WO2011144156A1

WO2011144156A1 - Policy control method, apparatus and gateway

Info

Publication number: WO2011144156A1
Application number: PCT/CN2011/075187
Authority: WO
Inventors: 吴逸俊; 杨瑞凯; 陈大港
Original assignee: 华为技术有限公司
Priority date: 2010-11-17
Filing date: 2011-06-02
Publication date: 2011-11-24
Also published as: CN102137450B; CN102137450A

Abstract

Disclosed are a policy control method, apparatus and gateway, wherein the method includes the following steps: when the service request of a user is received, policy information of the user is obtained through an extended interface, wherein the policy information includes extended policy control functions which the user subscribes to; according to the extended policy control functions which the user subscribes to, policy control is performed on data stream currently generated. The invention can uniformly control and manage various policy control functions, and reduce the number of control network elements in the network, thus simplifying the structure of the network, facilitating the management and maintenance of the network, and benefiting the satisfaction of the requirement for the service development.

Description

The present invention claims the priority of a Chinese patent application filed on November 17, 2010 by the Chinese Patent Office, the application number is 201010547822.3, and the invention is entitled "a policy control method, device and gateway". The entire contents of which are incorporated herein by reference. Technical field

The present invention relates to the field of communications technologies, and in particular, to a policy control method, apparatus, and gateway. Background technique

In the mobile Internet system, in order to carry out various mobile data services, various policy control functions need to be implemented. These policy control functions may include flexibility in addition to basic charging and QoS (Quality of Service) control. Billing, QoS Bandwidth Control, Access Control, Adaptation and Acceleration, Virus Scanning, URL Filtering, Lawful Snooping, Policy Routing, and more.

In the prior art, various control network elements are required to implement the foregoing various policy control functions except the basic charging and QoS control, so that the network structure is very complicated, and the increase in the number of network elements is not conducive to management. And maintenance. Summary of the invention

The invention provides a policy control method, device and gateway, which can realize unified policy control, facilitate management and maintenance, and meet the needs of business development.

The invention provides the following solutions:

A method of policy control, including:

Receiving, by the extended interface, the policy information of the user, when the service request of the user is received; the policy information includes an extended policy control function subscribed by the user;

Policy control of the currently generated data flow is performed according to the extended policy control function subscribed by the user.

A policy control device, comprising:

The policy information obtaining unit is configured to acquire the policy information of the user by using the extended interface when receiving the service request of the user; the policy information includes an extended policy control function subscribed by the user; and a policy control unit, configured to The extended policy control function signed by the user controls the policy of the currently generated data stream. A gateway includes the aforementioned policy control device.

According to a specific embodiment provided by the present invention, the present invention discloses the following technical effects:

In the embodiment of the present invention, all the policy control functions are integrated into a unified PCC (Policy and Charging Control) framework, and various policy control functions can be uniformly controlled and managed through the PCC framework. The number of control network elements in the network can be reduced, the network structure can be unified, and the network management and maintenance can be facilitated, which is beneficial to meet the needs of business development. DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings to be used in the embodiments will be briefly described below. Obviously, the drawings in the following description are merely the present invention. For some embodiments, other drawings may be obtained from those skilled in the art without any inventive labor.

1 is a flowchart of a method provided by an embodiment of the present invention;

2 is a schematic structural view of a PCC frame;

3 is a flowchart of another method provided by an embodiment of the present invention;

4 is a flowchart of an internal execution method of a PCEF in an embodiment of the present invention;

FIG. 5 is a schematic diagram of an apparatus according to an embodiment of the present invention; FIG.

FIG. 6 is a schematic diagram of another apparatus according to an embodiment of the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention are within the scope of the present invention.

Referring to FIG. 1 , a policy control method provided by an embodiment of the present invention includes the following steps:

S101: When receiving a service request of the user, acquiring the policy information of the user by using an extended interface; the policy information includes an extended policy control function that is subscribed by the user;

The specific policy control functions may include: access control, adaptation and acceleration, virus scanning, URL (Uniform Resource Locator) filtering, lawful interception, policy routing, header forwarding, advertisement insertion, and/or banner replacement. , and many more; S102: Perform policy control on the currently generated data flow according to the extended policy control function subscribed by the user.

In order to facilitate the understanding of the technical solution provided by the embodiment of the present invention, the following firstly introduces the PCC framework.

The PCC framework is a standard PCC charging and QoS control framework defined by the 3GPP standards organization. Referring to Figure 2, the PCC architecture mainly includes PCEF (Policy and Charging Enforcement Function), and PCRF (Policy and Charging Control). Function, policy and charging control functions;), AF (Application Function), OCS (Online Charging System), OFCS (Offline Charging System) and SPR (Subscription Profile Repository, User subscription database) functional entity, the main functional entities are described as follows:

The PCEF includes the detection of service data flows, policy enforcement, and flow-based charging functions. This functional entity is located at the gateway, such as the GPRS (General Packet Radio Service) GGSN (Gateway GPRS Support Node) gateway. It provides service data flow detection, user plane service processing, trigger control plane session management (requires IP-CAN admission), QoS processing and service data flow measurement, and online charging and offline charging interaction.

The PCRF includes policy control decisions and flow-based charging control functions to provide PCEF with network control functions for traffic data flow detection, gating, QoS-based, and flow-based charging (except for credit control). The PCRF determines how the service data stream is processed on the PCEF, and ensures that the mapping and processing of the user plane data stream on the PCEF is performed according to the SPR, and the PCC policy is determined according to the obtained subscription information.

AF is a unit that provides application services, and its business requires dynamic policy/billing control of IP-CAN user plane behavior. The AF interacts with the PCRF to transmit dynamic session information. The PCRF needs these session information to make PCC decisions. The AF also interacts with the PCRF to receive specific IP-CAN information and IP-CAN bearer level event notifications. While receiving the indication of the service information accepted by the PCRF, the AF may receive the service information indication that is not accepted by the PCRF. In this case, the AF rejects the UE's service establishment request. If possible, the AF will forward the service information received by the PCRF to the UE.

OCS provides user credit control. The credit control function entity based on the service data stream performs the online credit control function and is a functional entity in the online charging system. A detailed description of OCS and OFCS can be found in 3GPP TS 32.240. The SPR contains information related to all subscribers or subscriptions, and the PCRF uses this information to determine contract-based policies and IP-CAN bearer-level PCC rules.

The current PCC framework only defines basic billing and QoS control functions. Therefore, only two basic policy control functions can be implemented through the PCC framework. The specific implementation process is as follows: When a user creates a session, the PCEF obtains the PCC rule signed by the user from the PCRF. When the PCEF receives the request from the user, the PCEF initiates charging to the OCS or the OFCS according to the charging rule signed by the user. The user service is subject to pricing and billing; at the same time, user-based bandwidth control is implemented according to the QoS rules signed by the user.

It can be seen from the above that the existing PCC framework can only perform basic accounting and QoS control policy management and control through PCEF and PCRF, and cannot implement other policy control functions. In the embodiment of the present invention, all the policy control functions are integrated into a unified PCC framework, and various policy control functions are implemented through the PCC framework, which can reduce the number of control network elements in the network, and the network structure is unified, and further Facilitate the management and maintenance of the network, which is conducive to meeting the needs of business development. Under the existing architecture, the PCC framework is extended to include URL filtering, virus scanning, acceleration acceleration, advertisement insertion, request header extension, lawful interception, business policy routing, and banner replacement (Blank is usually called banner advertisement, banner advertisement). Or banner advertisements, etc., are the main forms of online advertisements. Generally, image files in GIF format can be used, static graphics can be used, or multi-frame images can be spliced into animated images, and many business features such as head-forward enhancement are integrated into the PCC framework. Support unified policy control and management of the above services, and at the same time, make the expanded PCC framework more practical.

To achieve the above extensions, the following improvements to the existing architecture are required:

First, you need to extend the business engine enablement component. Since the current PCC framework includes only the service engine enabling components related to charging and QoS control, only the charging and QoS functions can be implemented; and if more functions are to be implemented, it is necessary to include the extended PCC framework. The corresponding service engine enables the component, and the PCEF is responsible for performing message interaction with the service engine enabling components to complete the specific logical processing of the data message. Take the virus scan as an example. To implement the virus scanning function, you need to include the antivirus engine. After the PCEF detects that the PCC rule signed by the current user contains the "virus scan" item, the PCEF needs to send the user request and response packets to the antivirus. The engine is used for virus scanning, detection, and cleanup processing. After the related processing is completed, the packet is sent to the end user.

For the various policy control functions described above, the following service engine enablement components need to be implemented: Content Optimizer: Content Optimizer: Responsible for service request, page adaptation of response message, Page layout, compression, caching, image conversion and more.

Ad Business Engine Ad Platform: A strategy for judging whether a user signs an advertisement, obtaining relevant advertisement content based on the user information, inserting the advertisement body into the user response message, and the insertion action may also be implemented in the PCEF, depending on the specific strategy.

Anti-Virus Engine Vims Engine: Responsible for the request of the subscriber, the real-time virus scan of the response body, and confirm whether to implement the virus removal operation according to the policy.

URL classification rule base and URL I filter URL Filter: locate the detailed classification of the URL requested by the user, such as "adult", "game", etc., for the contracted user, block the classification request that is not allowed to access, the blocking action can be considered in PCEF Implementation.

Unified Blacklist and Whitelist Control Platform ACL Server: Saves the user's blacklist, service blacklist, and user whitelist information on the entire network. The PCEF sends the user request to the local station. After the platform makes a judgment, it confirms whether the service is released or blocked.

Third-party monitoring platform Lawful Interception Platform: Responsible for intercepting and analyzing users' VOIP data packets, which is applicable to the traditional national security monitoring industry.

Service Route Router: A specific data packet needs to be forwarded to a specific service routing device to ensure the necessary security and reliability. A typical application is a VPN tunnel-based enterprise group service.

Second, the interface Gx between PCEF and PCRF needs to be extended. In the existing PCC framework, the information exchanged between the PCEF and the PCRF includes only the user-signed charging rules and QoS control rules. Therefore, in order to implement the foregoing services, it is necessary to add the standard Gx interface. The extended information of each type of service processing logic is used to exchange the user's subscription information with other services between the PCEF and the PCRF, thereby supporting the unified policy control of each service described above. Among them, the field expansion can be implemented in the standard field "charging-rule-definition", and the expanded fields are as follows in the italicized part, corresponding to the control logic of each service. The communication between the PCEF and the PCRF can be carried by using, but not limited to, the HTTP and Diameter protocols.

Charging-Rule-Definition:: = < AVP Header: 1003 >

{ Charging-Rule-Name }〃 has a PCC rule keyword to identify the current rule.

[ Lawful-Interception-Enable ]

[ Content-Adaption-Enable ] [ Content-Optimization-Enable ]

[ AD-Insertion-Enable ]

[ AD-Replace-Enable ]

[ URL-Filtering-Enable ]

[ Anti-Virus-Enable ]

[ Anti-Virus-worm-Clear ]

[ Access- Control-Enable ]

[ Header-Enrichment-Enable ]

[ AOC-Enable ]

[ Key- Word-Search- Enable ]

[Traffic-Route-Enable ]

[Traffic-Route-Redirection-Address]

Third, there is a need for enhanced support for PCEF. As described above, in the embodiment of the present invention, various policy control functions are implemented through the PCEF. Therefore, the PCEF needs to support message interaction with each of the foregoing new service engine enabled components. The interface between the PCEF and each service engine enabling component can be extended based on the ICAP Ten Internet Protocol (Internet Content Adaptation Protocol).

When the policy control function is implemented, it may be completely completed by the service engine enable component. The PCEF forwards the corresponding packet to the corresponding service engine enable component. It may also be that the PCEF obtains the service engine enable component. Part of the key information, and then the PCEF uses the key information obtained to achieve specific policy control functions. In the former mode, the complexity of the PCEF can be reduced, so that the PCEF can focus on traffic processing and the like; in the latter mode, the dependence on the externally enabled components can be reduced, which is easy to implement, and further facilitates maintenance. And management. In the specific implementation, different methods can be selected according to different business characteristics.

That is, according to the message that interacts with the service engine enabled component, the operations that the PCEF needs to perform can include the following two categories:

(1) All packet forwarding: The request, the response, or all the packets are forwarded to the corresponding service engine enabling component for processing, and the content processed by the service engine enabling component is received, and then forwarded to the Internet SP or the user terminal. A typical application is a lawful interception service. When implementing lawful interception, PCEF needs to use VoIP (Voice over Internet Protocol). All the packets that are transmitted in real time on the IP data network are forwarded to the third-party monitoring platform, and the third-party monitoring platform implements the monitoring of the packets. In addition, in the processing of response packet compression, adaptation, optimization, anti-virus, accurate advertisement for users, etc., all text forwarding methods may also be adopted, and the corresponding service engine enabling components implement specific functions.

(2) Key information acquisition: The service engine enabling component is used to query key information by using a specific interface. For example, when the advertisement insertion function is implemented, the user identifier (such as a mobile phone number, etc.) can be sent to the advertisement platform, and the advertisement platform determines whether the user is The strategy of signing an advertisement provides the user with precisely targeted advertisement content and returns it to the PCEF; the PCEF then inserts the advertisement content received from the advertisement platform into the user's message or page, and delivers the advertisement content to the user. In addition, services such as URL request classification can also be implemented in this way.

Of course, in practical applications, some functions can also be directly implemented by the PCEF, that is, the PCEF directly performs the corresponding processing according to the PCC rules obtained from the PCRF. For example, it may include access control, head forward control, AOC service prompts, or business policy routing.

In summary, the PCEF needs to support the logical processing of the aforementioned various service features, such as supporting the page insertion of the advertisement content in the foregoing example, in order to insert accurate advertisement information into the user response, and the like. Furthermore, since the Gx interface is extended, the PCEF also needs to support decoding processing of the extended Gx interface.

Fourth, enhanced support for PCRF. Similar to PCEF, since the Gx interface is extended, the PCRF also needs to support encoding processing of the extended Gx interface.

In addition, since the PCRF can use the information about the user's subscription, the contract-based policy and

The PCC rules of the IP-CAN bearer level, that is, the policy control rules signed by the user, can be uniformly maintained by the PCRF. Therefore, in the embodiment of the present invention, the PCRF also needs to support unified management of the foregoing new service characteristic control logics, including PCC rule release, maintenance, dynamic rule construction, and rule cancellation. Specifically, the rule table may include, but is not limited to, various items as shown in Table 1. Each of the subscription users may have a respective rule table, and the user's rule table may be uniquely identified by using the identity identifier of the corresponding user. The rule table of each user is uniformly managed by the PCRF, and the rule management includes maintenance of the rule table, management of each field in the table, and the like.

Name Value Memo

Subscriber 13951160023 supports mask or number segment - 13951169999

Whether Anti-Vims On starts a virus scan

Does Anti-Virus-Worm-Clear On support virus removal?

Whether Ad-Insertion On needs to insert an ad

Does Content-Optimization On support content optimization?

Content- Adaption Off Whether content-to-terminal adaptation processing is supported

Lawful-Interception Off Whether to implement lawful interception

AOC-Enable Off Whether to implement A0C processing

Header-Enrichment- Off Need to support request header field expansion Enable

Does Traffic-Route On need to support business policy routing?

Traffic-Route-Redirection 10.11.11.1 When the service policy routing is supported, the next path -Address is the address.

URL-Filter On Whether to implement URL filtering

Banner- Replace-Enable On Whether to implement Banner replacement

Rule-Start-Date 2009-12-01 Rule Effective Time

Rule-End-Date 2019-12-01 Rule Expiration Time

It can be seen that, in the embodiment of the present invention, the policy control function signed by the user can be uniformly managed by the PCRF, and the PCEF performs specific functions for controlling various functions. Therefore, unified management and control of the policy control can be implemented, and the individual can be reduced. The number of control network elements, the network structure.

After the foregoing extension and improvement of the existing PCC architecture, various methods for implementing the policy control function according to the method provided by the embodiment of the present invention can be implemented, which will be described in more detail for better understanding of the embodiments of the present invention.

Referring to Figure 3, the method includes the following steps:

S301: The user initiates an IP-CAN session establishment request to the access gateway Access GW.

S302: The Access GW interacts with the policy execution function PCEF, and forwards the user online message to the PCEF.

S303: The PCEF requests the user's subscription information from the policy control function PCRF, and the subscription information is included in the package information. Contains the aforementioned extended policy control functions;

In a specific implementation, the PCEF may send a request message for acquiring the subscription information to the PCRF, where the request message may include at least a parameter that can uniquely identify the user identity, such as the ID of the user, so that the PCRF can find the rule table of the user by using the user ID, and further Obtain the contract information of the user. Mobile user international ISDN number), IMSI (international mobile subscriber identity), terminal IP address, user name, etc., uniquely determine the identity of the user.

In addition, the parameters included in the request message may further include information such as an access network type, a user type, a terminal capability, a service type, and the like.

S304: The PCRF generates a PCC rule of the user according to the subscription information of the current user.

S305: The PCRF sends the PCC rules of the user to the PCEF.

S306: After the user's IP-CAN session is successfully established, the user initiates a service request to the PCEF.

S307: The PCEF receives the service request of the user, and the entities subscribed according to the user obtained from the PCRF may include charging, QoS control, and enhanced policy control logic as described above. In implementing the enhanced control logic, the PCEF first sends the request to a specific service engine for policy processing. If access is allowed, the processed request is forwarded to the service provider SP (Service Provider), and the response body of the SP is sent. The specific business engine is processed; at the same time, the PCEF itself also performs some policy processing and finally returns a business response to the user.

Among them, in a specific application, the policy control function of the user subscription may be multiple, and each user may sign different functions according to his own needs. In order to facilitate unified control, the internal execution flow of the PCEF may be standardized, for example, A possible implementation can be as shown in FIG.

S401: The PCEF requests the user subscription information from the PCRF.

S402: Deposit the PCC rule returned by the PCRF into the cache;

S403: After the user initiates the service request, the PCEF implements DPI (Deep Packet Inspection) to obtain service type information.

S404: determining whether the user signs a parental control policy, if yes, proceeds to step S405, otherwise proceeds to step S406;

S405: Send the user and its request URL to the URL Filter for URL filtering; if the filtering result is that the URL belongs to a category that is not allowed to be accessed, the user request is blocked; if it belongs to the allowed access If the classification of the question is satisfied, the process proceeds to step S406;

S406: Determine whether the access control PCC rule is hit. The access control PCC rule herein may be a blacklist. If the PCC rule is hit, the user is proved to be in the blacklist, and therefore, the user request needs to be blocked; otherwise, the user is blocked. The user requests, proceeds to step S407;

S407: Determine whether to hit the HTTP header pre-pass PCC rule, if yes, according to the local configuration, add relevant information to the request header field, and proceeds to step S408, otherwise directly proceeds to step S408;

S408: Determine whether the service policy is routed to the PCC rule. If yes, the data packet is forwarded to the corresponding routing device, and the routing device completes the corresponding routing policy; otherwise, the process proceeds to step S409;

S409: determining whether the hit banner replaces the PCC rule, and if so, redirecting the user request to the corresponding server; otherwise, proceeding to step S409;

S409: Forwarding the request to the SP, receiving the response message of the SP, and proceeding to step S410;

S410: determining whether the hit advertisement is inserted into the PCC rule, if yes, obtaining the targeted advertisement of the user, inserting the advertisement into the response body, and proceeding to step S411; otherwise, directly proceeding to step S411;

S411: determining whether to hit the lawful listening PCC rule, if yes, copying all the messages to the listening platform; otherwise, proceeding to step S412;

S412: Determine whether to hit the adaptation, accelerate the PCC rule, if yes, forward the message to the adaptation and acceleration platform for processing, and obtain the response after the adaptation and acceleration platform completes the processing, and proceed to step S414; otherwise, enter the step S413;

S413: Determine whether the hit virus scan PCC rule, if yes, forward the response message to the corresponding antivirus engine, and obtain the response after the antivirus engine completes the scan, and proceeds to step S414;

S414: Forward the processed response to the end user.

The policy control method is provided by the embodiment of the present invention. The embodiment of the present invention further provides a policy control device. Referring to FIG. 5, the device may include:

The policy information obtaining unit 501 is configured to: when receiving the service request of the user, obtain the policy information of the user by using the extended interface; the policy information includes an extended policy control function that is subscribed by the user;

The policy control unit 502 is configured to perform policy control on the currently generated data flow according to the extended policy control function subscribed by the user.

The specific extended policy control functions may include access control, adaptation and acceleration, virus scanning, uniform resource locator URL filtering, lawful interception, policy routing, header forwarding enhancement, and wide Insert and/or Banner replacement. In a specific implementation, the functions of the policy information acquiring unit 501 and the policy control unit 502 may be completed by the service access unit PCEF. It can be seen that, in the embodiment of the present invention, all the policy control functions are integrated into the unified PCC framework, and various policy control functions can be implemented through the PCC framework. Therefore, the number of control network elements in the network can be reduced, and the network structure can be obtained. It is convenient for the management and maintenance of the network, which is conducive to meeting the needs of business development.

Referring to FIG. 6, the policy information acquiring unit 501 may include:

The message sending subunit 5011 is configured to send a request message carrying the user identity information, and the obtaining subunit 5012 is configured to obtain the policy information of the user from the received response message.

Policy control unit 502 can include:

The calling subunit 5021 is configured to perform policy control on the currently generated data stream by calling the service engine enabling component.

Depending on the interactive message, the calling subunit 5021 can include:

All forwarding subunits 50211 are configured to forward the packet to the service engine enabling component, and the service engine enabling component implements the policy control function of the user subscription; or

The key information querying subunit 50212 is configured to query the service engine enabling component for key information, and implement the policy control function of the user subscription according to the key information.

Alternatively, the policy control unit 502 can also include:

The local implementation sub-unit 5022 is configured to implement the policy control function of the user subscription by using locally obtained user policy information.

In practical applications, the functions of the foregoing policy control device may be implemented by a gateway, such as a GGSN gateway of GPRS. Therefore, corresponding to the policy control apparatus of the embodiment of the present invention, the embodiment of the present invention further provides a gateway, and the gateway may include any of the policy control apparatuses described in the foregoing apparatus embodiments.

The policy control device and the gateway in the foregoing embodiments of the present invention may be applied to the foregoing method embodiments. For details of the device and the gateway embodiment, refer to the description in the method embodiments, and details are not described herein again.

A person skilled in the art can understand that all or part of the steps of implementing the foregoing embodiments may be completed by a program instructing related hardware, and the program may be stored in a computer readable storage medium, and the program is executed. The following steps are included: Receive the user's business, please Obtaining time, obtaining the policy information of the user through the extended interface; the policy information includes an extended policy control function subscribed by the user; performing the data flow currently generated according to the extended policy control function subscribed by the user Policy control. The storage medium is, for example, a ROM/RAM, a magnetic disk, an optical disk, or the like.

The foregoing detailed description of a policy control method, apparatus, and gateway provided by the present invention is only for facilitating understanding of the method and core idea of the present invention. Meanwhile, for those of ordinary skill in the art, The idea of the invention will vary in the specific embodiments and applications. In summary, the content of the specification should not be construed as limiting the invention.

Claims

Rights request

A method for controlling a policy, comprising:

2. The method according to claim 1, wherein the obtaining the policy information of the user comprises:

Sending a request message carrying user identity information;

Obtaining the policy information of the user from the received response message.

The method according to claim 1, wherein the policy control on the currently generated data stream includes:

The policy is enabled by invoking the business engine enable component to control the currently generated data stream.

The method according to claim 3, wherein the policy control by the calling service engine enabling component to the currently generated data flow comprises:

And forwarding the message to the service engine enabling component, where the service engine enabling component implements the policy control function of the user subscription; or

The service engine enabling component queries the key information, and implements the policy control function of the user subscription according to the key information.

The policy control function of the user subscription is implemented by using the locally obtained user policy information.

The method according to any one of claims 1 to 5, wherein the extended policy control function comprises access control, adaptation and acceleration, virus scanning, uniform resource locator URL filtering, lawful interception, policy Routing, header forwarding enhancements, ad insertion and/or banner replacement.

7. A policy control device, comprising:

The policy information obtaining unit is configured to acquire the policy information of the user by using the extended interface when receiving the service request of the user; the policy information includes an extended policy control function subscribed by the user; and a policy control unit, configured to The extended policy control function signed by the user controls the policy of the currently generated data stream.

The device according to claim 7, wherein the policy information acquiring unit comprises:

a message sending subunit, configured to send a request message carrying user identity information;

The obtaining subunit is configured to obtain the policy information of the user from the received response message.

The device according to claim 7, wherein the policy control unit comprises: a calling subunit, configured to perform policy control on the currently generated data stream by calling a service engine enabling component.

The device according to claim 9, wherein the calling subunit comprises: a total forwarding subunit, configured to forward a message to the service engine enabling component, and the service engine enabling component Implementing the policy control function of the user subscription; or

The key information querying subunit is configured to query the service engine enabling component for key information, and implement the policy control function of the user subscription according to the key information.

The device according to claim 7, wherein the policy control unit comprises: a local implementation sub-unit, configured to implement the policy control function of the user subscription by using the locally obtained user policy information.

12. The apparatus according to any one of claims 7 to 11, wherein the extended policy control function comprises access control, adaptation and acceleration, virus scanning, uniform resource locator URL filtering, lawful interception, policy Routing, header forwarding enhancements, ad insertion and/or banner replacement.

A gateway, comprising the policy control apparatus according to any one of claims 7 to 12.