Home gateway service identification method, apparatus and system

Abstract

Disclosed in the present invention are a home gateway service identification method, apparatus and system. The method comprises the steps: a home gateway identifies, by determining an access destination address of a terminal connected to the home gateway, the type of a service request initiated by the terminal; if the request initiated by the terminal is identified as an IPTV service request, the home gateway routes the request to an IPTV private network plane; and if the request initiated by the terminal is identified as an Internet service request, the home gateway forwards the request to an Internet plane, and binds all remaining ports, except for a port used by the terminal carrying an IPTV service, to a public network connection. In the present application, two or more services can be simultaneously accessed at a single port, thereby satisfying the requirement for a television to simultaneously access a plurality of services, and by performing downlink port binding of the home gateway on the basis of service identification, ensuring the security of the ports.

Description

Home gateway service identification methods, devices and systems Technical Field

[0001] This invention relates to the field of communication technology, and in particular to a method, apparatus and system for identifying home gateway services. Background Technology

[0002] Home gateways provide services including internet, IPTV, voice, and device management. Devices using these services are typically singular; for example, IPTV is provided by set-top boxes, voice by telephones, and internet by computers, mobile phones, and televisions. The ports connected to the home gateway are isolated, resulting in limited access to specific services. For instance, computers, mobile phones, and televisions can access internet services but not IPTV. The IPTV port of the home gateway provides an IPTV service channel for IPTV set-top boxes but is isolated from the internet service channel, preventing internet access. With the development of optical access technology, various industries such as homes, industrial parks, hotels, high-speed rail, and airports are experiencing diverse service offerings, leading to a growing user base and increasing service types. The widespread application of IPTV services results in a variety of terminals supporting IPTV, such as televisions that require both internet and IPTV services. However, traditional port binding only allows access to one service, not both. While the full-routing mode of a home gateway allows connected terminals to access two or more services, all ports of the home gateway are accessible, hindering operator management of IPTV services and users and compromising security.

[0003] Currently, home gateways need to identify the services accessed by devices from different downstream ports. These devices may access one or more of the following services: IPTV, Internet, voice, and network management. The most common scenario is that downstream devices access both IPTV and Internet simultaneously. The most common way to address this is to set the home gateway to full-routing mode. Full-routing mode means that the home gateway, based on its routing table, sends packets from downstream devices to different services. In this case, all downstream devices access different services according to the home gateway's routing table; all downstream devices can access IPTV, which does not meet the operator's requirements for managing services. Furthermore, current methods for downstream devices accessing IPTV are typically port-bound, meaning one or two ports are designated for IPTV access only. Devices connected to these bound ports can only access IPTV and cannot access Internet services. When a television carrying IPTV needs to use both Internet and IPTV services, manual unplugging and plugging of the network cable to change ports is required depending on the service being accessed.

[0004] Therefore, how to access multiple services simultaneously while ensuring the security of their ports is a technical problem that urgently needs to be solved. Summary of the Invention

[0005] The main objective of this invention is to provide a home gateway service identification method, device, and system that enables simultaneous access to two or more services on a single port, addressing the need for televisions to access multiple services simultaneously. Furthermore, by binding the downlink port of the home gateway after service identification, port security is ensured.

[0006] Firstly, this application provides a method for identifying home gateway services, wherein the method includes the following steps:

[0007] The home gateway identifies the type of service request initiated by the terminal by determining the destination address of the terminal connected to it;

[0008] If the request initiated by the identified terminal is an IPTV service request, the home gateway routes it to the IPTV private network plane;

[0009] If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports, except those used by the IPTV service terminal, to the public network connection.

[0010] In conjunction with the first aspect mentioned above, as an optional implementation method, the destination address accessed by the data packets of the terminal connected to the home gateway is obtained;

[0011] The home gateway identifies the service type accessed by the terminal connected to the home gateway based on the routing table information and the destination address accessed by the data packet. The service types include: IPTV service, Internet service and network management service.

[0012] In conjunction with the first aspect mentioned above, as an optional implementation, based on the first and second WAN connections established on the home gateway, VLAN information is set for the first and second WAN connections respectively, and the VLAN_ID of the first WAN connection is set to the first identifier; the VLAN_ID of the second WAN connection is set to the second identifier.

[0013] Based on the configured identifier, the VLAN information of the outbound data packets forwarded through the routing table is analyzed and compared with the VLAN information of each service under the WAN connection to obtain the service type accessed by the outbound data packets.

[0014] In conjunction with the first aspect mentioned above, as an optional implementation, different tags are applied to data packets from each downlink connection port of the home gateway to identify the port information from which the data packets originate, wherein the port information is the port number of the home gateway.

[0015] In conjunction with the first aspect mentioned above, as an optional implementation method, the port number of the data packet and the VLAN information of the outgoing data packet are obtained;

[0016] If multiple values ​​are found in the VLAN information of the outgoing data packet, it is determined that the device connected to the home gateway port number needs to access different types of services.

[0017] If the VLAN information of the outgoing data packet has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

[0018] In conjunction with the first aspect mentioned above, as an optional implementation method, the home gateway is set to full routing mode and a routing table is configured.

[0019] The home gateway is used to initiate IPoE connections and obtain IP addresses, including: IPTV private network IP, private network IP, and public network IP, and interacts with the IPTV service platform, gateway management platform, and Internet service platform respectively.

[0020] Configuring the routing table includes: receiving routing table configuration information from the network management platform, and receiving configuration information from the network management platform for binding different ports with different WAN connections.

[0021] In conjunction with the first aspect mentioned above, as an optional implementation method, the number of entry ports corresponding to each outgoing service of the home gateway is managed according to the service management quantity issued by the user management platform, wherein the service management quantity refers to the number of devices connected to the home gateway to access services.

[0022] In conjunction with the first aspect mentioned above, as an optional implementation method, the home gateway is used to obtain the IP addresses of the Internet plane, the IPTV private network, and the network management plane, respectively, so as to enable the terminal to interact with the IPTV service platform, the Internet platform, and the network management platform.

[0023] In conjunction with the first aspect above, as an optional implementation, when it is identified that a device accessing one or more ports of the home gateway is accessing multiple service types, the MAC address of the port device is obtained and set as a MAC address that can access multiple service types, while the remaining MAC addresses are set as MAC addresses that can only access a single service type.

[0024] Secondly, this application provides a home gateway service identification device, the device comprising:

[0025] The identification module is used by the home gateway to identify the type of service request initiated by the terminal by judging the destination address of the terminal connected to it.

[0026] The processing module is used to route the request initiated by the terminal to the IPTV private network plane if the home gateway identifies that the request is an IPTV service request.

[0027] If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports, except those used by the IPTV service terminal, to the public network connection.

[0028] Thirdly, this application provides a system for identifying home gateway services, comprising:

[0029] The access module is used to initiate IPoE connections to obtain multiple IPs, including: IPTV private network IP, TR069 private network IP, and public network IP, and to interact with the IPTV service platform, gateway management platform, and Internet service platform respectively.

[0030] The management module is used to receive configuration information of the routing table issued by the network management platform, receive configuration information of different ports and different WAN connections bound by the network management platform, and select the corresponding WAN connection when forwarding data.

[0031] The transmission module is used to bind all ports except those used by the terminal carrying IPTV services to the public WAN connection, and transmit the data of the IPTV soft terminal using the private WAN connection according to the routing table configured by the management module, while transmitting the data of other Internet applications using the public WAN connection.

[0032] The security module is used to set MAC filtering rules for the private network WAN connection based on the MAC address used by the terminal carrying the IPTV service, so that only the terminal carrying the IPTV service is allowed to access it.

[0033] This application provides a home gateway service identification method, apparatus, and system. The method includes the following steps: the home gateway determines the type of service request initiated by a terminal by judging the destination address of the terminal connected to it; if the request is identified as an IPTV service request, the home gateway routes it to the IPTV private network plane; if the request is identified as an Internet service request, the home gateway forwards it to the Internet plane and binds all ports except those used by the IPTV service terminal to the public network connection. This application enables simultaneous access to two or more services on a single port, solving the need for televisions to access multiple services simultaneously. Furthermore, the binding of the home gateway's downlink ports after service identification ensures port security.

[0034] It should be understood that the above general description and the following detailed description are merely exemplary and do not limit the invention. Attached Figure Description

[0035] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0036] Figure 1 is a flowchart of a home gateway service identification method provided in an embodiment of this application;

[0037] Figure 2 is a schematic diagram of a home gateway service identification device provided in an embodiment of this application;

[0038] Figure 3 is a schematic diagram of service identification provided in the embodiments of this application;

[0039] Figure 4 is a schematic diagram of a home gateway service identification system provided in an embodiment of this application;

[0040] Figure 5 is a schematic diagram of a home network provided in an embodiment of this application. Detailed Implementation

[0041] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Rather, they are merely examples of apparatuses and methods consistent with some aspects of the invention as detailed in the appended claims.

[0042] Furthermore, the accompanying drawings are merely illustrative of this disclosure and are not necessarily drawn to scale. Some of the block diagrams shown in the drawings represent functional entities and do not necessarily correspond to physically or logically independent entities.

[0043] The embodiments of this application will be further described in detail below with reference to the accompanying drawings.

[0044] Referring to Figure 1, which is a flowchart of a business binding method provided by the present invention, the method includes the following steps:

[0045] Step S101: The home gateway identifies the type of service request initiated by the terminal by determining the destination address of the terminal connected to it.

[0046] Specifically, before identifying the type of service request initiated by the terminal, the home gateway's working mode is set to full routing mode, and the routing table is configured;

[0047] The home gateway is used to initiate IPoE connections and obtain IP addresses, including: IPTV private network IP, private network IP, and public network IP, and interacts with the IPTV service platform, gateway management platform, and Internet service platform respectively.

[0048] Configuring the routing table includes: receiving routing table configuration information from the network management platform, and receiving configuration information from the network management platform for binding different ports with different WAN connections.

[0049] Specifically, the home gateway supports initiating IPoE connections. It supports obtaining three IPs: an IPTV private network IP, a TR069 private network IP, and a public IP; these interact with the IPTV service platform, the gateway management platform, and the internet service platform, respectively.

[0050] Configure the home gateway to operate in full routing mode via network management. Specifically, the home gateway supports routing table configuration information distributed by the network management platform. It also supports the gateway platform distributing configuration information for binding different ports to different WAN connections.

[0051] All ports except those used by the terminal hosting the IPTV soft terminal are bound to the public WAN connection. Based on the routing table configured in the management function, data from the IPTV soft terminal is transmitted using the private WAN connection, while data from other internet applications is transmitted using the public WAN connection.

[0052] Prior to identification, the process also includes: managing the number of entry ports corresponding to each outgoing service of the home gateway based on the service management quantity issued by the user management platform, wherein the service management quantity refers to the number of devices connected to the home gateway to access services.

[0053] Specifically, based on the management quantity for a certain service issued by the user management platform, the number of entry ports corresponding to each egress service is managed. For example, if the management quantity for IPTV service is 2, then the number of IPTV service access ports managed is 2.

[0054] In one embodiment, the gateway management platform is used for remote management and is responsible for sending the number and type of services to the user's home gateway (the type refers to the working mode of the home gateway. Currently, there are two working modes: port binding and full routing. In this invention, the purpose is to notify the home gateway to work in full routing mode). The number refers to the number of devices connected to the home gateway that can access a certain service. For example, the number of devices that can access the IPTV service under the home gateway is 2. By default, the IPTV service number is 1, and the Internet number is the maximum number of device connections. In this invention, the type sent to the home gateway is the routing mode and the corresponding routing table under this mode, as well as the username and password of the IPTV private network. After obtaining the username and password of the IPTV private network, the home gateway obtains the IPTV private network IP address through IPOE using the home gateway's networking function.

[0055] Then, the destination address accessed by the data packets from the terminal connected to the home gateway is obtained;

[0056] The home gateway identifies the service type accessed by the terminal connected to the home gateway based on the routing table information and the destination address accessed by the data packet. The service types include: IPTV service, Internet service and network management service.

[0057] Specifically, the identification of the service request type initiated by the terminal involves setting VLAN information for the first and second WAN connections established on the home gateway, with the VLAN_ID of the first WAN connection set as the first identifier and the VLAN_ID of the second WAN connection set as the second identifier. Based on the set identifiers, the VLAN information of the outgoing data packets after forwarding through the routing table is analyzed and compared with the VLANs of each service under the WAN connection to obtain the service type accessed by the outgoing data packets.

[0058] For example, two WAN connections (WAN_Other and WAN_INTERNET) are established on a home gateway. VLAN information is configured for each WAN connection: WAN_Other's VLAN_ID is set to VLAN_ID1, and WAN_INTERNET's VLAN_ID is set to VLAN_ID2. WAN_Other obtains a private network IP address via IPoE or PPPoE routing and uses this private IP address to interact with the IPTV private network service platform. WAN_INTERNET obtains a public network IP address via routing and uses this public IP address to interact with the public network service platform. By analyzing and comparing the VLAN information of the outgoing data packets after routing through the routing table, the service type at the outgoing point can be determined. For example, the VLAN for IPTV is VLAN_ID1, and the VLAN for the Internet is VLAN_ID2. If it is an IPTV service, it communicates with the IPTV private network using the obtained IPTV private network IP address.

[0059] In one embodiment, data packets from each downlink connection port of the home gateway are tagged with different labels to identify the port information from which the data packets originate, wherein the port information is the port number of the home gateway.

[0060] To illustrate this, data packets from each downlink connection port of the home gateway are labeled to identify the port information from which the data packets originated. For example, a data packet from the first port is labeled 'a', and a data packet from the second port is labeled 'b'. It's important to explain that labeling the packets here is to identify the specific port number of the packet during subsequent identification. While the packet type has been identified above, the port of origin is still unknown. Therefore, the next step is to determine which port the packet is on and which services it needs to access.

[0061] By using data packet tags and service types, the system determines the type of service that the device connected to the home gateway port needs to access. These service types include IPTV, internet, and network management services. Specifically, it obtains the port number of the data packet and the VLAN information of the outgoing data packet. If multiple values ​​are found for the VLAN information of the outgoing data packet, it is determined that the device connected to the home gateway port needs to access different types of services. If only one value is found for the VLAN information of the outgoing data packet, it is determined that the device connected to the home gateway port only accesses one type of service.

[0062] For example, by analyzing the port information of the data packet source (the number of downstream ports varies depending on the type of home gateway, ranging from 1 to 16; specifically, it refers to which port of the home gateway) and the service type of this data egress, we can determine the service type accessed by the device connected to that port. For instance, a data packet labeled 'a' may have an egress VLAN information that is sometimes 85 and sometimes 100. A data packet labeled 'b' may have an egress VLAN information that is always 100 (for example, the IPTV private network VLAN value is 85, and the public network VLAN value is 100. When data packet A from port a is labeled with VLAN 85 at the egress, this packet is sent to the IPTV private network. Similarly, when data packet B from port a is labeled with VLAN 100 at the egress, this packet is sent to the public network. In other words, the VLAN for data A on the same port a is 85, and the VLAN for data B is 100, sometimes 85 and sometimes 100). This indicates that the device connected to the first port of the home gateway needs to access IPTV and Internet services. This indicates that the device connected to the second port of the home gateway is only providing internet services. Understandably, at this step, it can be accurately identified what specific service each port's data packets need to access.

[0063] Step S102: If the request initiated by the identified terminal is an IPTV service request, the home gateway routes it to the IPTV private network plane.

[0064] Understandably, if the request initiated by the terminal is an IPTV service request, the home gateway will transmit the service data using the private WAN connection based on the routing table information, while other service data will be transmitted using the public WAN connection. In other words, knowing the access type, the gateway routes the request to the destination address using the routing table.

[0065] Step S103: If the request initiated by the identified terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports except those used by the IPTV service terminal to the public network connection.

[0066] Understandably, if the request initiated by the terminal is an internet service request, the home gateway will transmit the service data using the public WAN connection based on the routing table information.

[0067] Understandably, the home gateway, based on the destination address of the connected terminals and the routing table configuration issued by the platform, identifies requests initiated by terminals as IPTV service requests and routes them to the IPTV private network plane. For user access requests using internet services, the home gateway forwards them to the internet plane. All ports except those used by the terminals carrying IPTV soft terminals are bound to the public WAN connection.

[0068] For example, a home gateway analyzes packets from each downlink port to determine the service that needs to be accessed. (At this point, each port can access both A and B.) When it detects that a certain port needs to access both A and B, it binds other ports to only allow internet access. (At this point, other ports can only access B, so this port can access both A and B).

[0069] For example, in the traditional full-router mode, all ports on a home gateway can access IPTV and the internet. If this home gateway has four ports, then all televisions connected to those four ports can access IPTV. Since operators charge based on the number of IPTV devices, in this model, with all four ports accessible, a user who originally had one service can now use four devices, resulting in a loss of revenue for the operator.

[0070] Furthermore, the fact that all four ports can access IPTV also poses a security risk to the IPTV platform. For example, if a virus-infected computer is connected to one of these ports, it could introduce a virus to the IPTV network.

[0071] The solution proposed in this application is as follows:

[0072] Example 1:

[0073] 1. The management platform issues management requirements to a home gateway with 4 connection ports, which are that the home gateway allows 1 terminal to access IPTV and the home gateway is working in full routing mode.

[0074] 2. The home gateway receives instructions from the network management platform and sets itself to full-router mode. (This removes the original mode, which in most cases had port 2 bound to IPTV service and ports 1, 3, and 4 bound to internet service. Terminals connected to different ports could only access the corresponding service.)

[0075] 3. The home gateway begins to acquire data packets from the downstream port and identifies the destination of the packets.

[0076] For example, a user connects a TV with a software terminal to port 3. Port 1 is used to connect devices such as computers.

[0077] The home gateway identifies packets from each port and their destinations. Once it detects that a packet on port 3 is accessing both the internet and IPTV, it immediately binds ports 1, 2, and 4 to the internet.

[0078] As a result, ports 1, 2, and 4 can only access the internet, while port 3 operates in routing mode. At this point, only port 3 can access the internet and IPTV.

[0079] Example 2:

[0080] Building on step 1, the operator activated two IPTV services for the customer. In step 3 above, after recognizing port 3 accessing both IPTV and the internet, it continues to identify the next port for IPTV and internet access. The user then connects port 4 to another television with a soft terminal. The home gateway, recognizing that packets from port 4 are also destined for IPTV and the internet, binds ports 1 and 2 to the internet.

[0081] As a result, ports 3 and 4 can access both the internet and IPTV simultaneously. Ports 1 and 2 can only access the internet.

[0082] Example 3:

[0083] Building upon point 1, if a user moves port 3 to a computer and port 2 to a television, then port 2 will be detected as requiring internet and IPTV access. Furthermore, the ISP has only activated one IPTV service. Therefore...

[0084] The home gateway binds ports 1, 3, and 4 to the Internet.

[0085] Result: Only port 2 can access IPTV and the Internet; the other ports can only access the Internet.

[0086] Example 4:

[0087] Based on step 1, obtain the MAC address of the device on port 3. This is the MAC address of the TV with a soft terminal. Use this MAC address as the MAC address that can access the Internet and IPTV. Other MAC addresses can only access the Internet.

[0088] Result: Regardless of which port the TV is connected to, it can access IPTV and the internet. However, other TVs cannot access them. Even if other TVs are connected to port 3, they still cannot access IPTV.

[0089] In one embodiment, a home gateway is used to obtain IP addresses from the internet plane, the IPTV private network, and the network management plane, respectively, to enable data interaction between the terminal and the IPTV service platform, the internet platform, and the network management platform. For example, when a terminal television requests an IPTV service request, it sends it to the home gateway. The home gateway, based on its routing table, identifies the IPTV service and obtains the IP address as described above, then forwards it to the IPTV platform for communication. It should be noted that the terminal cannot directly obtain the IPTV's IP address; therefore, it obtains it through the home gateway to enable communication between the terminal and IPTV. The same principle applies to other services (internet, network management).

[0090] Optionally, when it is identified that a device accessing one or more ports of the home gateway is accessing at least two service types, the MAC address of that port device is obtained, and it is set as a MAC address that can access multiple service types. The remaining MAC addresses are set as MAC addresses that can only access a single service type. That is, assuming device D accesses both service A and service B, the MAC address of device D can be directly obtained, and all MAC addresses except that MAC address can be set to only access either service A or service B. In other words, only one MAC address can access both service A and service B. When any other MAC address tries to access both service A and service B, it is directly rejected.

[0091] In summary, this application identifies the service type accessed by data packets forwarded through the routing table in the home gateway, and tags data packets on each downlink connection port of the home gateway. By using data packet tags and service types, the type of service accessed by the device connected to the home gateway is confirmed. The number of services managed is added in the user management platform, and the user management platform sends the number and type of services managed to the user's home gateway (purpose: to meet the needs of a small number of users, such as a household requiring two TV soft terminals for IPTV service. Therefore, the operator needs to manage the number of access terminals for one user). The home gateway controls the port binding type by using the management information from the user management platform, combined with the method of identifying the source tag and outgoing service type of the data packets. Ultimately, this achieves the service management requirements according to the operator.

[0092] Referring to Figure 2, which is a schematic diagram of a service binding device provided by the present invention, the device includes:

[0093] Identification module 201: It is used by the home gateway to identify the type of service request initiated by the terminal by judging the destination address of the terminal connected to it.

[0094] Processing module 202: If the request initiated by the terminal is identified as an IPTV service request, the home gateway routes it to the IPTV private network plane;

[0095] If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports, except those used by the IPTV service terminal, to the public network connection.

[0096] Furthermore, in one possible implementation, the identification module is also used to obtain the destination address accessed by the data packets of the terminal connected to the home gateway;

[0097] The home gateway identifies the service type accessed by the terminal connected to the home gateway based on the routing table information and the destination address accessed by the data packet. The service types include: IPTV service, Internet service and network management service.

[0098] Furthermore, in one possible implementation, the processing module is also configured to set VLAN information for the first and second WAN connections established on the home gateway, respectively, and set the VLAN_ID of the first WAN connection to a first identifier; and set the VLAN_ID of the second WAN connection to a second identifier.

[0099] Based on the configured identifier, the VLAN information of the outbound data packets forwarded through the routing table is analyzed and compared with the VLAN information of each service under the WAN connection to obtain the service type accessed by the outbound data packets.

[0100] Furthermore, in one possible implementation, the processing module is also used to tag different data packets from each downlink connection port of the home gateway to identify the port information of the data packet source, wherein the port information is the port number of the home gateway.

[0101] Furthermore, in one possible implementation, the processing module is also used to obtain the port number of the data packet and the VLAN information of the outgoing data packet;

[0102] If multiple values ​​are found in the VLAN information of the outgoing data packet, it is determined that the device connected to the home gateway port number needs to access different types of services.

[0103] If the VLAN information of the outgoing data packet has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

[0104] Furthermore, in one possible implementation, the processing module is also used to set the working mode of the home gateway to full routing mode and configure the routing table;

[0105] The home gateway is used to initiate IPoE connections and obtain IP addresses, including: IPTV private network IP, private network IP, and public network IP, and interacts with the IPTV service platform, gateway management platform, and Internet service platform respectively.

[0106] Configuring the routing table includes: receiving routing table configuration information from the network management platform, and receiving configuration information from the network management platform for binding different ports with different WAN connections.

[0107] Furthermore, in one possible implementation, the processing module is also used to manage the number of entry ports corresponding to each outgoing service of the home gateway according to the service management quantity issued by the user management platform, wherein the service management quantity is the number of devices connected to the home gateway to access services.

[0108] Furthermore, in one possible implementation, the identification module is also used to obtain the IP addresses of the Internet plane, the IPTV private network, and the network management plane using the home gateway, so as to enable the terminal to interact with the IPTV service platform, the Internet platform, and the network management platform.

[0109] Furthermore, in one possible implementation, the processing module is also configured to, when it is identified that a device accessing one or more ports of the home gateway is accessing multiple service types, obtain the MAC address of the port device, set it as a MAC address that can access multiple service types, and set the remaining MAC addresses as MAC addresses that can only access a single service type.

[0110] Referring to Figure 3, which is a schematic diagram of service identification provided by the present invention, as shown in Figure 3:

[0111] The gateway management platform, used for remote management, is responsible for sending the number and type of services to the user's home gateway. The number refers to the number of devices connected to the home gateway that can access a particular service. For example, the number of devices accessing IPTV services under the home gateway is 2. By default, the IPTV service number is 1, and the Internet number is the maximum number of device connections. In this invention, the type sent to the home gateway refers to the routing mode and the corresponding routing table under this mode, as well as the username and password for the IPTV private network. After obtaining the IPTV private network username and password, the home gateway uses its networking function to obtain the IPTV private network IP address via IPOE.

[0112] The service identification module in the home gateway is responsible for analyzing the service type of the outgoing data packets. It analyzes and compares the VLAN information of the outgoing data packets after forwarding through the routing table by identifying the VLANs of each service under the WAN connection, thereby determining the service type. For example, the VLAN for IPTV is VLAN_ID1, and the VLAN for the Internet is VLAN_ID2, etc. If it is an IPTV service, it communicates with the IPTV private network through the obtained IPTV private network IP address.

[0113] The port identification module in a home gateway is responsible for tagging data packets from each downlink connection port of the home gateway to identify the port information from which the data packet originated. For example, a data packet from the first port is tagged as 'a', and a data packet from the second port is tagged as 'b'.

[0114] The analysis module is responsible for analyzing the port information of the data packet source and the service type of this data egress, determining the service type accessed by the device connected to that port. For example, a data packet with label 'a' may have an egress VLAN information that is sometimes 85 and sometimes 100. A data packet with label 'b' may have an egress VLAN information that is only 100. This indicates that the device connected to the first port of the home gateway needs to access IPTV and Internet services. The device connected to the second port of the home gateway may only need Internet services.

[0115] The management module is responsible for managing the number of entry ports corresponding to each egress service based on the service management quantity issued by the user management platform. For example, if the issued IPTV service management quantity is 2, then the managed entry ports can access the IPTV service in 2 different ways. The method is as follows: after the analysis module indicates that two ports are simultaneously accessing the IPTV service, the management module binds the other ports to only access the internet service. For example, for a device with 4 ports, if the analysis module indicates that the 1st and 3rd ports are simultaneously accessing the IPTV service, then the 2nd and 4th ports will be bound to only access the internet service. (If the user changes the 3rd port to the 4th port, then the two simultaneous IPTV service accesses will be 1 and 4, in which case the 2nd and 3rd ports will be bound to only access the internet service.)

[0116] Referring to Figure 4, which shows the network access system architecture for the intelligent IPTV service provided by the present invention, as shown in Figure 4:

[0117] Users often need to access both IPTV and internet services through their terminals (TV sets). The home gateway, working in conjunction with the IPTV soft terminal, supports cross-network access (simultaneously supporting access to both IPTV and internet services) and intelligent service access. The home gateway needs to obtain addresses from both the internet plane and the IPTV private network plane. Based on the destination address of the terminal (TV set) and the routing table configuration issued by the platform, the home gateway distinguishes between IPTV service requests and forwards them to the IPTV private network plane. For internet service access requests from users, the home gateway forwards them to the open internet plane.

[0118] The access module is used to initiate IPoE connections to obtain multiple IPs, including: IPTV private network IP, TR069 private network IP, and public network IP, and interact with the IPTV service platform, gateway management platform, and Internet service platform respectively.

[0119] The management module is used to receive configuration information of the routing table issued by the network management platform, receive configuration information of different ports and different WAN connections bound by the network management platform, and select the corresponding WAN connection when forwarding data.

[0120] The transmission module is used to bind all ports except those used by the terminal carrying IPTV services to the public WAN connection, and transmit the data of the IPTV soft terminal using the private WAN connection according to the routing table configured by the management module, while transmitting the data of other Internet applications using the public WAN connection.

[0121] The security module is used to set MAC filtering rules for the private network WAN connection based on the MAC address used by the terminal carrying the IPTV service (that is, when it is identified that a device accessing one or more ports of the home gateway is accessing multiple service types, the MAC address of the port device is obtained and set as the MAC address that can access multiple service types, and the remaining MAC addresses are set as the MAC addresses that can only access a single service type), so as to allow only the terminal carrying the IPTV service to access it.

[0122] Referring to Figure 5, which shows a schematic diagram of a home network provided by the present invention, as shown in Figure 5:

[0123] The home gateway connects to the IP network via fiber optic or Ethernet cable, communicating with the IPTV private network and the internet. Televisions or other terminals with IPTV software installed connect to the home gateway through any port. Mobile phones, computers, and other terminals can connect to the home gateway via wired or wireless methods. (The original solution only allowed IPTV service access through a designated port, and this designated port could only access IPTV, not the internet.)

[0124] Industry experts say that home gateways have different service capabilities and different WAN connections. WAN_Other is the WAN connection for accessing IPTV, and WAN_INTERNET is the WAN connection for accessing the Internet.

[0125] To ensure network security: WAN_Other allows access from specified ports (LAN1 / SSID1, etc.) (binding all ports except the specified port to WAN_INTERNET), and WAN_INTERNET can be accessed by all ports. Data from LAN1 is routed via routing forwarding, according to the routing configuration table issued by the gateway management platform. IP data with destination addresses in the routing table is routed to WAN_Other, and other data is routed to WAN_INTERNET.

[0126] Configure a security policy for WAN_Other to allow only terminal devices carrying IPTV soft terminals to access the specified port (LAN1 / SSID1, etc.). This can be achieved by filtering the MAC addresses of the terminal devices carrying IPTV soft terminals.

[0127] The above description is merely a specific embodiment of this application, enabling those skilled in the art to understand or implement this application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this application. Therefore, this application is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features claimed herein.

Claims

1. A method for identifying home gateway services, characterized in that, include: The home gateway identifies the type of service request initiated by the terminal by determining the destination address of the terminal connected to it; If the request initiated by the identified terminal is an IPTV service request, the home gateway routes it to the IPTV private network plane; If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports, except those used by the IPTV service terminal, to the public network connection.

2. The method according to claim 1, characterized in that, The home gateway identifies the type of service request initiated by the terminal by determining the destination address of the terminal connected to it, including: Obtain the destination address accessed by data packets from terminals connected to the home gateway; The home gateway identifies the service type accessed by the terminal connected to the home gateway based on the routing table information and the destination address accessed by the data packet. The service types include: IPTV service, Internet service and network management service.

3. The method according to claim 2, characterized in that, The identification of the service type accessed by the terminal connected to the home gateway includes: Based on the first and second WAN connections established on the home gateway, VLAN information is set for the first and second WAN connections respectively, and the VLAN_ID of the first WAN connection is set to the first identifier; the VLAN_ID of the second WAN connection is set to the second identifier. Based on the configured identifier, the VLAN information of the outbound data packets forwarded through the routing table is analyzed and compared with the VLAN information of each service under the WAN connection to obtain the service type accessed by the outbound data packets.

4. The method according to claim 3, characterized in that, Also includes: Different tags are applied to data packets from each downlink connection port of the home gateway to identify the port information from which the data packets originate, wherein the port information is the port number of the home gateway.

5. The method according to claim 4, characterized in that, Also includes: Obtain the port number of the data packet and the VLAN information of the outgoing data packet; If multiple values ​​are found in the VLAN information of the outgoing data packet, it is determined that the device connected to the home gateway port number needs to access different types of services. If the VLAN information of the outgoing data packet has only one value, it is determined that the device connected to the home gateway port number only accesses one type of service.

6. The method according to claim 1, characterized in that, Before using the home gateway to determine the destination address of connected terminals to identify the type of service request initiated by the terminal, the process includes: Configure the home gateway to full routing mode and configure the routing table; The home gateway is used to initiate IPoE connections and obtain IP addresses, including: IPTV private network IP, private network IP, and public network IP, and interacts with the IPTV service platform, gateway management platform, and Internet service platform respectively. Configuring the routing table includes: receiving routing table configuration information from the network management platform, and receiving configuration information from the network management platform for binding different ports with different WAN connections.

7. The method according to claim 6, characterized in that, Also includes: Based on the service management quantity issued by the user management platform, manage the number of entry ports corresponding to each outbound service of the home gateway, where the service management quantity refers to the number of devices connected to the home gateway to access services.

8. The method according to claim 1, characterized in that, Also includes: The home gateway is used to obtain the IP addresses of the Internet plane, the IPTV private network, and the network management plane, respectively, so as to enable the terminal to interact with the IPTV service platform, the Internet platform, and the network management platform.

9. The method according to claim 1, characterized in that, Also includes: When a device accessing one or more ports of the home gateway is detected to access multiple service types, the MAC address of the device on that port is obtained and set as a MAC address that can access multiple service types, while the remaining MAC addresses are set as MAC addresses that can only access a single service type.

10. A home gateway service identification device for implementing the home gateway service identification method as described in any one of claims 1-9, characterized in that, include: The identification module is used by the home gateway to identify the type of service request initiated by the terminal by judging the destination address of the terminal connected to it. The processing module is used to route the request initiated by the terminal to the IPTV private network plane if the home gateway identifies that the request is an IPTV service request. If the request initiated by the identification terminal is an Internet service request, the home gateway forwards it to the Internet plane and binds all remaining ports, except those used by the IPTV service terminal, to the public network connection.

11. A system for identifying home gateway services, characterized in that, include: The access module is used to initiate IPoE connections to obtain multiple IPs, including: IPTV private network IP, TR069 private network IP, and public network IP, and to interact with the IPTV service platform, gateway management platform, and Internet service platform respectively. The management module is used to receive configuration information of the routing table issued by the network management platform, receive configuration information of different ports and different WAN connections bound by the network management platform, and select the corresponding WAN connection when forwarding data. The transmission module is used to bind all ports except those used by the terminal carrying IPTV services to the public WAN connection, and transmit the data of the IPTV soft terminal using the private WAN connection according to the routing table configured by the management module, while transmitting the data of other Internet applications using the public WAN connection. The security module is used to set MAC filtering rules for the private network WAN connection based on the MAC address used by the terminal carrying the IPTV service, so that only the terminal carrying the IPTV service is allowed to access it.

Images