WO2012088882A1

WO2012088882A1 - Method and system for data transmission, and access gateway

Info

Publication number: WO2012088882A1
Application number: PCT/CN2011/077880
Authority: WO
Inventors: 金友兴
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-12-31
Filing date: 2011-08-01
Publication date: 2012-07-05
Also published as: CN102571999B; CN102571999A

Abstract

Disclosed are a method and system for data transmission, and an access gateway. An isomerous network access gateway is configured between a network with separated identity and location and a traditional network, and a traditional network IP address is configured for a traffic server in the network with separated identity and location; a server mapping table and a client mapping table are configured in the isomerous network access gateway, and the server mapping table records the mapping relationship between the access identity (AID) and the IP address of the traffic server; the client mapping table records the relationship between the AID and the IP address of the client; and on the basis of the server mapping table and the client mapping table, the isomerous network access gateway realizes data transmission between the client in the traditional network and the traffic server in the network with separated identity and location. The present invention makes it possible for the client in a traditional network to access the traffic server in a specific network with separated identity and location by providing an isomerous network access gateway between the traditional network and the network with separated identity and location.

Description

Data transmission method, system and access gateway

Technical field

The present invention relates to an identity location separation network, and more particularly to a data transmission method, system, and access gateway.

Background technique

The IP address in the TCP/IP protocol widely used in the existing Internet has a dual function, which serves as both the location identifier of the communication terminal host network interface of the network layer in the network topology and the identity of the transport layer host network interface. The TCP/IP protocol was not designed at the beginning of the host. However, when host mobility is becoming more common, the semantic overload defects of such IP addresses are becoming increasingly apparent. When the IP address of the host changes, not only the route changes, but also the identity of the communication terminal host changes. This causes the routing load to become heavier and heavy, and the change of the host identity causes the application and connection to be interrupted.

The purpose of identification and location separation is to solve the problem of semantic overload of IP address and serious routing load, security, etc., to separate the dual functions of IP address, realize dynamic redistribution of mobility, multiple townships, and IP addresses. Support for mitigating routing load and mutual visits between different network areas in the next generation Internet.

The implementation method based on IP network router is one of the solutions for identity identification and location separation. The network framework is shown in Figure 1. The logical functions of each network element in the figure are as follows:

An access support node (ASN), which is responsible for providing access services for various mobile terminals, assigning user identity (AID) and routing location identifier (RID) to the accessed users, and the user's data "^ The text is encapsulated and transmitted in the core network.

The mapping plane is mainly responsible for maintaining the mapping relationship between the user identity and the routing location identifier in the network, and providing query services to the ASN and other mapping servers. The mapping plane is composed of multiple identity location registers (ILRs). In the process of querying the communication peer location by the ASN, if the ASN does not have the routing location information of the communication peer locally, it searches through the mapping plane.

The certification center is responsible for recording user categories, user service levels, etc., when the user accesses The user performs legality authentication and authorization. The Certification Authority supports two-way authentication between the network and the user.

The IP backbone network is an interconnection network between ASNs. The main function is to route and forward data packets according to the routing location identifier in the data packet, and forward the data packets sent by the ASN to the correct destination. The core switching router (CSR) is composed of. It is the same as the existing IP network and does not require any modifications.

An Interworking Gateway (ISN) is an interworking node between an identity separation network and other networks. Two different types of networks must communicate with each other through the ISN.

The wireless network is responsible for providing and maintaining the Layer 2 link between the user terminal and the ASN. In the cellular mobile network, it is responsible for wireless resource allocation and management functions. The wireless network herein may be a wireless network such as WCDMA, TD-SCDMA, CDMA2000 or Long Term Evolution (LTE).

All the communication peers (CNs) are saved on the ASN for each locally accessed mobile terminal (MN). When the location of the mobile terminal changes, the new ASN notifies the communication peer of the terminal's routing location identifier. When there is a large number of communication peers, you need to notify each CN to ensure that each CN can send data packets to the correct ASN.

In order to make full use of the existing backbone network, the data packets between the ASNs are standard IP packets, which can be routed on the IP backbone network.

Summary of the invention

It is an object of the present invention to provide a data transmission method, system and access gateway for interworking between a legacy network and an identity location separation network.

To solve the above technical problem, a data transmission method of the present invention includes: configuring an alien network access gateway between an identity location separation network and a legacy network, and configuring an IP address in a legacy network for a service server in the identity location separation network. ;

The server mapping table and the client mapping table are configured in the different network access gateway, and the mapping relationship between the identity identifier (AID) of the service server and the IP address is recorded in the server mapping table; the client mapping table is used to record the AID and the IP address of the client. Mapping relationship;

The alien network access gateway implements data transmission between the client in the traditional network and the service server in the identity-separated network according to the server mapping table and the client mapping table. The alien network access gateway is configured with an IP address corresponding to the traditional network and a routing location identifier (RID) corresponding to the identity location separation network, and the service server in the identity location separation network sends the data to the alien network access gateway through the RID, in the traditional network. The client sends data to the alien access gateway through the IP address of the alien access gateway.

The steps for implementing data transmission by the different network access gateway include:

The client sends an IP data packet to the different network access gateway, where the source address of the IP data packet is the IP address of the client, and the destination address is the IP address of the service server serving as the target server in the identity location separation network;

After receiving the IP data packet, the different network access gateway searches the server mapping table for the AID corresponding to the IP address of the target server according to the destination address, and assigns an AID to the client, and adds the IP address of the client to the client mapping table. The AID mapping relationship replaces the source address and the destination address of the IP packet with the AID of the client and the AID of the target server, and sends the IP packet to the target server.

The steps of implementing data transmission by the different network access gateway include:

After receiving the IP data packet, the target server sends a response data packet to the client, where the destination address of the response data packet is the AID of the client, and the source address is the AID of the target server;

After receiving the response packet, the alien network access gateway searches the server mapping table and the client mapping table for the IP address of the target server and the client according to the source address and the destination address respectively; the source address and the destination address of the response packet. Replace with the IP address of the target server and client found, and send the response packet to the client.

The steps for the alien network access gateway to send the IP data packet to the target server include:

The alien network access gateway searches the mapping plane in the identity location separation network to find the RID corresponding to the AID of the target server, and sends the IP data packet to the target server according to the RID.

The method also includes:

Configuring a correspondence between a domain name and an IP address of the service server in the identity separation server on the Domain Name System (DNS) server in the traditional network;

The step of the client sending the IP data packet to the different network access gateway includes: the client sending, by the DNS server, the IP address of the domain name to the target server to the different network access gateway, the DNS The server resolves the domain name that points to the target server to the IP address of the target server. The present invention also provides another data transmission method for implementing client access in a traditional network to a service server in an identity location separation network, including:

After receiving the IP data packet of the client, the alien network access gateway between the traditional network and the identity location separation network replaces the source address and the destination address of the IP data packet with the AID of the client and the AID of the target server, respectively, and The IP packet is sent to the target server.

The AID of the client is temporarily allocated by the alien access gateway after receiving the IP packet. The present invention further provides another data transmission method for implementing client access to a service server in an identity separation network in a traditional network, including:

After receiving the data packet sent by the target server in the identity separation network, the alien network access gateway between the traditional network and the identity location separation network replaces the source address and the destination address of the response packet with the target server respectively. And the client's IP address, and send the response packet to the client.

The present invention also provides a data transmission system, including: an identity location separation network, an alien network access gateway, and a legacy network, where the alien network access gateway is disposed between the identity location separation network and the legacy network, where:

The service server in the identity location separation network is configured with an identity (AID) and an IP address in the legacy network;

The server mapping table and the client mapping table are configured in the different network access gateways. The mapping between the AID and the IP address of the service server is recorded in the server mapping table. The client mapping table is used to record the mapping between the AID and the IP address of the client. .

The alien network access gateway is configured to: implement data transmission between the client in the traditional network and the service server in the identity location separated network according to the server mapping table and the client mapping table.

The alien network access gateway is configured with an IP address corresponding to the traditional network and a routing location identifier (RID) corresponding to the identity location separation network, and the service server in the identity location separation network sends the data to the alien network access gateway through the RID, the traditional network. The client in the middle sends the data to the different access gateway through the IP address of the access gateway of the different network.

The present invention also provides another data transmission system, including: an identity location separation network, a different network connection In the gateway and the traditional network, the alien network access gateway is set between the identity location separation network and the traditional network, where:

The traditional network includes a client, and the client is configured to: send an IP data packet to the different network access gateway, the source address of the IP data packet is the IP address of the client, and the destination address is the IP address of the target server in the identity location separation network. Address

The alien network access gateway is configured to: after receiving the IP data packet of the client, replace the source address and the destination address of the IP data packet with the AID of the client and the AID of the target server, respectively, and send the IP data packet to Target server.

The alien network access gateway is further configured to: after receiving the IP data packet, first look up the AID corresponding to the IP address of the target server from the pre-configured server mapping table according to the destination address, and assign the AID to the client, which is pre-configured. The mapping between the IP address of the client and the AID is added to the client mapping table, and then the source address and the destination address of the IP packet are replaced with the AID of the client and the AID of the target server, respectively.

The present invention further provides another data transmission system, including: an identity location separation network, a different network access gateway, and a legacy network, where the alien network access gateway is disposed between the identity location separation network and the legacy network, where:

The identity location separation network includes a service server, and the service server is configured to: when used as a target server, after receiving the IP data packet, send the response data packet to the client in the traditional network, and the destination address of the response data packet is The AID of the client, the source address is the AID of the target server; the alien access gateway is set to: the source address and destination of the response packet after receiving the response packet sent by the target server in the identity location separation network The addresses are replaced with the IP addresses of the target server and the client, and the response packets are sent to the client. The alien network access gateway is further configured to: after receiving the response data packet, first find the IP addresses of the target server and the client from the pre-configured server mapping table and the client mapping table according to the source address and the destination address, and then Replace the source and destination addresses of the responding packet with the IP addresses of the target server and client respectively.

The present invention also provides an access gateway, which is used to implement client access to a service server in an identity location separation network in a traditional network, including: an address maintenance unit, an address mapping unit, and a number According to the sending unit, where:

The address maintenance unit is configured to: configure a server mapping table and a client mapping table, wherein the server mapping table records the mapping relationship between the identity identifier (AID) of the service server and the IP address in the identity separation network; the client mapping table is used to record The mapping relationship between the AID and the IP address of the client in the traditional network;

The address mapping unit is configured to: set, according to the server mapping table and the client mapping table, the data sending unit in the data packet to: send the data packet that the address mapping unit completes the mapping conversion to the service used as the target server in the identity location separation network. Client in a server or traditional network.

The address maintenance unit is further configured to be a client-assigned AID in the traditional network, and add a mapping relationship between the client's IP address and the AID in the client mapping table;

The address mapping unit is configured to perform address mapping conversion by: after receiving the IP data packet of the client in the traditional network, replacing the source address and the destination address of the IP data packet with the address maintenance unit respectively for the client The AID and identity location separate the AID of the target server in the network.

The address mapping unit is further configured to: after receiving the IP data packet, first look up the AID corresponding to the IP address of the target server from the server mapping table according to the destination address, and look up the AID corresponding to the IP address of the client from the client mapping table, and then The source address and destination address of the IP packet are replaced with the AID of the client and the AID of the target server, respectively.

The address mapping unit is configured to convert the address in the data packet by: after receiving the data packet of the response sent by the service server serving as the target server in the identity location separation network, the source address of the data packet of the response And the destination address is replaced with the IP address of the target server and client respectively.

The address mapping unit is further configured to: after receiving the response data packet, first find the IP address of the target server and the client from the server mapping table and the client mapping table according to the source address and the destination address, and then respond to the data packet. The source and destination addresses are replaced with the IP addresses of the target server and client respectively.

In summary, the present invention sets up a different network connection between a traditional network and an identity location separation network. Entering the gateway, the access gateway has a dual address of an IP address and an AID, so that a client in the traditional network can access a service server in a specific identity location separation network, as long as the service server in the identity location separation network is connected in a different network. The IP address can be configured in the gateway to meet the needs of the identity separation network and the traditional network mutual access.

BRIEF abstract

1 is an architectural diagram of an existing identity location separation network;

2 is an architectural diagram of a data transmission system according to an embodiment of the present invention;

3 is a schematic diagram of a server mapping table in an alien network access gateway according to the embodiment; FIG. 4 is a schematic diagram of a client mapping table in an alien network access gateway according to the embodiment; A schematic diagram of a client transmitting data to a target server in a data transmission method;

6 is a schematic diagram of a target server transmitting data to a client in the data transmission method according to the embodiment;

FIG. 7 is a schematic diagram of an access gateway according to an embodiment of the present invention.

Preferred embodiment of the invention

The present embodiment provides a method for a traditional network client to access an application server in an identity separation location network. By deploying a gateway, a traditional network client can access an application server in an identity and location separation network through the gateway. The gateway to be deployed is referred to as an alien network access gateway, and the alien network access gateway is simultaneously interconnected with the traditional IP network and the identity location separation network; the heterogeneous network access gateway is configured with resources for accessing the identity location separation network, including the client. The management and conversion of identification, routing management, and collection of billing information.

As shown in Figure 2, the alien network access gateway is located at the edge of the traditional IP network and the identity separation network. The service access of the two networks needs to pass through the gateway.

The alien network access gateway has at least two network addresses, which are the IP address in the traditional IP network and the RID in the identity location separation network. The gateway can access the two networks at the same time, and the address domains of the two addresses cannot conflict with each other. Service server in the identity location separation network through the alien network access network The closed RID sends the data to the alien access gateway. The client in the traditional network sends the data to the alien access gateway through the IP address of the alien access gateway.

In order to communicate through the external network access gateway, a server mapping table needs to be configured on the gateway to record the mapping between the AID and the IP address of the service server in the identity separation network, and configure the client mapping table to record the IP of the traditional network client. The mapping relationship between the address and the AID.

Figure 3 shows a server mapping table, which is a mapping relationship between the AID of the service server in the identity separation network and the IP address in the traditional network. If each application server allows the traditional network to access it, then It needs to be assigned an IP address on the alien access gateway. The IP address is statically related to the AID. Knowing the IP address knows the AID and vice versa.

Figure 4 shows the client mapping table, which is the address mapping table used by the traditional network client to access the identity location to separate the network. When the traditional network client accesses the identity and separates the network, it needs an AID. The AID can be temporarily allocated to the user on the gateway. It can also be bound to establish the corresponding relationship between the IP address of the client and the AID used by the client. An IP address corresponds to an AID. The disadvantage of binding is that when the traditional network client does not access the identity location and separates the network, its AID cannot be used by other clients, and the AID is wasted. When the gateway temporarily allocates the AID to the traditional network client, after the client accesses the identity location and separates the service on the network, the AID can be used by other clients, which can reduce the number of AIDs on the gateway.

When the traditional network client accesses the identity server to separate the service server in the network, the destination address is the IP address of the service server. The user can directly input the IP address or obtain the IP address of the service server according to the DNS (Domain Name System) server. When the data of the traditional network client is sent to the different network access gateway, the different network access gateway searches the server mapping table to obtain the AID (destination AID) corresponding to the IP address; and assigns an AID (source AID) to the traditional network client; After the two AIDs, the IP packet sent by the traditional network client can be modified by the header, and the source IP address and the destination IP address are replaced with the source AID and the destination AID respectively; and the IP packet is sent to the target server. After receiving the data packet returned by the target server, the alien network access gateway finds the corresponding source IP address and destination IP address from the mapping table, and then modifies the address of the packet header, and then sends the packet to the traditional network client to complete the service access. process. In order to realize the traditional network client access identity location separation business server on the network, the following conditions are required:

The service server in the identity location separation network is assigned an IP address corresponding to the legacy network, and the AID in the identity location separation network is also assigned.

The DNS server is configured with a mapping between the server domain name and the IP address. The server pointed to by the IP address is in the identity separation network. The user can access the server through the DNS server and the server domain name. Of course, if the domain name is not required, the DNS is used. You do not need to configure the mapping between the server domain name and IP address on the server.

The server mapping table and the client mapping table must be configured on the different network access gateway. The server mapping table is a mapping relationship between the AID of the service server in the identity separation network and the corresponding IP address in the traditional network; the client mapping table is The client address mapping relationship table used by the traditional terminal to access the identity of the server on the network.

Figure 5 shows the traditional network client accessing the identity server to separate the service servers in the network. The process of the traditional network client sending IP packets to the servers in the identity location separation network includes the following steps:

Step 501: The traditional network client initiates a service request, and sends an IP data packet to the alien network access gateway. The source address of the IP data packet is an IP address of the traditional network client, and the destination address is an IP address of the target server.

Step 502: After receiving the IP data packet, the alien network access gateway searches the server mapping table according to the destination address, and finds the AID corresponding to the IP address of the target server.

Step 503: The alien network access gateway allocates an AID to the traditional network client, and adds a correspondence between the IP address of the traditional network client and the AID in the client mapping table.

Step 504: The alien network access gateway replaces the source address and the destination address of the IP data packet with the AID allocated by the traditional network client and the AID of the found target server.

Step 505: The alien network access gateway separates the mapping plane in the network from the identity location to find the RID corresponding to the destination AID, and sends the IP data packet to the target server.

As shown in FIG. 6, the traditional network client accesses the identity server in the location separation network. The method, the process in the server in the identity location separation network sending the IP data packet to the traditional network client includes the following steps:

Step 601: After receiving the IP data packet of the traditional network client, the target server performs service processing, and sends a response data packet to the traditional network client, where the destination address of the data packet is an alien network access gateway allocated to the traditional network client. AID, the source address is the AID of the target server;

Step 602: After receiving the data packet of the target server, the different network access gateway searches the server mapping table and the client mapping table according to the source address and the destination address respectively, and obtains the IP address of the target server and the IP address of the traditional network client.

Step 603: The alien network access gateway replaces the source address and the destination address of the data packet of the target server with the IP address of the found target server and the IP address of the traditional network client.

Step 604: The alien network access gateway sends the response packet sent by the target server to the traditional network client through the traditional IP network.

The access gateway of the embodiment of the present invention includes: an address maintenance unit, an address mapping unit, and a data sending unit, where:

The address maintenance unit is configured to: configure a server mapping table and a client mapping table, where the mapping relationship between the identity identifier (AID) of the service server and the IP address in the identity separation location network is recorded in the server mapping table; the traditional network is recorded in the client mapping table. The mapping between the AID of the client and the IP address;

The address mapping unit is configured to: convert the data packet according to the server mapping table and the client mapping table;

The data sending unit is configured to: send the data packet converted by the address mapping unit to the address mapping to the service server in the identity separation network or the client in the legacy network.

The present invention also provides a data transmission system, including a legacy network, an identity location separation network, and an alien network access network, wherein the functions of the respective devices are specifically described above.

Obviously, those skilled in the art should understand that the above modules and steps of the present invention may be Implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of computing devices, optionally, they may be implemented by program code executable by the computing device, such that They may be stored in a storage device by a computing device, or they may be fabricated into individual integrated circuit modules, or their multiple modules or steps may be implemented as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above is only the embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. All modifications, equivalents, improvements, etc., made within the spirit and scope of the invention are intended to be included within the scope of the invention.

Industrial applicability

Compared with the prior art, the present invention sets an alien network access gateway between the traditional network and the identity location separation network, so that the client in the traditional network can access the service server in the specific identity location separation network, and the identity is satisfied. The need for location separation networks and traditional network exchange visits.

Claims

Claim

1. A data transmission method, comprising:

Configuring an alien network access gateway between the identity location separation network and the legacy network, and configuring an IP address in the legacy network for the service in the identity location separation network;

Configuring a server mapping table and a client mapping table in the different network access gateway, where the mapping relationship between the identity identifier (AID) of the service server and the IP address is recorded in the server mapping table; Recording the mapping relationship between the AID and the IP address of the client;

The different network access gateway implements data transmission between the client in the traditional network and the service server in the identity-separated network according to the server mapping table and the client mapping table.

2. The method according to claim 1, wherein the different network access gateway is configured with an IP address corresponding to a legacy network and a routing location identifier (RID) corresponding to the identity location separation network; In the step of data transmission, the service server in the identity location separation network sends data to the different network access gateway by using the RID, and the client in the traditional network accesses through the different network. The IP address of the gateway sends the data to the different access gateway.

3. The method according to claim 2, wherein the step of implementing the data transmission by the different network access gateway comprises:

The client sends an IP data packet to the different network access gateway, where the source address of the IP data packet is an IP address of the client, and the destination address is an IP address of the service server serving as the target server in the identity location separation network. ; as well as

After receiving the IP data packet, the different network access gateway searches for the AID corresponding to the IP address of the target server from the server mapping table according to the destination address of the IP data packet, and allocates the AID for the client. The AID is configured to add a mapping relationship between the IP address of the client and the AID in the client mapping table, and replace the source address and the destination address of the IP data packet with the AID of the client and the AID of the target server, respectively. An IP packet is sent to the target server.

4. The method of claim 3, wherein the different network access gateway implements the data transmission The steps to lose also include:

After receiving the data packet of the response, the different network access gateway searches for the target server and the client from the server mapping table and the client mapping table respectively according to the source address and the destination address of the responding data packet. The IP address is replaced by the source address and the destination address of the response packet to the IP addresses of the found target server and the client, and the response packet is sent to the client.

5. The method of claim 3, wherein the step of the alien network access gateway transmitting the IP data packet to the target server comprises:

The alien network access gateway searches for a RID corresponding to the AID of the target server from the mapping plane in the identity location separation network, and sends the IP data packet to the target server according to the RID.

6. The method of claim 3, further comprising:

And configuring, on a Domain Name System (DNS) server in the traditional network, a correspondence between a domain name and an IP address of the service server in the identity separation network;

The step of the client sending an IP data packet to the different network access gateway includes: the client sending, by the DNS server, an IP data packet whose domain name points to the target server to the different network access gateway, the DNS The server resolves the domain name pointing to the target server to the IP address of the target server.

A data transmission method for implementing a client in a traditional network to access a service server in an identity separation network, including:

After receiving the IP data packet of the client, the different network access gateway between the traditional network and the identity location separation network replaces the source address and the destination address of the IP data packet with the AID of the client and the client respectively. The AID of the target server and send the IP packet to the target server.

8. The method according to claim 7, wherein the AID of the client is the different network connection The incoming gateway is temporarily allocated after receiving the IP packet.

A data transmission method for implementing a client in a traditional network to access a service server in an identity-separated network, including:

After receiving the data packet sent by the target server in the identity location separation network, the alien network access gateway between the legacy network and the identity location separation network receives the source address and destination of the response data packet. The addresses are replaced with the IP addresses of the target server and the client, respectively, and the response packet is sent to the client.

A data transmission system, comprising: an identity location separation network, an alien network access gateway, and a traditional network, wherein the alien network access gateway is disposed between the identity location separation network and the legacy network, wherein:

The service server in the identity location separation network is configured with an identity (AID) and an IP address in a legacy network;

The server mapping table and the client mapping table are configured in the different network access gateway, where the mapping between the AID and the IP address of the service server is recorded in the server mapping table; the client mapping table is used to record the location The mapping between the AID of the client and the IP address.

11. The system of claim 10, wherein

The different network access gateway is configured to: implement data transmission between the client in the legacy network and the service server in the identity location separation network according to the server mapping table and the client mapping table.

12. The system of claim 11 wherein:

The different network access gateway is configured with an IP address corresponding to the traditional network and a routing location identifier (RID) corresponding to the identity location separation network;

The different network access gateway is configured to implement the data transmission by: the service server in the identity location separation network sends data to the different network access gateway by using the RID, where the traditional network The client sends data to the alien access gateway through the IP address of the different network access gateway.

The traditional network includes a client, and the client is configured to: send an IP data packet to the different network access gateway, where the source address of the IP data packet is an IP address of the client, and the destination address is the identity location. The IP address of the target server in the network;

The alien network access gateway is configured to: after receiving the IP data packet of the client, replace the source address and the destination address of the IP data packet with the AID of the client and the AID of the target server, respectively, and The IP data packet is sent to the target server.

14. The system of claim 13 wherein

The alien network access gateway is further configured to: after receiving the IP data packet, first look up an AID corresponding to an IP address of the target server from a pre-configured server mapping table according to a destination address, and serve as the client The AID is allocated, and the mapping between the IP address of the client and the AID is added in the pre-configured client mapping table, and then the source address and the destination address of the IP packet are replaced with the AID and the target server of the client respectively. AID.

The identity location separation network includes a service server, and the service server is configured to: when used as a target server, after receiving the IP data packet, send a response data packet to the client in the traditional network, and the response data The destination address of the packet is the AID of the client, and the source address is the AID of the target server;

The different network access gateway is configured to: after receiving the data packet of the response sent by the target server in the identity location separation network, replace the source address and the destination address of the response data packet with the target respectively The IP address of the server and the client, and the data packet of the response is sent to the client.

16. The system of claim 15 wherein The different network access gateway is further configured to: after receiving the data packet of the response, first searching the target server and the client from the pre-configured server mapping table and the client mapping table according to the source address and the destination address, respectively. The IP address of the end, and then replace the source address and the destination address of the responding packet with the IP addresses of the target server and the client respectively.

An access gateway, configured to implement access by a client in a traditional network to a service server in an identity location separation network, including: an address maintenance unit, an address mapping unit, and a data sending unit, where:

The address maintenance unit is configured to: configure a server mapping table and a client mapping table, where the mapping relationship between the identity identifier (AID) of the service server in the identity location separation network and the IP address is recorded in the server mapping table; The client mapping table is used to record the mapping relationship between the AID and the IP address of the client in the traditional network.

The address mapping unit is configured to: map and convert an address in the data packet between the address in the identity location separation network and an address in the traditional network according to the server mapping table and the client mapping table;

The data transmitting unit is configured to send the data packet that has been mapped and converted by the address mapping unit to a service server serving as a target server or a client in a legacy network in the identity location separation network.

18. The access gateway of claim 17, wherein

The address maintenance unit is further configured to allocate an AID to the client in the traditional network, and add a mapping relationship between the IP address of the client and the AID in the client mapping table.

The address mapping unit is configured to perform mapping conversion on the address in the data packet by: after receiving the IP data packet of the client in the traditional network, replacing the source address and the destination address of the IP data packet respectively The AID assigned to the client by the address maintenance unit and the AID of the target server in the identity location separation network.

19. The access gateway of claim 18, wherein

The address mapping unit is further configured to: after receiving the IP data packet, first searching for an AID corresponding to an IP address of the target server from the server mapping table according to a destination address, from the The client mapping table searches for the AID corresponding to the IP address of the client, and then replaces the source address and the destination address of the IP packet with the AID of the client and the AID of the target server, respectively.

20. The access gateway of claim 17, wherein

The address mapping unit is configured to perform mapping conversion on the address in the data packet by: after receiving the data packet of the response sent by the service server serving as the target server in the identity location separation network, the response The source and destination addresses of the data packet are replaced with the IP addresses of the target server and the client, respectively.

21. The access gateway of claim 20, wherein

The address mapping unit is further configured to: after receiving the data packet of the response, first searching for the IP address of the target server and the client from the server mapping table and the client mapping table according to the source address and the destination address, respectively. Then, the source address and the destination address of the response packet are replaced with the IP addresses of the target server and the client, respectively.