WO2012122709A1

WO2012122709A1 - Method for intercommunicating between location-and-identity-separation network and internet, and intercommunication network thereof

Info

Publication number: WO2012122709A1
Application number: PCT/CN2011/071863
Authority: WO
Inventors: 黄兵; 刘韫晖
Original assignee: 中兴通讯股份有限公司
Priority date: 2011-03-16
Filing date: 2011-03-16
Publication date: 2012-09-20

Abstract

A method for intercommunicating between location-and-identity-separation network and internet includes: the location-and-identity-separation network sends location-and-identity-separation network data packets to an intercommunication gateway, wherein source address is the identity code of the location-and-identity-separation network terminal, destination address is the identity code of the internet terminal in the location-and-identity-separation network; the intercommunication gateway receives the location-and-identity-separation network data packets sent by the location-and-identity-separation network, and converts the location-and-identity-separation network data packets to internet data packets, which includes converting the source address to the IP address of the location-and-identity-separation network terminal in the internet and converting the destination address to the IP address of the internet terminal; after the data packets converted, the intercommunication gateway sends the internet data packets to the internet; and, the internet receives the internet data packets sent by the intercommunication gateway. The intercommunication method, intercommunication network and intercommunication gateway of the invention, can enable the intercommunication between the networks which adopt different terminal identities.

Description

Identity location separation network and internet interworking method and interworking network

Technical field

The present invention relates to the field of communications, and more particularly to a method and an interworking network for interworking between an identity location separation network and the Internet.

Background technique

With the development of information technology, the information network represented by the Internet has played an increasingly important role in economic and social development. But the Internet has also exposed more and more problems during its use. At the beginning of the Internet design, only fixed and trusted terminals were considered, terminal mobility was not supported, and there was no inherent security mechanism. With the development of wireless technologies such as 3G, 3G, and 4G, the Internet's support for mobile terminals has become an increasingly urgent issue. At the same time, with the expansion of the scope of Internet applications, security issues are more prominent, and these problems have been difficult to solve under the existing Internet technology framework.

The TCP/IP protocol is the foundation of the Internet. IP addresses have dual attributes of identity and location and are the root cause of the Internet's inability to support mobility. As the identity attribute of the terminal, the IP address cannot be changed during the terminal movement. If it changes, the upper layer service connection such as TCP and UDP will be interrupted as the address changes. As the location attribute of the terminal, the IP address must be in the process of terminal movement. Change (the address must have the current subnet prefix). If it does not change, the router cannot forward the packet to the terminal correctly. At the same time, the dual nature of IP addresses is also the reason why the security of the Internet cannot be fundamentally resolved. Since the IP address must contain the location attribute of the terminal, the mobile terminal cannot be assigned a fixed IP address, so it is impossible to determine the identity of an attacker such as a hacker based on the IP address on the Internet. This is the root cause of the unresolved security issues such as attacks, fraud, and abuse on the Internet.

In view of the dual nature of the IP protocol, the industry is researching a variety of next-generation network technologies based on identity and location separation, such as LISP, HIP, Six/one, integrated networks and so on. A common feature of these technologies is the introduction of two coding spaces, one representing the identity of the terminal and one representing the location of the terminal. Each terminal has both an identity code and a location code. The upper layer service connection such as TCP and UDP is based on the identity code of the terminal and establishes a communication connection with the peer. When the terminal moves, its position code changes, but its identity code remains unchanged. Therefore, the movement of the terminal does not cause interruption of the upper layer service. After the identity coding and location coding of the terminal are separated, each terminal can be assigned a fixed identity code as the identity between the terminals. This realizes the real identity of the terminal.

The construction, promotion, and popularization of the next-generation Internet (hereinafter referred to as identity location separation network) based on identity and location separation will take a long time, and the identity location separation network and the traditional Internet will exist simultaneously in a long period of time. Therefore, the two networks need to communicate.

The identity separation network and the traditional Internet intercommunication mean that the identity location separation network terminal and the traditional Internet terminal can communicate with each other. The identity location separation network terminal can access the services provided by the traditional Internet, and the traditional Internet terminal can also access the service of the identity location separation network. However, the interworking problem between networks based on different terminal distinctive identifiers remains to be solved.

Summary of the invention

It is an object of the present invention to provide an interworking method between two networks and an interworking network and an interworking gateway to implement interworking between the two networks.

In order to solve the above technical problem, the present invention provides an interworking method for an identity location separation network and an Internet. The identity location separation network uses an identity code to distinguish a terminal, and the Internet uses an IP address to distinguish a terminal. The method includes: the identity location separation The network sends packets to the Internet in the following ways:

The identity location separation network sends an identity location separation network data packet to the interworking gateway, where the source address is an identity code of the identity location separation network terminal, and the destination address is an identity code of the network terminal separating the network at the identity location;

Receiving, by the interworking gateway, the identity location separation network data packet sent by the identity location separation network, and converting the identity location separation network data packet into an internet data packet, including converting the source address into the identity location Separating the IP address of the network terminal from the Internet to convert the destination address to the IP address of the Internet terminal; after the data packet is converted, the interworking gateway sends the Internet data packet to the Internet;

The Internet receives an internet data packet sent by the interworking gateway.

Preferably, the method further includes: the Internet separating the network from the identity location by: Send the packet:

The Internet sends an Internet data packet to the interworking gateway, where the source address is an IP address of the Internet terminal, and the destination address is an IP address of the Internet where the identity location is separated from the network terminal;

Receiving, by the interworking gateway, the Internet data packet sent by the Internet; and converting the Internet data packet into an identity location separation network data packet, including converting the source address into the network terminal in an identity location separation network Identity code, the destination address is converted into an identity code of the identity location separation network terminal; after the data packet is converted, the interworking gateway sends the identity location separation network data packet to the identity location separation network;

The identity location separation network receives the identity location separation network data packet sent by the interworking gateway.

Preferably, before receiving the identity location to separate the network data packet or the Internet data packet, the interworking gateway further allocates the identity code to the Internet terminal, allocates the IP address to the identity location separation network terminal, and saves the location Determining an IP address of the Internet terminal and the identity location separation network terminal and an identity coding conversion item; when converting the received identity location separation data packet or the Internet data packet, the interworking gateway is converted according to the identifier The item is encoded with an identity code and an IP address.

Preferably, the method further includes: designating a part of the identity code space of the identity location separation network as an interworking identity coding space, and the identity code of the Internet terminal in the identity location separation network is the interworking identity coding space. Interworking identity code; and, designating a part of the IP address space of the Internet as an interworking IP address space, where the IP address of the identity location separation network terminal in the Internet is an interworking IP address of the interworking IP address space; When the identity location is separated from the network data packet or the Internet data packet, the identity location separation network or the Internet is routed to the interworking gateway by determining that the destination address of the data packet is an interworking identity code or an interworking IP address.

Preferably, the identity coding is a coding in a 32-bit binary format, and an identity coding space of the identity location separation network overlaps with an IP address space of the Internet.

In order to solve the above technical problem, the present invention further provides an interworking network, where the interworking network includes an identity location separation network, an Internet, and a mutual connection between the identity location separation network and the Internet. Gateway, where:

The identity location separation network distinguishes the terminal by using an identity code, and is configured to: send an identity location separation network data packet to the interworking gateway, where the source address is an identity code of the identity location separation network terminal, and the destination address is an identity of the Internet terminal. The identity code of the location separation network;

The interworking gateway includes a transceiver module and a conversion module that are connected to each other, wherein the transceiver module is configured to receive an identity location separation network data packet sent by the identity location separation network, and send the converted Internet data packet to the Internet; The conversion module is configured to convert the identity location separation network data packet into the internet data packet, including converting the source address into an IP address of the identity location separation network terminal on the Internet, and converting the destination address into an internet address The IP address of the terminal;

The Internet uses an IP address to distinguish the terminal and is configured to receive the Internet data packet sent by the interworking gateway.

Preferably, the Internet is further configured to: send an Internet data packet to the interworking gateway, where the source address is an IP address of the Internet terminal, and the destination address is an IP address of the Internet where the identity location is separated from the network terminal;

The transceiver module of the interworking gateway is further configured to receive the Internet data packet sent by the Internet and send the converted identity location separation network data packet to the identity location separation network; the conversion module is further configured to: Converting the Internet data packet into an identity location separation network data packet, comprising: converting the source address into an identity code of the Internet terminal separating the network in the identity location, and converting the destination address into an identity code of the identity location separation network terminal;

The identity location separation network is further configured to receive the identity location separation network data packet sent by the interworking gateway.

Preferably, the interworking gateway further includes an identifier allocation module connected to the conversion module, the identifier assignment module is configured to: assign an identity code of the network to the identity terminal in the identity location, and separate the network for the identity location Assigning, by the terminal, an IP address of the Internet, and storing an identifier of the IP address and the identity code of the Internet terminal and the identity location separation network terminal; the conversion module is configured to separate the network data packet from the identity location or When the Internet data packet is converted, the identity encoding and the IP address are converted according to the identifier conversion item. Preferably, the identity location separation network is further configured to: specify a part of the identity coding space as an interworking identity coding space, and the identity code of the Internet terminal in the identity location separation network is an interworking identity of the interworking identity coding space. Encoding, and, when transmitting the identity location separation network data packet to the interworking gateway, determining that the destination address is an interworking identity code to be routed to the interworking gateway; the Internet is further configured to: specify a part of the IP address space as an interworking An IP address space, where the IP address of the network terminal in the Internet is an interworking IP address of the interworking IP address space, and when the Internet data packet is sent to the interworking gateway, the destination address is determined to be interworking. The IP address is routed to the interworking gateway.

In order to solve the above technical problem, the present invention further provides another interworking network, where the interworking network includes an identity location separation network, an Internet, and an interworking gateway connecting the identity location separation network and the Internet, where:

The identity location separation network uses the identity code as the terminal identity identifier, and is configured to implement communication between the identity location separation network terminals and to communicate with the Internet through the interworking gateway;

The Internet uses the IP address as the terminal distinguishing identifier, and is configured to communicate with the identity location separation network through the interworking gateway;

The interworking gateway is configured to: assign an identity code to the Internet terminal, assign an IP address to the identity location separation network terminal, save an identity conversion item of the identity code and the IP address, and implement terminal differentiated identity conversion and identity according to the identity conversion item. The location separates the data forwarding between the network and the Internet.

Preferably, the identity location separation network is further configured to: specify a part of the identity coding space as an interworking identity coding space, and the identity code assigned by the interworking gateway to the Internet terminal is the interworking identity code; The method is configured to: designate a part of the IP address space as an interworking IP address space, and the IP address allocated by the interworking gateway for the identity location separation network terminal is the interworking IP address.

Preferably, the identity code is a code in a 32-bit binary format, and the identity location is separated The identity coding space of the network overlaps with the IP address space of the Internet.

In order to solve the above technical problem, the present invention further provides another interworking gateway, where the interworking gateway is connected to an identity location separation network and an Internet, to implement communication between the identity location separation network and the Internet, the identity The location separation network uses the identity code as the terminal difference identifier, and the Internet uses the IP address as the terminal difference identifier, and the interworking gateway includes the transceiver module and the conversion module that are connected to each other, where:

The transceiver module is configured to: receive an identity location separation network data packet sent by the identity location separation network, and send the converted Internet data packet to the Internet; and receive the Internet data packet sent by the Internet The identity location separation network sends the converted identity location separation network data packet;

The converting module is configured to: convert the identity location separated network data packet received by the transceiver module into the internet data packet, including converting the identity code into the IP address; and receiving the transceiver module Converting the Internet data packet into an identity location separation network data packet includes converting the IP address to the identity code.

Preferably, the interworking gateway further includes an identifier allocation module that is connected to the conversion module, and the identifier distribution module is configured to: allocate an interworking identity code of the interworking identity coding space to the internet terminal, and separate the network for the identity location The terminal allocates an interworking IP address of the interworking IP address space, and stores an IP address of the Internet terminal and an assigned identity conversion item of the interworking identity code, and an entry; wherein the interworking identity coding space is an identity of the identity location separation network a designated part of the coding space, the interworking IP address space is a designated part of the IP address space of the Internet; the conversion module is configured to perform identity coding and IP address conversion according to the identifier conversion item saved by the identifier allocation module .

In order to solve the above technical problem, the present invention further provides a method for interworking between a first network and a second network, where the first network and the second network use terminal identifiers that overlap in the coding space, and are connected through an interworking gateway. Methods include: The interworking gateway allocates the terminal identifier of the second network to the first network terminal, allocates the terminal identifier of the first network to the second network terminal, and establishes an identifier conversion item corresponding to the allocated terminal identifier; the interworking gateway receives the first network Or a data packet sent by the second network, where the source address and the destination address are terminal identifiers of the first network terminal and the second network terminal in the first network or the second network as the source network;

Converting, by the interworking gateway, the received data packet, comprising: converting the source address and the destination address according to the identifier conversion item into a terminal identifier of the first network terminal and the second network terminal in the second network or the first network as the destination network;

The interworking gateway transmits the converted data packet to the second network or the first network as the destination network.

To solve the above technical problem, the present invention further provides an interworking network, where the interworking network includes a first network, a second network, and an interworking gateway connecting the first network and the second network, where:

The first network is configured to send a data packet to the interworking gateway or receive a data packet sent by the interworking gateway, where the source address and the destination address of the sent or received data packet are the first network terminal and the second network terminal in the first network terminal. Identification

The second network uses the terminal identifier of the coding space overlapping with the coding space of the first network, and is configured to send a data packet to the interworking gateway or receive a data packet sent by the interworking gateway, and the source address and the destination address of the data packet sent or received. a terminal identifier in the second network of the first network terminal and the second network terminal;

The interworking gateway is configured to: allocate a terminal identifier of the second network to the first network terminal, allocate a terminal identifier of the first network to the second network terminal, and establish an identifier conversion item corresponding to the allocated terminal identifier; receive the first network Or the data packet sent by the second network, and converting the received data packet, including converting the source address and the destination address of the data packet into the first network terminal and the second network terminal according to the identifier conversion item as the second network as the destination network a network or a terminal identifier in the first network; and transmitting the converted data packet to the second network or the first network as the destination network.

The method, the interworking network and the interworking gateway of the present invention exchange the data packets that need to be interworked through the interworking gateway, and realize the interworking between the terminals of the two networks identified by different terminals, specifically the source and destination addresses of the received data packets. The source network terminal identifier is converted to the destination network terminal identifier, the pin For the interworking of the identity location separation network and the traditional Internet, the identity code of the identity location separation network is encoded in a 32-bit binary format, overlaps with the IP address space, and is compatible with the traditional Internet terminal, and is divided in the identity coding space. The interworking IP code space for interworking is divided into the interworking IP address space for interworking in the IP address space, which facilitates route design and judgment. That is, through the route design in the Internet, all destination addresses are interworking IP addresses. The data packets are all routed to the interworking gateway. Similarly, in the identity location separation network, all the data packets with the destination address being the interworking AID are routed to the interworking gateway through the route design. BRIEF abstract

1 is a schematic diagram of an interworking network of the present invention.

2 is a schematic diagram of a process of transmitting a data packet to the Internet by the identity location separation network of the present invention. 3 is a schematic diagram of a process of transmitting data packets from the Internet to an identity location separation network according to the present invention. 4 is a schematic diagram of an application example in which an identity location separation network terminal of the present invention communicates with an Internet terminal. Preferred embodiment of the invention

The main idea of the present invention is to provide an interworking gateway between the identity location separation network and the Internet, and the interworking gateway realizes the communication between the identity location separation network and the Internet, including assigning an identity code in the identity location separation network to the Internet terminal, The IP address of the Internet is allocated to the identity location separation network terminal, and the identity code and the IP address are converted, thereby realizing the identity location separation network and the Internet.

As shown in FIG. 1, the interworking network of the present invention includes an identity location separation network, an Internet, and an interworking gateway connecting the identity location separation network and the Internet, wherein:

specifically:

The identity location separation network is configured to: send an identity location separation network to the interworking gateway a data packet, wherein the source address is an identity code of the identity location separation network terminal, the destination address is an identity code of the network terminal separating the network at the identity location; and receiving the identity location separation network data packet sent by the interworking gateway.

The Internet uses the IP address as the terminal distinguishing identifier, and is configured to communicate with the identity location separation network through the interworking gateway; specifically:

The Internet is configured to: send an internet data packet to the interworking gateway, where the source address is an IP address of the internet terminal, the destination address is an IP address of the identity location separation network terminal in the Internet; and receiving the internet sent by the interworking gateway data pack.

The interworking gateway is configured to: assign an identity code to the Internet terminal, assign an IP address to the identity location separation network terminal, and save an identity conversion item of the identity code and the IP address, and implement terminal difference identification conversion according to the identifier conversion item; The identity location separates the data forwarding between the network and the Internet. Specifically, the interworking gateway includes a transceiver module connected to each other, a conversion module, and an identifier distribution module connected to the conversion module, where:

The conversion module is configured to: convert the identity location separated network data packet into the internet data packet, including converting the source address into an IP address of the identity location separation network terminal on the Internet, and converting the destination address into An IP address of the Internet terminal; and converting the Internet data packet into an identity location separation network data packet, including converting the source address into an identity code of the Internet terminal separating the network at the identity location, and converting the destination address into an identity The identity code of the location separation network terminal;

The identifier distribution module is configured to: assign an identity code to the Internet terminal, assign an IP address to the identity location separation network terminal, and save an IP address and an identity code of the Internet terminal and the identity location separation network terminal The conversion module is configured to perform identity encoding and IP address conversion according to the identifier conversion item saved by the identifier allocation module. Preferably, the identity code of the identity location separation network (hereinafter referred to as UID) uses a 32-bit binary format similar to the IPV4 address, so that the identity location separation network can be compatible with the existing IPV4 terminal during the promotion process, that is, the existing terminal IPV4. The protocol stack can access the identity location separation network without modification.

Since the IPV4 address of the Internet is almost used, it is impossible to draw a sufficiently large independent address space for the identity location separation network. Therefore, in the present invention, the UID space of the identity location separation network overlaps with the IPV4 address space of the Internet. In order to distinguish between intra-network communication and inter-network communication through identity coding or IP address, the following processing is performed on the UID space and the IP address space:

The identity location separation network designates a part of its UID space as a temporary UID space of the Internet terminal that needs to communicate with each other, which is called an interworking UID space. The identity code of the Internet terminal is an interworking identity code of the interworking identity coding space;

The Internet specifies a part of the IPV4 space as a temporary IP address space separating the network terminals from the identity locations that need to be interworked, called the interworking IP address space. The IP address of the identity location separation network terminal is an interworking IP address of the interworking IP address space;

One or more interworking gateways are set up between the identity location separation network and the Internet. In the identity location separation network, the interworking gateway is the routing end point of the interworking UID, that is, all the packets in the identity separation network with the interworking UID as the destination address are forwarded to the interworking gateway; on the Internet, the interworking gateway is the routing end point of the interworking IP address, That is, all packets on the Internet with the interworking IP address as the destination address will be forwarded to the interworking gateway.

For the identity location separation network terminal that needs to communicate with the Internet terminal, assign it a temporary or permanent interworking IP address and port number in the interworking gateway, and establish an identifier conversion item of the terminal UID/port number to the interworking IP address/port number. Similarly, for an Internet terminal that needs to communicate with the identity location separate network terminal, assign it a temporary or permanent interworking UID and port number in the interworking gateway, and establish the terminal IP address/port number to the identity of the interworking UID/port number. Conversion item. The interworking gateway implements the conversion of the two network packet formats and the conversion between the source/destination IP address and the source/destination UID according to the identification conversion item.

The present invention also provides an interworking gateway, as described above.

The method for implementing the identity location separation network and the Internet interworking according to the present invention includes an identity location separation network The process of sending data packets to the Internet and the process of sending data packets from the Internet to the identity location separation network are described in detail below.

As shown in FIG. 2, the process for the identity location separation network to send a data packet to the Internet includes: Step 201: Sending, the identity location separation network sends an identity location separation network data packet to the interworking gateway, where the source address is an identity location separation network. The identity code of the terminal, the destination address is an identity code of the network terminal separating the network at the identity location;

Step 202: Receive a forwarding step, the interworking gateway receives the identity location separation network, sends the identity location separation network data packet, and converts the identity location separation network data packet into an Internet data packet, including the source address. Converting to the identity location separating the IP address of the network terminal on the Internet, and converting the destination address to an IP address of the Internet terminal; after the data packet is converted, the interworking gateway sends the Internet data packet to the Internet;

Step 203: The receiving step, the Internet receiving an internet data packet sent by the interworking gateway.

As shown in FIG. 3, the process for the Internet to send a data packet to the identity location separation network includes: Step 301: Sending, the Internet sending an Internet data packet to the interworking gateway, where the source address is an IP address of the Internet terminal, The destination address is the IP address of the Internet where the identity location separates the network terminal;

Step 302: The interworking gateway receives the Internet data packet sent by the Internet. Step 303: Receive and forward, the interworking gateway receives the Internet data packet sent by the Internet; and convert the Internet data packet Separating the network data packet into an identity location, comprising: converting the source address into an identity code of the Internet terminal in the identity location separation network, and converting the destination address into an identity code of the identity location separation network terminal; after the data packet is converted, the interworking Transmitting, by the gateway, the identity location separated network data packet to the identity location separation network;

Receiving step: The identity location separation network receives the identity location separation network data packet sent by the interworking gateway.

Before the steps 202 and 203, the interworking gateway allocates the identity code to the Internet terminal, allocates the IP address to the identity location separation network terminal, and saves the Internet terminal and the identity location separation network terminal. IP address and identity coded identification conversion item, steps 202 and 203 The interworking gateway performs identity coding and IP address translation according to the identifier conversion item.

The designated part of the identity coding space is called an interworking identity coding space, and the identity code of the Internet terminal is an interworking identity code of the interworking identity coding space; the designated part of the IP address space is called an interworking IP address space. The IP address of the identity location separation network terminal is an interworking IP address of the interworking IP address space. In step 203 and step 303, the identity location separation network or the Internet is determined by interworking the destination address of the data packet. An identity code or interworking IP address is routed to the interworking gateway.

The identity code is a 32 bit binary format code, and the identity code space is overlapped with the IP address space.

The invention will now be further described with reference to the accompanying drawings and embodiments. Applications:

A schematic diagram of the identity location separation network terminal interworking with the Internet terminal is shown in FIG.

Each terminal on the Internet has a 32-bit binary-encoded IP address that represents both the identity of the terminal and the location of the terminal. Terminal X in Figure 1 has an IP address of 223.20.20.2.

The identity location separation network uses the technology of identity and location separation. Each terminal has both an identity identifier and a location identifier. The communication between the two terminals is based on an identity (UID). In order to be compatible with existing terminals and have a sufficient capacity for the identity coding space, the identity tag uses a 32-bit binary format such as an IP address. Terminal A in Figure 1 has an identity of 201.1.1.10.

In the Internet, all the packets with the destination address being the interworking IP address are routed to the interworking gateway through the route design. Similarly, all the packets with the destination address being the interworking AID are routed to the interworking through the route design in the identity location separation network. Gateway.

In the example shown in Fig. 4, the identity location separation network terminal A needs to communicate with the Internet terminal X. You need to assign an interworking IP address and port number to A (the port number here refers to the TCP/UDP port number, which is used to identify each communication connection between terminals, hereinafter referred to as the port number), and assign an interworking UID and port number to X. . The following identification conversion items are established inside the interworking gateway:

A's UID/port number (201.1.1.10/port number 2000) <->A's interworking IP address/ Port number (172.10.10.1 / port number 8000)

Interworking of X UID/port number ( 10.10.10.1 / port number 3000 ) < - > X IP address / port number ( 223.20.20.2 / port number 9000 )

When A sends a packet to X:

1. A uses the interworking UID of X as the destination UID, and the UID itself sends the data packet as the source UID. In the example of Figure 1, the destination UID: 10.10.10.1/port number 3000; source UID: 201.1.1.10/port number 2000.

2. The data packet is forwarded to the interworking gateway through the identity location separation network.

3. The interworking gateway converts the data packet into an IP data packet of the Internet, where the destination IP address is the IP address of X, and the source IP address is the interworking IP address of A. The port number is also converted accordingly.

In the example of Figure 1, the destination IP: 223.20.20.2 / port number 9000; source IP: 172.10.10.1 / port number 8000;

4. The packet is forwarded to X over the Internet.

When X sends a packet to A:

1. X sends the data packet of A's interworking IP address as the destination IP address and its own IP address as the source IP address.

In the example of Figure 1, the destination IP: 172.10.10.1 / port number 8001; source UID: 223.20.20.2 / port number 9001.

2. The data packet is forwarded to the interworking gateway through the Internet;

3. The interworking gateway converts the data packet into a data packet of the identity location separation network, where the destination UID is the UID of the A terminal, and the source UID is the interworking UID of the X terminal;

In the example of Figure 1, the destination UID: 201.1.1.10/port number 2001; source UID: 10.10.10.1/port number 3001

4. The data packet is forwarded to terminal A through the identity location separation network. According to this method, the identity location separation network terminal and the internet terminal implement interworking.

Based on the idea of the present invention, two networks, such as a first network and a second network, that code overlapping terminal identifiers are used, and an interworking gateway is set between the two networks, and the interworking gateway allocates the second network to the first network terminal. The interworking terminal identifier, the second network terminal is allocated its interworking terminal identifier in the first network, and the data packet between the first network and the second network is converted by the terminal identifier, so as to implement the first network and the second network Interoperability.

Specifically, the first network and the second network use the terminal identifiers that overlap in the coding space, and are connected by the interworking gateway. The interworking implementation manners of the first network and the second network include:

The interworking gateway allocates the terminal identifier of the second network to the first network terminal, allocates the terminal identifier of the second network terminal to the second network terminal, and establishes an identifier conversion item corresponding to the assigned identifier; the interworking gateway receives the first a data packet sent by the network or the second network, where the source and destination addresses are the terminal identifiers of the first network terminal and the second network terminal in the first or second network as the source network;

Transmitting, by the interworking gateway, the received data packet, comprising: converting the source and the destination address according to the identifier conversion item into a terminal identifier of the first network terminal and the second network terminal in the second or first network as the destination network;

The interworking gateway sends the converted data packet to the second or first network that is the destination network.

The interworking network corresponding to the above includes a first network, a second network, and an interworking gateway connecting the first network and the second network, where:

The first network is configured to send a data packet to the interworking gateway or receive a data packet sent by the interworking gateway, where the source and destination addresses of the data packet are the terminal identifiers of the first network terminal and the second network terminal in the first network;

The second network uses a terminal identifier that overlaps the coding space of the first network, and is configured to send a data packet to the interworking gateway or receive a data packet sent by the interworking gateway, where the source and destination addresses of the data packet are the first network. a terminal identifier of the terminal and the second network terminal in the second network;

The interworking gateway is configured to: allocate, to the first network terminal, a terminal identifier of the second network, which is a second The network terminal allocates the terminal identifier of the first network, and establishes an identifier conversion item corresponding to the allocated identifier; receiving the data packet sent by the first network or the second network, and converting the received data packet, including converting according to the identifier Converting the source and destination addresses into terminal identifiers of the first network terminal and the second network terminal in the second or first network as the destination network; and transmitting the converted data packet to the second network or the first network as the destination network .

The method, the interworking network and the interworking gateway of the present invention exchange the data packets that need to be interworked through the interworking gateway, and realize the interworking between the terminals of the two networks identified by different terminals, specifically the source and destination addresses of the received data packets. The source network terminal identifier is converted into the destination network terminal identifier, and the identity location separation network and the traditional Internet are intercommunicated, and the identity code of the identity location separation network is encoded in a 32-bit binary format, and overlaps with the IP address space, thereby realizing The compatibility of the traditional Internet terminal, the inter-identification identity coding space for interworking is divided in the identity coding space, and the interworking IP address space for interworking is divided in the IP address space, which can facilitate routing design and judgment, that is, pass through the Internet. The routing design routes all the data packets whose destination addresses are the interworking IP addresses to the interworking gateway. Similarly, in the identity location separation network, all the data packets with the destination address being the interworking AID are routed to the interworking gateway through the route design.

Industrial applicability

Compared with the prior art, the present invention implements the interworking between the two network terminals of different terminal identifiers through the interworking gateway to convert the data packets that need to be interworked, and realizes compatibility with the traditional Internet terminal, in the identity coding space. The interworking identity coding space for interworking is divided, and the interworking IP address space for interworking is divided in the IP address space, which facilitates route design and judgment.

Claims

Claim

An interworking method for an identity location separation network and an Internet, characterized in that: the identity location separation network uses an identity code to distinguish a terminal, and the Internet uses an IP address to distinguish a terminal; the method includes: the identity location The separation network sends a data packet to the Internet by: the identity location separation network sends an identity location separation network data packet to the interworking gateway, where the source address is an identity code of the identity location separation network terminal, and the destination address is an Internet terminal separated at the identity location Identity code of the network;

The Internet receives an internet data packet sent by the interworking gateway.

2. The method of claim 1, further comprising: said internet transmitting a data packet to said identity location separation network by:

3. The method of claim 2, further comprising: the interworking gateway assigning an identity code to the Internet terminal and assigning the identity location to the network terminal before receiving the identity location to separate the network data packet or the Internet data packet IP address, and save the internet terminal and the identity bit Separating an IP address of the network terminal from the identity coded conversion item; in the step of converting the identity location separated network data packet into an Internet data packet, the interworking gateway is configured to convert the source address according to the saved identity conversion item Converting to the IP address of the identity location separation network terminal on the Internet, converting the destination address to an IP address of the Internet terminal; in the step of converting the Internet data packet into an identity location separation network data packet, the interworking gateway And converting the source address into an identity code of the Internet terminal in the identity location separation network according to the saved identity conversion item, and converting the destination address into an identity code of the identity location separation network terminal.

4. The method of claim 2, further comprising: designating a portion of the identity coding space of the identity location separation network as an interworking identity coding space, wherein the Internet terminal separates an identity code of the network at the identity location Is an interworking identity code of the interworking identity coding space; and designating a part of the IP address space of the Internet as an interworking IP address space, where the IP address of the identity location separation network terminal on the Internet is the interworking IP address The interworking IP address of the space; the step of the identity location separation network transmitting the identity location separation network data packet to the interworking gateway, the identity location separation network routing to the interworking gateway by determining that the destination address is an interworking identity code;

The determining that the destination address is an interworking IP address is routed to the interworking gateway.

The method according to claim 1 or 2, wherein the identity code is a code of a 32-bit binary format, and an identity code space of the identity location separation network overlaps with an IP address space of the Internet.

6. An interworking network, comprising an identity location separation network, an Internet, and an interworking gateway connecting the identity location separation network and the Internet, wherein: The identity location separation network distinguishes the terminal by using an identity code, and is configured to: send an identity location separation network data packet to the interworking gateway, where the source address is an identity code of the identity location separation network terminal, and the destination address is an identity of the Internet terminal. The identity code of the location separation network;

The interworking gateway includes a transceiver module and a conversion module that are connected to each other, wherein the transceiver module is configured to receive an identity location separation network data packet sent by the identity location separation network, and send the converted Internet data packet to the Internet; The conversion module is configured to convert the identity location separated network data packet received by the transceiver module into an Internet data packet, including converting the source address into the IP address of the identity location separation network terminal in the Internet, and converting the destination address The IP address of the Internet terminal;

The Internet uses an IP address to distinguish the terminal and is configured to receive an Internet data packet sent by the interworking gateway.

7. The interworking network according to claim 6, wherein

The Internet is further configured to: send an Internet data packet to the interworking gateway, where the source address is an IP address of the Internet terminal, and the destination address is an IP address of the Internet where the identity location separates the network terminal;

The transceiver module of the interworking gateway is further configured to receive the Internet data packet sent by the Internet and send the converted identity location separation network data packet to the identity location separation network; the conversion module is further configured to: the transceiver module Converting the received Internet data packet into an identity location separation network data packet, including converting the source address into an identity code of the Internet terminal separating the network in the identity location, and converting the destination address into an identity code of the identity location separation network terminal;

The identity location separation network is further configured to receive an identity location separation network packet sent by the interworking gateway.

8. The interworking network of claim 7, wherein the interworking gateway further comprises an identity assignment module coupled to the conversion module, the identity assignment module configured to: assign the internet terminal to the identity location Separating an identity code of the network, assigning an IP address of the Internet to the identity location separation network terminal, and storing an identifier conversion item of the IP address and the identity code of the network terminal and the identity location separation network terminal; The conversion module is configured to: when converting the identity location separated network data packet into an internet data packet, converting the source address to the IP address of the identity location separation network terminal in the Internet according to the identity conversion item, Converting the destination address to an IP address of the Internet terminal; and converting the source address to the Internet terminal in the identity location separation network according to the identifier conversion item when converting the Internet data packet into the identity location separation network data packet; The identity code, which translates the destination address into the identity code of the identity location separation network terminal.

9. The interworking network according to claim 7, wherein the identity location separation network is further configured to: designate a part of the identity coding space as an interworking identity coding space, and the Internet terminal separates the identity of the network at the identity location. Encoding is an interworking identity code of the interworking identity coding space, and, when transmitting an identity location separation network data packet to the interworking gateway, determining that the destination address is an interworking identity code route to the interworking gateway; Forming: a part of the IP address space as an interworking IP address space, the IP address of the identity location separation network terminal in the Internet is an interworking IP address of the interworking IP address space, and sending to the interworking gateway The Internet data packet is routed to the interworking gateway by determining that the destination address is an interworking IP address.

10. The interworking network according to claim 6 or 7, wherein the identity coding is a coding in a 32-bit binary format, and an identity coding space of the identity location separation network overlaps with an IP address space of the Internet.

11. An interworking network, comprising an identity location separation network, an Internet, and an interworking gateway connecting the identity separation network to the Internet, wherein:

The Internet uses the IP address as the terminal distinguishing identifier, and is set to pass through the interworking gateway Communicating with the identity location separation network;

The interworking network according to claim 11, wherein the identity location separation network is further configured to: designate a part of the identity coding space as an interworking identity coding space, and the interworking gateway allocates an identity code to the internet terminal. The Internet is also configured to: specify a part of the IP address space as an interworking IP address space, and the IP address assigned by the interworking gateway to the identity location separation network terminal is an interworking IP address.

13. The interworking network according to claim 11, wherein the identity code is a code in a 32-bit binary format, and an identity code space of the identity location separation network overlaps with an IP address space of the Internet.

An interworking gateway, characterized in that: the interworking gateway is connected to an identity location separation network and an Internet, to implement communication between the identity location separation network and the Internet, and the identity location separation network uses identity The code is used as the terminal difference identifier, and the Internet uses the IP address as the terminal difference identifier, and the interworking gateway includes the transceiver module and the conversion module that are connected to each other, where:

The transceiver module is configured to: receive an identity location separation network data packet sent by the identity location separation network, and send the converted Internet data packet to the Internet; and receive the Internet data packet sent by the Internet and send the The identity location separation network sends the converted identity location to separate the network data packet;

The conversion module is configured to: convert the identity location separated network data packet received by the transceiver module into an Internet data packet, including converting the identity code into the IP address; and: receiving Internet data received by the transceiver module Packets are converted into identity locations to separate network packets, including The IP address is translated into the identity code.

The interworking gateway of claim 14, further comprising an identity assignment module coupled to the conversion module, the identifier assignment module configured to: assign an interworking identity code for the interworking identity coding space to the internet terminal, The identity location separation network terminal allocates an interworking IP address of the interworking IP address space, saves the IP address of the Internet terminal and the assigned identity conversion item of the interworking identity code, and saves the identity coding and allocation of the identity location separation network terminal An identifier conversion item of the interworking IP address; wherein the interworking identity coding space is a designated part of an identity coding space of the identity location separation network, and the interworking IP address space is a designated part of an IP address space of the Internet; The conversion module is configured to perform identity encoding and IP address conversion according to the identifier conversion item saved by the identifier allocation module.

The interworking gateway according to claim 14, wherein the identity code is a code in a 32-bit binary format, and an identity code space of the identity location separation network overlaps with an IP address space of the Internet.

An interworking method of the first network and the second network, wherein the first network and the second network use terminal identifiers that overlap in the coding space, and are connected by the interworking gateway, the method includes:

The interworking gateway allocates a terminal identifier of the second network to the first network terminal, allocates a terminal identifier of the first network to the second network terminal, and establishes an identifier conversion item corresponding to the allocated terminal identifier;

The interworking gateway receives a data packet sent by the first network or the second network, where the source address and the destination address are the first network terminal and the second network terminal are in the first network or the second network as the source network. Identification

Converting, by the interworking gateway, the received data packet, including converting the source address and the destination address into the second network or the terminal identifier in the first network as the destination network of the first network terminal and the second network terminal according to the identifier conversion item ; as well as

Transmitting the converted data packet to the second network or the first network as the destination network The internet.

18. An interworking network, comprising: a first network, a second network, and an interworking gateway connecting the first network and the second network, wherein:

The first network is configured to send a data packet to the interworking gateway or receive a data packet sent by the interworking gateway, where the source address and the destination address of the sent or received data packet are the first network terminal and the second network terminal. a terminal identifier in the first network;

The second network uses a terminal identifier that overlaps with an encoding space of the first network, and is configured to send a data packet to the interworking gateway or receive a data packet sent by the interworking gateway, and the source of the data packet sent or received. The address and the destination address are terminal identifiers of the first network terminal and the second network terminal in the second network;

The interworking gateway is configured to: assign a terminal identifier of the second network to the first network terminal, allocate a terminal identifier of the first network to the second network terminal, and establish an identifier conversion corresponding to the allocated terminal identifier. Receiving a data packet sent by the first network or the second network, and converting the received data packet, including converting the source address and the destination address of the received data packet into the first according to the identifier conversion item; a network terminal and a second network terminal in the second network or the first network as the destination network; and transmitting the converted data packet to the second network or the first network as the destination network.