CN101415273A - Method and system for controlling policy, and gateway for implementing policy control - Google Patents
Method and system for controlling policy, and gateway for implementing policy control Download PDFInfo
- Publication number
- CN101415273A CN101415273A CNA2008101826206A CN200810182620A CN101415273A CN 101415273 A CN101415273 A CN 101415273A CN A2008101826206 A CNA2008101826206 A CN A2008101826206A CN 200810182620 A CN200810182620 A CN 200810182620A CN 101415273 A CN101415273 A CN 101415273A
- Authority
- CN
- China
- Prior art keywords
- policy
- strategy
- gateway
- definition
- condition
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a strategic control method, system and gateway used for realizing the strategic control. A strategic server enables a strategy and sends the strategy to an automatic configuration server. The strategy comprises an event, conditions and actions. The strategy is sent to the gateway by a south bound interface of the automatic configuration server; the gateway stores the strategy and starts the strategic monitoring; when the gateway detects the strategic event occurs and meets the conditions defined by the strategy, the strategic control actions defined by the strategy are executed. The response speed of the strategic control is improved and the stress of BRAS at network side is reduced.
Description
Technical field
The present invention relates to policy control method, system and be used for the gateway that implementation strategy is controlled.
Background technology
Broadband network institute loaded service is just from serving as main progressively to develop to the multiple service supporting direction with traditional Internet service.No matter be the uplink and downlink directions, the network bandwidth resources of wideband switch-in business is limited, and therefore, broadband access network must be to client's service implementation control strategy, to guarantee that miscellaneous service normally uses.
IETF has proposed a QoS Governance framework based on strategy, is used for service quality is carried out policy control.In this structure, three essential elements that carry out policy control are tactful test point (Network Detection Point, NDP), policy decision point (Policy DecisionPoint, PDP) and Policy Enforcement Point (Policy Enforcement Point, PEP).Notify PDP after NDP detects the policy-related (noun) incident, PDP generally is positioned on the strategic server of depositing strategy, mainly makes strategic decision-making at this.For making strategic decision-making, PDP also needs to use other mechanism and agreement to remove to visit other information bank (as tactful warehouse).Whether PDP carries out relevant strategy by the reasoning decision, and PEP is mail in decision according to the relevant strategy of the inquiry of the relevant parameter in the request.PEP generally is positioned on the network node, and actual implementation strategy decision-making is carried out relevant operation according to the decision of PDP, and strategy is converted into the instruction towards concrete equipment the most at last, the network equipment is configured and operates, to satisfy relevant policy control target.
At present, the broadband application policy control is to realize at the broad band remote access device BRAS of network side, and (Policy Framework PF) directly arrives BRAS to policy distribution, by the function of the detection of BRAS implementation strategy, strategic decision-making and strategy execution to strategic server.Along with broadband user's rapid growth, can make the BRAS burden very heavy in the control of network side implementation strategy, the expense of policy control is very big.
Summary of the invention
The technical problem to be solved in the present invention provides a kind of policy control method, system and is used for the gateway of implementation strategy control.Improve the response speed of policy control, and alleviated the pressure of network side BRAS.
According to an aspect of the present invention, propose a kind of policy control method, may further comprise the steps: enable a strategy by strategic server, described strategy is sent to Automatic Configuration Server.Described strategy comprises incident, condition and action; Southbound interface by Automatic Configuration Server sends to gateway with described strategy; By the described strategy of gateway stores, and begin to carry out the strategy monitoring; Take place when gateway detects policy events, and when satisfying the condition of described policy definition, carry out the policy control action of described policy definition.
According to a further aspect of the invention, also propose a kind of policy controlling system, comprising: strategic server, enable a strategy, described strategy is sent to Automatic Configuration Server, in described strategy, comprise incident, condition and action; Automatic Configuration Server sends to gateway by its southbound interface with described strategy; Gateway is stored described strategy and is carried out the strategy monitoring, takes place when detecting described policy events, when satisfying the condition of described policy definition, carries out the policy control action of described policy definition.
According to a further aspect of the invention, also propose a kind of gateway that is used for implementation strategy control, comprising: tactful detection module is used to detect the generation of described policy events; Policy decision module is used for sending notice to policy enforcement module when described strategy satisfies the condition of described policy definition the time; Policy enforcement module is used for the action implementation strategy control action according to described policy definition.
Compared with prior art, the present invention increases the response speed of policy control by the partial strategy control point being distributed to the gateway of user side greatly, and has alleviated the pressure of network side BRAS greatly.
Description of drawings
Fig. 1 is the method flow diagram of policy control among the present invention.
Fig. 2 is a policy controlling system block diagram among the present invention.
Fig. 3 is a policy distribution path schematic diagram among the present invention.
Fig. 4 is the gateway block diagram that is used for implementation strategy control among the present invention.
Fig. 5 is the embodiment schematic diagram of the qos policy control that the VOIP bandwidth guarantees among the present invention.
Embodiment
Fig. 1 is the method flow diagram of policy control among the present invention.The present invention by Automatic Configuration Server (Auto Configuration Server, ACS) with policy distribution to gateway (InternetGateway Device, IGD), such as home gateway or enterprise gateway.As the local policy control point, carry out the function of tactful detection, strategic decision-making and strategy execution by IGD.This method may further comprise the steps:
In step 101, enable a strategy by strategic server, described strategy is sent to Automatic Configuration Server.Described strategy comprises incident, condition and action etc.
In step 102, the southbound interface by Automatic Configuration Server sends to gateway with described strategy.
Policy distribution there are two approach to gateway IGD: the first, to DSLAM, send to IGD via BRAS then.The second, send to IGD via ACS.Since BRAS/DSLAM at present not support policy issue, the upgrading cost is big, the cycle is long, so be not suitable at present issuing via BRAS/DSLAM.The present invention adopts the TR069 agreement via ACS policy distribution to be arrived gateway.TR069 agreement bearing mode has been done definition in the TR069 agreement, based on the SOAP packet carrying data of HTTP.
In step 103, should strategy by gateway stores, and begin to carry out the strategy monitoring.
IGD policy control of the present invention is applicable to service quality QoS control and firewall policy control.Also can expand to other policy control.Wherein, the parameter node definition of policing parameter is as follows: service quality QoS parameter node (TR098 definition): InternetGatewayDevice.Queue Management.Firewall parameter node (redetermination): InternetGatewayDevice.FirewallManagement.
TR098 has defined the TR069 supplemental characteristic, is one of TR069 serial protocols.TR098 has done definition to service quality.But fire compartment wall parameter node does not have normalized definition, and the present invention has expanded fire compartment wall parameter node, and firewall policy parameter node definition ACS issues the parameter node of firewall policy to IGD, and this node is the parameter node that policy distribution need be used.
In step 104, take place when gateway detects policy events, and when satisfying the condition of described policy definition, carry out the action of described policy definition.
Fig. 2 is a policy controlling system block diagram among the present invention, comprises strategic server, Automatic Configuration Server and gateway.
Strategic server enables a strategy, and strategy is sent to Automatic Configuration Server.In described strategy, comprise incident, condition and action etc.
Automatic Configuration Server (ACS) sends to gateway by its southbound interface (TR069 agreement) with described strategy.TR069 agreement bearing mode has been done definition in agreement.
Policy control of the present invention is applicable to service quality QoS control and firewall policy control.Also can expand to other policy control.Wherein, the parameter node definition of policing parameter is as follows: qos parameter node (TR098 definition): InternetGatewayDevice.QueueManagement.Firewall parameter node (redetermination): InternetGatewayDevice.FirewallManagement.
TR098 is one of TR069 serial protocols, and TR098 has done definition to service quality.But fire compartment wall parameter node does not have normalized definition, and the present invention has expanded the parameter node, and firewall policy parameter node definition ACS issues the parameter node of firewall policy to IGD, and this node is that firewall policy issues the parameter node that need use.
Gateway stores should strategy, and begins to carry out the strategy monitoring.Take place when gateway detects policy events, and when satisfying the condition of described policy definition, carry out the action of described policy definition.
Be the schematic diagram in policy distribution path among the present invention as shown in Figure 3.Definition has data communication protocol-broadband device management agreement (CPE WANManagement Protocol, CWMP, TR069 definition) between Automatic Configuration Server and the gateway, also is called the ACS southbound interface.This agreement can issue by support policy through expansion.
Fig. 4 is the gateway block diagram that is used for implementation strategy control among the present invention.Comprise: tactful detection module, policy decision module and policy enforcement module.
The strategy detection module is used to detect the generation of policy events;
Policy decision module is used for sending notice to policy enforcement module when described strategy satisfies the condition of described policy definition the time;
Policy enforcement module is used for the action implementation strategy control according to described policy definition.
Gateway is played the part of three roles simultaneously: tactful detection, strategic decision-making and strategy execution.In case policy distribution is to gateway, gateway is exactly detection, decision-making and the executor of strategy.
Fig. 5 is the embodiment schematic diagram of the qos policy control that the VOIP bandwidth guarantees among the present invention.
The Policy Administrator issues new qos policy to strategic server.This strategy content is that the VOIP business has high priority, and every road phone has the bandwidth of 128kbps to guarantee.Should send to IGD via ACS by strategy by strategic server.
IGD receives this strategy of strategy back storage, and enables this strategy.At user's local area network side, a movie services device is arranged, outer net many clients downloading movies.Upstream bandwidth is taken (supposing upstream bandwidth 1Mbps) by movie download.At this moment, the ring of user side SIP phone, owner's off-hook.
NDP module on the IGD detects the SIP/RTP data protocol, and knowing has one road VOIP using.The NDP module is notified the PDP module immediately, the strategy that the PDP inquiry is stored into, and notice PEP module is carried out corresponding strategy.The PEP module reduces bandwidth that movie download takies immediately till the VOIP bandwidth satisfies.Movie download speed reduces up to phone hangs up just recovery.
The present invention is with TR069 protocol parameter node process expansion or multiplexing to realize the miscellaneous service configuration feature of gateway.The policy control that the invention solves wideband switch-in business is focused on the problem that may become network bottleneck by BRAS.
Claims (7)
1. policy control method may further comprise the steps:
Enable a strategy by strategic server, described strategy is sent to Automatic Configuration Server, described strategy comprises incident, condition and action;
Southbound interface by described Automatic Configuration Server sends to gateway with described strategy;
By the described strategy of described gateway stores, and begin to carry out the strategy monitoring;
Take place when described gateway detects described policy events, and when satisfying the condition of described policy definition, carry out the policy control action of described policy definition.
2. policy control method according to claim 1, wherein:
Described strategy as carrying, and adds firewall policy parameter node with the TR069 agreement.
3. policy controlling system comprises:
Strategic server enables a strategy, and described strategy is sent to Automatic Configuration Server, comprises incident, condition and action in described strategy;
Automatic Configuration Server sends to gateway by its southbound interface with described strategy;
Gateway is stored described strategy and is carried out the strategy monitoring, takes place when detecting described policy events, when satisfying the condition of described policy definition, carries out the policy control action of described policy definition.
4. as policy controlling system as described in the claim 3, wherein, described gateway comprises:
The strategy detection module is used to detect the generation of described policy events;
Policy decision module is used for when described policy events satisfies the condition of described policy definition, sends notice to policy enforcement module;
Policy enforcement module is used for the action implementation strategy control action according to described policy definition.
5. as policy controlling system as described in claim 3 or 4, wherein:
Described strategy as carrying, and adds firewall policy parameter node with the TR069 agreement.
6. one kind is used for the gateway that implementation strategy is controlled, and comprising:
The strategy detection module is used to detect the generation of policy events;
Policy decision module is used for when described policy events satisfies the condition of policy definition, sends notice to policy enforcement module;
Policy enforcement module is used for the action implementation strategy control action according to described policy definition.
7. as gateway as described in the claim 6, wherein:
Described strategy as carrying, and adds firewall policy parameter node with the TR069 agreement.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2008101826206A CN101415273A (en) | 2008-12-09 | 2008-12-09 | Method and system for controlling policy, and gateway for implementing policy control |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2008101826206A CN101415273A (en) | 2008-12-09 | 2008-12-09 | Method and system for controlling policy, and gateway for implementing policy control |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101415273A true CN101415273A (en) | 2009-04-22 |
Family
ID=40595507
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNA2008101826206A Pending CN101415273A (en) | 2008-12-09 | 2008-12-09 | Method and system for controlling policy, and gateway for implementing policy control |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101415273A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102149144A (en) * | 2011-04-02 | 2011-08-10 | 华为技术有限公司 | Method for adjusting bandwidth, micro base station, home gateway and system |
| CN102802169B (en) * | 2011-05-25 | 2018-01-02 | 中兴通讯股份有限公司 | A kind of Operational Visit control method and system |
| CN108768724A (en) * | 2018-05-30 | 2018-11-06 | 上海顺舟智能科技股份有限公司 | Gateway control method and intelligent gateway |
-
2008
- 2008-12-09 CN CNA2008101826206A patent/CN101415273A/en active Pending
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102149144A (en) * | 2011-04-02 | 2011-08-10 | 华为技术有限公司 | Method for adjusting bandwidth, micro base station, home gateway and system |
| CN102149144B (en) * | 2011-04-02 | 2014-07-09 | 华为技术有限公司 | Method for adjusting bandwidth, micro base station, home gateway and system |
| CN102802169B (en) * | 2011-05-25 | 2018-01-02 | 中兴通讯股份有限公司 | A kind of Operational Visit control method and system |
| CN108768724A (en) * | 2018-05-30 | 2018-11-06 | 上海顺舟智能科技股份有限公司 | Gateway control method and intelligent gateway |
| CN108768724B (en) * | 2018-05-30 | 2021-11-16 | 上海顺舟智能科技股份有限公司 | Gateway control method and intelligent gateway |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11665610B2 (en) | Apparatus and method for wireless network extensibility and enhancement | |
| US8595368B2 (en) | Method and system for providing mobility management in a network | |
| EP2225663B1 (en) | Providing services to packet flows in a network | |
| CN100474819C (en) | A deep message detection method, network device and system | |
| EP2433401B1 (en) | Dynamic management of network flows | |
| EP2425592B1 (en) | Adaptive rate control based on overload signals | |
| US20100135158A1 (en) | Flow State Aware QoS Management Without User Signalling | |
| CN101753640B (en) | Multi-interface fusion method of communication node | |
| CN101835201B (en) | Method and system for ensuring uninterrupted data in multiple-network connection environment | |
| WO2009155801A1 (en) | Method, system and apparatus for providing media stream service | |
| WO2013060133A1 (en) | Caching method and system based on policy control | |
| CN102780610B (en) | Gateway QoS (Quality of Service) guaranteeing method and packet switching network system | |
| CN101390361A (en) | Dynamic flow control method and system | |
| CN101415273A (en) | Method and system for controlling policy, and gateway for implementing policy control | |
| EP2561646B1 (en) | Apparatuses and methods for registering transmission capacities in a broadband access network | |
| EP2887580A1 (en) | Method and system for modifying configuration parameters on a user equipment and an Auto Configuration Server-Gateway | |
| EP2472814B1 (en) | Method for interaction between resource and admission control systems and resource and admission control system | |
| US8472317B2 (en) | Method for resource and admission control | |
| CN101383785B (en) | Service stream management method oriented to SIP application | |
| US8769124B2 (en) | Method for operating a network and a network | |
| Mueller et al. | Towards a generic application aware network resource control function for Next-Generation-Networks and beyond | |
| CN101989948A (en) | Broadband access dynamic strategy control system and control method | |
| La Corte et al. | Security and qos analysis for next generation networks | |
| CN101730156A (en) | Resource and admission control method | |
| Technical Working Group | Differentiated Treatment of Internet Traffic |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C12 | Rejection of a patent application after its publication | ||
| RJ01 | Rejection of invention patent application after publication |
Open date: 20090422 |