VoWiFi traceability information reporting method and device, equipment and medium

Abstract

The invention provides a VoWiFi traceability information reporting method and device, equipment and a medium, and relates to the technical field of VoWiFi, and the method comprises the steps: obtaining the access identity information of terminal equipment in a wireless local area network; determining VoWiFi service identification information according to a VoWiFi service establishment message transmitted between the terminal equipment and operator equipment, and acquiring public network communication information allocated to the terminal equipment; the public network communication information is used for performing network address translation on a network message transmitted between the terminal equipment and the operator equipment; setting service binding information by using the access identity information, the VoWiFi service identification information and the public network communication information, and reporting the service binding information to the operator equipment, so that the operator equipment performs VoWiFi service traceability according to the service binding information; according to the invention, an operator device can conveniently carry out VoWiFi service traceability according to service binding information, and the service traceability effect and the service expansion effect can be improved.

Description

Technical Field

[0001] This invention relates to the field of VoWiFi, and in particular to a method, apparatus, device, and medium for reporting VoWiFi traceability information. Background Technology

[0002] VoWiFi (Voice Over WiFi) is a technology that enables voice calls over a WiFi network.

[0003] In related technologies, network packets sent by terminal devices need to be converted into public network communication information before they can be forwarded on the public network. This makes it impossible for operator equipment located on the public network to perceive the specific location of the terminal device, thereby affecting the traceability and expansion of VoWiFi services. Summary of the Invention

[0004] The purpose of this invention is to provide a method, apparatus, device, and medium for reporting VoWiFi traceability information, which can solve the technical problem that operator equipment cannot effectively trace VoWiFi services of terminal devices.

[0005] To address the aforementioned technical problems, this invention provides a method for reporting VoWiFi source tracing information, comprising: Obtain the access identity information of the terminal device in the wireless local area network; The VoWiFi service identification information is determined based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment, and the public network communication information allocated to the terminal device is obtained; the public network communication information is used to perform network address translation on the network packets transmitted between the terminal device and the operator equipment. The access identity information, the VoWiFi service identifier information, and the public network communication information are used to set service binding information, and the service binding information is reported to the operator equipment so that the operator equipment can trace the VoWiFi service based on the service binding information.

[0006] Optionally, it also includes: Create an access session corresponding to the terminal device, and associate the access identity information with the access session; Create a service session corresponding to the terminal device, and associate the VoWiFi service identification information and the public network communication information with the service session; The step of setting service binding information using the access identity information, the VoWiFi service identifier information, and the public network communication information includes: The access session is associated with the service session to obtain the service binding information.

[0007] Optionally, it also includes: When an information update is detected in either the access session or the service session, and the access session and the service session are not interrupted, incremental update information is generated using the updated session information and the VoWiFi service identifier information, and the incremental update information is reported to the operator equipment so that the operator equipment can update the service binding information; When a session interruption is detected in either the access session or the service session, session interruption information is generated using the VoWiFi service identification information, and the session interruption information is reported to the operator equipment so that the operator equipment can remove the service binding information.

[0008] Optionally, creating an access session corresponding to the terminal device includes: Obtain the access identifier of the terminal device; the access identifier is the access key and / or virtual local area network identifier of the terminal device, the terminal device uses the access key to access the wireless local area network, and the virtual local area network identifier indicates the virtual local area network area where the terminal device is located; The access session is identified using the access identifier.

[0009] Optionally, the access identity information of the terminal device in the wireless local area network is obtained, including: Obtain access authentication information sent by the access point device, extract the physical address information and access account information of the terminal device from the access authentication information, and obtain the access location information corresponding to the access point device; When it is determined that the terminal device is connected to the wireless local area network, the internal network address information assigned to the terminal device is obtained.

[0010] Optionally, it also includes: When it is detected that the access point device connected to the terminal device has changed, the updated access location information corresponding to the access point device currently connected to the terminal device is obtained; Incremental update information is set using the updated access location information and the VoWiFi service identifier information; The incremental update information is reported to the operator equipment so that the operator equipment updates the corresponding service binding information based on the VoWiFi service identifier information in the incremental update information.

[0011] Optionally, obtaining the access identity information of the terminal device in the wireless local area network includes: When the terminal device is detected to be performing a SIM authentication process with the authentication server, the SIM card authentication information is determined based on the SIM authentication message transmitted between the terminal device and the authentication server.

[0012] Optionally, the VoWiFi service identification information is determined based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment, including: Obtain first negotiation authentication information and intranet communication information of the terminal device from the tunnel negotiation request message sent by the terminal device, and determine the order of each piece of first negotiation authentication information in the tunnel negotiation request message; Obtain the second negotiation authentication information from the tunnel negotiation response message sent by the operator equipment; The VoWiFi service identifier information is determined based on the first negotiated authentication information, the order of the first negotiated authentication information, the intranet communication information, and the second negotiated authentication information.

[0013] Optionally, determining the VoWiFi service identifier information based on the first negotiated authentication information, the order of the first negotiated authentication information, the intranet communication information, and the second negotiated authentication information includes: A hash operation is performed on the first negotiated authentication information, the order of the first negotiated authentication information, the intranet communication information, and the second negotiated authentication information to obtain the VoWiFi service identification information; wherein, the VoWiFi service identification information uniquely identifies the VoWiFi service of each terminal device when multiple terminal devices share the same public network communication information.

[0014] Optionally, determining the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment includes: Without parsing the encrypted service data between the terminal device and the operator device, the VoWiFi service identification information is determined by parsing the unencrypted negotiation payload field in the VoWiFi service establishment message; wherein, the unencrypted negotiation payload field includes the public parameters in the tunnel negotiation request message sent by the terminal device and the tunnel negotiation response message returned by the operator device.

[0015] The present invention also provides an information reporting device, comprising: The access information acquisition module is used to acquire the access identity information of the terminal device in the wireless local area network; The service information acquisition module is used to determine the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment, and to acquire the public network communication information allocated to the terminal device; the public network communication information is used to perform network address translation on the network packets transmitted between the terminal device and the operator equipment. The service binding module is used to set service binding information using the access identity information, the VoWiFi service identification information, and the public network communication information, and to report the service binding information to the operator equipment so that the operator equipment can trace the VoWiFi service based on the service binding information.

[0016] The present invention also provides an access-side device, comprising: Memory, used to store computer programs; A processor is used to implement the above-described method for reporting VoWiFi tracing information when executing the computer program.

[0017] The present invention also provides a computer-readable storage medium storing computer-executable instructions, which, when loaded and executed by a processor, implement the above-described method for reporting VoWiFi tracing information.

[0018] This invention provides a method for reporting VoWiFi tracing information, comprising: obtaining access identity information of a terminal device in a wireless local area network; determining VoWiFi service identification information based on a VoWiFi service establishment message transmitted between the terminal device and an operator device, and obtaining public network communication information allocated to the terminal device; the public network communication information being used to perform network address translation on network packets transmitted between the terminal device and the operator device; setting service binding information using the access identity information, the VoWiFi service identification information, and the public network communication information, and reporting the service binding information to the operator device so that the operator device can trace the VoWiFi service based on the service binding information.

[0019] The beneficial effects of this invention are as follows: First, this invention can obtain the access identity information of the terminal device in the wireless local area network (WLAN), which indicates the device identity and intranet access information of the terminal device. Furthermore, this invention can determine the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator's equipment, and obtain the public network communication information allocated to the terminal device, wherein the public network communication information is used for network address translation of network packets transmitted between the terminal device and the operator's equipment. Subsequently, this invention can use the access identity information, VoWiFi service identification information, and public network communication information to set service binding information and report the service binding information to the operator's equipment. Since the service binding information includes access identity information, VoWiFi service identification information, and public network communication information, the operator's equipment can determine the specific VoWiFi service based on the VoWiFi service identification information and public network communication information, and can determine the terminal device's identity and its intranet access information based on the access identity information. This facilitates the operator's equipment in tracing the VoWiFi service based on the service binding information, improving the tracing effect and service expansion effect of the VoWiFi service.

[0020] The present invention also provides a VoWiFi tracing information reporting device, an access-side device, and a storage medium, which have the above-mentioned beneficial effects. Attached Figure Description

[0021] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0022] Figure 1 A flowchart illustrating a method for reporting VoWiFi source tracing information provided in an embodiment of the present invention; Figure 2 A flowchart illustrating another method for reporting VoWiFi source tracing information provided in this embodiment of the invention; Figure 3 A schematic diagram illustrating an identification access session provided in an embodiment of the present invention; Figure 4 This is a structural block diagram of a VoWiFi service tracing system provided in an embodiment of the present invention; Figure 5 This is a schematic diagram illustrating an association process between an access session and a service session, provided as an embodiment of the present invention. Figure 6 A schematic diagram illustrating a lifecycle maintenance mechanism for mapping relationships provided in an embodiment of the present invention; Figure 7 This is a schematic diagram of a VoWiFi source tracing information reporting device provided in an embodiment of the present invention; Figure 8 This is a structural block diagram of an access-side device provided in an embodiment of the present invention. Detailed Implementation

[0023] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0024] VoWiFi (Voice Over WiFi) is a technology that enables voice calls over WiFi networks. When tracing the origins of VoWiFi services, the operator equipment providing the VoWiFi function needs to query the service origination information of the terminal device based on its local network information (such as local IP address and local port number).

[0025] In related technologies, network packets sent by terminal devices need to undergo public network communication information conversion before they can be forwarded over the public network. For example, when a Network Address Translation (NAT) device receives a network packet from a terminal device, it converts the internal network communication information (such as internal IP address and internal port number) in the network packet into public network communication information (public IP address and public port number), and then forwards the converted network packet over the public network. NAT devices can generally use public network communication information shared by multiple terminals to provide NAT services. In a home scenario, the NAT device is set up at the home gateway and can use shared public network communication information to provide NAT services to multiple terminal devices in the same home. This results in the operator's equipment located on the public network only being able to perceive the public network communication information assigned to the terminal devices, and there may be several terminal devices corresponding to the same public network communication information. Consequently, the operator's equipment has difficulty distinguishing specific terminal devices and cannot query the corresponding service traceability information based on the terminal device's public network communication information, causing the relevant VoWiFi traceability mechanism to fail. This clearly indicates significant deficiencies in business auditing, emergency positioning, security supervision, and business function expansion.

[0026] In view of this, and addressing the technical problem of how to effectively trace VoWiFi services from terminal devices using operator equipment, this invention provides a method for reporting VoWiFi tracing information. This method collects the access authentication information of terminal devices within the intranet and binds this access authentication information with the VoWiFi service initiated by the terminal device and the public network communication information allocated to the terminal device to obtain service binding information. This service binding information is then uploaded to the operator equipment. In this way, the operator equipment can determine the VoWiFi service corresponding to the terminal device and its access status within the intranet based on the service binding information, thereby enabling effective VoWiFi service tracing.

[0027] It should be noted that the hardware device executing this method can be an access-side device. It is understood that, to collect access authentication information of terminal devices within the intranet, the access-side device can be configured within the intranet. This embodiment does not limit the specific access-side device; for example, it can be an access point (AP), access controller (AC), gateway, or a dedicated device added to the intranet, which can be configured according to actual application requirements. Furthermore, the access-side device can also be deployed in the form of a virtual device within existing network devices such as access point devices, access controllers, and gateway devices, for example, as a virtual machine or plug-in.

[0028] Furthermore, it is understood that the operator equipment in this embodiment should be operator equipment used to establish or manage VoWiFi services, such as ePDG (Evolved Packet Data Gateway), IMS / NOP (IP Multimedia Subsystem, Network Operator), etc.

[0029] Please refer to Figure 1 , Figure 1 A flowchart of a method for reporting VoWiFi source tracing information provided in an embodiment of the present invention is shown. The method may include: S11. Obtain the access identity information of the terminal device in the wireless local area network.

[0030] In this embodiment, the wireless local area network can be understood as the intranet area accessed by the terminal device.

[0031] Access identity information is used to indicate the device identity of a terminal device and its access status within the intranet. In one possible scenario, access identity information may include physical address information, access account information, access location information, and intranet address information. The physical address information is the terminal device's MAC address, used to uniquely identify the terminal device. The access account information is the user identity information submitted by the user of the terminal device, such as account name and user identifier. The access location information may include the access point location information of the access point device connected to the terminal device. If the access point device is associated with an actual physical location (such as a room number), the access location information may also include the physical location information associated with the access point device. The intranet address information is the intranet IP address assigned to the terminal device within the intranet.

[0032] As can be seen, the access identity information includes information for identifying terminal devices and terminal device users, as well as the access location information of the terminal devices. This helps to distinguish between terminal devices and terminal device users, and also helps to identify the access location of the terminal devices, thereby enabling effective VoWiFi service tracing.

[0033] The following describes one method for obtaining access identity information. In one possible scenario, obtaining the access identity information of a terminal device in a wireless LAN may include: S1111. Obtain the access authentication information sent by the access point device, extract the physical address information and access account information of the terminal device from the access authentication information, and obtain the access location information corresponding to the access point device.

[0034] In step S1111, when the terminal device accesses the wireless local area network, it can send access authentication information to the access point device. The access point device can then send the access authentication information to the access controller for verification. Therefore, in this embodiment, the access authentication information can be obtained through the access controller.

[0035] Subsequently, the physical address information and access account information of the terminal device can be extracted from the access authentication information. Simultaneously, to determine the access location of the terminal device, it is also necessary to obtain the access location information of the access point device to which the terminal device is connected.

[0036] S1112. When it is determined that the terminal device is connected to the wireless local area network, obtain the intranet address information assigned to the terminal device.

[0037] In step S1112, after the access controller determines that the access authentication information has been successfully authenticated, it can allow the terminal device to access the wireless local area network. Subsequently, the terminal device can send a DHCP (Dynamic Host Configuration Protocol) request to request the DHCP device to assign internal network address information to the terminal device. Therefore, in this embodiment, the internal network address information of the terminal device can be obtained through the DHCP device, for example, by directly obtaining the internal network address information of the terminal device from the DHCP device, or by capturing the DHCP request response message returned by the DHCP device to the host and obtaining the internal network address information from the response message.

[0038] Furthermore, in addition to the aforementioned physical address information, access account information, access location information, and intranet address information, access identity information can also include SIM card authentication information. For example, if the terminal device accesses the network based on the HS2.0 / EAP-AKA (Hotspot 2.0, WiFi authentication and access technology standard, Extensible Authentication Protocol - Authentication and Key Agreement, an authentication protocol for mobile networks) protocol, the terminal device needs to perform a SIM (Subscriber Identity Module) authentication process with the authentication server (AAA server, authentication, authorization, and accounting) to verify the validity of the SIM card in the terminal device. In this case, the SIM card authentication information can be determined based on the SIM authentication messages transmitted between the terminal device and the authentication server, such as by capturing these SIM authentication messages and forming the SIM card authentication information based on the important information in the messages.

[0039] The following describes another method for obtaining access identity information. Based on this, obtaining the access identity information of a terminal device in a wireless LAN includes: S1121. When it is detected that the terminal device and the authentication server are performing the SIM authentication process, the SIM card authentication information is determined according to the SIM authentication message transmitted between the terminal device and the authentication server.

[0040] As can be seen, this embodiment can provide two methods for obtaining access identity information, which can adapt to various access methods of terminal devices, thereby flexibly meeting the traceability requirements of VoWiFi.

[0041] S12. Determine the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment, and obtain the public network communication information allocated to the terminal device; the public network communication information is used to perform network address translation on the network packets transmitted between the terminal device and the operator equipment.

[0042] In this embodiment, the VoWiFi service identification information is the marking information used to mark the VoWiFi service, which can be understood as the service session fingerprint information of the VoWiFi service.

[0043] Regarding the extraction of VoWiFi service identification information, considering that the terminal device and the operator equipment need to first negotiate and establish a VoWiFi service channel before transmitting service data based on this channel, during the negotiation process, the terminal device and the operator equipment can exchange parameters used to uniquely construct the VoWiFi service channel through the VoWiFi service establishment message. These parameters help distinguish different VoWiFi service channels, thereby facilitating the differentiation of different VoWiFi services. Therefore, this embodiment can extract the negotiation payload field from the VoWiFi service establishment message. These fields contain the parameters that can uniquely identify the VoWiFi service as described above, and these negotiation payload fields can then be used to determine the VoWiFi service identification information.

[0044] More specifically, the VoWiFi service channel negotiated between the terminal device and the operator equipment can be an encrypted channel (such as an encrypted tunnel). In this case, some of the negotiation payload fields exchanged between the two parties are encrypted negotiation payload fields. To avoid decrypting the encrypted negotiation payload fields and compromising the confidentiality of the communication between the terminal device and the operator equipment, this embodiment can determine the VoWiFi service identification information by parsing the unencrypted negotiation payload fields in the VoWiFi service establishment message. The unencrypted negotiation payload fields can include publicly available parameters from the tunnel negotiation request message sent by the terminal device and the tunnel negotiation response message returned by the operator equipment.

[0045] Based on this, determining the VoWiFi service identification information according to the VoWiFi service establishment message transmitted between the terminal device and the operator equipment may include: S121. Without parsing the encrypted service data between the terminal device and the operator device, determine the VoWiFi service identification information by parsing the unencrypted negotiation payload field in the VoWiFi service establishment message; wherein, the unencrypted negotiation payload field includes the public parameters in the tunnel negotiation request message sent by the terminal device and the tunnel negotiation response message returned by the operator device.

[0046] S13. Use access identity information, VoWiFi service identification information, and public network communication information to set service binding information, and report the service binding information to the operator equipment so that the operator equipment can trace the VoWiFi service based on the service binding information.

[0047] In this embodiment, after obtaining the terminal device's access identity information, VoWiFi service identification information, and public network communication information, it can bind the terminal device to obtain service binding information and report the service binding information to the operator equipment. At this time, the operator equipment can determine the specific VoWiFi service based on the VoWiFi service identification information and public network communication information, and can determine the terminal device's identity and its access information in the intranet based on the access identity information. This facilitates the operator equipment's VoWiFi service tracing based on the service binding information, improving the tracing effect and service expansion effect of VoWiFi services.

[0048] Based on this, the present invention first obtains the access identity information of the terminal device in the wireless local area network (WLAN), which indicates the device identity and intranet access information of the terminal device. Furthermore, the present invention can determine the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment, and obtain the public network communication information allocated to the terminal device, wherein the public network communication information is used for network address translation of network packets transmitted between the terminal device and the operator equipment. Subsequently, the present invention can use the access identity information, VoWiFi service identification information, and public network communication information to set service binding information and report the service binding information to the operator equipment. Since the service binding information includes access identity information, VoWiFi service identification information, and public network communication information, the operator equipment can determine the specific VoWiFi service based on the VoWiFi service identification information and public network communication information, and can determine the terminal device identity and its intranet access information based on the access identity information. This facilitates the operator equipment in tracing the VoWiFi service based on the service binding information, improving the tracing effect and service expansion effect of the VoWiFi service.

[0049] Based on the above embodiments, a method for determining VoWiFi service identification information is described below. Considering that when a terminal device and an operator device negotiate to establish a VoWiFi service, they first need to negotiate an encrypted tunnel, such as an IPSec tunnel, between them. Therefore, when the negotiation of an encrypted tunnel between the terminal device and the operator device is detected, it can be considered that the terminal device has begun negotiating to establish a VoWiFi service with the operator device. The tunnel negotiation message used to negotiate the encrypted tunnel between the terminal device and the operator device is then used as the VoWiFi service establishment message, and the VoWiFi service identification information is determined based on the tunnel negotiation message.

[0050] In addition, since the network address translation device needs to translate the messages of the terminal device into public network communication information, it can obtain the public network communication information assigned to the terminal device, such as the public IP address and public port number, from the network address translation device.

[0051] The following describes the method for obtaining VoWiFi service identification information. In one embodiment, determining the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment may include: S1221. Obtain the first negotiation authentication information and the intranet communication information of the terminal device from the tunnel negotiation request message sent by the terminal device, and determine the order of each first negotiation authentication information in the tunnel negotiation request message.

[0052] In step S1221, the encrypted tunnel is a one-to-one communication tunnel between the terminal device and the operator equipment. To meet the one-to-one communication requirement, during the negotiation process, the terminal device needs to send information that can uniquely construct the encrypted tunnel to the operator equipment, such as the encryption suite selected by the terminal device and randomly selected parameters (such as random numbers) for negotiating the encryption key. Since the encrypted tunnel is strongly correlated with the VoWiFi service, the aforementioned information that can uniquely construct the encrypted tunnel can be used to uniquely identify the VoWiFi service. Based on this, this embodiment can obtain the first negotiation authentication information from the tunnel negotiation request message sent by the terminal device.

[0053] Furthermore, terminal devices with different operating system versions can set the first negotiation authentication information in the tunnel negotiation request message in different orders. Therefore, the order in which the first negotiation authentication information is arranged in the tunnel negotiation request message also helps to distinguish the VoWiFi services of different terminal devices. Based on this, this embodiment determines the order in which the first negotiation authentication information is arranged in the tunnel negotiation request message.

[0054] In addition, different terminal devices may have different intranet communication information (intranet IP address, intranet port number). Therefore, this embodiment can also extract the intranet communication information of the terminal device from the tunnel negotiation request message, so as to further improve the identification effect of VoWiFi service based on the intranet communication information.

[0055] S1222. Obtain the second negotiation authentication information from the tunnel negotiation response message sent by the operator equipment.

[0056] In step S1222, based on the same principle, this embodiment can obtain the second negotiation authentication information from the tunnel negotiation response message sent by the operator equipment, and use the second negotiation authentication information to mark the VoWiFi service.

[0057] S1223. Determine the VoWiFi service identification information based on the first negotiation authentication information, the order of the first negotiation authentication information, the intranet communication information, and the second negotiation authentication information.

[0058] In step S1223, VoWiFi service identification information can be determined based on the first negotiation authentication information, the order of the first negotiation authentication information, the intranet communication information, and the second negotiation authentication information, thereby effectively ensuring the identification effect of VoWiFi service.

[0059] As can be seen, this embodiment can extract identification information from the tunnel negotiation messages transmitted between the terminal device and the operator device, and use this information to set the VoWiFi service identification information. Thus, this embodiment can effectively identify the VoWiFi service without needing to parse and decrypt the encrypted voice content transmitted between the terminal device and the operator device via an encrypted tunnel, thereby avoiding the reliance on encrypted content for VoWiFi service tracing.

[0060] Furthermore, to enhance identification capabilities, this embodiment can also perform hash operations on the first negotiated authentication information, the order of the first negotiated authentication information, the intranet communication information, and the second negotiated authentication information, thereby using the hash operation result as VoWiFi service identification information. Since hash operations are unique, the uniqueness of the VoWiFi service identification information for VoWiFi services and terminal devices can be ensured. Thus, in scenarios requiring effective differentiation of terminal devices and VoWiFi services from different terminal devices, such as when the VoWiFi service identification information is shared by multiple terminal devices on the same public network communication information, it can uniquely identify the VoWiFi service of each terminal device.

[0061] Based on this, the VoWiFi service identifier information is determined according to the first negotiation authentication information, the order of the first negotiation authentication information, the intranet communication information, and the second negotiation authentication information, which may include: S12231. Perform a hash operation on the first negotiation authentication information, the order of the first negotiation authentication information, the intranet communication information, and the second negotiation authentication information to obtain VoWiFi service identification information; wherein, the VoWiFi service identification information uniquely identifies the VoWiFi service of each terminal device when multiple terminal devices share the same public network communication information.

[0062] The following section introduces the tunnel negotiation response message, the first negotiation authentication information, the tunnel negotiation response message, and the second negotiation authentication information based on the construction of an IPSec tunnel.

[0063] During the construction of an IPSec tunnel, there are two negotiation phases between the terminal equipment and the operator equipment: the initial phase (INIT) and the authentication phase (AUTH).

[0064] In the initial phase, the terminal device can send an IKEv2_SA_INIT request to the operator, and the operator device can return an IKEv2_SA_INIT response to the terminal device. From the IKEv2_SA_INIT request and response, the SPI parameters (Security Parameter Index, including the Initiator SPI parameters sent by the terminal device and the Responder SPI parameters returned by the operator device) can be extracted as negotiation authentication information.

[0065] During the authentication phase, the terminal device can send an IKEv2_SA_AUTH request to the operator, and the operator's device can return an IKEv2_SA_AUTH response to the terminal device. In the IKEv2_SA_AUTH request and response, relevant authentication payloads can be extracted as negotiation authentication information, such as the Identification Payload (containing an Idi representing the terminal device's identity and an IDr representing the operator's identity), the CERT Payload, the CERTREQ Payload, and the EAP Payload (Extensible Authentication Protocol, such as EAP-AKA / EAP-AKA'). Furthermore, since different terminal devices may arrange the authentication payloads in different orders, the order of the authentication payloads in the IKE_SA_AUTH request can also be collected as information needed to set the negotiation authentication information.

[0066] Based on the above embodiments, in order to address the roaming behavior of terminal devices in the wireless local area network, this embodiment can also generate incremental update information and report it to the operator's equipment when it detects that the terminal device has roamed to other access point devices, so that the operator can be aware of the location change of the terminal device.

[0067] In one embodiment, the method may further include: S21. When it is detected that the access point device connected to the terminal device has changed, obtain the updated access location information corresponding to the access point device currently connected to the terminal device.

[0068] In step S21, when the location of the terminal device changes and it switches to another access point device, the newly connected access point device can report to the access controller. Therefore, the access controller can detect the AP roaming behavior of the terminal device and obtain the updated access location information corresponding to the access point device currently connected to the terminal device.

[0069] S22. Use the updated access location information and VoWiFi service identification information to set incremental update information.

[0070] S23. Report incremental update information to the operator equipment so that the operator equipment can update the corresponding service binding information based on the VoWiFi service identifier information in the incremental update information.

[0071] In steps S22-S23, after obtaining the updated access location information, to facilitate the operator's equipment in locating specific VoWiFi services, incremental update information can be set using the updated access location information and VoWiFi service identifier information. Subsequently, the incremental update information can be reported to the operator's equipment. In this way, the operator's equipment can use the VoWiFi service identifier to find the corresponding service binding information and update the access identity information in the service binding information using the updated access location information.

[0072] Based on the above embodiments, to achieve dynamic updates of service binding information and respond to changes in access identity information, VoWiFi service identifier information, or public network communication information on the terminal device side, this embodiment can also set up access sessions and service sessions. The access session is bound to the terminal device's access identity information, and the service session is bound to changes in VoWiFi service identifier information or public network communication information. This allows for the management and updating of the aforementioned information based on these two types of sessions, achieving the effect of dynamic updates to service binding information. The setup and usage of access sessions and service sessions are described below.

[0073] Please refer to Figure 2 , Figure 2 A flowchart illustrating another method for reporting VoWiFi source tracing information provided in an embodiment of the present invention. In one possible scenario, this method may further include: S31. Obtain the access identity information of the terminal device in the wireless local area network.

[0074] The description of step S31 is the same as that of step S11. Please refer to the above embodiment.

[0075] S32. Create an access session corresponding to the terminal device and associate the access identity information with the access session.

[0076] In this embodiment, an access session corresponding to the terminal device can be created, and access identity information can be associated with the access session. Thus, this embodiment can manage the access identity information based on the access session, such as updating the access identity information or removing it when the terminal device disconnects from the access.

[0077] Specifically, when a terminal device is detected to be accessing a wireless local area network, the aforementioned access session can be created for the terminal device, and the access identity information can be associated with the access session.

[0078] Furthermore, considering that multiple terminal devices can access the network through the same access point device, or be located in the same wireless LAN, or output network packets to the public network through the same network address translation device, there is a need to distinguish different terminal devices within the same access point device, the same wireless LAN, or the same network address translation device. Therefore, this embodiment can also obtain the access identifier of the terminal device and use this access identifier to identify the access session. The access identifier can be the terminal device's access key and / or Virtual Local Area Network (VLAN) identifier, or other equivalent access identifier. Specifically, the terminal device uses the access key to access the wireless LAN, and the VLAN identifier indicates the VLAN area where the terminal device is located.

[0079] In this way, even if multiple terminals are located in the same access point device, the same virtual LAN, or the same NAT exit, the access session and the VoWiFi service session can still be matched one-to-one through the access identifier, thereby further improving the traceability accuracy in high-density MDU (Multiple Dwelling Unit) scenarios.

[0080] Based on this, creating an access session corresponding to the terminal device may include: S321. Obtain the access identifier of the terminal device; the access identifier is the access key and / or virtual LAN identifier of the terminal device. The terminal device uses the access key to access the wireless LAN, and the virtual LAN identifier indicates the virtual LAN area where the terminal device is located.

[0081] S322. Use the access identifier to identify the access session.

[0082] For easier understanding, please refer to Figure 3 , Figure 3 This is a schematic diagram of an identification access session provided by an embodiment of the present invention. An independent virtual access session can be established for each terminal using a PPSK key (i.e., an access key) or an equivalent virtual access identification mechanism.

[0083] S33. Determine the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment, and obtain the public network communication information allocated to the terminal device; the public network communication information is used to perform network address translation on the network packets transmitted between the terminal device and the operator equipment.

[0084] The description of step S33 is the same as that of step S12. Please refer to the above embodiment.

[0085] S34. Create a service session corresponding to the terminal device and associate the VoWiFi service identification information, public network communication information and service session.

[0086] In this embodiment, a service session corresponding to the terminal device can be created, and the VoWiFi service identification information and public network communication information can be associated with the service session. Thus, this embodiment can manage the VoWiFi service identification information and public network communication information based on the service session, such as updating the VoWiFi service identification information and public network communication information, or removing the VoWiFi service identification information and public network communication information when the terminal device disconnects the VoWiFi service.

[0087] Specifically, when it is detected that the terminal device and the operator's equipment have completed the encrypted tunnel negotiation, the aforementioned service session can be created for the terminal device, and the VoWiFi service identification information, public network communication information, and service session can be associated. The method for detecting the completion of the encrypted tunnel negotiation can be to capture network packets between the terminal device and the operator's equipment, identify the types of network packets, and determine whether the two parties have completed the encrypted tunnel negotiation based on the types of network packets exchanged.

[0088] S35. Associate the access session with the service session to obtain the service binding information, and report the service binding information to the operator equipment so that the operator equipment can trace the VoWiFi service based on the service binding information.

[0089] After creating the access session and service session, this embodiment can associate the access session and service session to obtain service binding information. In this way, the access-side device can effectively manage relevant information based on the access session and service session.

[0090] Furthermore, this embodiment also provides a method for updating session information, which may include: S41. When an information update is detected in either the access session or the service session, and the access session and the service session are not interrupted, incremental update information is generated using the updated session information and VoWiFi service identification information, and the incremental update information is reported to the operator equipment so that the operator equipment can update the service binding information.

[0091] In this embodiment, when an information update is detected in either the access session or the service session, and neither the access session nor the service session is interrupted, incremental update information can be generated using the updated session information and VoWiFi service identifier information, and the incremental update information can be reported to the operator equipment so that the operator equipment can update the service binding information.

[0092] For example, if a terminal device roams through an access point (AP), it can generate incremental update information based on the updated access location information to generate VoWiFi service identification information, and then report the incremental update information to the operator's equipment.

[0093] For example, if the public network communication information assigned to the terminal device by the network address translation device changes, incremental update information can be generated based on the updated public network communication information to generate VoWiFi service identification information, and the incremental update information can be reported to the operator equipment.

[0094] This enables dynamic updates and timely reporting of business binding information, ensuring the reliability of VoWiFi traceability.

[0095] S42. When a session interruption is detected in either the access session or the service session, session interruption information is generated using the VoWiFi service identification information, and the session interruption information is reported to the operator equipment so that the operator equipment can remove the service binding information.

[0096] In this embodiment, when a session interruption is detected in either the access session or the service session, session interruption information is generated using the VoWiFi service identification information and reported to the operator equipment so that the operator equipment can remove the service binding information.

[0097] For example, if a terminal device disconnects from the wireless LAN connection, the corresponding access session is disconnected. At this time, the access-side device can use the VoWiFi service identification information to generate session interruption information that represents the interruption of the access session, and report the session interruption information to the operator equipment.

[0098] For example, if the terminal device terminates the VoWiFi service and disconnects the encrypted tunnel, the corresponding service session is disconnected. The access-side device can use the VoWiFi service identification information to generate session interruption information that represents the interruption of the service session and report the session interruption information to the operator equipment.

[0099] This allows for timely reporting of session interruption information, ensuring the reliability of VoWiFi tracing.

[0100] To facilitate understanding of steps S31~S35 and S41~S42 above, please first refer to... Figure 4 , Figure 4 This is a structural block diagram of a VoWiFi service tracing system provided in an embodiment of the present invention. The system can be divided into two areas according to network region: an enterprise / home network area and a carrier network area. The enterprise / home network area may include access point devices, access-side devices, and a NAT egress gateway. The access-side devices can be replaced by an access controller or an edge access gateway. Figure 4Only the access controller / edge access gateway is shown in the diagram. For ease of understanding, the access controller / edge access gateway will be referred to as the access-side device in the following text. The access point device is connected to the access-side device, and the access-side device is connected to the NAT egress gateway.

[0101] The operator's network area may include ePDG equipment and an IMS / NOP traceability platform, with the ePDG equipment connected to the IMS / NOP traceability platform. The aforementioned access-side equipment further establishes a communication connection with the IMS / NOP traceability platform.

[0102] Please refer to further information. Figure 5 , Figure 5 This is a schematic diagram illustrating an association process between an access session and a service session, provided as an embodiment of the present invention.

[0103] In this system, the terminal device first connects to the access point device and requests access to the wireless local area network (WLAN). The access point device exchanges data with the access-side device to authenticate the terminal device and connect it to the WLAN. Simultaneously, the access-side device creates an access session and associates the terminal device's access identity information with the access session.

[0104] Subsequently, the terminal device begins sending a tunnel negotiation request message to the ePDG device. This tunnel negotiation request message passes sequentially through the access point device, the access-side device, and the NAT egress gateway to reach the ePDG device. The ePDG device returns a tunnel negotiation response message and simultaneously registers the call signaling with the operator's traceability platform. The aforementioned tunnel negotiation response message similarly passes sequentially through the NAT egress gateway, the access-side device, and the access point device to reach the terminal device. At this point, the access-side device can capture these messages and obtain the VoWiFi service identification information and the public network communication information obtained by the terminal device from the NAT egress gateway by parsing the messages. Simultaneously, the access-side device can create a service session and associate the VoWiFi service identification information and public network communication information with the service session.

[0105] Subsequently, the access-side device can associate the access session with the service session to obtain service binding information. The access-side device can use the following mapping table to manage the service binding information.

[0106] Table 1 Access-Service Identity Mapping Table

[0107] Please refer to Figure 6 , Figure 6 This is a schematic diagram illustrating a lifecycle maintenance mechanism for mapping relationships provided in an embodiment of the present invention. For example... Figure 6 As shown, the identity mapping relationship is not statically recorded, but dynamically maintained based on the access session state and the business session state, and includes at least the following stages: 1. Access Session Establishment Phase 2. Business negotiation phase 3. NAT mapping maintenance phase 4. Session aging and release phase When a NAT mapping change or VoWiFi service renegotiation is detected, the access-side device updates the mapping relationship to ensure that the tracing chain always points to the originally established access identity.

[0108] Subsequently, the access-side device can report the service binding information to the traceability platform.

[0109] Finally, the terminal device sends encrypted VoWiFi service traffic, such as voice and SMS, through an encrypted tunnel established with the ePDG device. The tracing platform then traces the VoWiFi service based on the reported service binding information.

[0110] The beneficial effects of this invention are as follows: 1. Achieve accurate source tracing without compromising the VoWiFi encryption system; 2. Solve the problem of indistinguishable identities for VoWiFi services in large-scale NAT environments; 3. Supports building-level and room-level VoWiFi service positioning; 4. Enable unified traceability for local account users and SIM users from different networks; 5. Reduce the complexity of source tracing processing in the operator's core network.

[0111] The following describes the VoWiFi tracing information reporting device, access-side device, computer-readable storage medium, and computer program product provided in the embodiments of the present invention. The information reporting device, access-side device, computer-readable storage medium, and computer program product described below can be referred to in correspondence with the VoWiFi tracing information reporting method described above.

[0112] Please refer to Figure 7 , Figure 7 This is a schematic diagram of a VoWiFi tracing information reporting device provided in an embodiment of the present invention. The device may include: Access information acquisition module 701 is used to acquire the access identity information of the terminal device in the wireless local area network; The service information acquisition module 702 is used to determine the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment, and to acquire the public network communication information allocated to the terminal device; the public network communication information is used to perform network address translation on the network packets transmitted between the terminal device and the operator equipment. The service binding module 703 is used to set service binding information using access identity information, VoWiFi service identification information, and public network communication information, and to report the service binding information to the operator equipment so that the operator equipment can trace the VoWiFi service based on the service binding information.

[0113] Optionally, the device may further include: The access session creation module is used to create an access session corresponding to the terminal device and associate the access identity information with the access session; The service session creation module is used to create a service session corresponding to the terminal device and associate VoWiFi service identification information, public network communication information and service session; Business binding module 703 includes: The session association submodule is used to associate access sessions with business sessions to obtain business binding information.

[0114] Optionally, the device may further include: The session update module is used to generate incremental update information using the updated session information and VoWiFi service identification information when an information update is detected in either the access session or the service session, and the access session and the service session are not interrupted. The incremental update information is then reported to the operator equipment so that the operator equipment can update the service binding information. The session clearing module is used to generate session interruption information using VoWiFi service identification information when a session interruption is detected in either the access session or the service session, and to report the session interruption information to the operator equipment so that the operator equipment can remove the service binding information.

[0115] Optionally, the access session creation module includes: The access identifier acquisition unit is used to acquire the access identifier of the terminal device. The access identifier is the access key and / or virtual LAN identifier of the terminal device. The terminal device uses the access key to access the wireless LAN, and the virtual LAN identifier indicates the virtual LAN area where the terminal device is located. The identification unit is used to identify access sessions using access identifiers.

[0116] Optionally, the access information acquisition module 701 includes: The first information acquisition submodule is used to acquire access authentication information sent by the access point device, extract the physical address information and access account information of the terminal device from the access authentication information, and acquire the access location information corresponding to the access point device. The second information acquisition submodule is used to acquire the intranet address information assigned to the terminal device when it is determined that the terminal device is connected to the wireless local area network.

[0117] Optionally, the device may further include: The access location update detection module is used to obtain the updated access location information corresponding to the access point device currently connected to the terminal device when it detects that the access point device connected to the terminal device has changed. The incremental information setting module is used to set incremental update information using updated access location information and VoWiFi service identification information; The access location update reporting module is used to report incremental update information to the operator equipment, so that the operator equipment can update the corresponding service binding information based on the VoWiFi service identifier information in the incremental update information.

[0118] Optionally, the access information acquisition module 701 includes: The third information acquisition submodule is used to determine the SIM card authentication information based on the SIM authentication message transmitted between the terminal device and the authentication server when the terminal device and the authentication server are detected to be performing the SIM authentication process.

[0119] Optionally, the business information acquisition module 702 includes: The fourth information acquisition submodule is used to obtain the first negotiation authentication information and the intranet communication information of the terminal device from the tunnel negotiation request message sent by the terminal device, and to determine the order of each first negotiation authentication information in the tunnel negotiation request message; The fifth information acquisition submodule is used to obtain the second negotiation authentication information from the tunnel negotiation response message sent by the operator equipment; The VoWiFi identification information setting submodule is used to determine the VoWiFi service identification information based on the first negotiation authentication information, the order of the first negotiation authentication information, the intranet communication information, and the second negotiation authentication information.

[0120] Optionally, the VoWiFi identification information setting submodule can be used for: A hash operation is performed on the first negotiated authentication information, the order of the first negotiated authentication information, the intranet communication information, and the second negotiated authentication information to obtain the VoWiFi service identification information; wherein, the VoWiFi service identification information uniquely identifies the VoWiFi service of each terminal device when multiple terminal devices share the same public network communication information.

[0121] Optionally, the business information acquisition module 702 may include: The VoWiFi service identification information determination submodule is used to determine the VoWiFi service identification information by parsing the unencrypted negotiation payload field in the VoWiFi service establishment message without parsing the encrypted service data between the terminal device and the operator equipment. The unencrypted negotiation payload field includes the public parameters in the tunnel negotiation request message sent by the terminal device and the tunnel negotiation response message returned by the operator equipment.

[0122] Please refer to Figure 8 , Figure 8 This is a structural block diagram of an access-side device provided in an embodiment of the present invention. The embodiment of the present invention provides an access-side device 80, including a processor 81 and a memory 82; wherein, the memory 82 is used to store a computer program; the processor 81 is used to execute the VoWiFi tracing information reporting method provided in the foregoing embodiment when executing the computer program.

[0123] The specific process of reporting VoWiFi source information can be found in the corresponding content provided in the foregoing embodiments, and will not be repeated here.

[0124] Furthermore, the memory 82, as a carrier for resource storage, can be a read-only memory, random access memory, disk, or optical disk, and the storage method can be temporary storage or permanent storage.

[0125] In addition, the access-side device 80 also includes a power supply 83, a communication interface 84, an input / output interface 85, and a communication bus 86. The power supply 83 is used to provide operating voltage for the various hardware devices on the access-side device 80. The communication interface 84 can create a data transmission channel between the access-side device 80 and external devices. The communication protocol it follows can be any communication protocol applicable to the technical solution of this invention, and is not specifically limited here. The input / output interface 85 is used to acquire external input data or output data to the outside world. Its specific interface type can be selected according to specific application needs, and is not specifically limited here.

[0126] This invention also provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the VoWiFi tracing information reporting method described in the above embodiments.

[0127] Since the embodiments of the computer program product section correspond to the embodiments of the VoWiFi traceability information reporting method section, please refer to the description of the embodiments of the VoWiFi traceability information reporting method section for the embodiments of the computer program product section, and will not be repeated here.

[0128] This invention also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the VoWiFi tracing information reporting method described in the above embodiments.

[0129] Since the embodiments of the computer-readable storage medium portion correspond to the embodiments of the VoWiFi source information reporting method portion, the embodiments of the storage medium portion are described in the description of the embodiments of the VoWiFi source information reporting method portion, and will not be repeated here.

[0130] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the apparatus disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple; relevant parts can be referred to the method section.

[0131] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this invention.

[0132] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein can be implemented directly by hardware, a software module executed by a processor, or a combination of both. The software module can be located in random access memory (RAM), main memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art.

[0133] The above provides a detailed description of the VoWiFi source tracing information reporting method, apparatus, device, and medium provided by the present invention. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are merely for the purpose of helping to understand the method and core ideas of the present invention. It should be noted that those skilled in the art can make various improvements and modifications to the present invention without departing from its principles, and these improvements and modifications also fall within the protection scope of the present invention.

Claims

1. A method for reporting VoWiFi source tracing information, characterized in that, include: Obtain the access identity information of the terminal device in the wireless local area network; The VoWiFi service identification information is determined based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment, and the public network communication information allocated to the terminal device is obtained. The public network communication information is used to perform network address translation on the network packets transmitted between the terminal device and the operator equipment. The access identity information, the VoWiFi service identifier information, and the public network communication information are used to set service binding information, and the service binding information is reported to the operator equipment so that the operator equipment can trace the VoWiFi service based on the service binding information.

2. The reporting method according to claim 1, characterized in that, Also includes: Create an access session corresponding to the terminal device, and associate the access identity information with the access session; Create a service session corresponding to the terminal device, and associate the VoWiFi service identification information and the public network communication information with the service session; The step of setting service binding information using the access identity information, the VoWiFi service identifier information, and the public network communication information includes: The access session is associated with the service session to obtain the service binding information.

3. The reporting method according to claim 2, characterized in that, Also includes: When an information update is detected in either the access session or the service session, and the access session and the service session are not interrupted, incremental update information is generated using the updated session information and the VoWiFi service identifier information, and the incremental update information is reported to the operator equipment so that the operator equipment can update the service binding information; When a session interruption is detected in either the access session or the service session, session interruption information is generated using the VoWiFi service identification information, and the session interruption information is reported to the operator equipment so that the operator equipment can remove the service binding information.

4. The reporting method according to claim 2, characterized in that, Creating the access session corresponding to the terminal device includes: Obtain the access identifier of the terminal device; the access identifier is the access key and / or virtual local area network identifier of the terminal device, the terminal device uses the access key to access the wireless local area network, and the virtual local area network identifier indicates the virtual local area network area where the terminal device is located; The access session is identified using the access identifier.

5. The reporting method according to claim 1, characterized in that, The acquisition of the terminal device's access identity information in the wireless local area network includes: Obtain access authentication information sent by the access point device, extract the physical address information and access account information of the terminal device from the access authentication information, and obtain the access location information corresponding to the access point device; When it is determined that the terminal device is connected to the wireless local area network, the internal network address information assigned to the terminal device is obtained.

6. The reporting method according to claim 5, characterized in that, Also includes: When it is detected that the access point device connected to the terminal device has changed, the updated access location information corresponding to the access point device currently connected to the terminal device is obtained; Incremental update information is set using the updated access location information and the VoWiFi service identifier information; The incremental update information is reported to the operator equipment so that the operator equipment updates the corresponding service binding information based on the VoWiFi service identifier information in the incremental update information.

7. The reporting method according to claim 1, characterized in that, The acquisition of the terminal device's access identity information in the wireless local area network includes: When the terminal device is detected to be performing a SIM authentication process with the authentication server, the SIM card authentication information is determined based on the SIM authentication message transmitted between the terminal device and the authentication server.

8. The reporting method according to claim 1, characterized in that, The step of determining the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment includes: Obtain first negotiation authentication information and intranet communication information of the terminal device from the tunnel negotiation request message sent by the terminal device, and determine the order of each piece of first negotiation authentication information in the tunnel negotiation request message; Obtain the second negotiation authentication information from the tunnel negotiation response message sent by the operator equipment; The VoWiFi service identifier information is determined based on the first negotiated authentication information, the order of the first negotiated authentication information, the intranet communication information, and the second negotiated authentication information.

9. The reporting method according to claim 8, characterized in that, The step of determining the VoWiFi service identifier information based on the first negotiated authentication information, the order of the first negotiated authentication information, the intranet communication information, and the second negotiated authentication information includes: A hash operation is performed on the first negotiated authentication information, the order of the first negotiated authentication information, the intranet communication information, and the second negotiated authentication information to obtain the VoWiFi service identification information; wherein, the VoWiFi service identification information uniquely identifies the VoWiFi service of each terminal device when multiple terminal devices share the same public network communication information.

10. The reporting method according to claim 1, characterized in that, The step of determining the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment includes: Without parsing the encrypted service data between the terminal device and the operator device, the VoWiFi service identification information is determined by parsing the unencrypted negotiation payload field in the VoWiFi service establishment message; wherein, the unencrypted negotiation payload field includes the public parameters in the tunnel negotiation request message sent by the terminal device and the tunnel negotiation response message returned by the operator device.

11. A VoWiFi source tracing information reporting device, characterized in that, include: The access information acquisition module is used to acquire the access identity information of the terminal device in the wireless local area network; The service information acquisition module is used to determine the VoWiFi service identification information based on the VoWiFi service establishment message transmitted between the terminal device and the operator equipment, and to acquire the public network communication information allocated to the terminal device; the public network communication information is used to perform network address translation on the network packets transmitted between the terminal device and the operator equipment. The service binding module is used to set service binding information using the access identity information, the VoWiFi service identification information, and the public network communication information, and to report the service binding information to the operator equipment so that the operator equipment can trace the VoWiFi service based on the service binding information.

12. An access-side device, characterized in that, include: Memory, used to store computer programs; A processor, configured to implement the VoWiFi tracing information reporting method as described in any one of claims 1 to 10 when executing the computer program.

13. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when loaded and executed by a processor, implement the VoWiFi tracing information reporting method as described in any one of claims 1 to 10.

Images