A method and network device for controlling user access
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- NEW H3C TECH CO LTD
- Filing Date
- 2026-04-27
- Publication Date
- 2026-06-30
AI Technical Summary
In vBRAS systems, once a user access anchor device is selected, it is essentially fixed, leading to wasted pUP resources or vUP bandwidth congestion, increasing operator costs and limiting user experience.
By analyzing the historical traffic information of user access anchor devices, the system dynamically switches user access anchor devices, from pUP to vUP or vUP to pUP, to match the user's actual traffic needs, utilize existing resources, and avoid resource waste and bandwidth congestion.
It achieves efficient use of resources, reduces the expansion costs for operators and the bandwidth pressure on vUPs, and improves the user experience.
Smart Images
Figure CN122317469A_ABST
Abstract
Description
Technical Field
[0001] This specification relates to the field of communication technology, and in particular to a method and network device for controlling user access. Background Technology
[0002] vBRAS: Virtual Broadband Remote Access Server; BRAS: Broadband Remote Access Server; CP: Control Plane; UP: User Plane; The vBRAS forwarding and control separation system solves the problems of mismatched capabilities between the control plane and forwarding plane, inability to share resources, and untimely deployment of new services that exist in traditional BRAS by completely decoupling the forwarding plane from the control plane.
[0003] The vBRAS system architecture based on forwarding and control separation technology includes two roles: vBRAS-CP (CP for short) and vBRAS-UP (UP for short), which together implement BRAS functions.
[0004] CP: Responsible for control plane functions such as user authentication, address allocation and management.
[0005] UP (Uploader): Responsible for forwarding and controlling user traffic in the forwarding plane. Depending on the physical form of the device, UPs are divided into the following two types: pUP: A UP (Power Provider Unit) is a physical device. pUPs are characterized by strong forwarding capabilities and can be used to handle high-bandwidth services such as broadband internet access and IPTV.
[0006] vUP: A virtualization device that acts as a UP. vUPs are characterized by their strong computing power and can be used to handle services with high session size and low bandwidth requirements, such as ITMS and VoIP.
[0007] Currently, when new users open an account, an access anchor point (pUP or vUP) is selected for them based on their service type. Subsequently, access anchor points are generally not reassigned. Once the number of users on a pUP reaches the specified threshold, new hardware needs to be purchased for capacity expansion, which does not make good use of existing resources and causes unnecessary cost investment for operators. Similarly, users with high bandwidth usage on a vUP will consume too much outbound bandwidth resources on the vUP, which can easily cause outbound congestion and limit the number of users that can access the vUP. Summary of the Invention
[0008] To overcome the problems existing in related technologies, this specification provides a method and network device for controlling user access.
[0009] According to a first aspect of the embodiments of this specification, a method for controlling user access is provided, the method comprising: Identify the first type of target user access anchor point device; Obtain historical traffic information of the target user's access to the anchor point device; When the acquired historical traffic information meets the preset conditions, the anchor device accessed by the target user will be switched from the first type to the second type. The types of anchor point devices include pUP and vUP.
[0010] The step of obtaining historical traffic information of the target user's access to the anchor device includes: Using days as the statistical period, historical traffic information of the target user's access to the anchor point device is obtained.
[0011] The first type of identification target user access anchor point device includes: The first type of target user access anchor device is identified by analyzing the signaling messages in the message or by analyzing the network element identifier.
[0012] The step of switching the anchor device accessed by the target user from the first type to the second type when the acquired historical traffic information meets the preset conditions includes: If the target user is already connected to a pUP, and the target user's historical traffic information is less than a preset threshold, the target user will be switched to a vUP; or... When a target user is already connected to a vUP, and the target user's historical traffic information exceeds a preset threshold, the target user will be switched to a pUP.
[0013] Specifically, when a target user switches from a pUP to a vUP, historical traffic information of the target user's access anchor device is obtained on an hourly basis.
[0014] The step of switching the anchor device for the target user from the first type to the second type includes: The VLAN corresponding to the target user's access to the second type of anchor point device is sent to the OLT connected to the user, so that the OLT can redial to the second type of anchor point device according to the received VLAN.
[0015] As can be seen from the above embodiments, in the scenario of control-transfer separation, a more suitable access anchor device is found for the user based on the user's historical traffic information, which saves the operator the cost of expansion cards and saves the outbound bandwidth on the vUP.
[0016] According to a second aspect of the embodiments of this specification, a network device is provided, the network device enabling CP capability, the network device comprising: The identification module is used to identify the first type of the target user's access anchor point device; The acquisition module is used to acquire historical traffic information of the target user's access to the anchor device; The processing module is used to switch the anchor device accessed by the target user from the first type to the second type when the acquired historical traffic information meets the preset conditions. The types of anchor point devices include pUP and vUP.
[0017] Specifically, the acquisition module is used to acquire historical traffic information of the target user's access to the anchor device, with a statistical period of days.
[0018] Specifically, the identification module is used to identify the first type of target user access anchor device by analyzing the signaling messages of the message or by analyzing the network element identifier.
[0019] Specifically, the processing module is used to switch the target user to a vUP when the target user is already connected to a pUP and when the target user's historical traffic information is less than a preset threshold; or... When a target user is already connected to a vUP, and the target user's historical traffic information exceeds a preset threshold, the target user will be switched to a pUP.
[0020] The acquisition module is further configured to acquire historical traffic information of the target user's access anchor device on an hourly basis after the target user switches from pUP to vUP.
[0021] Specifically, the processing module is used to send the VLAN corresponding to the target user accessing the second type of anchor point device to the OLT connected to the user, so that the OLT can redial to the second type of anchor point device according to the received VLAN.
[0022] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this specification. Attached Figure Description
[0023] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this specification and, together with the description, serve to explain the principles of this specification.
[0024] Figure 1 This is a flowchart illustrating a method for controlling user access according to an exemplary embodiment of this specification.
[0025] Figure 2This specification is a schematic diagram of a control-transfer separation network device architecture according to an exemplary embodiment. Detailed Implementation
[0026] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numerals in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this specification. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this specification as detailed in the appended claims.
[0027] The terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to be limiting of this specification. The singular forms “a,” “the,” and “the” as used in this specification and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.
[0028] It should be understood that although the terms first, second, third, etc., may be used in this specification to describe various information, this information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, without departing from the scope of this specification, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Depending on the context, the word "if" as used herein may be interpreted as "when," "when," or "in response to determination."
[0029] Currently, users have already identified the corresponding UP access device when opening an account, and will continue to use that UP device as the broadband access anchor point without any dynamic changes to the access anchor point.
[0030] In this mode, some users whose access anchors are pUP devices and have low traffic over a long period will occupy valuable board resources on the pUP. Once the number of users accessing the board is saturated, the operator will need to purchase new boards to expand capacity. Similarly, some users whose access anchors are vUP devices and have high bandwidth utilization over a long period will occupy the egress bandwidth resources on the vUP, which can easily cause egress congestion and limit the number of users accessing the vUP.
[0031] To address the aforementioned technical problems, embodiments of this disclosure provide a method for controlling user access, such as... Figure 1 As shown, the method includes: S101 identifies the first type of target user access anchor point device; S102 Obtains historical traffic information of the target user's access to the anchor point device; When the acquired historical traffic information meets the preset conditions, S103 switches the anchor device accessed by the target user from the first type to the second type. The types of anchor point devices include pUP and vUP.
[0032] The technical solution provided in this disclosure enables the reallocation of access anchor devices for users based on their historical traffic information in the current scenario of control separation.
[0033] In step S101, the CP can identify whether the target user's access anchor device is a pUP or a vPU by analyzing the signaling interaction characteristics during the user access process.
[0034] For example, when the control plane establishes a session for a user, it sends policy rules to the user plane via a specific protocol (such as PFCP). The parameters carried in these signaling messages can indicate the type of user plane.
[0035] Alternatively, the control plane can also distinguish between user data or events reported by the user plane.
[0036] In this embodiment, the first type identified in step S101 may be pUP or vUP.
[0037] In step S102, the historical traffic information of the target user accessing the anchor device is obtained. Typically, a day can be used as the statistical period, that is, 24 hours as a statistical period.
[0038] In this implementation, assuming that the target user has already connected to the pUP, the preset condition is: determine whether the historical traffic information is less than a preset threshold. If it is less, it means that although the user has connected to the pUP, the actual forwarding traffic is not large. In this case, the target user can be switched to connect to the vUP to avoid wasting the pUP's resources.
[0039] Assuming the target user is already connected to a vUP, the preset condition is: determine whether the historical traffic information is greater than a preset threshold. If it is, it means that the user's forwarding traffic is large, and the user can be switched to a pUP to avoid traffic congestion in the vUP.
[0040] In this embodiment, it is possible that the user originally connected to the pUP is a key user, such as a VIP customer. To ensure the user experience of key users, when switching users from the pUP to the vUP, the period for obtaining the user's historical traffic information can be shortened. For example, instead of obtaining the target user's historical traffic information on the anchor device on a daily basis, the period can be shortened to an hourly basis. When it is found that the user's historical traffic information exceeds a preset threshold, the user is promptly switched to the pUP. To illustrate the technical solutions in this disclosure in detail, this disclosure also provides an example of a method for controlling user access, such as... Figure 2 As shown: After a user has been using the service for a period of time, based on historical traffic data from the backend and preset criteria, the following two types of users are selected at daily intervals: (historical traffic data is obtained from billing messages received by the backend AAA device): 1. The current access anchor point is pUP, for users with consistently low traffic. 2. Users whose current access point is a vUP and who consistently have high bandwidth usage. For the two types of users, the access anchor point should be reselected. For users with low long-term traffic in type 1, it is suitable to switch the access anchor point to a vUP device with a large session capacity. For users with high long-term bandwidth utilization in type 2, it is suitable to switch the access anchor point to a pUP device with strong forwarding performance.
[0041] Therefore, after identifying the users who need to be switched based on traffic characteristics, the users are disconnected from the CP during the cutover window. The VLAN of the new access anchor point is then distributed to the optical modem via the TR069 management protocol. The optical modem then redials to complete the connection on the new access anchor point. This achieves dynamic adjustment of the access anchor point based on historical traffic information.
[0042] After switching users in Type 1 to vUP devices, the frequency of traffic information analysis needs to be increased to once per hour to ensure that when their actual bandwidth usage increases, they can be taken offline and switched back to pUP devices in a timely manner to ensure their internet experience.
[0043] As can be seen from the above embodiments, in the control-switch separation scenario, by analyzing the user's historical traffic information, users whose traffic behavior is inconsistent with the characteristics of the current access anchor point are screened out, and after VLAN refarming, they are switched to the new access anchor point; at the same time, for users who have switched to the vUP part, the frequency of traffic information analysis is increased to ensure that they can switch back to the pUP device when the required bandwidth increases.
[0044] Based on the above method embodiments, this disclosure also provides a network device that enables CP capabilities, the network device comprising: The identification module is used to identify the first type of the target user's access anchor point device; The acquisition module is used to acquire historical traffic information of the target user's access to the anchor device; The processing module is used to switch the anchor device accessed by the target user from the first type to the second type when the acquired historical traffic information meets the preset conditions. The types of anchor point devices include pUP and vUP.
[0045] Specifically, the acquisition module is used to acquire historical traffic information of the target user's access to the anchor device, with a statistical period of days.
[0046] Specifically, the identification module is used to identify the first type of target user access anchor device by analyzing the signaling messages of the message or by analyzing the network element identifier.
[0047] Specifically, the processing module is used to switch the target user to a vUP when the target user is already connected to a pUP and when the target user's historical traffic information is less than a preset threshold; or... When a target user is already connected to a vUP, and the target user's historical traffic information exceeds a preset threshold, the target user will be switched to a pUP.
[0048] The acquisition module is further configured to acquire historical traffic information of the target user's access anchor device on an hourly basis after the target user switches from pUP to vUP.
[0049] Specifically, the processing module is used to send the VLAN corresponding to the target user accessing the second type of anchor point device to the OLT connected to the user, so that the OLT can redial to the second type of anchor point device according to the received VLAN.
[0050] For the device embodiments, since they basically correspond to the method embodiments, the relevant parts can be referred to in the description of the method embodiments. The device embodiments described above are merely illustrative. The modules described as separate components may or may not be physically separate, and the components shown as modules may or may not be physical modules, that is, they may be located in one place or distributed across multiple network modules. Some or all of the modules can be selected to achieve the purpose of the solution in this specification according to actual needs. Those skilled in the art can understand and implement this without creative effort.
[0051] The foregoing has described specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims may be performed in a different order than that shown in the embodiments and may still achieve the desired result. Furthermore, the processes depicted in the drawings do not necessarily require the specific or sequential order shown to achieve the desired result. In some embodiments, multitasking and parallel processing are possible or may be advantageous.
[0052] Other embodiments of this specification will readily occur to those skilled in the art upon consideration of the specification and practice of the invention claimed herein. This specification is intended to cover any variations, uses, or adaptations that follow the general principles of this specification and include common knowledge or customary techniques in the art not claimed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this specification are indicated by the following claims.
[0053] It should be understood that this specification is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this specification is limited only by the appended claims.
[0054] The above description is merely a preferred embodiment of this specification and is not intended to limit this specification. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this specification should be included within the scope of protection of this specification.
Claims
1. A method for controlling user access, characterized in that, The method includes: Identify the first type of target user access anchor point device; Obtain historical traffic information of the target user's access to the anchor point device; When the acquired historical traffic information meets the preset conditions, the anchor device accessed by the target user will be switched from the first type to the second type. The types of anchor point devices include pUP and vUP.
2. The method according to claim 1, characterized in that, The acquisition of historical traffic information of the target user's access to the anchor device includes: Using days as the statistical period, historical traffic information of the target user's access to the anchor point device is obtained.
3. The method according to claim 1, characterized in that, The first type of identifying the target user access anchor point device includes: The first type of target user access anchor device is identified by analyzing the signaling messages in the message or by analyzing the network element identifier.
4. The method according to claim 1, characterized in that, When the acquired historical traffic information meets preset conditions, the anchor device accessed by the target user is switched from the first type to the second type, including: If the target user is already connected to a pUP, and the target user's historical traffic information is less than a preset threshold, the target user will be switched to a vUP; or... When a target user is already connected to a vUP, and the target user's historical traffic information exceeds a preset threshold, the target user will be switched to a pUP.
5. The method according to claim 4, characterized in that, The method further includes: When a target user switches from a pUP to a vUP, historical traffic information of the target user's access anchor device is obtained on an hourly basis.
6. The method according to claim 1, characterized in that, The step of switching the anchor device for the target user's access from the first type to the second type includes: The VLAN corresponding to the target user's access to the second type of anchor point device is sent to the OLT connected to the user, so that the OLT can redial to the second type of anchor point device according to the received VLAN.
7. A network device, characterized in that, The network device enables CP capabilities, and the network device includes: The identification module is used to identify the first type of the target user's access anchor point device; The acquisition module is used to acquire historical traffic information of the target user's access to the anchor device; The processing module is used to switch the anchor device accessed by the target user from the first type to the second type when the acquired historical traffic information meets the preset conditions. The types of anchor point devices include pUP and vUP.
8. The network device according to claim 7, characterized in that, The acquisition module is specifically used to acquire historical traffic information of the target user's access to the anchor device, with a statistical period of days.
9. The network device according to claim 7, characterized in that, The identification module is specifically used to identify the first type of target user access anchor device by analyzing the signaling messages of the message or by analyzing the network element identifier.
10. The network device according to claim 7, characterized in that, The processing module is specifically used to switch the target user to a vUP when the target user is already connected to a pUP and the target user's historical traffic information is less than a preset threshold; or... When a target user is already connected to a vUP, and the target user's historical traffic information exceeds a preset threshold, the target user will be switched to a pUP.
11. The network device according to claim 10, characterized in that, The acquisition module is also used to acquire historical traffic information of the target user's access anchor device on an hourly basis after the target user switches from pUP to vUP.
12. The network device according to claim 7, characterized in that, The processing module is specifically used to send the VLAN corresponding to the target user accessing the second type of anchor point device to the OLT connected to the user, so that the OLT can redial to the second type of anchor point device according to the received VLAN.