Wide-area 5G customized network deployment method, device, equipment and medium

Abstract

The invention discloses a wide-area 5G customized network deployment method and device, equipment and a medium, and the wide-area 5G customized network deployment method comprises the steps: integrating the access and mobility management, session management and user plane functions of a 5G core network into a central node, and forming an integrated core network which only provides N2, N3 and N6 interface services through a unified network access point; an integrated base station is deployed at a plurality of far-end positions, and target addresses of N2 and N3 interfaces of the integrated base station are jointly configured as an access point IP address, so that a cross-domain data transmission network can bear control plane signaling and user plane data at the same time; and the user plane data is directly routed to the application server after being decapsulated by the core network. According to the invention, centralized deployment of core network resources, plug and play of the base station and unified transmission of double-sided traffic are realized, equipment and operation and maintenance costs are greatly reduced, network unified management and local data processing capability are guaranteed, and the technical problem that a wide area 5G customized network in the prior art is difficult to give consideration to deployment economy while guaranteeing controllable performance is solved.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and in particular to a method, apparatus, equipment, and medium for deploying a wide-area 5G customized network. Background Technology

[0002] With the development of emerging businesses such as the Industrial Internet, intelligent manufacturing, and remote operation and maintenance, enterprises are increasingly demanding highly reliable, low-latency, and securely isolated wireless communication networks for wide-area distributed scenarios. Customized 5G networks, due to their advantages such as high bandwidth, low latency, and high security, are gradually becoming an important infrastructure supporting enterprise proprietary businesses. However, in wide-area deployment scenarios involving multiple regions and sites, existing customized 5G network solutions struggle to balance network performance controllability with deployment cost-effectiveness, becoming a key bottleneck restricting their large-scale application.

[0003] Currently, typical wide-area 5G customized networks mostly adopt a distributed core network and local base station architecture. This means that a complete 5G core network instance, including Access and Mobility Management (AMF), Session Management (SMF), and User Plane (UPF), is independently deployed at each remote site or regional center. While this model enables local data offloading and independent control, ensuring service performance, it has significant drawbacks. On the one hand, each site needs to be configured with a complete set of core network equipment, resulting in high hardware investment, low resource utilization, and complex operation and maintenance. On the other hand, it is difficult to unify and coordinate core network policies across different sites, easily leading to inconsistent authentication, IP address conflicts, and other problems, which ultimately affect the stability and controllability of the overall network.

[0004] To reduce deployment costs, some solutions attempt to adopt a centralized core network and remote base station architecture, centrally deploying the core network in a central data center or cloud, and connecting each remote base station via an IP bearer network. However, such solutions typically still require configuring independent communication paths and service addresses for the control plane (N2 interface) and user plane (N3 interface), and the base station needs to maintain multiple target IPs and routing rules separately, resulting in complex configuration and hindering rapid deployment and expansion. Furthermore, when the cross-domain IP bearer network uses the public internet, if control plane signaling and user plane data are not uniformly encrypted, security risks exist, further limiting its applicability in wide-area scenarios.

[0005] Therefore, in existing technologies, pursuing controllable performance often requires the redundant construction of core network resources, leading to high costs. On the other hand, pursuing economical deployment can easily sacrifice unified network management capabilities and security, making it difficult to achieve a balance between performance and cost. How to simplify core network deployment, reduce configuration complexity, and improve resource utilization efficiency while ensuring controllable cross-domain network performance has become a pressing technical challenge in this field. Summary of the Invention

[0006] The embodiments of the present invention provide a method, apparatus, device and medium for deploying a wide-area 5G customized network, which aims to solve the technical problem that it is difficult to ensure both controllable performance and economical deployment of a wide-area 5G customized network under the existing technology.

[0007] In a first aspect, embodiments of the present invention provide a method for deploying a wide-area 5G customized network, applied to a wide-area 5G customized network system. The system includes an integrated 5G core network, an integrated base station, a cross-domain data transmission network, and an application server. The method includes: integrating an access and mobility management function module, a session management function module, and a user plane processing function module into the integrated 5G core network, and encapsulating the network element communication interfaces of the integrated 5G core network, providing standard N2, N3, and N6 interface services only through a unified network access point; configuring the radio parameters of the integrated base station at multiple remote locations, and simultaneously setting the IP address of the unified network access point as the target communication address for both the N2 and N3 interfaces; configuring the cross-domain data transmission network based on the IP address of the single-point network service interface, and having the cross-domain data transmission network carry N2 interface signaling data and N3 interface user data sent via the integrated base station; when the integrated 5G core network receives the user plane data, the integrated 5G core network decapsulates the user data stream through the user plane processing function module and routes it to the application server.

[0008] Secondly, embodiments of the present invention also provide a wide-area 5G customized network deployment apparatus for performing the wide-area 5G customized network deployment method as described above.

[0009] Thirdly, embodiments of the present invention also provide a computer device, the computer device including a memory and a processor connected to the memory; the memory is used to store a computer program; the processor is used to run the computer program stored in the memory to perform the steps of the above-described wide-area 5G customized network deployment method.

[0010] Fourthly, embodiments of the present invention also provide a computer-readable storage medium storing a computer program, the computer program including program instructions, which, when executed by a processor, can implement the steps of the above-described wide-area 5G customized network deployment method.

[0011] Compared with the prior art, the beneficial effects of the present invention are: In the technical solution of this invention, the wide-area 5G customized network deployment method integrates the access and mobility management, session management, and user plane functions of the 5G core network into a central node, forming an integrated core network that provides N2, N3, and N6 interface services only through a unified network access point. Integrated base stations are deployed at multiple remote locations, and their N2 and N3 interface target addresses are jointly configured as the IP address of this access point, enabling the cross-domain data transmission network to simultaneously carry control plane signaling and user plane data. User plane data is decapsulated by the core network and directly routed to the application server. This achieves centralized deployment of core network resources, plug-and-play base stations, and unified transmission of dual-plane traffic, significantly reducing equipment and maintenance costs while ensuring unified network management and local data processing capabilities. It solves the technical problem of existing wide-area 5G customized networks struggling to balance performance controllability with deployment economy. Attached Figure Description

[0012] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the following description of the embodiments will be briefly introduced. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0013] Figure 1 A flowchart of the wide-area 5G customized network deployment method provided by the present invention; Figure 2 This is a first sub-flowchart of the wide-area 5G customized network deployment method provided by the present invention. Figure 3 This is the second sub-flowchart of the wide-area 5G customized network deployment method provided by the present invention; Figure 4 This is the third sub-flowchart of the wide-area 5G customized network deployment method provided by the present invention; Figure 5 This is the fourth sub-flowchart of the wide-area 5G customized network deployment method provided by the present invention; Figure 6 This is the fifth sub-flowchart of the wide-area 5G customized network deployment method provided by the present invention; Figure 7 The sixth sub-flowchart of the wide-area 5G customized network deployment method provided by the present invention; Figure 8 A schematic block diagram of the units of the wide-area 5G customized network deployment device provided by the present invention; Figure 9 A schematic block diagram of a computer device provided in an embodiment of the present invention; Figure 10 A schematic diagram of the architecture of a wide-area 5G customized network deployment system to which the wide-area 5G customized network deployment method provided by the present invention is applied; Figure 11 A schematic diagram of the connection of the wide-area 5G customized network deployment system to which the wide-area 5G customized network deployment method provided by the present invention is applied; Figure 12 The cloud-based centralized deployment architecture diagram of the wide-area 5G customized network deployment system to which the wide-area 5G customized network deployment method provided by the present invention is applied. Detailed Implementation

[0014] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0015] It should be understood that, when used in this specification and the appended claims, the terms "comprising" and "including" indicate the presence of the described features, integrals, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or collections thereof.

[0016] It should also be understood that the terminology used in this specification is for the purpose of describing medical embodiments only and is not intended to limit the invention. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0017] It should also be further understood that the term "and / or" as used in this specification and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0018] This invention addresses the technical problem of achieving both controllable performance and cost-effective deployment in existing wide-area 5G customized networks by providing a method for deploying such networks. This method is applied to a wide-area 5G customized network deployment system, with reference to... Figures 10 to 12 The wide-area 5G customized network system of the present invention is a lightweight 5G network architecture for cross-regional, multi-site enterprise private network needs. It is composed of an integrated 5G core network, multiple distributed integrated base stations, cross-domain data transmission network and application server working together.

[0019] The integrated 5G core network is centrally deployed in the enterprise headquarters computer room or public cloud virtual private cloud environment. It integrates access and mobility management function modules, session management function modules, and user plane processing function modules. The internal signaling interfaces such as N11 and N4 between the various function modules are processed in a closed manner within the device. Externally, it only provides standard N2, N3 and N6 interface services through a unified network access point. The unified network access point is configured with a fixed public IP address, which serves as the logical endpoint for all remote site connections.

[0020] The integrated base station is deployed in multiple geographically separated remote locations, supports 5G NR wireless access, and has independent N2 and N3 interface transmission capabilities. Its backhaul network interface can access the cross-domain data transmission network through fiber optic, Ethernet or microwave links, and wireless parameters such as working frequency band, physical cell ID, system bandwidth and transmit power are configured during deployment.

[0021] The cross-domain data transmission network is used to connect all integrated base stations and the integrated 5G core network. It supports the use of MPLS leased lines to achieve high-quality transmission, or the use of Internet leased lines superimposed with IPSec encrypted tunnels to reduce networking costs, and ensures the secure and reliable transmission of signaling data on the N2 interface and user data on the N3 interface.

[0022] The application server is deployed in the enterprise's local data center or private cloud environment to receive business data uploaded by terminal devices. The integrated 5G core network establishes static or dynamic routing policies with the application server through the N6 interface to realize the local offloading of user plane data.

[0023] This system supports the automatic network access of newly added remote sites by simply deploying a new integrated base station, configuring its wireless parameters, and setting the IP address of the unified network access point to the target address of the N2 and N3 interfaces. No additional configuration of the integrated 5G core network is required. This significantly reduces deployment complexity and operation and maintenance costs while ensuring unified and controllable network performance. It is suitable for private network communication needs in wide-area distributed scenarios such as smart manufacturing, energy inspection, and traffic dispatch.

[0024] Reference Figures 1 to 7 The deployment method for a wide-area 5G customized network includes the following steps: S110. Integrate the access and mobility management function module, session management function module and user plane processing function module into the integrated 5G core network, and encapsulate the network element communication interface of the integrated 5G core network, providing standard N2 interface, N3 interface and N6 interface services only through a unified network access point. S120. Configure the wireless parameters of the integrated base station at multiple remote locations, and simultaneously set the IP address of the unified network access point as the target communication address of both the N2 and N3 interfaces. S130. Configure the cross-domain data transmission network based on the IP address of the single-point network service interface, and at the same time, the cross-domain data transmission network carries the N2 interface signaling data and N3 interface user data sent through the integrated base station. S140. After receiving the user plane data, the integrated 5G core network decapsulates the user data stream through the user plane processing function module and routes it to the application server.

[0025] In the actual deployment of wide-area 5G customized network systems, the integrated 5G core network integrates access and mobility management modules, session management modules, and user plane processing modules into a single device, forming a fully functional network unit. The integrated 5G core network achieves communication between these functional modules through an internal bus structure, presenting only a unified network access point to the outside world. This access point provides standard N2, N3, and N6 interface services. The internal network element communication interfaces of the integrated 5G core network are encapsulated within the device, preventing external systems from directly accessing these interfaces. This shields the complex internal signaling interactions, making the integrated 5G core network appear as a plug-and-play network black box to the outside world. The N6 interface of the integrated 5G core network is used to directly connect to the application server, establishing the final data transmission path.

[0026] When deploying integrated base stations in multiple remote locations, the first step is to configure the radio parameters, including operating frequency, physical cell identifier, and tracking area identifier, through the base station's management interface. After configuring the radio parameters of the integrated base station, the unified network access point IP address of the integrated 5G core network is simultaneously set as the target communication address for both the N2 and N3 interfaces. This configuration enables the integrated base station to establish a connection with the integrated 5G core network using a single IP address, eliminating the need to configure different communication targets for the control plane and user plane. The integrated base station then accesses the cross-domain data transmission network through its backhaul network interface, completing the physical connection with the central network.

[0027] The cross-domain data transmission network is configured based on the unified network access point IP address of the integrated 5G core network, establishing a network path from the integrated base station to the integrated 5G core network. The cross-domain data transmission network simultaneously carries N2 interface signaling data and N3 interface user data transmitted via the integrated base station. The N2 interface signaling data carries control plane signaling such as registration, authentication, and mobility management for terminal devices, while the N3 interface user data carries the user plane data stream of the terminal devices. The cross-domain data transmission network can utilize dedicated lines provided by operators or internet lines. When using internet lines, a secure communication channel is established between the integrated base station and the integrated 5G core network to ensure the secure transmission of control plane signaling and user plane data.

[0028] When the integrated 5G core network receives user plane data from the integrated base station, the user plane processing module within the integrated 5G core network processes the user data stream. The user plane processing module first parses the user plane data packets encapsulated by the GTP-U protocol, extracts the tunnel endpoint identifier, and then classifies and executes the data stream according to the policies pre-configured by the session management module. After policy execution, the user plane processing module routes the decapsulated internal user IP packets directly to the application server through the N6 interface, achieving localized data offloading. This process avoids data circumventing public networks, ensuring that data generated by terminal devices can be efficiently and securely transmitted to the application server.

[0029] In this invention, the integrated 5G core network supports a dual-mode deployment architecture. Specifically, when an enterprise's headquarters business system is deployed in the cloud, the integrated 5G core network can be deployed in a virtual private cloud environment within a public cloud using virtualized instances. At this time, integrated base stations at various remote locations connect to the integrated 5G core network in the cloud via a cross-domain data transmission network. Application servers can be deployed in the same cloud environment as the integrated 5G core network, forming a closed loop within the cloud. In this deployment mode, the integrated base station still sets the unified network access point IP address of the integrated 5G core network in the cloud as the target communication address for both the N2 and N3 interfaces. The cross-domain data transmission network also simultaneously carries signaling data for the N2 interface and user data for the N3 interface, ensuring the consistency and scalability of the network architecture. This dual-mode deployment capability enables the wide-area 5G customized network system to adapt to the network infrastructure conditions of different enterprises, allowing deployment both locally within the enterprise and on the public cloud, thus improving the system's applicability and flexibility.

[0030] During system operation, when a new branch needs to be added, simply deploy an integrated base station at the new branch location, configure its wireless parameters, and set the unified network access point IP address of the integrated 5G core network to the target communication addresses of the N2 and N3 interfaces. Then, connect the integrated base station to the cross-domain data transmission network. No modifications to the integrated 5G core network are required, greatly simplifying the network expansion process and reducing operational complexity. This design enables the wide-area 5G customized network system to quickly respond to service expansion needs while maintaining a balance between controllable performance and deployment cost-effectiveness.

[0031] In one embodiment, step S110 includes: S111. Deploy the integrated 5G core network in the form of an integrated hardware device in the enterprise's local data center, and / or deploy it in the form of a virtualized instance in the virtual private cloud of the public cloud; S112. Configure the N2 interface control plane service IP address, N3 interface user plane service IP address and N6 interface service egress IP address of the integrated 5G core network. S113. Enable the access and mobility management function module, the session management function module, and the user plane processing function module within the integrated 5G core network, and complete the initialization of the internal signaling channels between each function module; S114. Establish a static or dynamic routing strategy between the application server and the integrated 5G core network through the N6 interface.

[0032] An integrated 5G core network can be deployed in an enterprise's local data center as a single hardware device, such as a rack server installed in a campus data center. This device integrates computing, storage, and network resources. Access and mobility management modules, session management modules, and user plane processing modules run as software components on the same hardware platform. Internal signaling interfaces such as N11 and N4 between these modules communicate through local loopback or virtual networks, without exposing private interfaces externally. They only provide standard N2, N3, and N6 interface services to external networks through a unified network access point. The unified network access point is configured with a fixed public IP address, serving as the sole logical entry point for external devices to connect to the core network.

[0033] In another implementation, the integrated 5G core network is deployed in the form of virtualized instances in the virtual private cloud of the public cloud. For example, multiple virtual machine instances are created in the virtual private cloud environment provided by the cloud service provider, which respectively carry access and mobility management function modules, session management function modules and user plane processing function modules. Each instance is interconnected through an internal virtual switching network, and the service interface is still exposed to the outside through a unified network access point.

[0034] During the system configuration phase, the N2 interface control plane service IP address is explicitly set for the integrated 5G core network to receive control plane signaling from the integrated base station; the N3 interface user plane service IP address is set to establish user plane data channels; and the N6 interface service egress IP address is set to forward user service data externally. These IP addresses can be configured as the same IP or different IPs, all managed and routed uniformly by a unified network access point.

[0035] During the activation of functional modules, after the integrated 5G core network is started, the access and mobility management functional module, the session management functional module, and the user plane processing functional module are activated sequentially inside. The status registration, capability announcement, and connection initialization between each functional module are completed through the preset internal signaling channel to ensure that the modules can respond to external requests in a coordinated manner.

[0036] The integrated 5G core network configures static routing policies between the N6 interface and the application server to direct specific terminal data streams to the target server network segment. In scenarios requiring dynamic adaptation to network changes, dynamic routing protocols can also be enabled to achieve automatic exchange and updating of routing information. For example, in an enterprise deployment instance, the integrated 5G core network is deployed in a virtualized form in a public cloud environment. A unified network access point exposes a single IP address, and all remote integrated base stations connect to the N2 and N3 interfaces through this IP address. After the core network completes the initialization of functional modules, it forwards data from production terminals to the application server in the local data center through the N6 interface, achieving centralized management and controllable data egress.

[0037] In one embodiment, step S120 includes: S121. Install the integrated base station at multiple remote locations and set the wireless parameters; S122. Assign an IP address to the backhaul network interface of the integrated base station to access the cross-domain data transmission network; S123. Obtain the IP address of the unified network access point through the integrated base station, and set the IP address of the unified network access point as the default target communication address for both the N2 and N3 interfaces.

[0038] After the integrated base station is installed, technicians configure wireless parameters through the base station's local management interface, including basic configuration parameters such as operating frequency, physical cell identifier, and tracking area identifier. These wireless parameter settings need to be rationally planned according to local radio management regulations and actual coverage requirements to ensure that the base station can provide stable and reliable 5G wireless signal coverage.

[0039] To establish a connection between the integrated base station and the central network, an IP address needs to be assigned to the base station's backhaul network interface. This process is typically completed through the base station's management interface, configuring appropriate IP address parameters for the backhaul network interface based on the address planning of the cross-domain data transmission network. This IP address must be consistent with the address range of the cross-domain data transmission network to ensure that the integrated base station can correctly access the wide area network. Once the IP address of the backhaul network interface is configured, the integrated base station possesses the basic network conditions to establish a communication connection with the central network.

[0040] After completing the basic network configuration, the integrated base station needs to obtain the unified network access point IP address of the integrated 5G core network. This IP address can be directly entered in the base station management interface; or it can be pre-written into the base station system through a pre-configured file. Alternatively, it can be dynamically obtained through a DHCP server. After obtaining the unified network access point IP address, the integrated base station sets this IP address as the default target communication address for both the N2 and N3 interfaces. This configuration method allows the integrated base station to establish a connection with the integrated 5G core network using a single IP address, eliminating the need to configure different communication targets for the control plane and user plane. The N2 interface carries control plane signaling and is responsible for terminal device registration, authentication, and mobility management; the N3 interface carries user plane data and is responsible for the data transmission of terminal device services. By setting the same IP address as the target communication address for both interfaces simultaneously, the base station configuration process is greatly simplified, reducing the complexity of network deployment.

[0041] Some integrated base stations already in use support automatic configuration. When an integrated base station first connects to the network, it can automatically discover and obtain the unified network access point IP address of the integrated 5G core network, completing the target communication address settings for the N2 and N3 interfaces without manual intervention. This automatic configuration mechanism is based on a standard network discovery protocol, making base station deployment simpler and more efficient. Furthermore, integrated base stations support configuration information backup and recovery functions. When a base station needs to be redeployed or upgraded, it can quickly restore the original configuration parameters, reducing deployment time and the probability of errors.

[0042] In one embodiment, step S130 includes: S131. The integrated base station initiates a control plane transmission layer connection request and registers the N2 interface signaling link with the access and mobility management function module in the integrated 5G core network. S132. After the control plane transmission layer connection between the integrated base station and the integrated 5G core network is successfully established, the integrated base station sends a base station control plane initialization request message to complete the control plane logic registration. S133. The integrated base station initiates the user plane data channel establishment process, sends a session establishment request to the session management function module, and the SMF instructs the user plane processing function module to negotiate the GTP-U tunnel endpoint identifier and IP parameters with the base station to establish the end-to-end N3 interface user plane data channel.

[0043] The integrated base station first initiates a control plane transport layer connection request, which is sent to the integrated 5G core network via the cross-domain data transmission network. During the transport layer connection establishment process, the integrated base station uses the standard SCTP protocol to establish a reliable connection with the access and mobility management function modules in the integrated 5G core network. This connection request includes necessary information such as base station identifier, capability information, and security parameters, used to register the N2 interface signaling link with the core network. The registration process of the N2 interface signaling link follows the 3GPP standard protocol procedure to ensure that control plane signaling can be transmitted securely and reliably.

[0044] Once the control plane transport layer connection between the integrated base station and the integrated 5G core network is successfully established, the integrated base station immediately sends a base station control plane initialization request message. This message contains detailed information such as base station configuration parameters, supported frequency band information, and capability sets. Upon receiving the initialization request, the access and mobility management module in the integrated 5G core network verifies and configures the base station, completing the control plane logical registration process. After successful control plane logical registration, a complete N2 interface signaling channel is established between the integrated base station and the integrated 5G core network, supporting control plane functions such as access authentication and mobility management for terminal devices. This process ensures that the base station can correctly identify and process control plane requests from terminal devices.

[0045] After control plane registration is completed, the integrated base station proactively initiates the user plane data channel establishment process. The integrated base station sends a session establishment request to the session management function module in the integrated 5G core network. The SMF instructs the user plane processing function module to negotiate data transmission parameters with the base station. Through this interaction, both parties negotiate and determine the channel endpoint identifier and IP parameters, establishing an end-to-end N3 interface user plane data channel. Once established, the N3 interface user plane data channel can carry the service data streams generated by terminal devices, achieving efficient transmission of user plane data. This channel establishment process uses the standard GTP-U protocol mechanism to ensure secure and reliable transmission of user plane data.

[0046] In addition, the integrated base station and the integrated 5G core network periodically exchange heartbeat messages to monitor the status of the control plane transport layer connection. When a connection anomaly is detected, the system can automatically trigger a reconnection mechanism to re-establish the N2 interface signaling link and the N3 interface user plane data channel, ensuring the continuity of network services.

[0047] Furthermore, the steps in S130 also include: S134. The integrated base station acts as a secure communication client, completing IKEv2 key negotiation with the secure access gateway on the integrated 5G core network side to establish a two-way encrypted communication channel: S135. The control plane signaling data of the N2 interface and the user plane data stream of the N3 interface of the integrated base station are both encapsulated in an encrypted communication channel for transmission.

[0048] When cross-domain data transmission networks use internet lines as the transmission medium, a secure communication channel is required to ensure data transmission security. The integrated base station, acting as a secure communication client, sends an IKEv2 key negotiation request to the secure access gateway on the integrated 5G core network side. This request includes client identifiers, supported encryption algorithm suites, and security parameters. Upon receiving the request, the secure access gateway verifies the client's identity, selects an encryption algorithm supported by both parties, and then returns an IKEv2 negotiation response message. Through multiple message exchanges, both parties complete the exchange and verification of key materials, ultimately establishing a shared session key.

[0049] After successful IKEv2 key negotiation, a bidirectional encrypted communication channel is established between the integrated base station and the secure access gateway. This channel is implemented using the IPSec protocol stack, including the AH authentication header and the ESP encapsulated security payload protocol. During channel establishment, both parties negotiate and determine security association parameters, including encryption algorithms, authentication algorithms, and time-to-live (TTL). Once the secure communication channel is established, all network communications of the integrated base station will be conducted through this encrypted channel, ensuring the confidentiality and integrity of data transmission.

[0050] During data transmission, the integrated base station encapsulates both the control plane signaling data of the N2 interface and the user plane data stream of the N3 interface within an encrypted communication channel for transmission. The control plane signaling data is encapsulated using the SCTP protocol and then encrypted using the IPSec ESP protocol; the user plane data stream is encapsulated using the GTP-U protocol and also encrypted using the IPSec ESP protocol. This dual encapsulation mechanism ensures that both control plane and user plane data can be transmitted securely within the channel. During transmission, the IPSec protocol adds a sequence number to each data packet to prevent replay attacks and provides data integrity verification to ensure that data is not tampered with during transmission. When a potential risk to the current security policy is detected, the integrated base station and the secure access gateway can proactively trigger an IKEv2 renegotiation process to update the session key and security parameters.

[0051] In one embodiment, step S140 includes: S141. Send a random access preamble through the terminal device within the coverage area of ​​the integrated base station to trigger the uplink synchronization process; S142. The integrated base station completes time synchronization and resource allocation, sends an access response to the terminal device, and establishes a wireless resource control connection. S143. The terminal device sends an initial non-access stratum message through the radio resource control connection. After being encapsulated into a control plane signaling message by the integrated base station, it is forwarded to the access and mobility management function module via the N2 interface.

[0052] The terminal device first sends a random access preamble within the wireless coverage area of ​​the integrated base station to indicate its access intention to the base station. The random access preamble contains specific sequence information used by the base station to identify and process the access request. When the integrated base station receives the random access preamble, it initiates the uplink synchronization process, determining the timing and frequency synchronization parameters of the terminal device by measuring the arrival time and frequency offset of the preamble.

[0053] After completing time synchronization and resource allocation, the integrated base station sends an access response message to the terminal device. The access response message includes necessary parameters such as uplink authorization information, timing advance, and temporary identifiers. Based on the received access response information, the terminal device adjusts its transmission timing and power to complete uplink synchronization with the base station. Subsequently, the terminal device establishes a radio resource control connection based on the allocated resources. This connection is the logical communication channel between the terminal device and the base station, used to transmit control signaling and service data.

[0054] After the radio resource control connection is established, the terminal device sends an initial non-access stratum message (INSMessage) through this connection. The INSMessage contains key information such as the terminal device's identification information, the requested service type, and security parameters. Upon receiving the INSMessage, the integrated base station encapsulates it into a standard control plane signaling message and forwards it to the access and mobility management function module in the integrated 5G core network via the N2 interface. This forwarding process follows 3GPP standard protocols to ensure that control plane signaling is accurately and reliably transmitted to the core network.

[0055] Furthermore, step S140 also includes: S144. The access and mobility management module completes the identity authentication and security activation process for the terminal device based on the Public Land Mobile Network identifier and International Mobile Subscriber Identity information. S145. After the terminal device successfully authenticates its identity, the session management module establishes a data transmission session for the terminal device, allocates an IP address, and issues a quality of service policy. S146. Receive user plane protocol encapsulated data packets from the integrated base station through the user plane processing function module, and extract the internal user IP packets of the user plane protocol encapsulated data packets. S147. According to the forwarding rules in the data transmission session context, the decapsulated internal user IP packets are directly routed to the application server through the N6 interface to complete the local data offloading.

[0056] The Access and Mobility Management (AMM) module extracts the Public Land Mobile Network Identifier (PLN) and International Mobile Subscriber Identity (IMSI) from the initial non-access stratum message sent by the terminal device and compares them with the user data stored in the core network for verification. The verification process employs a standard 5G authentication and key negotiation procedure, including requesting a user authentication vector from the unified data management function, executing the authentication algorithm, and generating a session key. Upon successful authentication, the AMM module activates the terminal device's security context, enabling the terminal device to conduct secure communication.

[0057] After successful authentication of the terminal device, the session management module establishes a data transmission session for the terminal device. The session management module first determines the session parameters based on the terminal device's subscription information and current network status, and then assigns an IP address to the terminal device. IP address allocation can be done statically or via Dynamic Host Configuration Protocol (DHCP). Simultaneously, the session management module issues corresponding Quality of Service (QoS) policies based on the terminal device's service type and network policies, including parameters such as bandwidth guarantees, latency requirements, and priority. These QoS policies will be applied to subsequent user plane data processing to ensure that service data is transmitted according to the predetermined QoS requirements.

[0058] The user plane processing module receives user plane protocol encapsulated data packets from the integrated base station. These packets are encapsulated using the GTP-U protocol and contain a tunnel endpoint identifier and internal user IP packets. The user plane processing module first parses the GTP-U protocol header, extracts the tunnel endpoint identifier, and then looks up the corresponding session context based on the tunnel endpoint identifier. After finding a matching session context, the user plane processing module strips the GTP-U encapsulation and extracts the internal user IP packets. This process ensures that user plane data can be correctly decapsulated from the transport layer encapsulation, preparing for subsequent data processing.

[0059] Based on the forwarding rules in the data transmission session context, the user plane processing module directly routes the decapsulated internal user IP packets to the application server via the N6 interface. The data transmission session context contains information such as the destination address, forwarding path, and QoS processing rules. The user plane processing module performs necessary processing on the internal user IP packets based on this information, including QoS marking and traffic shaping, and then forwards the packets to the application server via the N6 interface. This direct routing method avoids data routing through public networks, achieving local data offloading and ensuring that business data generated by terminal devices can be efficiently and securely transmitted to the application server.

[0060] Based on the wide-area 5G customized network deployment method described in the above embodiments, it can be seen that this method effectively solves the problem in the existing technology that it is difficult to simultaneously ensure performance controllability and deployment economy in wide-area 5G customized networks through the design of integrated 5G core network, integrated base station and unified network access point, and provides enterprises with an efficient, flexible and economical solution for building cross-regional 5G private networks.

[0061] In the manufacturing sector, the wide-area 5G customized network deployment method of this invention can be applied to multi-factory collaborative production scenarios in large manufacturing enterprises. The enterprise headquarters can deploy an integrated 5G core network, while each branch factory only needs to deploy an integrated base station and connect to the cross-domain data transmission network to achieve unified network management and data processing. Real-time data generated by various terminal devices on the production line can be directly routed to the factory's production management system through the N6 interface, ensuring low latency and high reliability of data transmission. This architecture avoids the high cost problem of each branch factory needing to deploy a local core network in traditional solutions, while ensuring the security and real-time nature of production data, providing a reliable network infrastructure for intelligent manufacturing.

[0062] In the retail industry, the wide-area 5G customized network deployment method of this invention is suitable for the wide-area network coverage needs of chain retail enterprises. Enterprises can deploy an integrated 5G core network at headquarters and integrated base stations in each store, transmitting business data such as sales data and inventory information directly to the headquarters' application server via the N6 interface. When stores are added or adjusted, only integrated base stations need to be deployed at the new locations and connected to the cross-domain data transmission network; no modification to the core network is required, greatly simplifying the network expansion process. This flexible deployment method enables retail enterprises to quickly respond to business expansion needs while maintaining controllable network performance and cost-effective deployment.

[0063] In the field of smart logistics, the wide-area 5G customized network deployment method of this invention can be applied to the cross-regional warehousing and distribution networks of logistics enterprises. Logistics centers and distribution stations can deploy integrated base stations, connecting to the headquarters' integrated 5G core network via a cross-domain data transmission network. Real-time location information and cargo status data generated by logistics terminal equipment can be directly transmitted to the logistics management system through the N6 interface, enabling full-process visual monitoring. Especially for latency-sensitive scenarios such as cold chain logistics, the low-latency data transmission capability provided by this method ensures real-time monitoring of key parameters such as temperature and humidity, improving the quality and safety of logistics services.

[0064] In the energy industry, the wide-area 5G customized network deployment method of this invention is applicable to the wide-area network coverage needs of energy companies such as power and oil companies. Energy companies typically have a large number of facilities distributed in different geographical locations, requiring reliable data transmission networks. Through this method, companies can deploy an integrated 5G core network at headquarters and integrated base stations at each site, achieving unified network management and data processing. Data such as operating status and environmental monitoring generated by energy equipment can be directly transmitted to the monitoring center through the N6 interface, ensuring the secure transmission and real-time processing of critical data. This architecture not only reduces network deployment costs but also improves network reliability and security, providing strong support for the digital transformation of the energy industry.

[0065] Figure 8 This is a schematic block diagram of a wide-area 5G customized network deployment device 600 provided in an embodiment of the present invention. Figure 8 As shown, corresponding to the above-described wide-area 5G customized network deployment method, the present invention also provides a wide-area 5G customized network deployment device 600. This wide-area 5G customized network deployment device 600 includes a unit for performing the above-described wide-area 5G customized network deployment method, and the device can be configured in a desktop computer, tablet computer, smartphone, or other terminal.

[0066] Specifically, please refer to Figure 8 The wide-area 5G customized network deployment device 600 includes: The core network integration unit 610 is used to integrate the access and mobility management function module, the session management function module and the user plane processing function module of the integrated 5G core network, and encapsulate the network element communication interface of the integrated 5G core network, providing standard N2 interface, N3 interface and N6 interface services only through the unified network access point. The base station configuration unit 620 is used to configure the wireless parameters of the integrated base station at multiple remote locations, and simultaneously set the IP address of the unified network access point to the target communication address of both the N2 interface and the N3 interface. The network bearer configuration unit 630 is used to configure the cross-domain data transmission network based on the IP address of the single-point network service interface, and the cross-domain data transmission network carries the N2 interface signaling data and N3 interface user data sent through the integrated base station. The data decapsulation and routing unit 640 is used to decapsulate the user data stream through the user plane processing function module after the integrated 5G core network receives the user plane data, and then route it to the application server.

[0067] In one embodiment, the core network integration unit 610 includes: The core network deployment unit is used to deploy the integrated 5G core network in the form of an integrated hardware device in the enterprise's local data center, and / or, in the form of a virtualized instance in the virtual private cloud of the public cloud; The interface address configuration unit is used to configure the N2 interface control plane service IP address, N3 interface user plane service IP address and N6 interface service egress IP address of the integrated 5G core network. The functional module initialization unit is used to enable the access and mobility management functional module, the session management functional module, and the user plane processing functional module within the integrated 5G core network, and to complete the initialization of the internal signaling channels between the functional modules. The routing policy establishment unit is used to establish a static or dynamic routing policy with the application server through the N6 interface of the integrated 5G core network.

[0068] In one embodiment, the base station configuration unit 620 includes: The base station installation and parameter setting unit is used to install the integrated base station at multiple remote locations and set wireless parameters. The backhaul address allocation unit is used to allocate an IP address to the backhaul network interface of the integrated base station in order to access the cross-domain data transmission network. The target address configuration unit is used to obtain the IP address of the unified network access point through the integrated base station, and set the IP address of the unified network access point as the default target communication address of both the N2 interface and the N3 interface.

[0069] In one embodiment, the network bearer configuration unit 630 includes: The control plane connection initiation unit is used to initiate a control plane transport layer connection request by the integrated base station and register the N2 interface signaling link with the access and mobility management function module in the integrated 5G core network; The control plane registration completion unit is used to send a base station control plane initialization request message after the integrated base station and the integrated 5G core network have successfully established a control plane transmission layer connection, thereby completing the control plane logical registration. The user plane channel establishment unit is used to initiate the user plane data channel establishment process by the integrated base station, send a session establishment request to the session management function module, and instruct the user plane processing function module to negotiate the GTP-U tunnel endpoint identifier and IP parameters with the base station to establish the end-to-end N3 interface user plane data channel.

[0070] Furthermore, the network bearer configuration unit 630 also includes: The key negotiation unit is used to complete IKEv2 key negotiation with the secure access gateway on the integrated 5G core network side, with the integrated base station acting as a secure communication client, and establish a two-way encrypted communication channel. The encrypted transmission unit is used to encapsulate the control plane signaling data of the N2 interface and the user plane data stream of the N3 interface of the integrated base station in an encrypted communication channel for transmission.

[0071] In one embodiment, the data decapsulation and routing unit 640 includes: The uplink synchronization triggering unit is used to send a random access preamble through the terminal device within the coverage area of ​​the integrated base station to trigger the uplink synchronization process. A wireless resource control connection establishment unit is used to complete time synchronization and resource allocation by the integrated base station, send an access response to the terminal device, and establish a wireless resource control connection. The initial signaling forwarding unit is used by the terminal device to send an initial non-access stratum message through the radio resource control connection. After being encapsulated into a control plane signaling message by the integrated base station, the message is forwarded to the access and mobility management function module via the N2 interface.

[0072] Furthermore, the data decapsulation and routing unit 640 includes: The identity authentication and security activation unit is used by the access and mobility management function module to complete the identity authentication and security activation process of the terminal device based on the public terrestrial mobile network identifier and international mobile subscriber identification code information; The data transmission session establishment unit is used to establish a data transmission session for the terminal device by the session management function module after the terminal device has successfully authenticated its identity, allocate an IP address and issue a quality of service policy. The user plane data decapsulation unit is used to receive user plane protocol encapsulated data packets from the integrated base station through the user plane processing function module, and extract the internal user IP packets of the user plane protocol encapsulated data packets. The local data offloading unit is used to route the decapsulated internal user IP packets directly to the application server through the N6 interface according to the forwarding rules in the data transmission session context, thereby completing the local data offloading.

[0073] The aforementioned wide-area 5G customized network deployment device 600 can be implemented as a computer program, which can be used in, for example... Figure 9 It runs on the computer device shown.

[0074] Please see Figure 9 , Figure 9This is a schematic block diagram of a computer device 500 provided in an embodiment of this application. The computer device 500 can be a terminal or a server. The terminal can be an electronic device with communication functions, such as a desktop computer, tablet computer, or smartphone. The server can be a standalone server or a server cluster composed of multiple servers.

[0075] See Figure 9 The computer device 500 includes a processor 502, a memory, and a network interface 505 connected via a system bus 501. The memory may include a non-volatile storage medium 503 and internal memory 504.

[0076] The non-volatile storage medium 503 may store an operating system 5031 and a computer program 5032. The computer program 5032 includes program instructions that, when executed, cause the processor 502 to perform a wide-area 5G customized network deployment method.

[0077] The processor 502 provides computing and control capabilities to support the operation of the entire computer device 500.

[0078] The internal memory 504 provides an environment for the operation of the computer program 5032 in the non-volatile storage medium 503. When the computer program 5032 is executed by the processor 502, the processor 502 can execute a wide-area 5G customized network deployment method.

[0079] This network interface 505 is used for network communication with other devices. Those skilled in the art will understand that... Figure 9 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device 500 to which the present application is applied. The specific computer device 500 may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0080] The processor 502 is used to run a computer program 5032 stored in a memory to implement the steps of the above method.

[0081] It should be understood that in the embodiments of this application, the processor 502 may be a central processing unit (CPU), or it may be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor.

[0082] It will be understood by those skilled in the art that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program includes program instructions and can be stored in a storage medium, which is a computer-readable storage medium. The program instructions are executed by at least one processor in the computer system to implement the process steps of the embodiments of the above methods.

[0083] Therefore, the present invention also provides a storage medium. This storage medium can be a computer-readable storage medium. The storage medium stores a computer program, wherein the computer program includes program instructions. When executed by a processor, the program instructions cause the processor to perform the steps of the above-described method.

[0084] The storage medium can be any computer-readable storage medium capable of storing program code, such as a USB flash drive, portable hard drive, read-only memory (ROM), magnetic disk, or optical disk.

[0085] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this invention.

[0086] In the several embodiments provided by this invention, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative. For example, the division of each unit is only a logical functional division, and there may be other division methods in actual implementation. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed.

[0087] The steps in the method of this invention can be adjusted, merged, or reduced in order according to actual needs. The units in the device of this invention can be merged, divided, or reduced according to actual needs. Furthermore, the functional units in the various embodiments of this invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0088] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, a terminal, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention.

[0089] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in the present invention, and these modifications or substitutions should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method for deploying a wide-area 5G customized network, characterized in that, The method is applied to a wide-area 5G customized network system, the system including an integrated 5G core network, an integrated base station, a cross-domain data transmission network, and an application server, and includes: The integrated 5G core network integrates access and mobility management modules, session management modules, and user plane processing modules, and encapsulates the network element communication interfaces of the integrated 5G core network, providing standard N2, N3, and N6 interface services only through a unified network access point. Configure the wireless parameters of the integrated base station at multiple remote locations, and simultaneously set the IP address of the unified network access point as the target communication address of both the N2 and N3 interfaces; The cross-domain data transmission network is configured based on the IP address of the single-point network service interface, and the cross-domain data transmission network carries the N2 interface signaling data and N3 interface user data sent through the integrated base station. After receiving the user plane data, the integrated 5G core network decapsulates the user data stream through the user plane processing function module and routes it to the application server.

2. The wide-area 5G customized network deployment method according to claim 1, characterized in that, The steps of integrating the access and mobility management function module, session management function module, and user plane processing function module into the integrated 5G core network, and encapsulating the network element communication interfaces of the integrated 5G core network to provide standard N2, N3, and N6 interface services only through a unified network access point include: The integrated 5G core network is deployed in the enterprise's local data center as an integrated hardware device, and / or deployed in the virtual private cloud of the public cloud as a virtualized instance; Configure the N2 interface control plane service IP address, N3 interface user plane service IP address, and N6 interface service egress IP address of the integrated 5G core network; Within the integrated 5G core network, the access and mobility management function module, the session management function module, and the user plane processing function module are enabled, and the internal signaling channels between each function module are initialized. A static or dynamic routing strategy is established between the application server and the integrated 5G core network through the N6 interface.

3. The wide-area 5G customized network deployment method according to claim 1, characterized in that, The step of configuring the wireless parameters of the integrated base station at multiple remote locations and simultaneously setting the IP address of the unified network access point as the target communication address of both the N2 and N3 interfaces includes: The integrated base station is installed at multiple remote locations, and its wireless parameters are set. Assign an IP address to the backhaul network interface of the integrated base station to access the cross-domain data transmission network; The IP address of the unified network access point is obtained through the integrated base station, and the IP address of the unified network access point is set as the default target communication address for both the N2 and N3 interfaces.

4. The wide-area 5G customized network deployment method according to claim 1, characterized in that, The step of configuring the cross-domain data transmission network based on the IP address of the single-point network service interface, and having the cross-domain data transmission network carry N2 interface signaling data and N3 interface user data sent via the integrated base station, includes: The integrated base station initiates a control plane transport layer connection request and registers the N2 interface signaling link with the access and mobility management function module in the integrated 5G core network; After the control plane transmission layer connection between the integrated base station and the integrated 5G core network is successfully established, the integrated base station sends a base station control plane initialization request message to complete the control plane logic registration. The integrated base station initiates the user plane data channel establishment process, sends a session establishment request to the session management function module, and the SMF instructs the user plane processing function module to negotiate the GTP-U tunnel endpoint identifier and IP parameters with the base station to establish the end-to-end N3 interface user plane data channel.

5. The wide-area 5G customized network deployment method according to claim 1, characterized in that, The step of configuring a cross-domain data transmission network based on the IP address of the single-point network service interface, and having the cross-domain data transmission network carry N2 interface signaling data and N3 interface user data sent via the integrated base station, further includes: The integrated base station acts as a secure communication client, completing IKEv2 key negotiation with the secure access gateway on the integrated 5G core network side to establish a two-way encrypted communication channel: The control plane signaling data of the N2 interface and the user plane data stream of the N3 interface of the integrated base station are both encapsulated in an encrypted communication channel for transmission.

6. The method for deploying a wide-area 5G customized network according to claim 1, characterized in that, The step of the integrated 5G core network decapsulating the user data stream through the user plane processing function module and routing it to the application server after receiving the user plane data includes: The uplink synchronization process is triggered by sending a random access preamble within the coverage area of ​​the integrated base station via the terminal device. The integrated base station performs time synchronization and resource allocation, sends an access response to the terminal device, and establishes a wireless resource control connection. The terminal device sends an initial non-access stratum message through the radio resource control connection. After being encapsulated into a control plane signaling message by the integrated base station, the message is forwarded to the access and mobility management function module via the N2 interface.

7. The wide-area 5G customized network deployment method according to claim 6, characterized in that, The step of having the integrated 5G core network decapsulate the user data stream through the user plane processing function module and route it to the application server after receiving the user plane data further includes: The access and mobility management module completes the identity authentication and security activation process for the terminal device based on the Public Land Mobile Network identifier and International Mobile Subscriber Identity information. After the terminal device successfully authenticates its identity, the session management module establishes a data transmission session for the terminal device, assigns an IP address, and issues a quality of service policy. The user plane processing module receives user plane protocol encapsulated data packets from the integrated base station and extracts the internal user IP packets from the user plane protocol encapsulated data packets. According to the forwarding rules in the data transmission session context, the decapsulated internal user IP packets are directly routed to the application server through the N6 interface to complete the local data offloading.

8. A wide-area 5G customized network deployment device, characterized in that, Used to perform the wide-area 5G customized network deployment method as described in any one of claims 1 to 7.

9. A computer device, characterized in that, The computer device includes a memory and a processor connected to the memory; the memory is used to store a computer program; the processor is used to run the computer program stored in the memory to perform the steps of the method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The storage medium stores a computer program, which includes program instructions that, when executed by a processor, can implement the steps of the method as described in any one of claims 1 to 7.

Images