123 results about "Broadband network gateway" patented technology

The embodiment of the invention provides a data processing method, a wideband network gateway, a strategy controller device and accessing node equipment. The data processing method comprises the following steps: receiving data; judging whether depth message detection is needed to carry out on the data or not according to data processing strategy information of users of the data; carrying out the depth message detection on the data if the data needs the depth message detection and acquiring the service type of each data stream in the data; marking the data stream with the same service type as value-added service type subscribed by a user in the data; and dispatching and transmitting the marked data stream. The embodiment of the invention carries out depth message detection processing on stream flow applied to the internet according to a depth message detection service strategy, carries out subdivision discrimination on the service data and preferentially dispatches part of the stream flow through a programmed service channel so as to improve the service quality.

The invention discloses a method and a system for accessing to a mobile core network through a trusted fixed network. The method and the system are used to solve a technical problem that user equipment (UE) can not access business provided by a mobile operator caused by the fact that the UE can not trigger the mobile core network to assign IP addresses for the UE. In the method, after interaction of existing messages between the mobile UE and the fixed network, a routing gateway (RG) sends messages to broadband network gateway / broadband remote access server (BNG / BRAS), to trigger the message interaction between the fixed network and the mobile core network and request the mobile core network to assign IP addresses for the UE. And then the RG obtains the IP addresses, and provides the IP addresses to the UE after corresponding processing of IP address mapping relationships. The UE using the IP addresses provided by the RG accesses the business through the mobile network or directly through the fixed network. The method and the system enhance the messages between the UE and network elements of the fixed network (including the RG and the BNG / BRAS), so that the UE can access the mobile core network through a trusted WLAN network and access the business provided by the mobile network.

The embodiment of the invention discloses a virtual network device. The virtual network device is used for realizing the function of a broadband network gateway BNG. The virtual network device comprises a load balancing unit and a first forwarding unit; the load balancing unit is used for receiving first data messages from a first user terminal; the first forwarding unit is determined according to the first data messages and a first corresponding relation; the first data messages are sent to the first forwarding unit; wherein the first corresponding relation indicates the mapping from the first user terminal to the first forwarding unit; and the first forwarding unit is used for receiving and forwarding the first data messages. Moreover, the embodiment of the invention also discloses a method for realizing load sharing in the virtual network device.

The invention is suitable for the field of network function virtualization and provides a network function virtualization implementation method, a wide-band network gateway and a control device. The wide-band network gateway BNG receives a message; a service chain is determined to process the message according to the received message, a strategy matched with the determined service chain is looked up from a strategy list, and multi-protocol tag switching MPLS service tags are added to the message; the message added with the MPLS service tags is sent to NFV servers or SPE. Therefore, the tag of each NFV server used for processing the service chain is once and directly added to a message header to enable a front NFV server to forward to a next NFV server after processing the service, continuous processing is achieved, meanwhile, each NFV server does not need to send return to the BNG after processing the service, and furthermore, the occupation of network flow is greatly reduced while the processing efficiency of the service chain is improved.

The invention discloses a system and a method for combining a fixed network and a mobile network. The system is characterized in that: aiming at the fixed network in a bridge pattern, an X-mobile anchor gateway (X-MAG) used for realizing trusted non 3rd generation partnership project (3GPP) access is arranged and connected between the fixed network and the mobile network, a Ya interface is arranged between user equipment (UE) and a broadband network gateway / broadband remote access server (BNG / BRAS), and a Yb interface is arranged between the BNG / BRAS and the X-MAG, so the UE can access an evolved packet system (EPS) of the mobile network by the fixed network in the bridge pattern through the X-MAG in a trusted non 3GPP IP access way; and aiming at the fixed network in a route pattern, a point-to-point protocol (PPP) signaling is borne by supporting the use of a layer 2 tunneling protocol (L2TP) on a terminal and the X-MAG based on the conventional framework. By the system and the method, the UE can realize the trusted non 3GPP access in a simple and feasible way, namely the UE can access the mobile network through the fixed network in the bridge pattern or the route pattern, and the combination between the fixed network and the mobile network is realized.

The invention discloses a method and a system for data routing. When a piece of user equipment (UE) is accessed into a mobile core network through a dependable fixed network, the method comprises: sending a tunnel establishment request to a mobile access gateway through a routing gateway (RG) and carrying the downlink information of tunnel negotiation after the UE is accessed into the RG; replying a response of tunnel establishment and carrying the uplink information of tunnel negotiation after the tunnel establishment request is received by the mobile access gateway; finishing the tunnel establishment with the mobile access gateway through a dynamic negotiation after the response of the tunnel establishment is received by the RG; and packaging and forwarding the data message of the UE via the tunnel established between the RG and the mobile access gateway, when a business is accessed through the mobile core network by the UE. According to the method and the system of the invention, the establishment of the tunnel and the adoption of packaging the data message by the tunnel help to prevent the data message from being discarded by a broadband network gateway / broadband remote access server (BNG / BRAS).

A network access method, an authentication method, a communications system, and relevant devices are provided to support implicit authentication based on subscriber line information in Internet Protocol version 6 (IPv6). The network access method includes: receiving a first request message sent from a User Equipment (UE) on an Access Node (AN), where the first request message carries a Link-Local Address (LLA); obtaining subscriber line information corresponding to the UE; and sending a second request message from the AN to a Broadband Network Gateway (BNG), where the second request message carries the LLA and the subscriber line information and instructs the BNG to perform access authentication. An authentication method, a communications system and relevant devices are also disclosed.

The invention discloses a sink node linkage switching method, a sink node and a system. In the embodiment of the invention, the sink node intercepts information transmitted between a master optical line terminal (OLT) and a broadband network gateway (BNG), finds out faults in time based on the intercepted information, activates a local protection scheme in case of faults, enables a backup port connected with a backup OLT corresponding to the master OLT and disables a master port connected with the master OLT. The invention has the advantage that the sink node can carry out linkage switching in the switching process from the master OLT to the backup OLT, thereby ensuring the smooth communication.

The invention discloses a dynamic subscriber bandwidth regulation method, a dynamic subscriber bandwidth regulation system and a broadband network gateway, which relate to the technical field of communication. The method comprises that: the broadband network gateway receives a multicast addition request from a subscriber; the broadband network gateway acquires a bandwidth value of a multicast group into which the subscriber requests to be added; the broadband network gateway regulates unicast bandwidth conventionally configured by the subscriber into the bandwidth obtained by subtracting the bandwidth value of the multicast group by a committed access rate (CAR); and when receiving a multicast leaving request from the subscriber, the broadband network gateway recovers a unicast bandwidth CAR value. By the multicast-way-based subscriber bandwidth regulation method and the multicast-way-based subscriber bandwidth regulation system, dynamic subscriber bandwidth regulation is realized, the bandwidth resources of an operator can be effectively prevented from loss, the congestion degree of a downlink is reduced, and simultaneously, the multicast service experiences of the subscriber are improved.

Embodiments of the invention provide a user access method, an SDN controller, a forwarding device and a user access system, and relate to the field of communication. The problem that the traffic of online users forwarded by a vBNG (virtual Broadband Network Gateway) occupies a lot of processing resources of the vBNG in the prior art is solved under the premise of avoiding the influence on the authentication process of users. The method comprises the following steps: an SDN (Software Defined Network) controller acquires device registration information and acquires a first port and a second port according to the acquired device registration information; a forwarding device forwards a user authentication message received from the second port via the first port and forwards a user authentication message received from the first port via the second port according to a first traffic table sent by the SDN controller; the SDN controller acquires the IP address of a user when determining that the user is online; and the forwarding device forwards a message of which the destination IP address is the IP address of the user via the second port and forwards a message of which the source IP address is the IP address of the user via a third port according to a second traffic table sent by the SDN controller. The user access method, the SDN controller, the forwarding device and the user access system are used for user access.

The invention discloses a network access method and a network access system. The network access method comprises the following steps: performing identity authentication on a network terminal based on a Radius protocol through an operator network BNG (broadband network gateway) and an AAA (authentication authorization accounting) server; in response to passing of the identity authentication, sending an identity authentication passing message for the network terminal to an access management unit of a cloud computing platform by the AAA server, so that when the network terminal logs in a virtual dual-stack host system of the cloud computing platform, the access management unit of the cloud computing platform can directly identify the network terminal according to the identity authentication passing message sent by the AAA server, and allows the network terminal to log in the virtual dual-stack host system. According to the technical scheme provided by the invention, secondary authentication on the network terminal caused by isolation between the BNG equipment of a network layer and the cloud computing platform of an application layer is avoided, the authentication flow of a user is simplified, and meanwhile, the user can conveniently access the internet through the virtual dual-stack host system provided by the cloud computing platform.

An embodiment of the invention provides a policy information obtaining method, a policy information providing method and a communication system. The policy information obtaining method comprises the steps of: receiving a first policy information request message sent by a broadband network gateway, wherein the first policy information request message carries identification information of a home base station policy module as well as a terminal identification and / or identification information of a broadband network where the terminal accesses; sending a second policy information request message to the home base station policy module according to the identification information of the home base station policy module, wherein the second policy information request message carries the terminal identification and / or the identification information of the broadband network where the terminal accesses; receiving a first policy information request response message returned by the home base station policy module, wherein the first policy information request response message carries the policy information; sending a second policy information request response message which carries the policy information to a broadband network gateway. The invention also provides a corresponding policy information providing method and a communication system.

The present invention provides an access method and system of a customer premise equipment, and a broadband network gateway. The access method of a customer premise equipment includes: receiving, by a BNG in a BNG pool, an access request packet sent by a CPE, where the access request packet carries an identifier of a CPE group to which the CPE belongs; and obtaining, by the BNG, an access policy of the CPE group according to the identifier of the CPE group, and performing access control on the CPE according to the access policy. Through the present invention, a BNG in a BNG pool is enabled to provide an access service for a CPE according to an access policy, so that when a BNG in a BNG pool is faulty, a BNG that is not faulty in the BNG pool can provide an access service for a CPE originally accessing the faulty BNG, thereby improving the reliability of the entire network.

The invention discloses a method and system for realizing multicast control in a broadband access network. The method comprises the following steps: an access node analyzes a multicast join request message of a user after receiving the request message to obtain user identifications and multicast group identifications; and the access node searches a user multicast authority list for the requested multicast authority according to the obtained user identifications and multicast group identifications, if the multicast authority record of the user exists, the access node obtains the user authority parameter corresponding to the multicast request from the multicast authority list and processes the multicast join request according to the user authority parameter, if the multicast authority record of the user does not exist, the access node sends a user multicast authority configuration request message to a broadband network gateway according to the obtained user identifications and multicast group identifications, and when receiving the multicast configuration response message sent by the broadband gateway, the access node configures the user authority parameter in the user multicast authority list according to the multicast configuration response message and processes the multicast join request according to the configured user authority parameter.

The embodiment of the invention provides a virtual broadband remote access method and system, and a controller. The method comprises: receiving a user access protocol message from a user device; selecting a broadband network gateway control pool example for the user device according to a business deployment strategy; completing access and / or authentication according to the user access protocol message and the user device, and generating a user table; and generating a user data forwarding table according to the user table; receiving a user data message, and forwarding the user data message according to the user data forwarding table. In the process of forwarding the user data message, a control function is separated, a virtualization technology is employed for realization, devices such as acontroller and the like are configured to realize forwarding of a user data message with no need for deployment of special devices or usage of special business plates on a current route architecture,and therefore the whole energy consumption is reduced and high-performance forwarding is realized.

The embodiment of the invention, which relates to the technical field of communication, discloses a service authentication method and system. The method comprises: a terminal receives an instruction of invoking shared user information for third-party service authentication, wherein the instruction is sent by a user; the terminal sends a request message for obtaining a user token to a broadband network gateway (BNG); the BNG sends the request message for obtaining the user token to an authentication, authorization, accounting (AAA) server; the AAA server generates a user token and stores the user taken; the AAA server sends the user token to the BNG; the BNG sends the user token to the terminal; the terminal sends the user token to a server of the third-party service; the AAA server receives service request information sent by the server of the third-party service; and the AAA server determines whether the received user token is equal to the stored user token; if so, third-party service authentication is carried out. With implementation of the method and system, the user experience can be improved.

A method and system for a wireless local area network user accessing a fixed broadband network, the method includes: a broadband network gateway (BNG) device initiating an identity authenticating process to an authentication authorization accounting (AAA) server for a wireless local area network (WLAN) user; after the AAA server successfully authenticates the WLAN user, the BNG device acquiring a mobility identifier of the WLAN user from the AAA server; after receiving the mobility identifier of the WLAN user, the BNG device allowing the mobility access of the WLAN user.

The invention discloses an authentication notifying method, which comprises the following steps that a BBF (broadband forum) authentication, authorization and accounting (AAA) unit sends the MAC (medium access control) address of UE (user equipment) to broadband network gateway (BNG) control equipment when the UE is accessed to a BBF access network and further passes authentication; or when the UE is accessed to the BBF access network and requests an IP (internet protocol) address, the BNG control equipment checks whether the UE passes the authentication or not, and when the BNG control equipment determines that the authentication information of the UE does not exist, the authentication information of the UE is acquired from the AAA unit; or when the UE is accessed to the BFF access network and requests the IP address, a residence gateway (RG) checks whether the UE passes the authentication or not, and when the UE is determined to pass the authentication, the RG notifies the BNG control equipment that the UE passes the authentication. The invention also provides an authentication notifying system. According to the technical scheme disclosed by the invention, the BNG control equipment can know whether the UE requesting to access passes the authentication or not in time.

A method, equipment and system for policy control. The method includes: a trusted Wireless Local Area Network (WLAN) access gateway receiving Quality of Service (QoS) information from a 3GPP core network, and sending the QoS information to an Access Controller (AC) or a Broadband Network Gateway (BNG); the AC or the BNG or other fixed network access devices performing admission control and / or resource allocation according to the QoS information. In the technical solution, the interface configuration and policy configuration are performed for the WLAN access gateway in the fixed mobile convergence scenario, thereby the policy control is implemented in the fixed mobile convergence scenario.

The invention discloses a data message management method, a data message management device and a data message management system. The data message management method includes the followings steps that: a broadband network gateway (BNG) device performs user identity authentication through an authentication, authorization and accounting (AAA) server, and stores authorization information and identification information of an authenticated user after the user identity authentication succeeds; the broadband network gateway (BNG) device receives an accounting initiation request which is transmitted by a wireless local area network (WLAN) device; the broadband network gateway (BNG) device matches identification information carried in the accounting initiation request with the identification information of the authenticated user, and determines authorization information according to the identification information of the authenticated user after the matching succeeds; and the broadband network gateway (BNG) device identifies data massages of the user according to the identification information of the user, and manages the data massages according to the authorization information of the user. With the data message management method, device and system of the invention adopted, the problem of incapability of the broadband network gateway (BNG) device to identify users in a situation in which the broadband network gateway (BNG) device does not participate in a user address allocation process, can be solved, and therefore, the broadband network gateway (BNG) device can be rapidly deployed so as to realize user service and flow management and improve the service quality of a wireless local area network (WLAN) under the condition that a current network architecture of wireless local area network (WLAN) user authentication and address allocation is not modified.

The invention provides an authentication processing method and device. The authentication processing method includes that a BNG (broadband network gateway) receives first authentication request information for authenticating UE (user equipment), the first authentication request information carries identifications for identifying the UE and parameters of physical links of a UE access network; the BNG generates a first line identification for the UE according to the parameters and transmits the first line identification to an authentication authorizing charging AAA server, the AAA server authenticates the UE according to the line identification. By the authentication processing method and device, the problem that a single terminal on the same physical link cannot be implicitly authenticated by a physical link based authentication method in the prior art is solved, so that the implicit authentication of the single terminal on the same physical link can be realized, and the requirement on flexibility of terminal equipment is met.

The embodiment of the invention discloses a management method and a system of a passive optical network as well as an optical line terminal, relating to the technical field of communication. The embodiment of the invention is invented for the flexible management of an optical network unit. The above method comprises: the optical line terminal receives a message sent by a gateway of a broadband network, and the message comprises parameter configuration information packaged by an access node control protocol; the optical line terminal extracts the parameter configuration information packaged by the access node control protocol from the message; the optical line terminal packages the parameter configuration information packaged by the access node control protocol, the passive optical network transmission and collection layer information and the passive optical network physical layer information into a downlink frame to be sent to the optical network unit. The embodiment of the invention is mainly applied to the passive optical network access technology.

The invention discloses a Web authentication method, which comprises the following steps that: a network access user terminal acquires an Internet protocol version 4 (IPv4) address or an IPv4 address and an IPv6 address, a broadband network gateway (BNG) limits the right of the network access user terminal over access to an IPv4 network and an IPv6 network, and when the network access user terminal accesses a Web page, the BNG reorients a hypertext transfer protocol (HTTP) access request transmitted by the network access user terminal in an access process to a Web authentication server of the IPv4 network; or the network access user terminal acquires the IPv6 address, the BNG limits the right of the network access user terminal over the access to the IPv6 network, and when the network access user terminal accesses the Web page, the BNG reorients the HTTP access request transmitted by the network access user terminal in the access process to an IPv6 friendly page. According to the technical scheme, when the network access user terminal of a double-stack user uses the IPv6 address, Web authentication can be realized.

The invention discloses a method for wireless local area network (WLAN) user fixed network access. The method comprises that: after a WLAN user is passed in authentication, a broadband network gateway (BNG) sends the acquired user subscription information to a WLAN device; and after the WLAN device performs related configuration according to the user subscription information, a WLAN user terminal is accessed to the network. The invention also discloses a system for WLAN user fixed network access. A problem that distinguished services based on different subscription information of different users cannot be provided caused by the fact that the WLAN cannot sense the user subscription information due to the fact that the WLAN user is passed in the BNG authentication can be solved.

The embodiment of the invention discloses a network flow bandwidth control method, a network flow bandwidth control device and a network flow bandwidth control system, relates to the field of network techniques and solves the technical problem that resources are not reasonably used in the prior art. The method disclosed by the invention mainly comprises the steps that RADIUS (Remote Authentication Dial-in User Service) equipment searches for the RADIUS equipment bandwidth strategy attribute of a user according to a user business type recorded by a BOSS (Business Operation Supporting System), and transmits the searched RADIUS equipment bandwidth strategy attribute to a BNG (Broadband Network Gateway), wherein the RADIUS equipment bandwidth strategy attribute comprises an uplink bandwidth strategy attribute and a downlink bandwidth strategy attribute; and the BNG classifies flow directions of the user according to source addresses or destination addresses, and controls the classified flow bandwidth according to the received RADIUS equipment bandwidth strategy attribute. The network flow bandwidth control method, the network flow bandwidth control device and the network flow bandwidth control system disclosed by the embodiment of the invention are mainly used for network bandwidth control.

The invention discloses a selection method and a selection device for a Web authentication server. The method comprises the following steps that: a broadband network gateway (BNG) receives a web access request from user equipment, and determines the unauthenticated state of the user equipment; the BNG selects a first Web authentication server which is currently available for the user equipment from a preset Web authentication server group; and the BNG provides the selected first Web authentication server for the user equipment. By the method and the device, the problem that Web authentication cannot be performed on the user equipment when the Web authentication server fails is solved, and Web authentication server selection effectiveness is improved.

The invention discloses a unicast / multicast resource management method and a unicast / multicast resource management system. The method comprises that: an access node receives a layer 2 access control message from Internet protocol (IP) edge equipment, wherein the layer 2 access control message carries resource allocation indication information indicating resource allocation to a unicast / multicast service; the access node reserves resources for the unicast / multicast service on a predetermined network segment according to the layer 2 access control message respectively; and the access node and the IP edge equipment regulate the portion of the unicast / multicast resources according to a predetermined network policy and current resource conditions. According to the technical scheme provided by the invention, multicast resource information allocated to a subscriber access line by a broadband network can be acquired by a layer 2 access control mechanism, thereby effectively realizing the unicast / multicast resource management of the subscriber access line.

The present invention provides a method and a device for preventing the medium access control address to be deceived. The present invention comprises: Step one, the access node of the network automatically acquires the medium access control address of the broadband network gateway; Step two, the access node configures the medium access control address acquired from the broadband network gateway into the static medium access control address table of the access node or the visit control list. The present invention solves the security problem of the broadband network gateway MAC address deceit, and guarantees the automatic configuration of the broadband network gateway MAC address, and the security, the flexibility and the extendibility of the broadband access network can be enhanced.

The invention discloses a broadband network based on GPON access, and a user management method thereof, wherein, the method includes the steps that: step S202, a broadband network gateway acquires GPON access link information accessed by a user on an access node from the access node; and step S204, the broadband network gateway carries out authentication, authorization and accounting to the user by using the GPON access link information as a part or the whole of user authentication and accounting information. The invention realizes the user management method based on the GPON access so as to realize the user management on a GPON access link, thereby being convenient for the development of broadband business based on the GPON access.

The invention provides a method and a device for distributing a port block resource, wherein the method and the device belong to the field of network technology. The method comprises the steps of receiving a connecting request of first user equipment, wherein the connecting request is transmitted from a broadband network gateway (BNG) and carries first user equipment information; determining whether a target user set exists according to the first user equipment information, wherein the first user equipment is affiliated to the target user set; if no target user set is determined according to the first user equipment information, transmitting a port block distribution instruction to the BNG, wherein the port block distribution instruction is used for instructing distribution of a first port block resource to the first user equipment; and existence of the target user set is determined according to the first user equipment information, transmitting a port block updating instruction to the BNG, wherein the port block updating instruction is used for instructing sharing of a second port block resource of the target user set to the first user equipment. The method and the device have advantages of saving calculation resource of the BNG and supplying a management mechanism for aiming at the user equipment.