; Performing VXLAN encapsulation on the DHCP reply message to obtain third VXLAN traffic; and sending the third VXLAN traffic to the broadband access authentication server. The broadband access authentication server is further configured to perform PPPoE encapsulation on the third VXLAN traffic to obtain second PPPoE traffic; and send the second PPPoE traffic to the white box gateway; The white box gateway is further configured to decapsulate the second PPPoE traffic, decapsulate the decapsulation result of the second PPPoE traffic, obtain the DHCP reply message, and send the DHCP reply message to the user terminal; The user terminal is further configured to obtain a local area network IP based on the DHCP reply message.

7. The home broadband value-added service processing system according to claim 1, characterized in that: The user terminal is also used to send IP traffic to the white box gateway; The white box gateway is further configured to perform VXLAN encapsulation on the IP traffic to obtain fourth VXLAN traffic; perform PPPoE encapsulation on the fourth VXLAN traffic to obtain third PPPoE traffic; and send the third PPPoE traffic to a broadband access authentication server; The broadband access authentication server is further configured to decapsulate the third PPPoE traffic to obtain the fourth VXLAN traffic, and send the fourth VXLAN traffic to the cloud gateway; The cloud gateway is further configured to decapsulate the fourth VXLAN traffic to obtain the IP traffic; Performing value-added service chain processing based on the IP traffic, and performing VXLAN encapsulation on a result of the value-added service chain processing to obtain fifth VXLAN traffic; Sending the fifth VXLAN traffic to the broadband access authentication server; The broadband access authentication server is further configured to perform PPPoE encapsulation on the fifth VXLAN traffic to obtain fourth PPPoE traffic; and send the fourth PPPoE traffic to the white box gateway; The white box gateway is further used to decapsulate the fourth PPPoE traffic and decapsulate the decapsulation result of the fourth PPPoE traffic to obtain the processing result of the value-added service chain processing; and send the processing result of the value-added service chain processing to the user terminal.

8. A method for processing home broadband value-added services, characterized in that: The home broadband value-added service processing system applied to any one of claims 1 to 7 comprises: Receive first VXLAN traffic sent by the white box gateway; the first VXLAN traffic is obtained by encapsulating Internet access traffic of the user terminal; Identify bandwidth users based on virtual network identification of VXLAN tunnels; Decapsulating the first VXLAN traffic of the bandwidth user to obtain the Internet access traffic; Performing service chain orchestration and scheduling on the Internet traffic to determine the processing priority of the value-added services subscribed by the bandwidth user; Based on the processing priority, the value-added services subscribed by the bandwidth users are diverted.

9. An electronic device comprising a processor and a memory storing a computer program, characterized in that: When the processor executes the computer program, the steps of the method for processing home broadband value-added services according to claim 8 are implemented.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for processing home broadband value-added services according to claim 8 are implemented.

11. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method for processing home broadband value-added services according to claim 8 are implemented.

Images