Device and method for routing a data stream

Abstract

The invention relates to a device and method for routing communication streams for roaming user equipment, selectively and automatically via an item of remote core equipment or local core equipment, wherein the device routes a data stream from a first item of roaming user equipment, UE, (10) to an item of second roaming UE (20; 30) within a communication network comprising an item of remote core equipment, EPC, (EPC-D) and a local EPC (EPC-L). The device comprises means (140) for coupling the local EPC (EPC-L) to the remote EPC (EPC-D) and for determining whether or not the second UE (20; 30) is attached to the local EPC (EPC-L). The device further comprises means for redirecting the stream by: routing to the second UE (20) via the local EPC (EPC-L) when the second UE (30) is attached to the local EPC (EPC-L), or otherwise to the second UE via the remote EPC (EPC-D). The invention is advantageously implemented with a dedicated application, integrated into the UEs.

Description

[0001] DEVICE AND METHOD FOR ROUTING A DATA STREAM

[0002] The invention relates to wireless or wired communication networks, enabling nomadic user equipment (UE) to exchange voice or data communications with each other, to connect to the Internet, or to access dematerialized data repositories (data warehouses) (data hosted "in the cloud" or "in the cloud").

[0003] Technical field of the invention

[0004] The invention will be described mainly in the context of networks structured according to LTE specifications, and with, at the terminal level (mobile phone, tablet, PC, etc.) a dedicated application, specifically adapted. However, this type of network should only be considered as simply representative of the invention, without limitation. The invention can be applied equally well to wireless networks structured and organized in a comparable manner according to a specification other than LTE (UMTS, NR 5G, etc.), or also to wired networks.

[0005] Similarly, the implementation of the invention with a specific application at the user level, integrated into his personal terminal or downloaded onto it (and hereinafter referred to as "dedicated application"), although particularly advantageous, does not limit the invention.

[0006] State of the prior art

[0007] The starting point of the invention is the observation that current telecommunications systems are based, on the network side, on an increasingly centralized architecture, which increasingly distances users from the routing and switching points of exchanges. In the event of heavy traffic, this centralized arrangement can lead to network congestion, resulting in high latency and a degradation of the quality of services.

[0008] This type of centralized architecture also makes data more vulnerable, limits user autonomy and network availability in the event of an incident at the core network equipment level or on the links between the latter and the distribution points that are the base stations (eNodeB or eNB in ​​LTE terminology).

[0009] This hypercentralization of exchanges, as opposed to a more modular architecture, is also a source of significant energy consumption due to the number and length of the links.

[0010] This trend towards centralization is found both at the level of wireless (or wired) networks and at the level of platforms, the internet and dematerialized servers ("cloud" or "in the cloud" servers), so that technological advances (optical fiber providing higher speeds, increased performance of radios, generalization of the IP protocol, etc.) do not change much, or even accentuate it.

[0011] Communication services are therefore, despite everything, becoming increasingly degraded and unequal as the number of users and their bandwidth requirements increase.

[0012] If we consider an LTE type network, its basic architecture includes a plurality of base stations (eNBs), attached to a core network or EPC (Evolved Packet Core) ensuring the interconnection of the different users between them and to remote networks and services (internet, dematerialized databases, etc.). The EPC of an LTE operator is interfaced to the eNBs via a radio access network or RAN (Radio Access Network). EPCs mainly include: SGWs (Serving Gateways), which transport data traffic (at the user plane) and concentrate the traffic of several eNBs, and MMEs (Mobility Management Entities), which manage (at the control plane) signaling for mobility and provide access to HSS / HLR (Home Subscriber Server / Home Location Register) databases containing subscriber identifiers and rights.

[0013] In addition, one or more PGW (Packet Gateway) gateways ensure exchanges with the Internet network and allocate IP addresses to the UE terminals.

[0014] An EPC typically manages multiple cells, each with multiple radios. The EPC also manages handover, i.e., the transfer of a subscriber from one cell to another without interruption of service, for all subscribers in a given cell—which can number several hundred—and regardless of the radio propagation conditions between the subscribers and the eNB.

[0015] In fact, to be able to manage a large number of users simultaneously, the EPC network core is necessarily a powerful and complex piece of equipment. This EPC network core is connected to a very large number of eNBs, distributed throughout the region to be served, with distances that can be significant.

[0016] Since all traffic passes through the EPC via these backhaul links, the volume of data passing through is considerable and contributes to increasing "digital pollution", even more so when the backhaul links are operated by very high-speed radio links.

[0017] In addition to this conventional LTE architecture, there is also a so-called "compact LTE" architecture that implements a local EPC to avoid very long links to a centralized network core.

[0018] In this "compact LTE" architecture, the EPC core network is integrated into the eNB and allows the latter to interconnect UEs placed in its radio coverage without a broadband link with a remote centralized EPC.

[0019] Above all, the "LTE compact" architecture ensures the confidentiality of exchanges and the simplicity of deployments in the field, and it is for this reason that it is particularly used in the case of military applications or civil security forces, where deployment in totally autonomous cells, therefore without a remote core network, is essential. However, due to the lower number of managed users, and on the other hand the absence of need for mobility (no handover), the complexity and power of the local EPC of the "LTE compact" architecture is much lower than that of a remote EPC of a conventional LTE architecture.

[0020] US 2015 / 173111 A1 proposes an architecture combining local EPC and remote EPC, with the ability to switch or switch from one to the other depending on network conditions. This architecture, similar to that of "compact LTE", eliminates the need for very long links to a centralized network core.

[0021] Instead of connecting to a conventional EPC (local, or remote for access to the "outside world"), this document proposes to virtualize the local EPC with an EPC virtualization module stored in a remote server (cloud server). In fact, in all cases (local communication or with the "outside world") there will necessarily be interconnection to a third-party network for access to remote resources.

[0022] D1 also raises the possibility of operating within a small cell network. But then, in principle, the network operates conventionally with implementation of all LTE functions, therefore without a priori seeking to save resources. Switching to the small cell's local EPC is in fact only a fallback solution implemented in the event of an excessively negative overhead perspective.

[0023] Statement of the invention

[0024] The aim of the invention is to combine the advantages of a decentralized architecture of the LTE type or similar with those of a local architecture of the "compact LTE" type or similar, while overcoming their respective drawbacks and limitations, which have been set out above.

[0025] This is particularly about having a network that is particularly efficient in environments: where the vast majority of exchanges - typically 80% of uses - take place locally, between UEs attached to the same "local island" managed by a common local EPC, but where it is necessary to reserve the possibility for UEs to deport exchanges to distant third-party operators managed by a distant EPC, distinct from the local EPC, whether it is a question of communicating with UEs not attached to the local island (i.e. not known to it), or of accessing distant networks, typically public networks such as the Internet.

[0026] These requirements must be able to be met in a manner that is completely transparent to the user and without interruption of service in the event of possible interconnection with a remote network.

[0027] In fact, the problem to be solved is the search for the greatest possible economy of the means implemented in the communication networks thanks to local island infrastructures.

[0028] Essentially, the principle of the invention consists of operating differently for local services and for external services, with jointly, and in an evolving and dynamic manner: proximity management for local services, by equipment close to the user, and interfacing with remote networks ensuring interconnection with other operators, for external services which cannot be managed locally.

[0029] In other words, the invention proposes to remedy these various drawbacks and limitations thanks to a communication architecture with decentralization of communication networks to make it possible to distribute requests locally, from one location to another, without depriving oneself of the advantages provided by the services offered by remote networks (internet, etc.) or even the possibility of accessing data not accessible locally.

[0030] Thus, remote network operators are freed from the volume of services distributed locally. On the other hand, the proximity management of local services ensures autonomy, high local availability, and the security of data exchanged at this level (which may not be transmitted to remote networks). In addition, the management of the community of users of the same set of local services is freed from the complexity of remote network EPCs, and can be operated on site by equipment equipped with all the functionalities required to manage the community.

[0031] Finally, at the level of telecommunications infrastructure, overall energy consumption will be much lower, thus reducing the "carbon footprint" of the infrastructure considered as a whole.

[0032] All communications between UEs of the same local island (i.e. already known by the local EPC) will be managed as a priority by the local EPC, avoiding monopolizing and overloading remote networks with exchanges which only concern local users.

[0033] This avoids, in the majority (80%) of cases: network overload, saturation due to excessive traffic, increased need for bandwidth, high cost for users as well as for operators, high carbon footprint, etc. It is only in a subsidiary, but nevertheless automatic, manner that the exchanges will be deported and redirected to a remote EPC of a third-party operator (typically, in only 20% of cases). The invention proposes for this purpose a device for routing a data flow from a first nomadic UE to a second nomadic UE and / or a data repository within a communication network comprising a remote EPC.

[0034] Characteristically of the invention, the communication network further comprises, within a local network, at least one local EPC connected to at least one access node and capable of being coupled to the remote EPC, and the device for routing the data flow comprises: means for coupling the local EPC to the remote EPC; enrollment means, comprising a memory storing identification data of nomadic UEs which have connected to the local network; means for determining, from the memory of the enrollment means, whether or not the second nomadic UE and / or the data repository are attached to the local EPC; and means for automatically redirecting the data flow in response to said determination.

[0035] The means for automatically redirecting the data flow comprise: means for priority routing, within the local network via the local EPC, of ​​the data flow to the second nomadic UE and / or the data repository, when it is determined that the second nomadic UE and / or the data repository are attached to the local EPC, said priority routing means operating without intervention from the remote EPC; and default routing means, for deporting outside the local network, via the remote EPC, the data flow to the second nomadic UE and / or the data repository, otherwise.

[0036] According to various advantageous subsidiary characteristics: the default routing means are means capable of routing the data flow to the second nomadic UE and / or the data repository via the remote EPC only when it is determined that the second nomadic UE and / or the data repository are not attached to the local EPC; the device further comprises means for transmitting to the remote EPC the identification data of the first nomadic UE; the device further comprises a nomadic UE registration server comprising means for storing nomadic UE authentication data, and the data flow redirection means comprise means capable of redirecting the data flow to the nomadic equipment registered in the nomadic UE registration server;the device further comprises means for obtaining authentication data of a nomadic UE, and means for recording said authentication data of the nomadic UE in the nomadic UE registration server; the device further comprises a local data server, and means for accessing the local data server for the nomadic UEs recorded in the nomadic UE registration server; the device further comprises means for controlling access to the local data server, coupled to the nomadic UE registration server to control, based on the authentication data, access to the local data server by the registered nomadic equipment; the nomadic UEs comprise a dedicated application provided with secure user identification functionalities and capable of further interacting with the nomadic UE registration server;the dedicated application includes, in addition to the functionalities of secure user identification and interaction with the nomadic UE registration server: (i) means of access to the remote EPC, for telephony functionalities, IP or non-IP, via terrestrial and / or mobile networks, electronic messaging, web browsing and / or access to social networks; and (ii) means of access to the local EPC, for local telephony functionalities, local electronic messaging, access to local social networks, and access to a local data server; and / or the communication network is one of a mobile communication network and a broadband communication network.;

[0037] The invention also relates to a method for routing a data flow using the means of the above device.

[0038] Brief description of the drawings

[0039] An example of implementation of the invention will now be described, with reference to the appended drawings where the same references designate identical or functionally similar elements from one figure to another. Figure 1 generally illustrates a mobile communication architecture, comprising a local EPC and a remote EPC combined according to the teachings of the invention.

[0040] Figure 2 explains more precisely how the local EPC operates, with the different modules and equipment, specific to the invention, which make it possible to selectively route communications either within the local network or in a shared manner between the local network and the remote network.

[0041] Detailed description of embodiments of the invention

[0042] In Figure 1 and Figure 2, a decentralized communications system is shown with a local network 100 comprising, according to a conventional architecture, a local EPC (EPC-L) 110 and an E-UTRAN (Evolved Universal Terrestrial Radio Access Network) 120. The E-UTRAN constitutes the radio part of the local cellular network, which ensures the coupling by radio link of the local EPC 110 with user equipment (UE) 10, 20 located near an eNB base station 122 specific to the local network 100.

[0043] The local network 100 further comprises a module 130 here called MICS (Intelligent Communication and Security Manager), specific to the invention, for the management and interfacing between the local EPC 110 and the local E-UTRAN 120, on the one hand, and a P-WAN port 140 for access to a WAN (Wide Area Network) 200, on the other hand. A P-LAN port 150 may also be provided for access to a LAN (Local Area Network) 150, for example a WiFi network allowing data to be exchanged with UEs located nearby such as the UEs 10, 20.

[0044] The wide area network 200, on the other hand, is a network of conventional architecture comprising a remote EPC core network EPC-D interfaced to eNBs such as 222 (Figure 2) to exchange data with remote nomadic UEs, such as UE 30, located beyond the range of the base station 122 of the local network 100, but within the coverage area of ​​the wide area cellular network 200.

[0045] The local 110 and remote 210 EPCs are conventional structures built from pre-existing modules, the functions of which were explained in the introduction, namely: HSS subscriber registry server, MME mobility management entity, S-GW serving gateway, and P-GW data exchange and IP addressing gateway.

[0046] The HSS register 112 of the local EPC 110 is adapted to keep a list of users located within the coverage of the eNB 122 of the local network 100 and to continuously update this list. This list of local users can be continuously transmitted to the remote EPC 210. Indeed, every user has by default the subscription of his operator. Therefore, if the local network finds that the user's need cannot be managed at the local level, it transmits the request or the communication to the remote operator to which the user is subscribed.

[0047] In the example described here, a single eNB 122 specific to the local network 100 is considered, but it is of course possible to provide several eNBs specific to this same local network 100; in the latter case, the HSS 112 continuously maintains and updates the list of users located in the coverage area of ​​the eNB group of the local network 100, and of these eNBs only. The MICS 130 according to the invention is a module making it possible to selectively manage access i) either, as a priority, to the local EPC 110 ii) or, failing that, to the remote EPC 210, the transition between the local EPC 110 and the remote EPC 210 being done automatically and transparently for the user.

[0048] Thus, in the case for example where the UE 10 wants to establish a communication with the UE 30 (or with a remote data repository) which is out of range of the local network 100, then the communication will be done via the remote EPC 210 (communication referenced COM-D in Figure 1). On the other hand, when the UE 10 wants to establish a communication with a UE such as 20 (or with a local data repository, in particular integrated into the MICS) which is in the same cellular coverage area as it, then the communications will pass through the local EPC 112 (communication referenced COM-L in Figure 1), without it being necessary to involve the remote EPC 210.

[0049] We will now describe more precisely, with reference to Figure 2, the manner in which the MICS 130 module according to the invention is constituted and operates.

[0050] The MICS 130 comprises the following elements: a binary switch 132, here called CB, an automatic data configuration system 134, here called SCAD, operating very advantageously by functional interaction with a dedicated application, implemented in the UE of each user, a "cloud" platform of reconciled data 136, here called PCDR, and a local data security system 138, here called SSDL.

[0051] The role of the binary switch CB 132 is to direct communications originating from a UE located within range of the local network (for example the UE 10) either to the local EPC 110, if these communications are intended for a UE such as the UE 20 or to a local data repository, in particular a data repository integrated into the MICS such as the PCDR, located in the coverage area of ​​the local network 100, or to the remote EPC 210 if these communications are intended for a UE such as the UE 30 or to a remote data repository located outside the range of the network 100.

[0052] The CB switch 132 also ensures the recovery of the identifiers of the nomadic clients which have connected to the local network 100, to transmit them to the SCAD system 134, by interaction with the dedicated application implemented in the UE of the user affiliated with the local network.

[0053] Alternatively, the identifier of a nomadic client that has connected to the local network 100 can also be addressed to other local networks, each operating independently, but affiliated with the same organization. In this way, a user who has configured himself once in one of the affiliated local networks can subsequently be recognized without delay by all the other affiliated local networks (the user in question, however, being present in only one cell of a local network at a time).

[0054] Alternatively, to speed up the identification of a client and / or the establishment of a communication, it is possible, as soon as a client connects to the local network, to send the identification data of this client to both the local EPC 110 and the remote EPC 210, which will make it possible to update the HSS registers of the remote EPCs without delay. The switching by the binary switch CB between the local EPC and the remote EPC will then take place at a later stage.

[0055] The SCAD 134 automatic data configuration system is a module that provides the interface between the eNB 122 and a data server integrated into the local EPC. The SCAD retrieves data such as identifiers, address books, etc. from clients not yet registered, and registers them in the local repositories of the EPC 112, automatically and dynamically. This enrollment function (in response to the question "do you want to enter the local network?") makes it possible to accept data from new users, or to update data from known users, in the local repositories, again by interaction with the dedicated application implemented in the UE of the user affiliated with the local network.

[0056] The "cloud" platform for PCDR 136 reconciled data is an optional module which, if desired, can be used as a data repository for user-specific content such as personal data, video content, basic internet content, etc., so that this personal data can be exchanged directly with other users connected to the local network 100 - this without it being necessary to involve the remote network 200, and therefore avoiding unnecessarily overloading it with traffic with purely local destinations.

[0057] The role of the SSDL 138 local data security system is to prohibit access to local data in response to any external request, and to only grant this access to users previously declared and identified on the local network.

[0058] In particular, this function can be ensured by loading onto the UEs wishing to use the local network 100 a dedicated application integrating secure user identification functionalities (by means of a code or other similar technique), so as to identify and neutralize, before any action, attempts at unauthorized intrusions into the local network.

[0059] The architecture according to the invention that has just been described has multiple advantages.

[0060] Firstly, it allows for local management of communications between two (or more) local users (or between a local user and a local data repository, in particular a data repository integrated into the MICS such as the PCDR) - which in practice represents approximately 80% of the volume of exchanges of users affiliated with the local network - and this without any intervention from the remote network. This avoids overloading remote networks with communications that only concern local users or local data repositories, by avoiding: saturation due to excessive traffic, increased need for bandwidth, high cost for both users and operators, high carbon footprint, etc.

[0061] However, communications to be established between a local user and a remote user (or between a local user and a remote data repository) can be, in a completely transparent manner for the users, automatically switched to the remote network, thanks to the selective coupling between the local EPC and the remote EPC - and this independently of any intervention by the operator of the remote network.

[0062] Thus, connecting a local user with a remote user (or between a local user and a remote data repository) automatically leads to the transfer of exchanges to the networks of the third-party operators of each of the users. This procedure gives the local (EPC) network of the device a very high level of security, even watertight.

[0063] Furthermore, for what is only of interest to local users, it is possible to store personal data locally, which may be large (videos, photos, etc.), without overloading remote networks, nor unnecessarily increasing external data traffic (which remains exchanged locally) and their storage by large-capacity "cloud" servers managed by third-party operators.

[0064] Also, the fact that personal data and / or messages are exchanged only within the local network ensures a much better guarantee of confidentiality and security of this data than if it were sent over external networks, which may be vulnerable to hacking and the actions of malicious third parties. Indeed, as explained above, this data can only be delivered to users previously registered in the HSS 112 of the local EPC 110, that is to say to rigorously identified and listed users, access to these communications and to this data stored or exchanged locally remaining physically closed to all other users.

[0065] Finally, the implementation of the invention with the use of a dedicated application implemented or downloaded in the user's terminal (smartphone, tablet, PC, etc.) allows the user: to have in the interface the classic functionalities of: telephony (IP or not) via terrestrial and / or mobile networks, electronic messaging, web browsing, access to social networks, etc. but also to access the local network via the local EPCs and to communicate locally by telephony, electronic messaging, access to local social networks, access to the "cloud platform" for close data (PCDR 136, see above), etc. - which in concrete terms represents approximately 80% of uses - while retaining the possibility of benefiting from the extended services of the networks of remote third-party operators - approximately 20% of uses - from the local network.

Claims

CLAIMS 1. Device for routing a data stream from a first nomadic user equipment, UE (10) to a second nomadic UE (20; 30) and / or a data repository within a communication network comprising a remote core equipment, EPC (EPC-D), characterized in that, the communication network further comprising, within a local network, at least one local EPC (EPC-L) connected to at least one access node (122) and capable of being coupled to the remote EPC (EPC-D), the device for routing the data stream comprises: means (140) for coupling the local EPC (EPC-L) to the remote EPC (EPC-D); enrollment means (112, HSS), comprising a memory storing identification data of nomadic UEs (20; 30) which have connected to the local network; means for determining, from the memory of the enrollment means, whether or not the second nomadic UE (20; 30) and / or the data repository are attached to the local EPC (EPC-L);and means for automatically redirecting the data flow (132, CB) in response to said determination, comprising: means for priority routing, within the local network via the local EPC (EPC-L), of the data flow to the second nomadic UE (20) and / or the data repository, when it is determined that the second nomadic UE (20) and / or the data repository are attached to the local EPC (EPC-L), said priority routing means operating without intervention from the remote EPC (EPC-D); and default routing means, for deporting outside the local network, via the remote EPC (EPC-D), the data flow to the second nomadic UE (30) and / or the data repository, in the opposite case.; 2. Device according to claim 1, wherein the default routing means are means capable of routing the data stream to the second nomadic UE (30) and / or the data repository via the remote EPC (EPC-D) only when it is determined that the second nomadic UE (30) and / or the data repository are not attached to the local EPC (EPC-L).

3. Device according to claim 1, wherein the device further comprises: means for transmitting to the remote EPC (EPC-D) the identification data of the first nomadic UE (10).

4. Device according to claim 3, further comprising: a nomadic UE registration server (134, SCAD) comprising means for storing nomadic UE authentication data (10; 20), and in which the means for redirecting the data flow (CB) comprise means capable of redirecting the data flow to the nomadic equipment (10; 20) registered in the nomadic UE registration server (134, SCAD).

5. Device according to claim 4, further comprising: means for obtaining authentication data of a nomadic UE (10; 20); and means for registering said authentication data of the nomadic UE (10; 20) in the nomadic UE registration server (134, SCAD).

6. Device according to one of claims 4 and 5, further comprising: a local data server (136, PCDR); and means for accessing the local data server (136, PCDR) for the nomadic UEs (10; 20) registered in the nomadic UE registration server (134, SCAD).

7. Device according to claim 6, further comprising: means (138, SSDL) for controlling access to the local data server (136, PCDR), coupled to the nomadic UE registration server (134, SCAD) to control, from the authentication data, access to the local data server (136, PCDR) by the registered nomadic equipment (10; 20).

8. Device according to one of claims 4 to 7, in which the nomadic UEs (10; 20) comprise a dedicated application provided with secure user identification functionalities and capable of further interacting with the nomadic UE registration server (134, SCAD).

9. Device according to claim 8, in which the dedicated application comprises, in addition to the functionalities of secure identification of the user and interaction with the nomadic UE registration server: (i) means of access to the remote EPC (EPC-D), for telephony functionalities, IP or non-IP, via terrestrial and / or mobile networks, electronic messaging, web browsing and / or access to social networks; and (ii) means of access to the local EPC (EPC-L), for local telephony, local electronic messaging, access to local social networks, and access to a local data server (136, PCDR).

10. The device of claim 1, wherein the communication network is one of a mobile communication network and a broadband communication network.

11. Method for routing a data stream from a first nomadic user equipment, UE (10) to a second nomadic UE (20; 30) and / or a data repository within a communication network comprising a remote core equipment, EPC (EPC-D), characterized in that, the communication network further comprising at least one local EPC (EPC-L) coupled to the remote EPC (EPC-D), the method comprises: determining, from an enrollment memory storing identification data of nomadic UEs (20; 30) which have connected to the local network, whether or not the second nomadic UE (20; 30) and / or the data repository are attached to the local EPC (EPC-L);and automatically redirecting the data flow in response to said determination, comprising: priority routing, within the local network via the local EPC (EPC-L), of the data flow to the second nomadic UE (20) and / or a data repository when it is determined that the second nomadic UE (20) and / or the data repository are attached to the local EPC (EPC-L), said priority routing operating without intervention of the remote EPC (EPC-D), and default routing, with off-local network deportation, via the remote EPC (EPC-D), of the data flow to the second nomadic UE (30) and / or the data repository, otherwise.; 12. Routing method according to claim 11, wherein the default routing, with off-local network deportation, of the data flow comprises the redirection of the data flow to the second nomadic UE (30) and / or the data repository via the remote EPC (EPC-D) only if it is determined that the second nomadic UE (30) and / or the data repository are not attached to the local EPC (EPC-L).

13. The routing method of claim 12, further comprising: transmitting to the remote EPC (EPC-D) the identification data of the first nomadic UE (10).

Images