Port-Based Subscriber Correlation and ACS Device Management Method in CGNAT Networks
Patent Information
- Application Number
- TR202617573
- Authority / Receiving Office
- TR · TR
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2026-10-09
- Publication Date
- 2026-10-21
Smart Images

Figure 00000008_0000
Abstract
Description
1 TARIFF Port-Based Subscriber Correlation and ACS Device Management in CGNAT Networks Method Technical Area The invention relates to internet service providers (ISPs / Operators) using CGNAT (Carrier Grade Network 5). (Address Translation / Carrier Level Network Address Translation) infrastructures modems, routers and CPE (Customer Premises Equipment) belonging to subscribers Subscriber Facility Equipment) devices ACS (Auto-Configuration Server / Automatic This relates to remote management based on the Configuration Server) / TR-069. The invention specifically addresses the issue of multiple subscribers sharing the same public IPv4 address. In the network structures where it is located, the correct subscriber device is identified by using port-based correlation. remote configuration, troubleshooting, profile management, and on the right device. It relates to a method used for carrying out service operations. The invention Additionally, xDSL (Digital Subscriber Line), FTTH (Fiber To The Home) Fiber to the Home), FWA (Fixed Wireless Access), mobile access 15 and can be used in hybrid access infrastructures. State of the Art Currently, device management in existing ACS / TR-069 systems is mostly handled as follows: public IP address, serial number, 20 session information, periodic information records This is done through the same system. However, in the CGNAT architecture, many subscribers use the same system. The public shares an IPv4 address. This creates the following problems: Mixing up subscribers with the same IP address in the ACS system, 25 Performing remote operations on the wrong CPE device, 2 faulty reboot, profile deployment, or firmware (hardware) error (software) processes, Incorrect customer matching in fault management systems, TR-069 sessions cannot be associated with the correct subscriber, The complexity of log correlation, 5 Loss of accuracy in security and legal record-keeping processes. In current systems, NAT port information cannot be effectively integrated into the ACS management decision-making mechanism. Due to its exclusion, administrative accuracy is compromised for subscribers operating under CGNAT. This is especially true when there are millions of devices on large operator networks. The problem is becoming critical. 10 In conclusion, due to the negative aspects described above and the current solutions being the subject of discussion... Due to its shortcomings, an improvement is needed in the relevant technical field. It has been made. Purpose of the Invention The invention was created by drawing inspiration from existing situations and addressing the aforementioned drawbacks. 15 It aims to solve the problem. One purpose of the invention is to enable subscribers using the same public IP address to operate on a port-by-port basis. It is the ability to be separated. One aim of the invention is to enable the ACS system to identify the correct CPE device with high accuracy. It is the ability to do so. 20 One aim of the invention is to prevent transactions from being processed for the wrong subscriber. One aim of the invention is to make the TR-069 session management system reliable. One aim of the invention is to speed up the debugging processes for operations teams. One aim of the invention is to automate CGNAT log correlation. One aim of the invention is to ensure that firmware, profiles, QoS (quality of service) and service policies are accurate. It is applied on the device. 3 One purpose of the invention is to improve the operator-side OSS / BSS (Operations Support Systems / Operations) with Business Support Systems The key is ensuring proper integration. One aim of the invention is to provide management in large-scale networks where IPv4 resources are insufficient. increasing its sustainability. 5 To achieve the objectives described above, port-based subscriber systems are used in CGNAT networks. A correlation-based ACS device management method has been developed, and this method: - The subscriber's facility equipment establishes a connection to the management server. - Created via the CGNAT system and in the subscriber session database The stored NAT session information is analyzed by the port correlation engine. 10 being done, - Port correlation engine, public IP, source port, destination port, time Identifying the relevant subscriber through their stamp and session information, - transferring the obtained correlation result to the management decision module, - The management decision module allows only verified subscribers to perform the relevant TR-069 operation. 15 redirection to facility equipment device It includes the steps involved in the process. In a preferred configuration of the invention, the method is performed by a log analysis system, NAT. and TR-069 logs are being analyzed. In a preferred configuration of the invention, the method includes the OSS / BSS integration layer (8) 20 Data exchange is carried out by transferring accurate subscriber information to OSS / BSS systems. is provided. The structural and characteristic features and all the advantages of the invention are given in the figures below. This becomes clearer thanks to the detailed explanation written with references to these figures. This will be understood, and therefore the evaluation should also take these forms and detailed explanations into account. 25 It needs to be done by taking precautions. Figures that will help understand the invention. 4 Figure 1 represents the elements that enable the realization of the method described in the invention. It is a drawing. Explanation of Part References 1. Subscriber facility equipment 2. Management server 5 3. CGNAT system 4. Port correlation engine 5. Subscriber session database 6. Management decision module 7. Log analysis system 10 8. OSS / BSS integration layer Detailed Description of the Invention In this detailed explanation, the preferred configurations of the method in question are described only. This is explained to facilitate a better understanding of the subject. The elements that enabled the realization of the method described in the invention are: 15 - subscriber facility equipment (1), - management server (2), - CGNAT system (3), - port correlation engine (4), - subscriber session database (5), 20 - management decision module (6), - log analysis system (7) and - OSS / BSS integration layer (8). In the method that is the subject of the invention, subscriber installation equipment (1) is the end user’s DSL, fiber, It is an end device that operates with LTE or 5G access technologies. Subscriber facility equipment (1), digital 25 It is the device where the usage context is determined and network behavior is configured, preferably. modem or router. Management server (2) (ACS / TR-069 Server), remotely It performs device management. The CGNAT system (3) allows many subscribers to use the same public IP. It enables sharing. The port correlation engine (4) uses public IP and port matching. It identifies the correct subscriber. The subscriber session database (5) stores NAT session records. The management decision module (6) determines which device the operation will be applied to. Log analysis 5 The system (7) analyzes NAT and TR-069 logs. OSS / BSS integration layer (8) It enables data exchange with operating systems. In the method described in the invention, subscriber facility equipment (1) management server (2) connection When this happens, the system doesn't just process information based on public IP addresses. The method described in the invention works as follows: 10 - Subscriber facility equipment (1) connects to management server (2), - Created via CGNAT system (3) and in subscriber session database (5) Stored NAT session information is analyzed by the port correlation engine (4). is done, - port correlation engine (4): 15 that public IP, o source port, o destination port, the stamp of that time, that session information 20 It identifies the relevant subscriber through this method. - The correlation result obtained is transferred to the management decision module (6), - Management decision module (6), the relevant TR-069 operation can only be performed by verified subscribers. directs to the facility equipment (1) device, The method described in the invention allows 25 different subscribers using the same public IP address. Mixing them together is prevented. The method described in this invention can also be used in the following areas: - IPv6 transition networks, 6 - DS-Lite (Dual-Stack Lite), - MAP-T (Mapping of Address and Port using Translation) Address and Port Mapping) - MAP-E (Mapping of Address and Port using Encapsulation (Address and Port Mapping Using), 5 - NAT444 (Network Address Translation 444) - Mobile core networks, - 5G FWA (5G Fixed Wireless Access), - Wi-Fi hotspot (access point) systems, - TR-369 USP (User Services Platform) management systems. 10
Claims
7 REQUESTS 1. ACS device management method with port-based subscriber correlation in CGNAT networks. Its characteristic is: - connection of subscriber facility equipment (1) to management server (2) accomplishment, 5 - Created via CGNAT system (3) and in subscriber session database (5) The stored NAT session information is analyzed by the port correlation engine (4). being done, - port correlation engine (4), public IP, source port, destination port, time 10 - transferring the obtained correlation result to the management decision module (6), - the management decision module (6) can only verify the relevant TR-069 transaction. redirection to subscriber facility equipment (1) device It includes the steps of the process.
2. The method is compliant with Request 1 and its feature is; by the log analysis system (7), NAT and TR-15 This involves analyzing logs 069.
3. Method that complies with Request 1 or 2 and has the following feature: OSS / BSS integration layer (8) Data exchange is carried out by transferring accurate subscriber information to OSS / BSS systems. is to ensure.
